Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/323830343a326661343a3a2f33322d3438203d3e203532373731.roa
File:                     323830343a326661343a3a2f33322d3438203d3e203532373731.roa (raw, json)
Hash identifier:          IAlR2kUhfcSywJwu67hDhsscO7vzsbiXNtGAkH7UKe4=
Subject key identifier:   65:FA:14:7B:81:CF:25:FF:3F:E5:B4:E2:60:8F:2A:53:16:48:75:F5
Certificate issuer:       /CN=3929491D59EC78DBDEC7423B04D06034C1A59303
Certificate serial:       409F89F111B05C79D5F8238DB987F40D52846EF5
Authority key identifier: 39:29:49:1D:59:EC:78:DB:DE:C7:42:3B:04:D0:60:34:C1:A5:93:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3929491D59EC78DBDEC7423B04D06034C1A59303.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/323830343a326661343a3a2f33322d3438203d3e203532373731.roa
Signing time:             Thu 04 Apr 2024 10:53:09 +0000
ROA not before:           Thu 04 Apr 2024 10:48:09 +0000
ROA not after:            Thu 03 Apr 2025 10:53:09 +0000
asID:                     52771
IP address blocks:        2804:2fa4::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.crl
                          rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3929491D59EC78DBDEC7423B04D06034C1A59303.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:41:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:9f:89:f1:11:b0:5c:79:d5:f8:23:8d:b9:87:f4:0d:52:84:6e:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3929491D59EC78DBDEC7423B04D06034C1A59303
        Validity
            Not Before: Apr  4 10:48:09 2024 GMT
            Not After : Apr  3 10:53:09 2025 GMT
        Subject: CN=65FA147B81CF25FF3FE5B4E2608F2A53164875F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9f:a5:84:67:12:26:a2:9e:ba:7b:13:c9:2f:
                    89:c9:da:f4:0b:87:7c:b4:2e:3f:40:f5:87:6b:8f:
                    59:a1:be:81:0a:36:30:73:51:d2:ee:2f:e3:5b:15:
                    72:9f:1e:a9:ef:71:35:f9:ff:8b:af:34:f3:e8:7c:
                    76:18:24:2f:0e:03:46:27:02:52:a2:cc:72:80:01:
                    1f:52:cd:32:ab:d3:37:ff:c7:d8:a7:37:c4:61:5d:
                    81:2b:89:f7:54:d9:12:ad:4c:7f:b3:9a:34:e9:f6:
                    21:88:3b:61:70:16:f7:89:b0:0f:e6:bf:16:8b:c4:
                    4e:bf:81:61:ea:90:ad:5e:84:fb:82:41:77:c3:c7:
                    b5:7e:9e:e2:f1:d8:02:f3:39:3b:96:61:6d:8e:e9:
                    ca:fc:c3:38:e0:53:79:3c:26:8f:79:ab:75:e7:72:
                    6f:54:3b:59:75:61:81:26:03:07:c0:7f:a9:04:ff:
                    ea:25:8d:55:e8:43:93:13:57:70:69:ce:9f:44:b2:
                    15:e9:8d:35:10:bf:82:7e:5d:f7:7d:cf:8f:a0:37:
                    25:89:91:a0:d0:50:6d:da:01:5b:39:ea:74:77:a0:
                    4d:b8:e5:e1:1e:c2:89:d2:0a:a1:8c:98:fc:73:07:
                    33:04:4e:45:fc:bf:ea:84:28:92:50:cf:db:38:7a:
                    7c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:FA:14:7B:81:CF:25:FF:3F:E5:B4:E2:60:8F:2A:53:16:48:75:F5
            X509v3 Authority Key Identifier:
