Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Dw8HMr1NJWAxzJJjtCgtyrWL2EA2Q3A8ANp9ewWDBZK/0/323830343a383338383a383030303a3a2f34382d3438203d3e20323638383433.roa
File:                     323830343a383338383a383030303a3a2f34382d3438203d3e20323638383433.roa (raw, json)
Hash identifier:          1/92VkU/7nnTUlr6lRHYZVj14qJ+RvBmMjXqR37XG+o=
Subject key identifier:   7B:EA:D2:98:A9:BE:79:B8:BE:04:38:81:1B:D3:70:E7:81:ED:6E:58
Certificate issuer:       /CN=3AFD4BA8C10F1B3F69EC684228D490292CC7C736
Certificate serial:       3777689BD81A2EF960A4E0ADF61219D2EBE37B21
Authority key identifier: 3A:FD:4B:A8:C1:0F:1B:3F:69:EC:68:42:28:D4:90:29:2C:C7:C7:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Dw8HMr1NJWAxzJJjtCgtyrWL2EA2Q3A8ANp9ewWDBZK/0/323830343a383338383a383030303a3a2f34382d3438203d3e20323638383433.roa
Signing time:             Mon 26 Aug 2024 14:48:19 +0000
ROA not before:           Mon 26 Aug 2024 14:43:19 +0000
ROA not after:            Mon 25 Aug 2025 14:48:19 +0000
asID:                     268843
IP address blocks:        2804:8388:8000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Dw8HMr1NJWAxzJJjtCgtyrWL2EA2Q3A8ANp9ewWDBZK/0/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.crl
                          rsync://rpki-repo.registro.br/repo/5Dw8HMr1NJWAxzJJjtCgtyrWL2EA2Q3A8ANp9ewWDBZK/0/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:42:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:77:68:9b:d8:1a:2e:f9:60:a4:e0:ad:f6:12:19:d2:eb:e3:7b:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3AFD4BA8C10F1B3F69EC684228D490292CC7C736
        Validity
            Not Before: Aug 26 14:43:19 2024 GMT
            Not After : Aug 25 14:48:19 2025 GMT
        Subject: CN=7BEAD298A9BE79B8BE0438811BD370E781ED6E58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9d:15:10:46:c7:90:5c:ce:e3:33:62:0b:94:
                    52:eb:46:15:1c:f3:45:55:f8:46:fb:eb:ec:fb:04:
                    0b:f8:8d:4f:a7:c1:cf:b4:28:c3:be:9b:f4:36:98:
                    92:42:1d:23:93:91:bd:f1:36:40:3d:77:cd:9e:1f:
                    fd:e3:97:81:96:78:17:07:cb:1f:0f:1f:6c:68:95:
                    49:2e:1b:40:7f:21:53:2d:01:06:e4:a9:c5:e9:0b:
                    f5:61:bb:9b:43:67:ba:8f:4f:7a:b0:48:6f:8c:00:
                    c0:8d:fd:49:a3:0b:7b:17:97:ff:b9:e4:f8:43:86:
                    8e:ac:bc:48:07:4f:d4:c7:78:05:54:7c:fd:de:fe:
                    ca:7f:a2:ad:2a:9d:60:00:57:c7:ee:f3:e4:7e:61:
                    66:ee:ab:e8:d0:a6:bc:29:32:e3:f9:b9:85:6f:e5:
                    a7:2d:cf:2d:f8:0c:03:00:a4:72:b2:3a:8e:53:2c:
                    ba:ce:11:c0:aa:eb:e2:2b:a8:9d:8b:00:58:56:be:
                    05:da:6f:91:76:4b:21:3b:04:30:35:88:78:32:a6:
                    cb:5b:a8:24:66:37:52:70:6a:1f:26:77:20:19:9a:
                    e0:77:fc:02:47:ca:44:a1:b5:62:03:31:c6:df:55:
                    45:27:e5:5d:67:7c:0d:c3:be:bc:46:1a:b6:93:c8:
                    70:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:EA:D2:98:A9:BE:79:B8:BE:04:38:81:1B:D3:70:E7:81:ED:6E:58
            X509v3 Authority Key Identifier:
                keyid:3A:FD:4B:A8:C1:0F:1B:3F:69:EC:68:42:28:D4:90:29:2C:C7:C7:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Dw8HMr1NJWAxzJJjtCgtyrWL2EA2Q3A8ANp9ewWDBZK/0/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Dw8HMr1NJWAxzJJjtCgtyrWL2EA2Q3A8ANp9ewWDBZK/0/323830343a383338383a383030303a3a2f34382d3438203d3e20323638383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8388:8000::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:c3:b5:c0:c3:f3:29:6e:68:fa:c8:29:27:fc:5d:7b:ab:9d:
         ae:e8:05:62:f5:c8:08:32:99:0c:97:d2:4e:12:26:81:46:14:
         74:e4:f5:c9:fa:67:d4:7d:58:c8:75:9d:70:5b:14:de:a4:3b:
         ac:54:e8:30:d6:36:78:1e:31:97:32:0c:e6:cf:f8:37:89:dd:
         14:2b:06:40:d0:1e:8b:ef:de:c8:0b:7a:98:69:b6:a6:e1:6a:
         53:20:bd:04:2f:54:5e:ae:fc:b0:60:b1:35:08:18:8c:c1:c7:
         4e:dd:a8:04:02:32:a8:3f:8e:42:38:af:c5:2c:45:3e:bf:dd:
         83:42:11:c8:ce:13:58:30:80:aa:a2:48:5f:9b:99:26:23:77:
         fd:1e:47:ae:46:de:32:73:d5:10:84:84:5d:25:90:d9:db:99:
         fe:02:03:26:69:c1:7e:2e:28:f1:d6:ce:e2:3c:8f:d9:73:bd:
         25:d6:7e:f2:67:d9:99:b6:bf:41:24:29:c7:36:00:06:16:df:
         52:25:56:4d:f5:c3:91:57:a5:da:57:4c:17:f6:20:10:7b:99:
         e8:05:94:ce:93:1e:32:aa:55:e0:e4:4a:5e:f0:08:0f:80:c4:
         bf:ac:ee:68:85:19:c8:2b:39:49:5b:b4:26:7e:df:13:62:95:
         e8:48:23:8a
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUN3dom9gaLvlgpOCt9hIZ0uvjeyEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0FGRDRCQThDMTBGMUIzRjY5RUM2ODQyMjhENDkwMjky
Q0M3QzczNjAeFw0yNDA4MjYxNDQzMTlaFw0yNTA4MjUxNDQ4MTlaMDMxMTAvBgNV
BAMTKDdCRUFEMjk4QTlCRTc5QjhCRTA0Mzg4MTFCRDM3MEU3ODFFRDZFNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQnRUQRseQXM7jM2ILlFLrRhUc
80VV+Eb76+z7BAv4jU+nwc+0KMO+m/Q2mJJCHSOTkb3xNkA9d82eH/3jl4GWeBcH
yx8PH2xolUkuG0B/IVMtAQbkqcXpC/Vhu5tDZ7qPT3qwSG+MAMCN/UmjC3sXl/+5
5PhDho6svEgHT9THeAVUfP3e/sp/oq0qnWAAV8fu8+R+YWbuq+jQprwpMuP5uYVv
5actzy34DAMApHKyOo5TLLrOEcCq6+IrqJ2LAFhWvgXab5F2SyE7BDA1iHgypstb
qCRmN1Jwah8mdyAZmuB3/AJHykShtWIDMcbfVUUn5V1nfA3DvrxGGraTyHDPAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUe+rSmKm+ebi+BDiBG9Nw54HtblgwHwYDVR0j
BBgwFoAUOv1LqMEPGz9p7GhCKNSQKSzHxzYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUR3OEhNcjFOSldBeHpKSmp0Q2d0eXJXTDJFQTJRM0E4QU5wOWV3V0RC
WksvMC8zQUZENEJBOEMxMEYxQjNGNjlFQzY4NDIyOEQ0OTAyOTJDQzdDNzM2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBRkQ0QkE4QzEwRjFCM0Y2
OUVDNjg0MjI4RDQ5MDI5MkNDN0M3MzYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVEdzhITXIxTkpXQXh6SkpqdENndHlyV0wyRUEyUTNBOEFOcDlld1dEQlpLLzAv
MzIzODMwMzQzYTM4MzMzODM4M2EzODMwMzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzODM4MzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEg4iAADANBgkqhkiG9w0BAQsF
AAOCAQEAG8O1wMPzKW5o+sgpJ/xde6udrugFYvXICDKZDJfSThImgUYUdOT1yfpn
1H1YyHWdcFsU3qQ7rFToMNY2eB4xlzIM5s/4N4ndFCsGQNAei+/eyAt6mGm2puFq
UyC9BC9UXq78sGCxNQgYjMHHTt2oBAIyqD+OQjivxSxFPr/dg0IRyM4TWDCAqqJI
X5uZJiN3/R5HrkbeMnPVEISEXSWQ2duZ/gIDJmnBfi4o8dbO4jyP2XO9JdZ+8mfZ
mba/QSQpxzYABhbfUiVWTfXDkVel2ldMF/YgEHuZ6AWUzpMeMqpV4ORKXvAID4DE
v6zuaIUZyCs5SVu0Jn7fE2KV6Egjig==
-----END CERTIFICATE-----
Generated at Sat Nov 23 08:41:59 2024 by rpki-client on console-fra.rpki-client.org