Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/1/323830343a333336383a3a2f33322d3332203d3e20323635333934.roa
File:                     323830343a333336383a3a2f33322d3332203d3e20323635333934.roa (raw, json)
Hash identifier:          4JRCOKc5yW0U3LUk8+7cYkUSQGy9EZ6K7oGmd0vRXCE=
Subject key identifier:   63:68:8B:24:A2:B4:2C:10:AD:5C:35:1B:F3:39:D5:0B:88:5D:EE:27
Certificate issuer:       /CN=A3756BDF1D16A4696DDBD8788537C2F8FB47FA72
Certificate serial:       7B50BD40CA9C3CDBB7315B03CFD3C6F483961A75
Authority key identifier: A3:75:6B:DF:1D:16:A4:69:6D:DB:D8:78:85:37:C2:F8:FB:47:FA:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3756BDF1D16A4696DDBD8788537C2F8FB47FA72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/1/323830343a333336383a3a2f33322d3332203d3e20323635333934.roa
Signing time:             Thu 04 Apr 2024 02:31:15 +0000
ROA not before:           Thu 04 Apr 2024 02:26:15 +0000
ROA not after:            Thu 03 Apr 2025 02:31:15 +0000
asID:                     265394
IP address blocks:        2804:3368::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/1/A3756BDF1D16A4696DDBD8788537C2F8FB47FA72.crl
                          rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/1/A3756BDF1D16A4696DDBD8788537C2F8FB47FA72.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3756BDF1D16A4696DDBD8788537C2F8FB47FA72.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:19:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:50:bd:40:ca:9c:3c:db:b7:31:5b:03:cf:d3:c6:f4:83:96:1a:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3756BDF1D16A4696DDBD8788537C2F8FB47FA72
        Validity
            Not Before: Apr  4 02:26:15 2024 GMT
            Not After : Apr  3 02:31:15 2025 GMT
        Subject: CN=63688B24A2B42C10AD5C351BF339D50B885DEE27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:42:d4:c6:a1:5c:1b:2c:87:75:98:64:d8:b5:
                    ea:80:17:d7:fc:07:c4:c4:03:c6:9b:af:94:cc:25:
                    ce:97:df:fe:57:d4:2e:f6:b9:b9:0f:80:b0:73:60:
                    df:07:88:41:86:c8:45:94:f5:82:c6:6f:27:26:a4:
                    e5:76:51:b3:41:d2:49:0e:c6:67:c2:b2:52:35:aa:
                    09:7c:65:89:d0:c5:70:35:70:ce:a6:bc:12:45:b0:
                    f1:15:12:36:f5:20:62:62:3c:52:31:87:43:8f:63:
                    2a:da:b0:3b:9b:a2:a3:29:3a:94:3c:b7:c7:7c:1f:
                    af:62:cc:a1:2b:c7:42:d5:82:7f:aa:28:32:63:1d:
                    71:f6:46:2a:6d:59:59:64:97:56:12:0e:75:95:9f:
                    21:77:01:a1:5f:63:dd:a6:35:f4:ea:a3:ba:4a:f0:
                    fb:d6:63:30:f1:1b:39:27:66:3b:7f:fe:a0:c9:36:
                    50:04:d0:9b:5c:d2:e8:62:78:2b:ba:db:f4:eb:f9:
                    7e:cd:c0:ea:74:6b:e0:43:29:92:5e:32:f7:dc:21:
                    c6:8a:8f:18:41:14:99:63:73:89:90:59:e1:41:62:
                    4b:11:69:05:18:d1:1a:6c:3c:08:c4:33:0c:68:7a:
                    ab:90:83:2f:16:94:0f:2d:c2:81:97:5c:0b:2e:3f:
                    63:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:68:8B:24:A2:B4:2C:10:AD:5C:35:1B:F3:39:D5:0B:88:5D:EE:27
            X509v3 Authority Key Identifier:
                keyid:A3:75:6B:DF:1D:16:A4:69:6D:DB:D8:78:85:37:C2:F8:FB:47:FA:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/1/A3756BDF1D16A4696DDBD8788537C2F8FB47FA72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3756BDF1D16A4696DDBD8788537C2F8FB47FA72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/1/323830343a333336383a3a2f33322d3332203d3e20323635333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3368::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:73:e8:69:7d:c0:67:8b:a8:d5:5b:e9:2f:d2:f1:4f:f9:23:
         a1:5d:71:80:34:70:46:77:d3:13:8c:e2:2a:c7:f4:90:55:5a:
         0d:a2:cc:c2:82:93:ca:db:8e:74:bf:16:b1:ff:26:fd:95:24:
         64:44:aa:69:0a:ae:38:52:0a:10:76:98:c5:fb:8e:9c:db:76:
         2d:ca:3c:13:bb:7f:91:46:52:17:bf:39:ea:f8:42:da:70:e5:
         f3:40:f4:a8:ba:fc:9f:e0:26:c7:f4:97:50:4b:69:07:86:06:
         84:7d:9c:19:c7:ea:c7:e8:30:06:ff:1b:29:e7:10:a2:9f:cc:
         0a:09:79:ac:94:5c:39:6e:33:56:d6:a7:11:65:57:f1:0a:a9:
         e1:e9:f2:8c:a0:8f:9e:a4:54:3e:85:a4:9c:e4:b2:2a:aa:4b:
         27:75:14:bd:9d:d5:0f:5a:1f:ac:b0:c2:f5:08:fe:b6:25:38:
         6b:91:de:20:6c:de:95:02:76:a3:86:01:ac:6f:53:44:85:b0:
         3c:5b:c9:78:92:fe:7c:f9:43:93:9c:e5:95:f6:46:4f:15:2d:
         eb:14:ca:57:ab:d9:e0:b8:15:67:d1:b2:1b:a5:2b:0c:57:d9:
         e3:97:4c:e3:73:de:bd:d6:20:6a:9a:63:81:30:21:5e:c6:06:
         97:9e:06:1c
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUe1C9QMqcPNu3MVsDz9PG9IOWGnUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTM3NTZCREYxRDE2QTQ2OTZEREJEODc4ODUzN0MyRjhG
QjQ3RkE3MjAeFw0yNDA0MDQwMjI2MTVaFw0yNTA0MDMwMjMxMTVaMDMxMTAvBgNV
BAMTKDYzNjg4QjI0QTJCNDJDMTBBRDVDMzUxQkYzMzlENTBCODg1REVFMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgQtTGoVwbLId1mGTYteqAF9f8
B8TEA8abr5TMJc6X3/5X1C72ubkPgLBzYN8HiEGGyEWU9YLGbycmpOV2UbNB0kkO
xmfCslI1qgl8ZYnQxXA1cM6mvBJFsPEVEjb1IGJiPFIxh0OPYyrasDuboqMpOpQ8
t8d8H69izKErx0LVgn+qKDJjHXH2RiptWVlkl1YSDnWVnyF3AaFfY92mNfTqo7pK
8PvWYzDxGzknZjt//qDJNlAE0Jtc0uhieCu62/Tr+X7NwOp0a+BDKZJeMvfcIcaK
jxhBFJljc4mQWeFBYksRaQUY0RpsPAjEMwxoequQgy8WlA8twoGXXAsuP2MXAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUY2iLJKK0LBCtXDUb8znVC4hd7icwHwYDVR0j
BBgwFoAUo3Vr3x0WpGlt29h4hTfC+PtH+nIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDhpN2FqMThOdnhzVUhId1ZDeVJ6RHVKckFTRkIyaDV0QmV6YmtKMWJE
OTUvMS9BMzc1NkJERjFEMTZBNDY5NkREQkQ4Nzg4NTM3QzJGOEZCNDdGQTcyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EzNzU2QkRGMUQxNkE0Njk2
RERCRDg3ODg1MzdDMkY4RkI0N0ZBNzIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ4aTdhajE4TnZ4c1VISHdWQ3lSekR1SnJBU0ZCMmg1dEJlemJrSjFiRDk1LzEv
MzIzODMwMzQzYTMzMzMzNjM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM1
MzMzOTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQzaDANBgkqhkiG9w0BAQsFAAOCAQEAh3PoaX3A
Z4uo1VvpL9LxT/kjoV1xgDRwRnfTE4ziKsf0kFVaDaLMwoKTytuOdL8Wsf8m/ZUk
ZESqaQquOFIKEHaYxfuOnNt2Lco8E7t/kUZSF7856vhC2nDl80D0qLr8n+Amx/SX
UEtpB4YGhH2cGcfqx+gwBv8bKecQop/MCgl5rJRcOW4zVtanEWVX8Qqp4enyjKCP
nqRUPoWknOSyKqpLJ3UUvZ3VD1ofrLDC9Qj+tiU4a5HeIGzelQJ2o4YBrG9TRIWw
PFvJeJL+fPlDk5zllfZGTxUt6xTKV6vZ4LgVZ9GyG6UrDFfZ45dM43PevdYgappj
gTAhXsYGl54GHA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:20 2024 by rpki-client on console-fra.rpki-client.org