Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Dw8HMr1NJWAxzJJjtCgtyrWL2EA2Q3A8ANp9ewWDBZK/0/323830343a383338383a383030373a3a2f34382d3438203d3e20323638383433.roa
File:                     323830343a383338383a383030373a3a2f34382d3438203d3e20323638383433.roa (raw, json)
Hash identifier:          5+CIZ9LvG1wTzE9Xsnyw5i3rHDWA0Bh/la3ly+78VCQ=
Subject key identifier:   6E:05:71:A3:10:8F:1B:58:C6:88:24:D7:30:01:0B:7E:AD:0E:41:17
Certificate issuer:       /CN=3AFD4BA8C10F1B3F69EC684228D490292CC7C736
Certificate serial:       01F27DB3719B6868A31CF276A2A6991460655F80
Authority key identifier: 3A:FD:4B:A8:C1:0F:1B:3F:69:EC:68:42:28:D4:90:29:2C:C7:C7:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Dw8HMr1NJWAxzJJjtCgtyrWL2EA2Q3A8ANp9ewWDBZK/0/323830343a383338383a383030373a3a2f34382d3438203d3e20323638383433.roa
Signing time:             Mon 26 Aug 2024 14:48:38 +0000
ROA not before:           Mon 26 Aug 2024 14:43:38 +0000
ROA not after:            Mon 25 Aug 2025 14:48:38 +0000
asID:                     268843
IP address blocks:        2804:8388:8007::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Dw8HMr1NJWAxzJJjtCgtyrWL2EA2Q3A8ANp9ewWDBZK/0/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.crl
                          rsync://rpki-repo.registro.br/repo/5Dw8HMr1NJWAxzJJjtCgtyrWL2EA2Q3A8ANp9ewWDBZK/0/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:42:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:f2:7d:b3:71:9b:68:68:a3:1c:f2:76:a2:a6:99:14:60:65:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3AFD4BA8C10F1B3F69EC684228D490292CC7C736
        Validity
            Not Before: Aug 26 14:43:38 2024 GMT
            Not After : Aug 25 14:48:38 2025 GMT
        Subject: CN=6E0571A3108F1B58C68824D730010B7EAD0E4117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6e:58:f1:5a:83:47:3f:57:e6:46:26:22:bf:
                    26:ac:e9:a5:c6:6c:2a:e3:58:18:f9:71:94:79:dd:
                    d1:45:ad:9e:6d:60:d6:a1:83:6a:f7:37:64:bb:1a:
                    37:7f:0c:57:38:51:79:11:0a:da:c9:1c:bc:6e:cc:
                    7a:73:98:20:43:d3:fe:26:68:6a:da:17:2c:3e:4a:
                    eb:b9:8b:57:f2:ef:6b:94:57:e7:5b:f7:6b:bf:81:
                    b0:3a:52:74:45:d9:bf:66:70:9d:2d:98:2f:8b:61:
                    60:ef:04:4e:fd:40:19:24:20:cf:aa:ff:d8:92:bc:
                    bf:e1:db:44:76:40:27:3a:6d:76:99:77:5f:8b:f1:
                    7a:20:be:65:38:0c:c3:3e:f8:d8:20:e1:6a:90:0d:
                    5c:15:dd:cf:cc:bf:12:cc:66:cd:15:45:d1:70:f7:
                    da:f2:ee:22:37:65:33:8c:7e:d4:cd:81:c1:c4:a4:
                    e6:69:6f:bd:bb:1c:48:43:e7:8e:41:71:ff:31:c9:
                    e7:45:37:17:98:1d:2d:2d:29:55:24:eb:d7:f4:53:
                    55:be:1b:97:2a:28:47:e5:ba:7f:91:34:02:03:4d:
                    03:66:6f:11:9d:f4:92:f0:7c:2b:b6:19:b3:fe:4b:
                    25:b7:60:5f:1c:01:46:db:3b:00:7c:44:14:da:2c:
                    ee:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:05:71:A3:10:8F:1B:58:C6:88:24:D7:30:01:0B:7E:AD:0E:41:17
            X509v3 Authority Key Identifier:
