Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/323830343a386664303a333030303a3a2f34342d3434203d3e20323733353134.roa
File:                     323830343a386664303a333030303a3a2f34342d3434203d3e20323733353134.roa (raw, json)
Hash identifier:          w2fcZ6kErC9JsmvHQcmxIAlrIittdLB4N9PQKVByzHc=
Subject key identifier:   38:3C:52:60:94:34:99:C1:D6:08:45:84:7D:93:0D:88:84:25:F9:E3
Certificate issuer:       /CN=E43FC22F53F1011D8D213F6EB00C5A472E9235D9
Certificate serial:       195FCDE282DBB181B16123B4165CE51E7D039D16
Authority key identifier: E4:3F:C2:2F:53:F1:01:1D:8D:21:3F:6E:B0:0C:5A:47:2E:92:35:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/323830343a386664303a333030303a3a2f34342d3434203d3e20323733353134.roa
Signing time:             Sat 05 Oct 2024 16:41:06 +0000
ROA not before:           Sat 05 Oct 2024 16:36:06 +0000
ROA not after:            Sat 04 Oct 2025 16:41:06 +0000
asID:                     273514
IP address blocks:        2804:8fd0:3000::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.crl
                          rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:5f:cd:e2:82:db:b1:81:b1:61:23:b4:16:5c:e5:1e:7d:03:9d:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E43FC22F53F1011D8D213F6EB00C5A472E9235D9
        Validity
            Not Before: Oct  5 16:36:06 2024 GMT
            Not After : Oct  4 16:41:06 2025 GMT
        Subject: CN=383C5260943499C1D60845847D930D888425F9E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b2:06:ff:03:42:25:81:fe:2f:0b:51:66:4f:
                    ef:93:ba:aa:e5:1a:f2:c1:7c:89:f8:16:57:1a:86:
                    a0:db:34:32:da:8e:59:59:e7:d1:26:31:b2:73:65:
                    2d:b4:4b:68:cd:f7:03:2d:22:af:71:c1:af:ca:89:
                    42:87:63:cc:3d:d5:dd:4e:87:2c:5d:6b:17:fe:d5:
                    f8:87:b6:b3:55:78:20:55:e0:d9:0b:39:dc:3e:fa:
                    23:89:57:28:12:35:1e:53:c5:f7:4f:bd:c9:9c:c0:
                    2d:fa:55:b5:05:51:98:dc:a3:dd:7f:4f:3f:34:d3:
                    40:5d:37:0f:5e:af:fe:44:80:14:56:db:88:de:10:
                    41:62:00:c7:12:06:f0:12:73:8b:76:ad:12:55:12:
                    66:29:63:fb:d8:79:9f:72:31:45:71:f9:e1:a0:13:
                    8e:aa:57:92:20:d3:bf:9c:bb:b0:0c:ce:e2:9f:62:
                    f1:20:7e:45:bd:0c:82:df:fc:92:7f:4d:85:0c:7d:
                    6e:2c:59:e1:5b:7b:35:80:33:63:06:dd:12:83:c7:
                    7c:39:c8:0f:9d:ef:f7:84:89:26:a2:88:77:ba:3e:
                    96:9d:d4:9c:d8:c0:e4:b7:10:50:99:8b:02:11:50:
                    15:24:a9:83:fe:12:1e:2b:7b:b3:65:fd:7a:37:84:
                    8d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:3C:52:60:94:34:99:C1:D6:08:45:84:7D:93:0D:88:84:25:F9:E3
            X509v3 Authority Key Identifier:
                keyid:E4:3F:C2:2F:53:F1:01:1D:8D:21:3F:6E:B0:0C:5A:47:2E:92:35:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/323830343a386664303a333030303a3a2f34342d3434203d3e20323733353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8fd0:3000::/44

