Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/1/323830343a386134383a3a2f33332d3333203d3e20323733363539.roa
File:                     323830343a386134383a3a2f33332d3333203d3e20323733363539.roa (raw, json)
Hash identifier:          ws2F1XJWS+2OSmBG2pLQOp2FgXaWCnaENGA1rz41vU0=
Subject key identifier:   E4:43:58:57:88:9C:66:9B:FC:47:7F:78:08:A2:A5:E9:2E:5A:10:71
Certificate issuer:       /CN=3A22EC794C3786DAE5FDE09EC37F1ACE718B1A1D
Certificate serial:       3B4EFC907FCED071FD28ECFCA2C4BDDA3E5F9F7A
Authority key identifier: 3A:22:EC:79:4C:37:86:DA:E5:FD:E0:9E:C3:7F:1A:CE:71:8B:1A:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A22EC794C3786DAE5FDE09EC37F1ACE718B1A1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/1/323830343a386134383a3a2f33332d3333203d3e20323733363539.roa
Signing time:             Thu 04 Apr 2024 03:55:52 +0000
ROA not before:           Thu 04 Apr 2024 03:50:52 +0000
ROA not after:            Thu 03 Apr 2025 03:55:52 +0000
asID:                     273659
IP address blocks:        2804:8a48::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/1/3A22EC794C3786DAE5FDE09EC37F1ACE718B1A1D.crl
                          rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/1/3A22EC794C3786DAE5FDE09EC37F1ACE718B1A1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A22EC794C3786DAE5FDE09EC37F1ACE718B1A1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:42:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:4e:fc:90:7f:ce:d0:71:fd:28:ec:fc:a2:c4:bd:da:3e:5f:9f:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A22EC794C3786DAE5FDE09EC37F1ACE718B1A1D
        Validity
            Not Before: Apr  4 03:50:52 2024 GMT
            Not After : Apr  3 03:55:52 2025 GMT
        Subject: CN=E4435857889C669BFC477F7808A2A5E92E5A1071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:93:e2:ba:22:5e:34:78:8b:bd:80:11:10:7d:
                    e8:6d:62:15:a8:be:12:76:4e:e3:65:c4:53:a8:e1:
                    19:fc:67:44:d4:c7:8a:95:2a:ac:60:05:93:c3:93:
                    24:fe:ff:b3:d1:7b:2a:b6:ce:c4:8b:bf:3f:72:cf:
                    6d:b0:d3:c3:06:d4:ad:26:25:ba:14:7a:41:59:ba:
                    ed:62:8b:ee:5d:9b:5a:39:44:46:1b:72:db:81:59:
                    9e:7d:35:11:e8:e2:e4:35:43:17:e0:6f:17:12:59:
                    0d:38:f1:79:09:cb:89:00:a9:58:f8:7f:8b:b3:00:
                    17:35:d7:ab:e0:d5:23:3e:a0:58:04:f7:dc:73:f7:
                    2e:9a:b5:fb:65:cf:ea:1c:08:8b:c5:4e:24:1a:e0:
                    db:e3:77:db:57:f9:63:cc:d8:b9:5d:d3:14:23:1f:
                    95:5f:40:25:ce:21:08:71:e7:5f:4d:f2:34:b1:c4:
                    cd:60:d4:8b:24:88:45:f9:68:21:dc:94:2c:f4:46:
                    da:7d:96:6f:30:a8:16:d4:16:93:27:73:bd:66:fc:
                    aa:a8:ad:68:04:46:12:47:b2:92:61:e8:44:97:a5:
                    37:6e:58:1a:ab:b6:10:fd:2c:76:e8:2f:d0:a1:65:
                    79:a2:3f:be:61:65:cf:24:26:68:46:45:0e:aa:3b:
                    6a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:43:58:57:88:9C:66:9B:FC:47:7F:78:08:A2:A5:E9:2E:5A:10:71
            X509v3 Authority Key Identifier:
