Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/323830343a316131303a3a2f33322d3438203d3e203631383334.roa
File:                     323830343a316131303a3a2f33322d3438203d3e203631383334.roa (raw, json)
Hash identifier:          3+rniYr+8c+zkHZamebCxvh0I3JX81oGN54a/YxsO90=
Subject key identifier:   54:05:C3:7F:E3:0E:9C:82:F0:9B:08:86:7D:60:31:4B:08:AD:B4:B5
Certificate issuer:       /CN=C336C65AA0BA33C626FAB0B9C26E026EB908454A
Certificate serial:       3C97FE1FBE162203F6F081B3C4E4FD3CAF974F78
Authority key identifier: C3:36:C6:5A:A0:BA:33:C6:26:FA:B0:B9:C2:6E:02:6E:B9:08:45:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/323830343a316131303a3a2f33322d3438203d3e203631383334.roa
Signing time:             Thu 04 Apr 2024 08:18:43 +0000
ROA not before:           Thu 04 Apr 2024 08:13:43 +0000
ROA not after:            Thu 03 Apr 2025 08:18:43 +0000
asID:                     61834
IP address blocks:        2804:1a10::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.crl
                          rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:97:fe:1f:be:16:22:03:f6:f0:81:b3:c4:e4:fd:3c:af:97:4f:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C336C65AA0BA33C626FAB0B9C26E026EB908454A
        Validity
            Not Before: Apr  4 08:13:43 2024 GMT
            Not After : Apr  3 08:18:43 2025 GMT
        Subject: CN=5405C37FE30E9C82F09B08867D60314B08ADB4B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3a:2c:5a:04:08:6e:eb:16:cc:6e:67:a4:ce:
                    78:69:b6:e2:23:b5:df:38:aa:86:ee:aa:d9:21:10:
                    72:7a:ee:d0:d6:42:44:a9:ba:0d:21:07:c5:7a:ec:
                    16:2d:f8:c3:3f:4a:cc:7b:06:8e:a9:c3:90:49:72:
                    cb:14:63:8d:e3:de:f1:9a:95:71:a8:8a:2b:9a:94:
                    f7:f4:74:16:51:1a:92:cb:72:12:ab:56:b3:d3:32:
                    e6:c7:d3:d4:36:ed:8f:1b:60:16:bd:1c:ac:09:54:
                    83:13:77:9c:ce:40:c0:fb:32:69:db:d5:51:31:0f:
                    12:38:df:5d:94:d8:c1:3e:f3:99:2f:ba:6c:88:74:
                    3e:11:7d:b1:2d:f1:91:18:c6:bc:5f:d9:cd:64:45:
                    c9:3f:05:ff:d2:d1:61:aa:a5:94:e3:de:06:35:bf:
                    de:79:59:36:4d:16:ef:62:9a:d6:f1:c7:c5:d1:1b:
                    22:82:9c:db:db:77:2d:f7:9e:59:60:3f:15:53:3b:
                    b3:4b:1f:e8:38:56:d9:af:79:ad:2c:16:5f:b0:a3:
                    81:2e:23:bf:0d:0a:86:eb:64:c6:2b:21:6d:53:aa:
                    fb:e7:da:85:d0:d2:fc:5f:c7:72:f6:15:f6:cd:7a:
                    85:1a:eb:77:1d:34:fd:6f:4e:1c:ac:03:ec:4a:6f:
                    0e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:05:C3:7F:E3:0E:9C:82:F0:9B:08:86:7D:60:31:4B:08:AD:B4:B5
            X509v3 Authority Key Identifier:
