Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/323830343a356530383a3a2f33322d3438203d3e20323639303037.roa
File:                     323830343a356530383a3a2f33322d3438203d3e20323639303037.roa (raw, json)
Hash identifier:          m/AQew8Jq7WwBH5WxLOfIK8d39i1V++AsRKj6Jkarfc=
Subject key identifier:   C6:2A:FD:42:25:5E:7C:78:36:85:13:49:48:79:49:B5:6D:67:C9:B4
Certificate issuer:       /CN=3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30
Certificate serial:       2B53EDFFB8CB674C8AAECCD97E292347928101E8
Authority key identifier: 3B:18:B7:DC:9E:3A:9E:E8:2B:ED:80:DD:09:B5:7D:20:04:5B:0C:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/323830343a356530383a3a2f33322d3438203d3e20323639303037.roa
Signing time:             Wed 10 Jul 2024 14:07:11 +0000
ROA not before:           Wed 10 Jul 2024 14:02:11 +0000
ROA not after:            Wed 09 Jul 2025 14:07:11 +0000
asID:                     269007
IP address blocks:        2804:5e08::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30.crl
                          rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 12:33:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:53:ed:ff:b8:cb:67:4c:8a:ae:cc:d9:7e:29:23:47:92:81:01:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30
        Validity
            Not Before: Jul 10 14:02:11 2024 GMT
            Not After : Jul  9 14:07:11 2025 GMT
        Subject: CN=C62AFD42255E7C7836851349487949B56D67C9B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:41:b1:6d:16:43:38:00:1e:b0:b6:1f:a6:c0:
                    fb:c4:44:a1:1c:65:32:70:c0:b0:a8:06:ee:de:44:
                    8f:ae:69:04:b2:70:b9:b0:76:d1:e7:a8:d1:bf:eb:
                    56:aa:41:30:06:43:78:34:8f:2c:19:3d:b8:25:ed:
                    80:8e:11:28:d7:5c:30:53:0d:b3:30:a7:e3:6f:c7:
                    78:8c:80:a5:f5:f1:e3:ff:ba:9b:a2:08:b0:6f:9d:
                    35:ff:e0:c9:b8:95:33:85:30:c4:1d:ba:34:a3:36:
                    e6:d1:08:77:f5:e8:5d:55:af:90:df:dc:f8:12:ef:
                    96:77:ee:8a:12:22:6f:a8:a1:8f:f0:a6:8c:43:61:
                    f4:fe:2a:54:13:1d:4f:a6:0e:cf:5f:30:ce:36:0d:
                    02:c9:c2:af:e8:06:25:ad:9f:2b:b2:af:b9:d0:01:
                    d4:4e:bb:23:82:50:0b:41:69:9c:34:e8:e0:3b:b3:
                    a2:51:90:48:23:11:df:10:2d:d9:9f:49:70:8e:7f:
                    0f:4b:3a:3b:f3:03:40:2a:f1:1f:a1:9e:e5:bd:66:
                    2f:1e:50:05:62:c2:c9:c5:53:83:f9:bf:07:cf:30:
                    25:09:0f:3d:59:99:84:f9:3c:7b:ed:2e:5e:6d:c1:
                    f0:63:8a:8d:90:b5:d9:a9:28:1c:20:a6:4d:6e:91:
                    3a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:2A:FD:42:25:5E:7C:78:36:85:13:49:48:79:49:B5:6D:67:C9:B4
            X509v3 Authority Key Identifier:
                keyid:3B:18:B7:DC:9E:3A:9E:E8:2B:ED:80:DD:09:B5:7D:20:04:5B:0C:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/323830343a356530383a3a2f33322d3438203d3e20323639303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5e08::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:08:3c:ec:70:f8:7e:3d:a6:e4:e7:02:3a:a7:d5:2e:aa:1a:
         af:7f:20:ac:e7:8a:37:f9:81:41:99:c4:64:d7:c8:09:2f:a3:
         75:7f:33:53:2f:6d:ca:07:3f:37:8a:b8:6a:e6:ff:25:3f:85:
         28:96:1c:aa:d2:07:10:d8:89:95:37:c6:e7:2a:31:69:6c:7a:
         9b:da:9f:72:cc:89:7b:80:d3:e3:09:e5:ea:79:6c:e2:c7:5c:
         5b:97:dd:2d:1d:49:92:0a:eb:54:90:f8:2a:3c:c3:48:c7:aa:
         14:88:bc:2d:57:ea:24:22:67:65:08:e9:5d:8c:e4:08:2c:76:
         f8:c3:67:e7:25:f6:63:45:16:a0:82:78:8e:f9:9a:91:73:16:
         fa:66:eb:5c:1e:f4:5e:39:f2:c6:42:10:41:16:a5:92:1b:64:
         fe:84:3e:95:b3:8e:bf:ae:47:f5:22:d9:82:62:67:4f:60:16:
         0a:b1:e4:bf:ae:ee:38:83:3c:10:70:ab:75:7c:b0:95:3d:6e:
         34:fd:cf:1d:b3:56:ba:9e:fe:aa:7e:5f:05:30:d7:dd:5e:98:
         f1:45:a0:06:af:2d:8a:64:0c:ea:8f:07:94:1d:c1:bf:d1:f6:
         0c:ef:84:ff:81:8f:90:69:59:08:d1:a9:e1:d7:f9:d1:21:ed:
         ee:64:3e:d1
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUK1Pt/7jLZ0yKrszZfikjR5KBAegwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0IxOEI3REM5RTNBOUVFODJCRUQ4MEREMDlCNTdEMjAw
NDVCMEMzMDAeFw0yNDA3MTAxNDAyMTFaFw0yNTA3MDkxNDA3MTFaMDMxMTAvBgNV
BAMTKEM2MkFGRDQyMjU1RTdDNzgzNjg1MTM0OTQ4Nzk0OUI1NkQ2N0M5QjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrQbFtFkM4AB6wth+mwPvERKEc
ZTJwwLCoBu7eRI+uaQSycLmwdtHnqNG/61aqQTAGQ3g0jywZPbgl7YCOESjXXDBT
DbMwp+Nvx3iMgKX18eP/upuiCLBvnTX/4Mm4lTOFMMQdujSjNubRCHf16F1Vr5Df
3PgS75Z37ooSIm+ooY/wpoxDYfT+KlQTHU+mDs9fMM42DQLJwq/oBiWtnyuyr7nQ
AdROuyOCUAtBaZw06OA7s6JRkEgjEd8QLdmfSXCOfw9LOjvzA0Aq8R+hnuW9Zi8e
UAViwsnFU4P5vwfPMCUJDz1ZmYT5PHvtLl5twfBjio2QtdmpKBwgpk1ukTqfAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUxir9QiVefHg2hRNJSHlJtW1nybQwHwYDVR0j
BBgwFoAUOxi33J46nugr7YDdCbV9IARbDDAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2o2NXFaSnFyQUpEZVJFODl4RW5VNkVxM1REZkZVTkFrZ0cyaHdwWkVy
QUUvMC8zQjE4QjdEQzlFM0E5RUU4MkJFRDgwREQwOUI1N0QyMDA0NUIwQzMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNCMThCN0RDOUUzQTlFRTgy
QkVEODBERDA5QjU3RDIwMDQ1QjBDMzAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNqNjVxWkpxckFKRGVSRTg5eEVuVTZFcTNURGZGVU5Ba2dHMmh3cFpFckFFLzAv
MzIzODMwMzQzYTM1NjUzMDM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM5
MzAzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAReCDANBgkqhkiG9w0BAQsFAAOCAQEAIAg87HD4
fj2m5OcCOqfVLqoar38grOeKN/mBQZnEZNfICS+jdX8zUy9tygc/N4q4aub/JT+F
KJYcqtIHENiJlTfG5yoxaWx6m9qfcsyJe4DT4wnl6nls4sdcW5fdLR1JkgrrVJD4
KjzDSMeqFIi8LVfqJCJnZQjpXYzkCCx2+MNn5yX2Y0UWoIJ4jvmakXMW+mbrXB70
XjnyxkIQQRalkhtk/oQ+lbOOv65H9SLZgmJnT2AWCrHkv67uOIM8EHCrdXywlT1u
NP3PHbNWup7+qn5fBTDX3V6Y8UWgBq8timQM6o8HlB3Bv9H2DO+E/4GPkGlZCNGp
4df50SHt7mQ+0Q==
-----END CERTIFICATE-----
Generated at Sat Sep 28 11:59:52 2024 by rpki-client on console-fra.rpki-client.org