Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/323830343a333730383a383030303a3a2f33332d3333203d3e20323636333835.roa
File:                     323830343a333730383a383030303a3a2f33332d3333203d3e20323636333835.roa (raw, json)
Hash identifier:          aAm38OfXhrtAJ+RYfS9Q9/y5s6gXvpYw/mS0n+OZDLE=
Subject key identifier:   AA:5A:87:83:C9:3D:97:7D:45:39:86:8B:CE:18:6F:4C:DC:D2:4A:30
Certificate issuer:       /CN=F46A2096A87B370AAA2EF6D4E17D40495F76D350
Certificate serial:       3EAD8A6AAA4196F11BAE29AB8FAF27116D226521
Authority key identifier: F4:6A:20:96:A8:7B:37:0A:AA:2E:F6:D4:E1:7D:40:49:5F:76:D3:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/323830343a333730383a383030303a3a2f33332d3333203d3e20323636333835.roa
Signing time:             Thu 04 Apr 2024 14:29:41 +0000
ROA not before:           Thu 04 Apr 2024 14:24:41 +0000
ROA not after:            Thu 03 Apr 2025 14:29:41 +0000
asID:                     266385
IP address blocks:        2804:3708:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.crl
                          rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:ad:8a:6a:aa:41:96:f1:1b:ae:29:ab:8f:af:27:11:6d:22:65:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F46A2096A87B370AAA2EF6D4E17D40495F76D350
        Validity
            Not Before: Apr  4 14:24:41 2024 GMT
            Not After : Apr  3 14:29:41 2025 GMT
        Subject: CN=AA5A8783C93D977D4539868BCE186F4CDCD24A30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:48:cf:96:a9:26:16:d2:89:6e:18:5f:60:8a:
                    84:bc:55:55:6a:dc:bb:77:e6:ce:7b:c3:68:f8:5c:
                    86:92:9f:84:18:3a:e2:59:59:26:09:79:26:56:ce:
                    03:bc:19:ca:5b:19:ec:28:67:d3:fe:19:e5:5e:56:
                    23:bc:02:45:d9:15:49:8c:44:44:fb:a4:a9:69:70:
                    ac:f8:b2:93:c2:20:4a:e0:d3:97:86:69:3f:f1:b5:
                    76:18:7e:80:90:83:c8:4d:3f:e7:f3:3c:a7:23:e1:
                    f6:17:2b:04:a4:ab:83:2d:64:91:ad:ad:77:27:f7:
                    ae:4d:69:47:f5:f8:bb:b9:70:be:e8:54:ae:b8:18:
                    2b:e1:15:e2:13:6e:66:08:d5:57:5f:d1:80:75:70:
                    6a:3a:10:66:33:ff:cf:cf:ad:cb:1c:3d:eb:8a:af:
                    80:35:4c:37:d6:99:ba:96:85:5c:f5:8f:67:3d:95:
                    9e:a9:c8:33:7f:93:f5:a0:b6:bb:2e:a8:e5:a6:63:
                    98:e9:d1:2c:1b:bd:fb:cd:08:32:46:93:e6:7f:e1:
                    16:d4:cc:6a:cd:e0:ef:26:d4:8c:d5:73:38:2d:b4:
                    e7:d6:3c:7a:9b:d6:ed:b1:ff:9f:ea:a2:9e:78:8a:
                    e1:bc:48:5e:12:ec:80:08:31:77:8f:c9:dc:6f:cc:
                    9b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:5A:87:83:C9:3D:97:7D:45:39:86:8B:CE:18:6F:4C:DC:D2:4A:30
            X509v3 Authority Key Identifier:
                keyid:F4:6A:20:96:A8:7B:37:0A:AA:2E:F6:D4:E1:7D:40:49:5F:76:D3:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/323830343a333730383a383030303a3a2f33332d3333203d3e20323636333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3708:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         55:c8:a1:9d:21:fd:55:50:cf:a8:db:83:5e:68:41:8f:f0:c5:
         ef:e5:0a:7e:a6:46:da:e7:2f:3d:f6:8a:95:8f:2c:29:a6:e6:
         b4:c9:8e:f0:94:83:55:96:56:5e:8c:7d:4d:43:e4:dc:84:b8:
         14:c1:f8:7d:18:67:a7:c3:60:ad:2d:56:3c:ab:a5:e3:2e:bb:
         7c:69:ed:8e:a1:11:26:b6:78:30:36:9b:b6:93:6d:f0:0c:7b:
         8c:d2:36:85:cb:4d:a2:59:aa:cb:ad:46:bd:3f:84:05:cc:a6:
         f5:20:6e:84:8f:93:7d:c8:1e:95:58:f6:c5:1a:86:2f:e6:c8:
         fb:7f:47:b0:5f:b4:bf:2b:9c:6c:b4:de:e3:8f:21:3d:a1:69:
         8d:21:91:57:7a:ab:08:66:d6:44:ff:23:33:f7:5e:7a:32:ea:
         c1:ad:f7:98:b7:d9:14:e1:b5:44:11:ab:11:b3:50:34:b8:81:
         30:85:aa:50:cc:75:e9:19:ac:fd:c1:90:f5:15:60:3b:21:cf:
         d3:54:11:d8:49:6c:74:3c:b3:98:c7:dc:d2:27:55:8f:31:ae:
         81:5e:ce:12:93:c4:0c:0d:83:45:d3:2d:cd:ca:0c:da:85:96:
         7f:71:4b:3d:73:08:2b:5d:5e:da:c6:a2:e5:ad:cc:ac:1f:45:
         08:0f:c6:2e
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUPq2KaqpBlvEbrimrj68nEW0iZSEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjQ2QTIwOTZBODdCMzcwQUFBMkVGNkQ0RTE3RDQwNDk1
Rjc2RDM1MDAeFw0yNDA0MDQxNDI0NDFaFw0yNTA0MDMxNDI5NDFaMDMxMTAvBgNV
BAMTKEFBNUE4NzgzQzkzRDk3N0Q0NTM5ODY4QkNFMTg2RjRDRENEMjRBMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZSM+WqSYW0oluGF9gioS8VVVq
3Lt35s57w2j4XIaSn4QYOuJZWSYJeSZWzgO8GcpbGewoZ9P+GeVeViO8AkXZFUmM
RET7pKlpcKz4spPCIErg05eGaT/xtXYYfoCQg8hNP+fzPKcj4fYXKwSkq4MtZJGt
rXcn965NaUf1+Lu5cL7oVK64GCvhFeITbmYI1Vdf0YB1cGo6EGYz/8/PrcscPeuK
r4A1TDfWmbqWhVz1j2c9lZ6pyDN/k/WgtrsuqOWmY5jp0SwbvfvNCDJGk+Z/4RbU
zGrN4O8m1IzVczgttOfWPHqb1u2x/5/qop54iuG8SF4S7IAIMXePydxvzJubAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUqlqHg8k9l31FOYaLzhhvTNzSSjAwHwYDVR0j
BBgwFoAU9Goglqh7NwqqLvbU4X1ASV9201AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXdGUkc0ODZVTlFwOE14dE5SWWhvTW1nZFh2dUN5WWs5MXhxSHpROGRM
elAvMS9GNDZBMjA5NkE4N0IzNzBBQUEyRUY2RDRFMTdENDA0OTVGNzZEMzUwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y0NkEyMDk2QTg3QjM3MEFB
QTJFRjZENEUxN0Q0MDQ5NUY3NkQzNTAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV3RlJHNDg2VU5RcDhNeHROUllob01tZ2RYdnVDeVlrOTF4cUh6UThkTHpQLzEv
MzIzODMwMzQzYTMzMzczMDM4M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzNjMzMzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygENwiAMA0GCSqGSIb3DQEBCwUA
A4IBAQBVyKGdIf1VUM+o24NeaEGP8MXv5Qp+pkba5y899oqVjywppua0yY7wlINV
llZejH1NQ+TchLgUwfh9GGenw2CtLVY8q6XjLrt8ae2OoREmtngwNpu2k23wDHuM
0jaFy02iWarLrUa9P4QFzKb1IG6Ej5N9yB6VWPbFGoYv5sj7f0ewX7S/K5xstN7j
jyE9oWmNIZFXeqsIZtZE/yMz9156MurBrfeYt9kU4bVEEasRs1A0uIEwhapQzHXp
Gaz9wZD1FWA7Ic/TVBHYSWx0PLOYx9zSJ1WPMa6BXs4Sk8QMDYNF0y3NygzahZZ/
cUs9cwgrXV7axqLlrcysH0UID8Yu
-----END CERTIFICATE-----
Generated at Mon Nov 25 22:02:51 2024 by rpki-client on console-fra.rpki-client.org