                keyid:3A:FD:4B:A8:C1:0F:1B:3F:69:EC:68:42:28:D4:90:29:2C:C7:C7:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Dw8HMr1NJWAxzJJjtCgtyrWL2EA2Q3A8ANp9ewWDBZK/0/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Dw8HMr1NJWAxzJJjtCgtyrWL2EA2Q3A8ANp9ewWDBZK/0/323830343a383338383a383030373a3a2f34382d3438203d3e20323638383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8388:8007::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:8e:c4:a7:84:9b:7a:47:ad:24:87:ab:94:4f:82:30:87:70:
         45:a4:96:73:e2:9e:bc:75:5e:ed:05:94:48:2f:4c:6b:35:dc:
         c9:1d:ee:5f:a0:c5:a9:c4:86:95:e5:9c:38:7b:77:80:29:2c:
         72:0f:18:54:6f:9a:05:67:2a:e2:a9:45:64:8b:6f:e6:f3:bb:
         db:02:de:9b:5c:d5:c8:b1:69:bc:6f:4c:52:77:34:47:88:1f:
         c8:11:11:45:e9:e8:41:27:cc:16:70:44:d8:e4:11:32:c2:79:
         55:4e:db:9b:6c:89:1a:ae:e9:46:0d:27:9c:75:3e:6d:b7:19:
         8b:8b:97:e4:6b:45:5b:5e:9c:fd:eb:f6:80:a1:cf:d9:22:5a:
         6a:46:e9:9f:2e:a6:e7:89:e8:33:7e:e3:39:76:70:df:ef:e5:
         b0:ad:41:f0:82:ad:92:7a:bd:fb:62:ea:d4:47:7c:77:e1:a7:
         e5:b3:5e:c1:02:af:f0:1b:12:24:b8:c4:1a:57:fe:0d:7f:ca:
         b4:66:4b:8f:29:82:aa:b6:b6:60:32:32:ae:f9:2f:3c:11:61:
         41:c1:5e:17:9d:1a:01:d6:05:e4:ee:d7:8b:0e:6a:88:9c:40:
         51:12:e3:8e:c1:35:31:05:68:47:07:84:8a:d4:32:b3:8e:99:
         6c:a6:c3:50
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUAfJ9s3GbaGijHPJ2oqaZFGBlX4AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0FGRDRCQThDMTBGMUIzRjY5RUM2ODQyMjhENDkwMjky
Q0M3QzczNjAeFw0yNDA4MjYxNDQzMzhaFw0yNTA4MjUxNDQ4MzhaMDMxMTAvBgNV
BAMTKDZFMDU3MUEzMTA4RjFCNThDNjg4MjRENzMwMDEwQjdFQUQwRTQxMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7bljxWoNHP1fmRiYivyas6aXG
bCrjWBj5cZR53dFFrZ5tYNahg2r3N2S7Gjd/DFc4UXkRCtrJHLxuzHpzmCBD0/4m
aGraFyw+Suu5i1fy72uUV+db92u/gbA6UnRF2b9mcJ0tmC+LYWDvBE79QBkkIM+q
/9iSvL/h20R2QCc6bXaZd1+L8XogvmU4DMM++Ngg4WqQDVwV3c/MvxLMZs0VRdFw
99ry7iI3ZTOMftTNgcHEpOZpb727HEhD545Bcf8xyedFNxeYHS0tKVUk69f0U1W+
G5cqKEflun+RNAIDTQNmbxGd9JLwfCu2GbP+SyW3YF8cAUbbOwB8RBTaLO51AgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUbgVxoxCPG1jGiCTXMAELfq0OQRcwHwYDVR0j
BBgwFoAUOv1LqMEPGz9p7GhCKNSQKSzHxzYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUR3OEhNcjFOSldBeHpKSmp0Q2d0eXJXTDJFQTJRM0E4QU5wOWV3V0RC
WksvMC8zQUZENEJBOEMxMEYxQjNGNjlFQzY4NDIyOEQ0OTAyOTJDQzdDNzM2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBRkQ0QkE4QzEwRjFCM0Y2
OUVDNjg0MjI4RDQ5MDI5MkNDN0M3MzYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVEdzhITXIxTkpXQXh6SkpqdENndHlyV0wyRUEyUTNBOEFOcDlld1dEQlpLLzAv
MzIzODMwMzQzYTM4MzMzODM4M2EzODMwMzAzNzNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzODM4MzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEg4iABzANBgkqhkiG9w0BAQsF
AAOCAQEAFo7Ep4SbeketJIerlE+CMIdwRaSWc+KevHVe7QWUSC9MazXcyR3uX6DF
qcSGleWcOHt3gCkscg8YVG+aBWcq4qlFZItv5vO72wLem1zVyLFpvG9MUnc0R4gf
yBERRenoQSfMFnBE2OQRMsJ5VU7bm2yJGq7pRg0nnHU+bbcZi4uX5GtFW16c/ev2
gKHP2SJaakbpny6m54noM37jOXZw3+/lsK1B8IKtknq9+2Lq1Ed8d+Gn5bNewQKv
8BsSJLjEGlf+DX/KtGZLjymCqra2YDIyrvkvPBFhQcFeF50aAdYF5O7Xiw5qiJxA
URLjjsE1MQVoRweEitQys46ZbKbDUA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 08:41:59 2024 by rpki-client on console-fra.rpki-client.org