Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Dw8HMr1NJWAxzJJjtCgtyrWL2EA2Q3A8ANp9ewWDBZK/0/323830343a383338383a383030323a3a2f34382d3438203d3e20323638383433.roa
File:                     323830343a383338383a383030323a3a2f34382d3438203d3e20323638383433.roa (raw, json)
Hash identifier:          CzdiL3MepT+Jk0RSkaPSPAV1WPqZgQyNhS2B0m2ufF4=
Subject key identifier:   06:A6:84:27:7B:E0:87:0A:07:C4:4B:1A:8E:4C:2B:B0:9F:9F:74:99
Certificate issuer:       /CN=3AFD4BA8C10F1B3F69EC684228D490292CC7C736
Certificate serial:       563CCE92489C261CBC1F9582A7EABB3D04CBED27
Authority key identifier: 3A:FD:4B:A8:C1:0F:1B:3F:69:EC:68:42:28:D4:90:29:2C:C7:C7:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Dw8HMr1NJWAxzJJjtCgtyrWL2EA2Q3A8ANp9ewWDBZK/0/323830343a383338383a383030323a3a2f34382d3438203d3e20323638383433.roa
Signing time:             Mon 26 Aug 2024 14:48:23 +0000
ROA not before:           Mon 26 Aug 2024 14:43:23 +0000
ROA not after:            Mon 25 Aug 2025 14:48:23 +0000
asID:                     268843
IP address blocks:        2804:8388:8002::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Dw8HMr1NJWAxzJJjtCgtyrWL2EA2Q3A8ANp9ewWDBZK/0/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.crl
                          rsync://rpki-repo.registro.br/repo/5Dw8HMr1NJWAxzJJjtCgtyrWL2EA2Q3A8ANp9ewWDBZK/0/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:42:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:3c:ce:92:48:9c:26:1c:bc:1f:95:82:a7:ea:bb:3d:04:cb:ed:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3AFD4BA8C10F1B3F69EC684228D490292CC7C736
        Validity
            Not Before: Aug 26 14:43:23 2024 GMT
            Not After : Aug 25 14:48:23 2025 GMT
        Subject: CN=06A684277BE0870A07C44B1A8E4C2BB09F9F7499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:44:ed:be:8d:d5:43:de:be:a2:63:92:cd:3e:
                    5d:c7:7f:99:38:79:d4:c8:92:99:11:3b:31:ab:0f:
                    24:9a:c9:32:dc:ca:d5:a5:88:99:fa:e4:3d:b8:6b:
                    f1:95:77:58:94:84:4e:9d:26:05:73:ab:e7:e4:82:
                    9c:e5:30:06:83:9e:fa:2e:72:26:ef:21:85:b9:ca:
                    30:18:de:ff:93:b6:d1:bc:e8:84:8e:5f:a6:3a:13:
                    0e:60:3d:9f:3e:21:4a:45:8d:d4:e4:70:0c:a1:43:
                    d5:52:1d:00:86:4d:06:16:4a:0d:02:3f:9b:29:6b:
                    b3:4f:1d:1c:35:0d:69:1a:e6:79:fa:67:de:bf:f6:
                    aa:0d:75:dc:fe:25:62:eb:89:16:64:70:18:bf:8c:
                    ce:e8:67:9d:12:d0:9a:57:6a:60:ce:b4:6a:37:98:
                    db:68:19:d6:58:55:23:b3:35:13:b7:d5:52:03:4c:
                    e5:fc:ee:96:bc:5f:c4:dc:4b:61:e9:f1:db:41:fc:
                    1b:d2:00:fb:6c:f4:95:c0:7a:cf:b2:79:a4:fe:ab:
                    0f:63:e0:a6:cc:b3:e6:4e:e7:6f:04:8a:7b:f2:e1:
                    35:77:e0:0c:16:c3:e8:06:4c:52:b2:51:74:cb:97:
                    7a:f9:0f:9c:8a:52:26:8b:54:e0:ed:f7:b0:73:d2:
                    c8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A6:84:27:7B:E0:87:0A:07:C4:4B:1A:8E:4C:2B:B0:9F:9F:74:99
            X509v3 Authority Key Identifier:
                keyid:3A:FD:4B:A8:C1:0F:1B:3F:69:EC:68:42:28:D4:90:29:2C:C7:C7:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Dw8HMr1NJWAxzJJjtCgtyrWL2EA2Q3A8ANp9ewWDBZK/0/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Dw8HMr1NJWAxzJJjtCgtyrWL2EA2Q3A8ANp9ewWDBZK/0/323830343a383338383a383030323a3a2f34382d3438203d3e20323638383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8388:8002::/48

    Signature Algorithm: sha256WithRSAEncryption
         b1:28:4a:74:42:6a:1c:e4:f2:c6:92:71:df:c0:65:12:e9:2c:
         9f:89:86:0f:24:d7:62:4e:0c:ec:ce:d1:96:15:e1:ab:27:fe:
         6c:91:c3:c9:49:e6:e4:0b:71:75:be:29:bf:da:de:3a:b2:19:
         b7:9d:1f:72:a7:12:ff:90:f5:f6:1a:ba:04:ce:29:2f:04:5f:
         3f:15:07:23:3d:44:25:a0:69:83:2f:45:63:07:9d:9b:b6:e0:
         89:fe:e1:04:09:f5:c1:5b:f2:8f:64:6d:a7:a2:47:d3:f1:3e:
         56:18:29:e9:71:5f:34:99:93:58:51:30:18:8a:bc:8a:3a:3a:
         a8:1f:9b:bc:19:f9:3a:d9:18:49:63:fa:8a:dd:34:5d:c2:a7:
         19:b6:38:b1:27:5b:f3:69:8e:e8:e3:d8:29:72:31:2c:3e:6a:
         53:5f:7f:7d:77:0f:73:3c:e4:ec:c0:a6:e1:34:e9:03:a6:a3:
         88:97:b4:95:97:bf:5c:2a:87:3d:25:93:fc:bf:b3:2d:ba:2e:
         b7:05:2c:7e:fc:ab:a6:5a:48:f5:40:0b:8d:1c:8e:ce:0a:e2:
         5d:c6:13:d3:c8:42:c4:97:d4:c6:5d:9d:c7:9f:c1:47:8b:34:
         54:ca:14:3b:73:ba:da:f1:5b:ea:b2:8f:a3:6e:b1:15:ba:c4:
         16:23:4e:94
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUVjzOkkicJhy8H5WCp+q7PQTL7ScwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0FGRDRCQThDMTBGMUIzRjY5RUM2ODQyMjhENDkwMjky
Q0M3QzczNjAeFw0yNDA4MjYxNDQzMjNaFw0yNTA4MjUxNDQ4MjNaMDMxMTAvBgNV
BAMTKDA2QTY4NDI3N0JFMDg3MEEwN0M0NEIxQThFNEMyQkIwOUY5Rjc0OTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbRO2+jdVD3r6iY5LNPl3Hf5k4
edTIkpkROzGrDySayTLcytWliJn65D24a/GVd1iUhE6dJgVzq+fkgpzlMAaDnvou
cibvIYW5yjAY3v+TttG86ISOX6Y6Ew5gPZ8+IUpFjdTkcAyhQ9VSHQCGTQYWSg0C
P5spa7NPHRw1DWka5nn6Z96/9qoNddz+JWLriRZkcBi/jM7oZ50S0JpXamDOtGo3
mNtoGdZYVSOzNRO31VIDTOX87pa8X8TcS2Hp8dtB/BvSAPts9JXAes+yeaT+qw9j
4KbMs+ZO528Einvy4TV34AwWw+gGTFKyUXTLl3r5D5yKUiaLVODt97Bz0sjFAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUBqaEJ3vghwoHxEsajkwrsJ+fdJkwHwYDVR0j
BBgwFoAUOv1LqMEPGz9p7GhCKNSQKSzHxzYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUR3OEhNcjFOSldBeHpKSmp0Q2d0eXJXTDJFQTJRM0E4QU5wOWV3V0RC
WksvMC8zQUZENEJBOEMxMEYxQjNGNjlFQzY4NDIyOEQ0OTAyOTJDQzdDNzM2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBRkQ0QkE4QzEwRjFCM0Y2
OUVDNjg0MjI4RDQ5MDI5MkNDN0M3MzYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVEdzhITXIxTkpXQXh6SkpqdENndHlyV0wyRUEyUTNBOEFOcDlld1dEQlpLLzAv
MzIzODMwMzQzYTM4MzMzODM4M2EzODMwMzAzMjNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzODM4MzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEg4iAAjANBgkqhkiG9w0BAQsF
AAOCAQEAsShKdEJqHOTyxpJx38BlEuksn4mGDyTXYk4M7M7RlhXhqyf+bJHDyUnm
5Atxdb4pv9reOrIZt50fcqcS/5D19hq6BM4pLwRfPxUHIz1EJaBpgy9FYwedm7bg
if7hBAn1wVvyj2Rtp6JH0/E+Vhgp6XFfNJmTWFEwGIq8ijo6qB+bvBn5OtkYSWP6
it00XcKnGbY4sSdb82mO6OPYKXIxLD5qU19/fXcPczzk7MCm4TTpA6ajiJe0lZe/
XCqHPSWT/L+zLboutwUsfvyrplpI9UALjRyOzgriXcYT08hCxJfUxl2dx5/BR4s0
VMoUO3O62vFb6rKPo26xFbrEFiNOlA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:03 2024 by rpki-client on console-ams.rpki-client.org