Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/323830343a336463303a643030303a3a2f33362d3336203d3e20323636353531.roa
File:                     323830343a336463303a643030303a3a2f33362d3336203d3e20323636353531.roa (raw, json)
Hash identifier:          PO9QOapAKa76q4Tfn3mrnFEh3KLPbSE3Smal3bTvIcg=
Subject key identifier:   18:F1:41:7D:21:B6:12:F3:08:A6:B5:6E:25:34:7E:92:32:36:D2:A5
Certificate issuer:       /CN=F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99
Certificate serial:       3A3FCFDAD2D039B627F8B18CAE2BD02DB299C703
Authority key identifier: F5:26:D2:FD:9A:3E:C2:6E:D6:E3:EA:D6:11:E5:94:E6:BE:0A:2E:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/323830343a336463303a643030303a3a2f33362d3336203d3e20323636353531.roa
Signing time:             Thu 15 Aug 2024 17:11:58 +0000
ROA not before:           Thu 15 Aug 2024 17:06:58 +0000
ROA not after:            Thu 14 Aug 2025 17:11:58 +0000
asID:                     266551
IP address blocks:        2804:3dc0:d000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.crl
                          rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 04:25:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:3f:cf:da:d2:d0:39:b6:27:f8:b1:8c:ae:2b:d0:2d:b2:99:c7:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99
        Validity
            Not Before: Aug 15 17:06:58 2024 GMT
            Not After : Aug 14 17:11:58 2025 GMT
        Subject: CN=18F1417D21B612F308A6B56E25347E923236D2A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c7:24:4f:2d:38:bf:cc:42:04:56:db:6b:b7:
                    37:44:23:a9:94:1e:b7:bc:e1:34:7d:cc:2c:5f:12:
                    b7:6b:ed:06:d7:b7:3d:7d:b8:bd:4b:4e:e9:6f:8b:
                    3b:62:d3:78:2a:1e:fe:28:d0:19:d8:1d:49:2b:47:
                    9e:c9:b9:bd:41:38:0f:65:c1:14:3e:c5:50:d7:fe:
                    37:d1:d7:7d:e6:b7:b3:86:9b:c5:b6:38:e5:81:22:
                    0c:b0:ae:bb:ea:91:60:bc:61:ae:cf:24:70:af:b7:
                    ec:d4:96:f1:68:c1:ca:54:ca:fa:a4:90:11:e0:44:
                    0f:ed:6c:b2:8a:d8:19:13:b0:1c:6c:88:11:16:43:
                    c2:87:fc:3d:73:57:ae:21:45:7b:c7:b9:c3:25:bb:
                    9c:6b:ce:d5:c7:d0:51:61:34:23:68:85:4f:bf:67:
                    f7:a2:92:07:25:2e:f9:09:61:4d:c2:b0:13:e1:f3:
                    6c:a4:fd:82:87:21:20:e0:39:8a:e6:d4:11:ed:f8:
                    81:ba:e5:d2:49:5c:85:5b:eb:84:83:ad:57:72:ed:
                    32:ef:26:64:eb:00:ba:14:31:35:4c:56:97:e5:cd:
                    75:a5:64:ed:28:cd:66:5f:07:29:19:da:c5:7b:05:
                    93:64:83:74:bc:f0:e2:25:89:28:a2:3f:96:28:55:
                    66:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F1:41:7D:21:B6:12:F3:08:A6:B5:6E:25:34:7E:92:32:36:D2:A5
            X509v3 Authority Key Identifier:
