Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a633030633a3a2f34382d3438203d3e20323634393936.roa
File:                     323830343a333132343a633030633a3a2f34382d3438203d3e20323634393936.roa (raw, json)
Hash identifier:          fyy4gVF7eMBGbI6iDPFGufInJmJ7O6r7P59CU+8qX/U=
Subject key identifier:   31:4A:44:39:00:10:0F:96:5A:FE:6A:4E:10:A0:8E:24:4B:CA:02:D8
Certificate issuer:       /CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69
Certificate serial:       4E2E96E93F3F7E7A3CF448FE493B9C1578260DBF
Authority key identifier: 2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a633030633a3a2f34382d3438203d3e20323634393936.roa
Signing time:             Wed 07 Aug 2024 14:53:10 +0000
ROA not before:           Wed 07 Aug 2024 14:48:10 +0000
ROA not after:            Wed 06 Aug 2025 14:53:10 +0000
asID:                     264996
IP address blocks:        2804:3124:c00c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl
                          rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:2e:96:e9:3f:3f:7e:7a:3c:f4:48:fe:49:3b:9c:15:78:26:0d:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69
        Validity
            Not Before: Aug  7 14:48:10 2024 GMT
            Not After : Aug  6 14:53:10 2025 GMT
        Subject: CN=314A443900100F965AFE6A4E10A08E244BCA02D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:59:b6:53:44:47:94:a0:14:78:9c:a8:0a:80:
                    60:fa:65:88:32:e9:52:f5:dd:b5:2e:57:77:1d:8a:
                    f8:93:af:7a:e3:2c:ee:8e:2a:1e:4b:84:4d:00:f6:
                    62:e0:11:40:93:1e:c4:db:d0:55:98:93:49:b5:8b:
                    e6:ad:2f:ea:c6:fb:e9:fa:cf:8e:b2:f2:bf:7f:92:
                    ce:17:2a:9d:fd:66:23:0d:76:b4:23:a5:7f:ff:85:
                    70:fb:40:2d:18:c7:a2:ef:32:d6:a8:90:f9:47:0c:
                    e1:83:f9:a2:da:72:70:46:cc:2a:03:98:45:8d:26:
                    51:8b:68:c3:32:ce:01:13:1c:7a:d4:17:41:0a:57:
                    71:18:0e:72:63:92:33:31:fe:cc:8c:b2:e9:f0:9f:
                    6e:43:6c:d2:5e:dd:3b:1d:c0:54:07:11:c9:98:73:
                    af:47:ed:29:7f:02:a5:72:72:98:de:6f:4c:6c:30:
                    6a:ff:b5:f7:d8:c4:63:f1:3b:25:40:e2:c7:d8:6e:
                    76:50:3c:9f:f4:64:07:f2:36:6f:45:06:50:0b:ec:
                    f4:a3:c8:20:21:82:16:8a:c0:a7:79:00:fa:b6:55:
                    8e:74:d9:3c:f9:23:e3:40:5b:c3:a7:ca:56:c4:75:
                    06:4d:65:8b:02:ee:e7:19:19:42:10:66:c3:57:5e:
                    73:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:4A:44:39:00:10:0F:96:5A:FE:6A:4E:10:A0:8E:24:4B:CA:02:D8
            X509v3 Authority Key Identifier:
                keyid:2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a633030633a3a2f34382d3438203d3e20323634393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3124:c00c::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:6d:44:a8:c0:14:eb:03:97:e6:67:f5:a8:41:c9:ab:d7:39:
         a8:24:33:73:bf:54:fa:bf:4c:6c:02:7d:69:5b:ac:87:4a:95:
         a7:cc:52:01:74:52:7e:8f:f3:f6:ac:c9:e0:04:f1:f3:1e:6d:
         4c:0a:f8:61:a3:c0:75:48:b0:dc:10:db:7f:84:fd:8a:5c:57:
         d0:f3:b7:c8:79:52:22:ce:6f:61:3d:4b:83:56:07:eb:54:8d:
         36:3e:41:66:b7:9f:57:4c:ea:64:0e:a1:e2:e3:24:39:18:47:
         09:2f:bf:a1:f2:7a:bf:b3:62:54:79:82:1f:0b:31:bb:f6:a8:
         94:f5:15:1b:79:71:4a:02:87:77:32:5a:d6:f3:81:34:db:aa:
         79:fb:00:a6:58:1f:30:49:6d:77:2f:18:10:11:4f:fe:e3:0c:
         c3:d5:63:94:4c:c3:b0:dd:4d:cd:e4:44:df:bf:d4:e8:a6:fa:
         ff:e4:c0:9a:11:e9:df:07:5d:65:57:57:79:19:28:52:54:4f:
         eb:27:a3:79:72:39:35:fc:ef:25:14:b9:01:f7:26:ff:42:e9:
         68:f4:ab:43:af:2c:3c:35:7c:51:7a:88:63:bb:b5:36:46:44:
         3f:ba:dd:bf:6e:8c:61:3d:f6:8e:18:89:5d:be:23:62:a4:6d:
         02:f8:ce:4b
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUTi6W6T8/fno89Ej+STucFXgmDb8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkYzRjEyRTk0NDcxOUYyNEE4RDFBNEIzQzc5ODBGNzBB
NkQ5OUQ2OTAeFw0yNDA4MDcxNDQ4MTBaFw0yNTA4MDYxNDUzMTBaMDMxMTAvBgNV
BAMTKDMxNEE0NDM5MDAxMDBGOTY1QUZFNkE0RTEwQTA4RTI0NEJDQTAyRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaWbZTREeUoBR4nKgKgGD6ZYgy
6VL13bUuV3cdiviTr3rjLO6OKh5LhE0A9mLgEUCTHsTb0FWYk0m1i+atL+rG++n6
z46y8r9/ks4XKp39ZiMNdrQjpX//hXD7QC0Yx6LvMtaokPlHDOGD+aLacnBGzCoD
mEWNJlGLaMMyzgETHHrUF0EKV3EYDnJjkjMx/syMsunwn25DbNJe3TsdwFQHEcmY
c69H7Sl/AqVycpjeb0xsMGr/tffYxGPxOyVA4sfYbnZQPJ/0ZAfyNm9FBlAL7PSj
yCAhghaKwKd5APq2VY502Tz5I+NAW8OnylbEdQZNZYsC7ucZGUIQZsNXXnNFAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUMUpEOQAQD5Za/mpOEKCOJEvKAtgwHwYDVR0j
BBgwFoAULz8S6URxnySo0aSzx5gPcKbZnWkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3N2am9lSEdwUlJ0TGU4c0d5Wk5HTGRUd1V5aURkY1J3bmliYmp5OFI5
ZXQvMS8yRjNGMTJFOTQ0NzE5RjI0QThEMUE0QjNDNzk4MEY3MEE2RDk5RDY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGM0YxMkU5NDQ3MTlGMjRB
OEQxQTRCM0M3OTgwRjcwQTZEOTlENjkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNzdmpvZUhHcFJSdExlOHNHeVpOR0xkVHdVeWlEZGNSd25pYmJqeThSOWV0LzEv
MzIzODMwMzQzYTMzMzEzMjM0M2E2MzMwMzA2MzNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzNDM5MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEMSTADDANBgkqhkiG9w0BAQsF
AAOCAQEAKW1EqMAU6wOX5mf1qEHJq9c5qCQzc79U+r9MbAJ9aVush0qVp8xSAXRS
fo/z9qzJ4ATx8x5tTAr4YaPAdUiw3BDbf4T9ilxX0PO3yHlSIs5vYT1Lg1YH61SN
Nj5BZrefV0zqZA6h4uMkORhHCS+/ofJ6v7NiVHmCHwsxu/aolPUVG3lxSgKHdzJa
1vOBNNuqefsAplgfMEltdy8YEBFP/uMMw9VjlEzDsN1NzeRE37/U6Kb6/+TAmhHp
3wddZVdXeRkoUlRP6yejeXI5NfzvJRS5Afcm/0LpaPSrQ68sPDV8UXqIY7u1NkZE
P7rdv26MYT32jhiJXb4jYqRtAvjOSw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:31 2024 by rpki-client on console-ams.rpki-client.org