                keyid:3A:22:EC:79:4C:37:86:DA:E5:FD:E0:9E:C3:7F:1A:CE:71:8B:1A:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/1/3A22EC794C3786DAE5FDE09EC37F1ACE718B1A1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A22EC794C3786DAE5FDE09EC37F1ACE718B1A1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/1/323830343a386134383a3a2f33332d3333203d3e20323733363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a48::/33

    Signature Algorithm: sha256WithRSAEncryption
         96:32:10:4d:27:52:85:bb:f3:bd:ff:dd:98:08:ae:1b:59:22:
         82:54:10:4a:00:71:59:91:f3:0a:75:d4:e9:59:1c:64:d9:08:
         a2:7f:86:6c:94:18:b1:7a:02:5d:5a:32:3d:00:6a:6e:22:fb:
         3e:ef:5c:d1:ff:6b:79:d2:b8:c7:3a:dc:8f:4b:9f:62:19:42:
         21:3a:db:d6:aa:4c:34:23:b2:26:61:1a:bc:bf:c6:db:ab:66:
         0a:4b:ee:cb:83:a5:99:a4:c9:d6:a3:00:12:d3:52:1b:2d:eb:
         f0:77:ba:9e:9f:4e:44:c6:04:c8:99:fd:9e:48:e3:ad:7f:67:
         d5:ab:7f:d8:15:2f:02:fd:b3:0a:69:f3:9c:9f:da:20:52:6a:
         bb:7b:ba:a0:7c:12:f4:21:8a:13:c7:80:ca:f0:3b:ac:0e:af:
         c6:7a:a9:0e:51:a3:c6:e3:88:16:28:70:ab:11:a9:47:88:e5:
         5f:18:e8:b1:d4:34:82:34:1b:88:3c:47:75:a9:57:9f:dd:79:
         1c:b6:d0:5c:a9:5f:07:0d:9d:4d:7c:39:4d:90:7a:bd:11:92:
         66:b0:cb:17:21:b9:2d:a4:86:11:43:da:5b:50:26:8e:53:13:
         1b:48:30:8c:71:c2:b0:6c:92:a6:9e:76:b7:1b:6a:1f:81:50:
         15:9e:ae:44
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUO078kH/O0HH9KOz8osS92j5fn3owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0EyMkVDNzk0QzM3ODZEQUU1RkRFMDlFQzM3RjFBQ0U3
MThCMUExRDAeFw0yNDA0MDQwMzUwNTJaFw0yNTA0MDMwMzU1NTJaMDMxMTAvBgNV
BAMTKEU0NDM1ODU3ODg5QzY2OUJGQzQ3N0Y3ODA4QTJBNUU5MkU1QTEwNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpk+K6Il40eIu9gBEQfehtYhWo
vhJ2TuNlxFOo4Rn8Z0TUx4qVKqxgBZPDkyT+/7PReyq2zsSLvz9yz22w08MG1K0m
JboUekFZuu1ii+5dm1o5REYbctuBWZ59NRHo4uQ1QxfgbxcSWQ048XkJy4kAqVj4
f4uzABc116vg1SM+oFgE99xz9y6atftlz+ocCIvFTiQa4Nvjd9tX+WPM2Lld0xQj
H5VfQCXOIQhx519N8jSxxM1g1IskiEX5aCHclCz0Rtp9lm8wqBbUFpMnc71m/Kqo
rWgERhJHspJh6ESXpTduWBqrthD9LHboL9ChZXmiP75hZc8kJmhGRQ6qO2ovAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU5ENYV4icZpv8R394CKKl6S5aEHEwHwYDVR0j
BBgwFoAUOiLseUw3htrl/eCew38aznGLGh0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlp4M0NUTDZwRHluZzJxQ1dtSmY3NVVtY3VmdGh3UEVWblF5N3B4bkF6
cG4vMS8zQTIyRUM3OTRDMzc4NkRBRTVGREUwOUVDMzdGMUFDRTcxOEIxQTFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBMjJFQzc5NEMzNzg2REFF
NUZERTA5RUMzN0YxQUNFNzE4QjFBMUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZaeDNDVEw2cER5bmcycUNXbUpmNzVVbWN1ZnRod1BFVm5ReTdweG5BenBuLzEv
MzIzODMwMzQzYTM4NjEzNDM4M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNzMz
MzYzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKASKSAAwDQYJKoZIhvcNAQELBQADggEBAJYyEE0n
UoW7873/3ZgIrhtZIoJUEEoAcVmR8wp11OlZHGTZCKJ/hmyUGLF6Al1aMj0Aam4i
+z7vXNH/a3nSuMc63I9Ln2IZQiE629aqTDQjsiZhGry/xturZgpL7suDpZmkydaj
ABLTUhst6/B3up6fTkTGBMiZ/Z5I461/Z9Wrf9gVLwL9swpp85yf2iBSart7uqB8
EvQhihPHgMrwO6wOr8Z6qQ5Ro8bjiBYocKsRqUeI5V8Y6LHUNII0G4g8R3WpV5/d
eRy20FypXwcNnU18OU2Qer0RkmawyxchuS2khhFD2ltQJo5TExtIMIxxwrBskqae
drcbah+BUBWerkQ=
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:18 2024 by rpki-client on console-ams.rpki-client.org