                keyid:F5:26:D2:FD:9A:3E:C2:6E:D6:E3:EA:D6:11:E5:94:E6:BE:0A:2E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/323830343a336463303a643030303a3a2f33362d3336203d3e20323636353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3dc0:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         58:13:5b:81:2a:58:18:30:df:bf:2e:d2:9a:31:a8:9a:fb:be:
         ae:d2:f2:5f:c4:0c:5d:89:9c:76:d8:39:71:1e:57:4b:bf:bc:
         b2:53:39:a1:0b:7d:ea:f8:81:c3:5f:16:25:40:34:15:47:30:
         9f:e8:47:58:fe:7a:dd:e4:5d:2d:9b:69:8a:b2:d3:fe:5a:e7:
         c7:db:e2:13:ad:16:97:8c:bb:73:fc:72:be:19:ef:85:dd:ae:
         8b:6c:53:46:4d:d2:ac:1a:72:69:dd:74:6d:53:ae:33:ac:e0:
         e3:86:63:19:e1:83:ae:b7:0a:94:09:f1:53:ec:94:82:6e:f8:
         79:6b:fd:2e:30:12:ef:20:36:73:c8:20:bb:71:24:62:e2:8b:
         1d:7c:90:22:d2:fe:d7:71:42:76:56:a4:1a:22:66:59:7b:fb:
         6b:18:8c:4d:b9:27:33:2c:e7:3a:d3:d3:df:f0:5c:04:32:0e:
         e4:49:1c:b1:1b:b4:74:07:f7:7a:5e:c4:98:28:03:55:2c:1c:
         10:03:b0:c2:59:20:17:36:07:15:e5:22:74:40:1f:4e:0d:f5:
         65:41:e1:c9:4e:68:21:57:6c:48:d7:de:38:54:d4:04:7a:8e:
         73:d6:ed:d2:9e:7a:73:05:7a:ac:6b:3e:1a:3a:3d:73:f0:e6:
         13:51:89:f9
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUOj/P2tLQObYn+LGMrivQLbKZxwMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjUyNkQyRkQ5QTNFQzI2RUQ2RTNFQUQ2MTFFNTk0RTZC
RTBBMkU5OTAeFw0yNDA4MTUxNzA2NThaFw0yNTA4MTQxNzExNThaMDMxMTAvBgNV
BAMTKDE4RjE0MTdEMjFCNjEyRjMwOEE2QjU2RTI1MzQ3RTkyMzIzNkQyQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5xyRPLTi/zEIEVttrtzdEI6mU
Hre84TR9zCxfErdr7QbXtz19uL1LTulvizti03gqHv4o0BnYHUkrR57Jub1BOA9l
wRQ+xVDX/jfR133mt7OGm8W2OOWBIgywrrvqkWC8Ya7PJHCvt+zUlvFowcpUyvqk
kBHgRA/tbLKK2BkTsBxsiBEWQ8KH/D1zV64hRXvHucMlu5xrztXH0FFhNCNohU+/
Z/eikgclLvkJYU3CsBPh82yk/YKHISDgOYrm1BHt+IG65dJJXIVb64SDrVdy7TLv
JmTrALoUMTVMVpflzXWlZO0ozWZfBykZ2sV7BZNkg3S88OIliSiiP5YoVWa3AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUGPFBfSG2EvMIprVuJTR+kjI20qUwHwYDVR0j
BBgwFoAU9SbS/Zo+wm7W4+rWEeWU5r4KLpkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1dhc0haOU1tTUd3NGRZY3FIR2hOV0ZIYW04VVdRZTVCdWZuRzRMSkRw
MmovMC9GNTI2RDJGRDlBM0VDMjZFRDZFM0VBRDYxMUU1OTRFNkJFMEEyRTk5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y1MjZEMkZEOUEzRUMyNkVE
NkUzRUFENjExRTU5NEU2QkUwQTJFOTkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdXYXNIWjlNbU1HdzRkWWNxSEdoTldGSGFtOFVXUWU1QnVmbkc0TEpEcDJqLzAv
MzIzODMwMzQzYTMzNjQ2MzMwM2E2NDMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNjM1MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEPcDQMA0GCSqGSIb3DQEBCwUA
A4IBAQBYE1uBKlgYMN+/LtKaMaia+76u0vJfxAxdiZx22DlxHldLv7yyUzmhC33q
+IHDXxYlQDQVRzCf6EdY/nrd5F0tm2mKstP+WufH2+ITrRaXjLtz/HK+Ge+F3a6L
bFNGTdKsGnJp3XRtU64zrODjhmMZ4YOutwqUCfFT7JSCbvh5a/0uMBLvIDZzyCC7
cSRi4osdfJAi0v7XcUJ2VqQaImZZe/trGIxNuSczLOc609Pf8FwEMg7kSRyxG7R0
B/d6XsSYKANVLBwQA7DCWSAXNgcV5SJ0QB9ODfVlQeHJTmghV2xI1944VNQEeo5z
1u3SnnpzBXqsaz4aOj1z8OYTUYn5
-----END CERTIFICATE-----
Generated at Tue Nov 26 02:25:32 2024 by rpki-client on console-ams.rpki-client.org