Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/1/323830343a333361383a3a2f33322d3430203d3e20323635343130.roa
File:                     323830343a333361383a3a2f33322d3430203d3e20323635343130.roa (raw, json)
Hash identifier:          HnURTvhc4y2YxbyiLm8VbUiLIG9ARBMMOsjRD7BD99w=
Subject key identifier:   50:30:90:7E:EF:7E:E3:BA:BD:59:32:1A:46:B8:BD:37:84:63:91:5F
Certificate issuer:       /CN=56946D99ABCDBF967F01D2AAA6149A65D77D6D7E
Certificate serial:       571B9E4A61C1183A4E2A0E08293BFF7FBFBB3E58
Authority key identifier: 56:94:6D:99:AB:CD:BF:96:7F:01:D2:AA:A6:14:9A:65:D7:7D:6D:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56946D99ABCDBF967F01D2AAA6149A65D77D6D7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/1/323830343a333361383a3a2f33322d3430203d3e20323635343130.roa
Signing time:             Thu 04 Apr 2024 16:32:58 +0000
ROA not before:           Thu 04 Apr 2024 16:27:58 +0000
ROA not after:            Thu 03 Apr 2025 16:32:58 +0000
asID:                     265410
IP address blocks:        2804:33a8::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/1/56946D99ABCDBF967F01D2AAA6149A65D77D6D7E.crl
                          rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/1/56946D99ABCDBF967F01D2AAA6149A65D77D6D7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56946D99ABCDBF967F01D2AAA6149A65D77D6D7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 02:11:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:1b:9e:4a:61:c1:18:3a:4e:2a:0e:08:29:3b:ff:7f:bf:bb:3e:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56946D99ABCDBF967F01D2AAA6149A65D77D6D7E
        Validity
            Not Before: Apr  4 16:27:58 2024 GMT
            Not After : Apr  3 16:32:58 2025 GMT
        Subject: CN=5030907EEF7EE3BABD59321A46B8BD378463915F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:20:12:f3:28:c2:16:d7:ca:27:55:4a:84:d3:
                    0c:8a:15:7b:a2:5a:6b:80:5c:e6:56:88:79:db:cd:
                    d6:5d:b0:84:04:00:86:96:7e:7d:5e:60:2c:8c:f6:
                    87:c1:3a:d1:e8:ab:ac:08:8a:42:c1:7f:5f:7f:66:
                    99:3e:f2:01:74:6a:a9:92:25:fc:65:e9:60:df:42:
                    df:a0:83:ee:48:31:80:4f:1b:81:d1:4f:e7:fe:ad:
                    4b:b4:12:67:04:6a:01:6c:f8:18:2f:d9:ea:23:84:
                    b8:7e:9f:37:13:f8:22:0d:08:93:90:26:aa:d0:3c:
                    84:01:0d:23:7d:07:69:d8:db:04:7b:1d:f4:ef:0d:
                    52:b7:68:bf:1e:86:f1:60:8e:b4:94:47:86:8e:f0:
                    d2:3c:24:93:18:f0:36:ed:78:7b:08:49:e8:9c:98:
                    e7:95:1f:a9:18:4e:a7:fc:09:7d:0c:dc:d1:db:0c:
                    c6:41:da:09:49:76:f1:2a:a9:06:22:27:ad:65:5e:
                    33:e1:d6:40:42:fb:e4:b9:73:df:24:9a:14:b3:80:
                    59:a0:3c:e7:c7:e7:65:38:0c:53:97:fb:96:83:9a:
                    7d:f7:f3:5e:21:40:b9:15:da:60:c5:d0:78:59:a4:
                    92:c2:62:69:e3:86:c7:4b:4b:ed:12:b2:35:df:45:
                    71:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:30:90:7E:EF:7E:E3:BA:BD:59:32:1A:46:B8:BD:37:84:63:91:5F
            X509v3 Authority Key Identifier:
                keyid:56:94:6D:99:AB:CD:BF:96:7F:01:D2:AA:A6:14:9A:65:D7:7D:6D:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/1/56946D99ABCDBF967F01D2AAA6149A65D77D6D7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56946D99ABCDBF967F01D2AAA6149A65D77D6D7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/1/323830343a333361383a3a2f33322d3430203d3e20323635343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         c6:4f:17:8a:de:5f:92:bb:45:09:f5:60:e6:72:0e:9e:9a:dc:
         2a:f7:8a:9f:05:20:a0:03:8f:cb:6d:3b:61:25:55:34:f7:5d:
         f0:ab:39:97:52:70:54:13:ca:19:1d:91:d7:92:c1:8b:3a:29:
         d1:69:a9:01:d8:7b:f1:6a:44:1f:70:8c:83:f2:40:a8:5d:6a:
         5a:d4:48:d0:22:68:ef:02:ae:31:ba:a9:fa:d4:a3:47:10:5b:
         2b:16:a0:0f:5a:97:52:2b:72:d8:f4:35:49:4e:2b:d2:7c:98:
         e1:02:cc:ba:f6:e5:eb:44:01:cf:41:7f:00:49:0e:c5:70:b9:
         8f:2f:9a:a5:bb:50:87:eb:83:4c:b7:ab:16:0c:0f:ab:9f:8b:
         64:8c:c8:20:a1:59:7a:ed:56:d6:91:16:b7:7a:29:0e:ba:bb:
         7b:aa:02:84:aa:ef:5f:dd:ea:34:bc:f2:95:5c:70:13:4c:d1:
         af:ed:43:5d:e7:f4:77:2e:12:1a:69:de:ef:d8:31:b1:b8:dc:
         e6:44:ca:a0:c8:f6:5c:a9:5a:65:07:e0:2e:e2:08:30:9c:53:
         82:65:2d:83:8c:14:c1:01:ac:4f:5c:dc:48:ad:bc:7a:72:87:
         c1:f6:fb:03:fa:1e:f2:dc:6c:60:67:84:b3:bc:2a:cb:17:4e:
         9b:a7:55:24
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUVxueSmHBGDpOKg4IKTv/f7+7PlgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTY5NDZEOTlBQkNEQkY5NjdGMDFEMkFBQTYxNDlBNjVE
NzdENkQ3RTAeFw0yNDA0MDQxNjI3NThaFw0yNTA0MDMxNjMyNThaMDMxMTAvBgNV
BAMTKDUwMzA5MDdFRUY3RUUzQkFCRDU5MzIxQTQ2QjhCRDM3ODQ2MzkxNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiIBLzKMIW18onVUqE0wyKFXui
WmuAXOZWiHnbzdZdsIQEAIaWfn1eYCyM9ofBOtHoq6wIikLBf19/Zpk+8gF0aqmS
Jfxl6WDfQt+gg+5IMYBPG4HRT+f+rUu0EmcEagFs+Bgv2eojhLh+nzcT+CINCJOQ
JqrQPIQBDSN9B2nY2wR7HfTvDVK3aL8ehvFgjrSUR4aO8NI8JJMY8DbteHsISeic
mOeVH6kYTqf8CX0M3NHbDMZB2glJdvEqqQYiJ61lXjPh1kBC++S5c98kmhSzgFmg
POfH52U4DFOX+5aDmn33814hQLkV2mDF0HhZpJLCYmnjhsdLS+0SsjXfRXFNAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUUDCQfu9+47q9WTIaRri9N4RjkV8wHwYDVR0j
BBgwFoAUVpRtmavNv5Z/AdKqphSaZdd9bX4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3FaalpMejh6M29ucWlWS240WWFXRUxyUFRSZVFVRnlHUHhxQnEyMjdM
NncvMS81Njk0NkQ5OUFCQ0RCRjk2N0YwMUQyQUFBNjE0OUE2NUQ3N0Q2RDdFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU2OTQ2RDk5QUJDREJGOTY3
RjAxRDJBQUE2MTQ5QTY1RDc3RDZEN0UuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNxWmpaTHo4ejNvbnFpVktuNFlhV0VMclBUUmVRVUZ5R1B4cUJxMjI3TDZ3LzEv
MzIzODMwMzQzYTMzMzM2MTM4M2EzYTJmMzMzMjJkMzQzMDIwM2QzZTIwMzIzNjM1
MzQzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQzqDANBgkqhkiG9w0BAQsFAAOCAQEAxk8Xit5f
krtFCfVg5nIOnprcKveKnwUgoAOPy207YSVVNPdd8Ks5l1JwVBPKGR2R15LBizop
0WmpAdh78WpEH3CMg/JAqF1qWtRI0CJo7wKuMbqp+tSjRxBbKxagD1qXUity2PQ1
SU4r0nyY4QLMuvbl60QBz0F/AEkOxXC5jy+apbtQh+uDTLerFgwPq5+LZIzIIKFZ
eu1W1pEWt3opDrq7e6oChKrvX93qNLzylVxwE0zRr+1DXef0dy4SGmne79gxsbjc
5kTKoMj2XKlaZQfgLuIIMJxTgmUtg4wUwQGsT1zcSK28enKHwfb7A/oe8txsYGeE
s7wqyxdOm6dVJA==
-----END CERTIFICATE-----
Generated at Tue Nov 26 02:15:46 2024 by rpki-client on console-fra.rpki-client.org