Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3caMr6Qf5sYrtQni7JhC913G1ZPcVwywnBTiXwC4VAkH/1/323830343a333633303a3a2f33322d3438203d3e20323636333332.roa
File:                     323830343a333633303a3a2f33322d3438203d3e20323636333332.roa (raw, json)
Hash identifier:          nOjEtBOTpGJFefNcw667uIrPdePmNdQIpDsLHxLMEIE=
Subject key identifier:   F4:8C:2F:4E:4D:41:07:E3:C4:08:80:1F:E8:95:CE:0A:BF:7C:3F:6F
Certificate issuer:       /CN=004E4911DF1DE8A36ED13B07B545195448FC7689
Certificate serial:       5A0CF7F72D34DF92F6CBE90E4253744C8D3FBB01
Authority key identifier: 00:4E:49:11:DF:1D:E8:A3:6E:D1:3B:07:B5:45:19:54:48:FC:76:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/004E4911DF1DE8A36ED13B07B545195448FC7689.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3caMr6Qf5sYrtQni7JhC913G1ZPcVwywnBTiXwC4VAkH/1/323830343a333633303a3a2f33322d3438203d3e20323636333332.roa
Signing time:             Thu 04 Apr 2024 11:27:40 +0000
ROA not before:           Thu 04 Apr 2024 11:22:40 +0000
ROA not after:            Thu 03 Apr 2025 11:27:40 +0000
asID:                     266332
IP address blocks:        2804:3630::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3caMr6Qf5sYrtQni7JhC913G1ZPcVwywnBTiXwC4VAkH/1/004E4911DF1DE8A36ED13B07B545195448FC7689.crl
                          rsync://rpki-repo.registro.br/repo/3caMr6Qf5sYrtQni7JhC913G1ZPcVwywnBTiXwC4VAkH/1/004E4911DF1DE8A36ED13B07B545195448FC7689.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/004E4911DF1DE8A36ED13B07B545195448FC7689.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:07:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:0c:f7:f7:2d:34:df:92:f6:cb:e9:0e:42:53:74:4c:8d:3f:bb:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=004E4911DF1DE8A36ED13B07B545195448FC7689
        Validity
            Not Before: Apr  4 11:22:40 2024 GMT
            Not After : Apr  3 11:27:40 2025 GMT
        Subject: CN=F48C2F4E4D4107E3C408801FE895CE0ABF7C3F6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:69:80:b1:a4:ba:d1:49:cf:db:d1:23:53:22:
                    1f:6c:e6:36:be:25:8b:5d:bd:f1:37:37:c2:d5:25:
                    44:95:c1:db:95:0a:4b:93:f2:8a:ac:a2:91:fd:5b:
                    38:67:6c:a9:0e:d0:7a:71:b6:68:4e:69:7e:44:28:
                    9f:4c:b4:31:8f:e2:08:1a:ec:ee:95:89:9e:09:b3:
                    58:84:3e:ab:7d:77:40:f8:c7:4e:e6:15:0d:a2:8d:
                    bd:c7:26:16:77:57:61:3c:f2:2d:e6:45:dc:dd:6d:
                    bd:da:77:0b:5c:36:fd:ae:dd:58:2a:43:7d:af:5b:
                    17:6b:5e:2e:c0:e4:27:20:af:78:be:21:ba:b9:22:
                    1c:02:4d:fc:03:a1:a9:59:28:cc:bd:d6:bd:0a:65:
                    f2:63:d8:7b:21:b3:46:4b:7c:7c:cb:e3:56:b4:17:
                    c5:43:bc:bd:9c:19:88:a2:a4:b0:8d:0a:80:f4:1f:
                    d7:ad:ac:27:70:ad:fd:22:f0:f9:66:c5:9c:77:aa:
                    bd:e7:f6:24:d2:43:83:89:45:71:1b:49:5e:64:84:
                    5d:f8:55:e3:65:22:45:5c:78:ea:96:6a:89:3e:64:
                    32:5c:d2:4f:ed:38:70:08:d9:49:07:f1:d4:3c:a6:
                    e4:85:06:1d:1d:12:c8:93:58:f5:64:03:75:d8:de:
                    9b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:8C:2F:4E:4D:41:07:E3:C4:08:80:1F:E8:95:CE:0A:BF:7C:3F:6F
            X509v3 Authority Key Identifier:
                keyid:00:4E:49:11:DF:1D:E8:A3:6E:D1:3B:07:B5:45:19:54:48:FC:76:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3caMr6Qf5sYrtQni7JhC913G1ZPcVwywnBTiXwC4VAkH/1/004E4911DF1DE8A36ED13B07B545195448FC7689.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/004E4911DF1DE8A36ED13B07B545195448FC7689.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3caMr6Qf5sYrtQni7JhC913G1ZPcVwywnBTiXwC4VAkH/1/323830343a333633303a3a2f33322d3438203d3e20323636333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3630::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:2a:05:7f:6f:fa:f8:b9:21:89:3b:95:df:9a:1e:66:c6:57:
         e0:c5:f9:6b:72:28:5b:5c:91:8d:a6:07:f0:fe:e7:27:c5:dd:
         d5:80:c9:a6:34:46:cf:a2:54:b8:0c:55:e3:ee:d5:20:a7:04:
         96:a7:69:fe:4c:27:94:94:6e:9d:b1:35:3f:34:76:e6:ec:54:
         0c:dc:2e:25:2c:d7:a2:c9:3a:41:de:22:38:a2:21:31:ac:7e:
         b5:1f:14:4e:bf:a8:99:20:b9:3a:d4:21:bd:f3:47:bd:85:16:
         b0:44:c4:d5:51:44:25:20:eb:27:7a:07:94:c4:c0:0e:ca:db:
         f8:00:ba:bc:d1:fc:d1:41:3e:c2:4f:54:89:c8:fc:ff:07:20:
         f2:8c:58:5f:48:00:a3:c3:26:3e:0e:56:7c:33:2a:b4:f2:40:
         d0:be:70:ad:72:99:9e:35:88:53:89:f5:79:dc:93:04:fe:93:
         e0:10:02:cf:c8:85:82:14:80:27:bc:84:03:68:80:d5:9f:54:
         5a:88:d5:7c:b9:82:b6:5c:fb:65:ab:95:47:7d:72:db:72:18:
         e0:95:e7:80:17:04:cd:98:54:d9:99:eb:e1:93:86:3b:5f:5b:
         9b:73:b2:e5:2e:21:5e:3c:53:bc:f5:d5:bc:e5:be:23:97:3c:
         2f:b9:c6:ca
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUWgz39y0035L2y+kOQlN0TI0/uwEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDA0RTQ5MTFERjFERThBMzZFRDEzQjA3QjU0NTE5NTQ0
OEZDNzY4OTAeFw0yNDA0MDQxMTIyNDBaFw0yNTA0MDMxMTI3NDBaMDMxMTAvBgNV
BAMTKEY0OEMyRjRFNEQ0MTA3RTNDNDA4ODAxRkU4OTVDRTBBQkY3QzNGNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+aYCxpLrRSc/b0SNTIh9s5ja+
JYtdvfE3N8LVJUSVwduVCkuT8oqsopH9WzhnbKkO0HpxtmhOaX5EKJ9MtDGP4gga
7O6ViZ4Js1iEPqt9d0D4x07mFQ2ijb3HJhZ3V2E88i3mRdzdbb3adwtcNv2u3Vgq
Q32vWxdrXi7A5Ccgr3i+Ibq5IhwCTfwDoalZKMy91r0KZfJj2Hshs0ZLfHzL41a0
F8VDvL2cGYiipLCNCoD0H9etrCdwrf0i8PlmxZx3qr3n9iTSQ4OJRXEbSV5khF34
VeNlIkVceOqWaok+ZDJc0k/tOHAI2UkH8dQ8puSFBh0dEsiTWPVkA3XY3pvlAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU9IwvTk1BB+PECIAf6JXOCr98P28wHwYDVR0j
BBgwFoAUAE5JEd8d6KNu0TsHtUUZVEj8dokwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2NhTXI2UWY1c1lydFFuaTdKaEM5MTNHMVpQY1Z3eXduQlRpWHdDNFZB
a0gvMS8wMDRFNDkxMURGMURFOEEzNkVEMTNCMDdCNTQ1MTk1NDQ4RkM3Njg5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAwNEU0OTExREYxREU4QTM2
RUQxM0IwN0I1NDUxOTU0NDhGQzc2ODkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNjYU1yNlFmNXNZcnRRbmk3SmhDOTEzRzFaUGNWd3l3bkJUaVh3QzRWQWtILzEv
MzIzODMwMzQzYTMzMzYzMzMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM2
MzMzMzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ2MDANBgkqhkiG9w0BAQsFAAOCAQEAIioFf2/6
+LkhiTuV35oeZsZX4MX5a3IoW1yRjaYH8P7nJ8Xd1YDJpjRGz6JUuAxV4+7VIKcE
lqdp/kwnlJRunbE1PzR25uxUDNwuJSzXosk6Qd4iOKIhMax+tR8UTr+omSC5OtQh
vfNHvYUWsETE1VFEJSDrJ3oHlMTADsrb+AC6vNH80UE+wk9Uicj8/wcg8oxYX0gA
o8MmPg5WfDMqtPJA0L5wrXKZnjWIU4n1edyTBP6T4BACz8iFghSAJ7yEA2iA1Z9U
WojVfLmCtlz7ZauVR31y23IY4JXngBcEzZhU2Znr4ZOGO19bm3Oy5S4hXjxTvPXV
vOW+I5c8L7nGyg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:54 2024 by rpki-client on console-ams.rpki-client.org