    Signature Algorithm: sha256WithRSAEncryption
         3a:e7:b0:23:4a:87:37:9e:da:e1:ad:e3:cc:cf:43:ae:50:29:
         01:21:8c:8c:63:18:5b:ce:f7:8a:5d:df:db:22:91:df:8d:b7:
         a9:06:21:a9:7d:06:b4:44:dd:2c:fb:8e:b6:c0:e0:b1:e6:41:
         f3:cc:25:d2:27:76:fa:55:80:02:94:f6:b9:ed:5a:26:4c:69:
         aa:0c:40:e9:d8:5e:39:33:a9:6f:07:60:6b:0f:4c:86:1a:1a:
         da:7b:8c:e3:5a:ce:27:9c:4c:b0:23:79:85:b0:54:63:2d:e9:
         5e:ad:cd:ff:ed:bb:1e:29:ab:20:d5:6b:94:34:a0:07:ad:0f:
         23:5a:71:cf:3e:73:db:e4:50:cd:c7:40:c2:2a:8c:a9:08:3e:
         da:f7:b6:c0:67:34:45:bb:4a:ba:9d:9c:d9:0d:93:4b:b1:91:
         a7:b1:3f:9a:2a:16:bd:f2:2d:2e:6f:1e:c9:45:b3:55:2d:3b:
         6d:b9:4d:bd:c0:af:10:e2:74:7d:15:b3:a8:0e:ee:4c:98:65:
         44:a0:98:6e:20:3a:ef:75:9f:0d:ee:e6:dc:6f:b5:4c:cf:92:
         2a:9d:3f:96:ac:35:0c:06:6a:93:13:a3:cd:30:0c:99:c4:ce:
         19:05:3b:69:0c:76:cd:7b:a2:b3:d6:8f:0d:d1:dd:11:ed:e8:
         5d:e0:67:3b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUGV/N4oLbsYGxYSO0FlzlHn0DnRYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQzRkMyMkY1M0YxMDExRDhEMjEzRjZFQjAwQzVBNDcy
RTkyMzVEOTAeFw0yNDEwMDUxNjM2MDZaFw0yNTEwMDQxNjQxMDZaMDMxMTAvBgNV
BAMTKDM4M0M1MjYwOTQzNDk5QzFENjA4NDU4NDdEOTMwRDg4ODQyNUY5RTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3sgb/A0Ilgf4vC1FmT++Tuqrl
GvLBfIn4FlcahqDbNDLajllZ59EmMbJzZS20S2jN9wMtIq9xwa/KiUKHY8w91d1O
hyxdaxf+1fiHtrNVeCBV4NkLOdw++iOJVygSNR5TxfdPvcmcwC36VbUFUZjco91/
Tz8000BdNw9er/5EgBRW24jeEEFiAMcSBvASc4t2rRJVEmYpY/vYeZ9yMUVx+eGg
E46qV5Ig07+cu7AMzuKfYvEgfkW9DILf/JJ/TYUMfW4sWeFbezWAM2MG3RKDx3w5
yA+d7/eEiSaiiHe6Ppad1JzYwOS3EFCZiwIRUBUkqYP+Eh4re7Nl/Xo3hI2vAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUODxSYJQ0mcHWCEWEfZMNiIQl+eMwHwYDVR0j
BBgwFoAU5D/CL1PxAR2NIT9usAxaRy6SNdkwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby81MUdKWm9RTkJWR1pFc2NvNzZMR2k5TWtwak1COURWaVNRZnZHNGZwUmlk
LzAvRTQzRkMyMkY1M0YxMDExRDhEMjEzRjZFQjAwQzVBNDcyRTkyMzVEOS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FNDNGQzIyRjUzRjEwMTFEOEQy
MTNGNkVCMDBDNUE0NzJFOTIzNUQ5LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIG
CCsGAQUFBzALhoGVcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby81
MUdKWm9RTkJWR1pFc2NvNzZMR2k5TWtwak1COURWaVNRZnZHNGZwUmlkLzAvMzIz
ODMwMzQzYTM4NjY2NDMwM2EzMzMwMzAzMDNhM2EyZjM0MzQyZDM0MzQyMDNkM2Uy
MDMyMzczMzM1MzEzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCgEj9AwADANBgkqhkiG9w0BAQsFAAOC
AQEAOuewI0qHN57a4a3jzM9DrlApASGMjGMYW873il3f2yKR3423qQYhqX0GtETd
LPuOtsDgseZB88wl0id2+lWAApT2ue1aJkxpqgxA6dheOTOpbwdgaw9Mhhoa2nuM
41rOJ5xMsCN5hbBUYy3pXq3N/+27HimrINVrlDSgB60PI1pxzz5z2+RQzcdAwiqM
qQg+2ve2wGc0RbtKup2c2Q2TS7GRp7E/mioWvfItLm8eyUWzVS07bblNvcCvEOJ0
fRWzqA7uTJhlRKCYbiA673WfDe7m3G+1TM+SKp0/lqw1DAZqkxOjzTAMmcTOGQU7
aQx2zXuis9aPDdHdEe3oXeBnOw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:15 2024 by rpki-client on console-fra.rpki-client.org