                keyid:39:29:49:1D:59:EC:78:DB:DE:C7:42:3B:04:D0:60:34:C1:A5:93:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3929491D59EC78DBDEC7423B04D06034C1A59303.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/323830343a326661343a3a2f33322d3438203d3e203532373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2fa4::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:69:d0:96:08:ff:8f:8a:6c:2b:cc:be:02:7e:73:87:07:b1:
         33:09:bf:d7:48:c1:25:da:9b:70:3a:98:37:28:7b:a8:e3:65:
         12:82:fa:3f:5c:20:c2:ca:73:cc:33:34:e7:dc:46:a8:cd:c9:
         6d:a0:6e:d2:15:03:07:f7:0b:5d:39:c3:33:7c:94:59:8c:dd:
         cb:39:17:c2:7f:59:8b:12:32:36:c2:38:34:19:13:b8:cd:4e:
         af:71:fc:d2:3d:8c:3c:84:e7:a4:3f:76:62:ec:d5:fe:04:8a:
         31:a1:19:c9:40:f3:c9:ea:2e:a4:6a:7e:23:03:eb:c3:f1:72:
         1f:07:1b:98:c9:07:6d:1c:2e:51:2e:5c:c3:1b:cc:83:9b:5f:
         6e:72:a0:d8:49:fc:55:ca:de:91:f6:c2:b3:c9:1d:ab:92:a3:
         64:fa:e9:ab:0c:48:13:db:5f:1e:36:99:0b:ba:02:08:35:d7:
         80:be:7a:dc:b7:38:72:3d:95:36:48:45:96:1a:ce:01:11:13:
         10:17:e1:4b:cb:b4:78:69:51:b8:cf:92:4f:ae:22:0b:06:f3:
         0b:a5:77:b8:88:44:1e:08:0e:7d:22:71:3b:84:b2:c5:42:9e:
         57:f7:eb:e9:64:2b:1b:61:dd:bd:14:a6:c0:c5:e7:91:a4:02:
         58:37:09:23
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUQJ+J8RGwXHnV+CONuYf0DVKEbvUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzkyOTQ5MUQ1OUVDNzhEQkRFQzc0MjNCMDREMDYwMzRD
MUE1OTMwMzAeFw0yNDA0MDQxMDQ4MDlaFw0yNTA0MDMxMDUzMDlaMDMxMTAvBgNV
BAMTKDY1RkExNDdCODFDRjI1RkYzRkU1QjRFMjYwOEYyQTUzMTY0ODc1RjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIn6WEZxImop66exPJL4nJ2vQL
h3y0Lj9A9Ydrj1mhvoEKNjBzUdLuL+NbFXKfHqnvcTX5/4uvNPPofHYYJC8OA0Yn
AlKizHKAAR9SzTKr0zf/x9inN8RhXYErifdU2RKtTH+zmjTp9iGIO2FwFveJsA/m
vxaLxE6/gWHqkK1ehPuCQXfDx7V+nuLx2ALzOTuWYW2O6cr8wzjgU3k8Jo95q3Xn
cm9UO1l1YYEmAwfAf6kE/+oljVXoQ5MTV3Bpzp9EshXpjTUQv4J+Xfd9z4+gNyWJ
kaDQUG3aAVs56nR3oE245eEewonSCqGMmPxzBzMETkX8v+qEKJJQz9s4enxzAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUZfoUe4HPJf8/5bTiYI8qUxZIdfUwHwYDVR0j
BBgwFoAUOSlJHVnseNvex0I7BNBgNMGlkwMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNG1GZjNFdFBKandxWVlZRHoybzZESFR3VUtYMXRGdjlTRDgxcjI3d1py
NGkvMS8zOTI5NDkxRDU5RUM3OERCREVDNzQyM0IwNEQwNjAzNEMxQTU5MzAzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM5Mjk0OTFENTlFQzc4REJE
RUM3NDIzQjA0RDA2MDM0QzFBNTkzMDMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRtRmYzRXRQSmp3cVlZWUR6Mm82REhUd1VLWDF0RnY5U0Q4MXIyN3dacjRpLzEv
MzIzODMwMzQzYTMyNjY2MTM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzUzMjM3
MzczMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEL6QwDQYJKoZIhvcNAQELBQADggEBACZp0JYI/4+K
bCvMvgJ+c4cHsTMJv9dIwSXam3A6mDcoe6jjZRKC+j9cIMLKc8wzNOfcRqjNyW2g
btIVAwf3C105wzN8lFmM3cs5F8J/WYsSMjbCODQZE7jNTq9x/NI9jDyE56Q/dmLs
1f4EijGhGclA88nqLqRqfiMD68Pxch8HG5jJB20cLlEuXMMbzIObX25yoNhJ/FXK
3pH2wrPJHauSo2T66asMSBPbXx42mQu6Agg114C+ety3OHI9lTZIRZYazgERExAX
4UvLtHhpUbjPkk+uIgsG8wuld7iIRB4IDn0icTuEssVCnlf36+lkKxth3b0UpsDF
55GkAlg3CSM=
-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:32 2024 by rpki-client on console-ams.rpki-client.org