Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4w3UfBFVP6hKnowJViDv8iZXWYbcFkLXWb3NqjKuy3HJ/1/323830343a353931343a3a2f33322d313238203d3e20323638313638.roa
File:                     323830343a353931343a3a2f33322d313238203d3e20323638313638.roa (raw, json)
Hash identifier:          +6ReXKE24+pRWBQQLImqd5idXhv1v7KzSM/MzVJ98vM=
Subject key identifier:   8E:0D:72:A0:DC:C0:B5:A5:53:80:6D:0E:81:02:DA:2A:FE:EA:36:15
Certificate issuer:       /CN=811DA02DC51058EDFF82D04A170B29D01B686AC4
Certificate serial:       3CCDBB209F17AD4901AE5B360DD05F3F0C48F3D5
Authority key identifier: 81:1D:A0:2D:C5:10:58:ED:FF:82:D0:4A:17:0B:29:D0:1B:68:6A:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/811DA02DC51058EDFF82D04A170B29D01B686AC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4w3UfBFVP6hKnowJViDv8iZXWYbcFkLXWb3NqjKuy3HJ/1/323830343a353931343a3a2f33322d313238203d3e20323638313638.roa
Signing time:             Thu 04 Apr 2024 18:34:53 +0000
ROA not before:           Thu 04 Apr 2024 18:29:53 +0000
ROA not after:            Thu 03 Apr 2025 18:34:53 +0000
asID:                     268168
IP address blocks:        2804:5914::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4w3UfBFVP6hKnowJViDv8iZXWYbcFkLXWb3NqjKuy3HJ/1/811DA02DC51058EDFF82D04A170B29D01B686AC4.crl
                          rsync://rpki-repo.registro.br/repo/4w3UfBFVP6hKnowJViDv8iZXWYbcFkLXWb3NqjKuy3HJ/1/811DA02DC51058EDFF82D04A170B29D01B686AC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/811DA02DC51058EDFF82D04A170B29D01B686AC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:cd:bb:20:9f:17:ad:49:01:ae:5b:36:0d:d0:5f:3f:0c:48:f3:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=811DA02DC51058EDFF82D04A170B29D01B686AC4
        Validity
            Not Before: Apr  4 18:29:53 2024 GMT
            Not After : Apr  3 18:34:53 2025 GMT
        Subject: CN=8E0D72A0DCC0B5A553806D0E8102DA2AFEEA3615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a8:0e:e0:0d:84:70:ae:ea:32:37:d2:60:ad:
                    2f:90:38:97:d5:b0:27:ab:b0:68:97:40:8b:e0:ea:
                    d2:ce:e1:8e:c6:cd:1d:af:07:ff:a3:b7:0b:0b:4a:
                    44:e6:05:fe:5e:38:ae:28:47:60:94:d5:98:24:de:
                    cd:ae:b3:f0:f2:52:8b:f0:0c:9f:eb:40:f3:84:71:
                    8d:0f:7e:b0:e8:e7:c0:b3:57:45:7c:ad:0a:af:9d:
                    21:e7:60:f5:5b:5a:a9:2a:90:32:61:e1:36:fd:7b:
                    16:13:26:1e:d4:7c:21:18:28:c7:53:a0:78:28:51:
                    61:d2:90:b1:6a:c6:a8:9f:6f:ba:3d:03:07:a2:07:
                    e0:24:d6:8b:e9:99:d2:a2:90:4d:ee:50:b8:76:68:
                    ad:00:23:45:59:32:e7:21:0e:79:26:5d:47:8f:62:
                    08:38:99:99:de:66:c9:e8:51:a9:dc:d2:eb:37:1c:
                    3c:99:d9:a7:5f:11:b6:ff:18:40:4b:2a:f6:69:95:
                    05:b5:70:c8:1d:aa:01:94:6c:3b:c3:b3:9f:54:7a:
                    4d:f8:a7:7f:ea:16:0c:7e:23:a9:88:95:1a:d5:d4:
                    71:fd:4d:6a:e2:4f:13:6c:10:71:e0:29:33:8c:15:
                    a4:51:60:a5:7d:54:fd:9e:c3:45:e8:12:26:b5:3a:
                    c4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:0D:72:A0:DC:C0:B5:A5:53:80:6D:0E:81:02:DA:2A:FE:EA:36:15
            X509v3 Authority Key Identifier:
                keyid:81:1D:A0:2D:C5:10:58:ED:FF:82:D0:4A:17:0B:29:D0:1B:68:6A:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4w3UfBFVP6hKnowJViDv8iZXWYbcFkLXWb3NqjKuy3HJ/1/811DA02DC51058EDFF82D04A170B29D01B686AC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/811DA02DC51058EDFF82D04A170B29D01B686AC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4w3UfBFVP6hKnowJViDv8iZXWYbcFkLXWb3NqjKuy3HJ/1/323830343a353931343a3a2f33322d313238203d3e20323638313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5914::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:8f:c5:6f:a6:fc:ff:b2:bf:4e:1c:6a:09:28:94:d7:0f:23:
         ea:d4:7f:27:fb:29:74:fd:ed:6a:04:59:06:87:50:06:99:f8:
         66:bf:39:13:55:8d:85:26:56:b9:d4:b7:f3:e7:0c:f7:74:15:
         3d:0a:7c:5d:68:33:0d:1a:67:3f:bb:b3:84:98:bf:b9:b0:19:
         fd:48:71:89:32:a4:22:8a:55:eb:dd:a2:67:0e:ef:08:b0:1b:
         58:9d:e4:5f:f2:6a:fb:1e:65:23:d2:75:39:fd:0d:6a:50:c4:
         38:8e:27:e6:64:b6:8d:9e:e9:ef:24:54:34:2c:fb:18:35:93:
         0a:1a:bc:34:d1:73:30:d3:82:49:d7:5d:12:73:93:03:4c:2f:
         c4:0f:9d:f0:e1:c9:23:76:00:24:33:9f:89:e2:7c:13:6f:88:
         82:e7:3a:18:f2:c0:f9:cd:94:84:df:b1:3e:f8:86:7e:db:ca:
         b1:a8:33:22:98:b5:c9:7a:44:dd:84:ed:d5:45:a9:51:bd:70:
         90:f9:fa:03:35:9f:18:05:09:e5:a6:81:dd:09:6d:b1:31:69:
         8c:8c:79:dc:41:59:c4:41:16:5b:43:5b:3d:6e:19:9a:31:59:
         ce:c5:dd:8b:c8:4c:fa:b5:8f:86:ed:f6:66:a4:6e:3f:67:fc:
         55:18:b3:ea
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUPM27IJ8XrUkBrls2DdBfPwxI89UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODExREEwMkRDNTEwNThFREZGODJEMDRBMTcwQjI5RDAx
QjY4NkFDNDAeFw0yNDA0MDQxODI5NTNaFw0yNTA0MDMxODM0NTNaMDMxMTAvBgNV
BAMTKDhFMEQ3MkEwRENDMEI1QTU1MzgwNkQwRTgxMDJEQTJBRkVFQTM2MTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9qA7gDYRwruoyN9JgrS+QOJfV
sCersGiXQIvg6tLO4Y7GzR2vB/+jtwsLSkTmBf5eOK4oR2CU1Zgk3s2us/DyUovw
DJ/rQPOEcY0PfrDo58CzV0V8rQqvnSHnYPVbWqkqkDJh4Tb9exYTJh7UfCEYKMdT
oHgoUWHSkLFqxqifb7o9AweiB+Ak1ovpmdKikE3uULh2aK0AI0VZMuchDnkmXUeP
Ygg4mZneZsnoUanc0us3HDyZ2adfEbb/GEBLKvZplQW1cMgdqgGUbDvDs59Uek34
p3/qFgx+I6mIlRrV1HH9TWriTxNsEHHgKTOMFaRRYKV9VP2ew0XoEia1OsSJAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUjg1yoNzAtaVTgG0OgQLaKv7qNhUwHwYDVR0j
BBgwFoAUgR2gLcUQWO3/gtBKFwsp0BtoasQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHczVWZCRlZQNmhLbm93SlZpRHY4aVpYV1liY0ZrTFhXYjNOcWpLdXkz
SEovMS84MTFEQTAyREM1MTA1OEVERkY4MkQwNEExNzBCMjlEMDFCNjg2QUM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgxMURBMDJEQzUxMDU4RURG
RjgyRDA0QTE3MEIyOUQwMUI2ODZBQzQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzR3M1VmQkZWUDZoS25vd0pWaUR2OGlaWFdZYmNGa0xYV2IzTnFqS3V5M0hKLzEv
MzIzODMwMzQzYTM1MzkzMTM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzgzMTM2Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBFkUMA0GCSqGSIb3DQEBCwUAA4IBAQCij8Vv
pvz/sr9OHGoJKJTXDyPq1H8n+yl0/e1qBFkGh1AGmfhmvzkTVY2FJla51Lfz5wz3
dBU9CnxdaDMNGmc/u7OEmL+5sBn9SHGJMqQiilXr3aJnDu8IsBtYneRf8mr7HmUj
0nU5/Q1qUMQ4jifmZLaNnunvJFQ0LPsYNZMKGrw00XMw04JJ110Sc5MDTC/ED53w
4ckjdgAkM5+J4nwTb4iC5zoY8sD5zZSE37E++IZ+28qxqDMimLXJekTdhO3VRalR
vXCQ+foDNZ8YBQnlpoHdCW2xMWmMjHncQVnEQRZbQ1s9bhmaMVnOxd2LyEz6tY+G
7fZmpG4/Z/xVGLPq
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:37 2024 by rpki-client on console-fra.rpki-client.org