                keyid:C3:36:C6:5A:A0:BA:33:C6:26:FA:B0:B9:C2:6E:02:6E:B9:08:45:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/323830343a316131303a3a2f33322d3438203d3e203631383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a10::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:ee:9b:0a:fb:df:24:ee:16:67:48:b0:90:d0:31:f5:b9:0b:
         4c:be:b9:d8:e9:5e:88:f5:69:7b:22:95:38:06:bf:65:f3:03:
         82:39:1c:ae:ed:d2:82:df:cb:5f:8e:96:31:47:30:6e:72:72:
         7f:ea:dd:74:e1:f9:9e:06:69:24:f9:e8:4f:36:61:d2:b3:dc:
         e4:09:99:78:e1:cb:ef:7d:7d:c7:77:9c:c1:a2:ac:11:40:81:
         24:39:10:20:a0:b6:04:88:6c:a1:33:5f:e4:7f:99:6c:b4:de:
         16:28:0b:7d:d9:89:cb:53:78:d1:af:cc:cd:02:6b:4e:7a:2f:
         60:80:3c:86:0c:ae:66:57:82:fb:c3:c2:02:97:05:fd:07:93:
         7b:2a:e6:bc:ec:67:50:1c:5e:0c:30:fc:53:00:ad:58:0d:ca:
         1d:00:f2:f2:64:ec:a3:15:7b:67:81:f6:e5:83:32:81:57:b3:
         f1:04:e2:f8:ab:6f:d2:01:1c:19:4d:88:35:57:19:48:eb:1d:
         15:02:ce:fb:cf:39:7b:d3:c5:74:a8:ab:19:7a:87:57:6c:ee:
         0d:6f:ce:de:38:a5:10:3b:af:6d:9b:9f:bc:59:d1:5b:48:23:
         8c:aa:ef:c7:50:b6:5c:74:e3:c2:b3:3f:85:95:d0:8b:97:86:
         af:f4:59:9f
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUPJf+H74WIgP28IGzxOT9PK+XT3gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzMzNkM2NUFBMEJBMzNDNjI2RkFCMEI5QzI2RTAyNkVC
OTA4NDU0QTAeFw0yNDA0MDQwODEzNDNaFw0yNTA0MDMwODE4NDNaMDMxMTAvBgNV
BAMTKDU0MDVDMzdGRTMwRTlDODJGMDlCMDg4NjdENjAzMTRCMDhBREI0QjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQOixaBAhu6xbMbmekznhptuIj
td84qobuqtkhEHJ67tDWQkSpug0hB8V67BYt+MM/Ssx7Bo6pw5BJcssUY43j3vGa
lXGoiiualPf0dBZRGpLLchKrVrPTMubH09Q27Y8bYBa9HKwJVIMTd5zOQMD7Mmnb
1VExDxI4312U2ME+85kvumyIdD4RfbEt8ZEYxrxf2c1kRck/Bf/S0WGqpZTj3gY1
v955WTZNFu9imtbxx8XRGyKCnNvbdy33nllgPxVTO7NLH+g4Vtmvea0sFl+wo4Eu
I78NCobrZMYrIW1Tqvvn2oXQ0vxfx3L2FfbNeoUa63cdNP1vThysA+xKbw5vAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUVAXDf+MOnILwmwiGfWAxSwittLUwHwYDVR0j
BBgwFoAUwzbGWqC6M8Ym+rC5wm4CbrkIRUowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHBIQjFOV25iZVdBaEJLS1VvZFJrcDFVejFacjVQVDJBSlV4a21BMzFq
b2svMS9DMzM2QzY1QUEwQkEzM0M2MjZGQUIwQjlDMjZFMDI2RUI5MDg0NTRBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MzMzZDNjVBQTBCQTMzQzYy
NkZBQjBCOUMyNkUwMjZFQjkwODQ1NEEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRwSEIxTlduYmVXQWhCS0tVb2RSa3AxVXoxWnI1UFQyQUpVeGttQTMxam9rLzEv
MzIzODMwMzQzYTMxNjEzMTMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzYzMTM4
MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEGhAwDQYJKoZIhvcNAQELBQADggEBAH3umwr73yTu
FmdIsJDQMfW5C0y+udjpXoj1aXsilTgGv2XzA4I5HK7t0oLfy1+OljFHMG5ycn/q
3XTh+Z4GaST56E82YdKz3OQJmXjhy+99fcd3nMGirBFAgSQ5ECCgtgSIbKEzX+R/
mWy03hYoC33ZictTeNGvzM0Ca056L2CAPIYMrmZXgvvDwgKXBf0Hk3sq5rzsZ1Ac
Xgww/FMArVgNyh0A8vJk7KMVe2eB9uWDMoFXs/EE4virb9IBHBlNiDVXGUjrHRUC
zvvPOXvTxXSoqxl6h1ds7g1vzt44pRA7r22bn7xZ0VtII4yq78dQtlx048KzP4WV
0IuXhq/0WZ8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:33 2024 by rpki-client on console-fra.rpki-client.org