Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/323830343a353932383a343030303a3a2f33342d3334203d3e20323638313732.roa
File:                     323830343a353932383a343030303a3a2f33342d3334203d3e20323638313732.roa (raw, json)
Hash identifier:          C6aWSmk0bPuUNhVtT+YGYV6Ds7kj71BSnvGmut8unQU=
Subject key identifier:   33:B0:0F:9E:F0:33:7E:11:FF:70:5C:BE:37:73:61:DA:55:85:8A:C2
Certificate issuer:       /CN=3D90D603749AF57040F7092DF1F2D266672E47E7
Certificate serial:       06E1BB8AC22E2ADFC9D7F2A6415502D882D84DC6
Authority key identifier: 3D:90:D6:03:74:9A:F5:70:40:F7:09:2D:F1:F2:D2:66:67:2E:47:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D90D603749AF57040F7092DF1F2D266672E47E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/323830343a353932383a343030303a3a2f33342d3334203d3e20323638313732.roa
Signing time:             Fri 03 May 2024 15:01:32 +0000
ROA not before:           Fri 03 May 2024 14:56:32 +0000
ROA not after:            Fri 02 May 2025 15:01:32 +0000
asID:                     268172
IP address blocks:        2804:5928:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/3D90D603749AF57040F7092DF1F2D266672E47E7.crl
                          rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/3D90D603749AF57040F7092DF1F2D266672E47E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D90D603749AF57040F7092DF1F2D266672E47E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 16:25:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:e1:bb:8a:c2:2e:2a:df:c9:d7:f2:a6:41:55:02:d8:82:d8:4d:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D90D603749AF57040F7092DF1F2D266672E47E7
        Validity
            Not Before: May  3 14:56:32 2024 GMT
            Not After : May  2 15:01:32 2025 GMT
        Subject: CN=33B00F9EF0337E11FF705CBE377361DA55858AC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:da:4a:bc:b5:e3:49:c9:98:af:b6:cd:b3:8b:
                    e9:a3:dc:3e:33:08:d7:28:6f:87:6f:e6:0d:88:b4:
                    f5:47:22:60:c2:62:f0:95:88:a0:48:8b:4f:cf:e7:
                    ad:70:4a:92:51:21:72:56:f1:df:88:65:9a:a9:03:
                    76:9f:7c:28:13:42:59:19:49:3b:20:1a:10:c7:37:
                    87:41:9e:bf:bc:fa:c6:10:68:8b:bf:d8:4b:26:95:
                    9e:67:80:09:e3:c6:67:6c:c1:c9:50:a3:05:3d:4a:
                    81:90:02:0f:c4:71:ac:6d:0f:d1:c9:9e:47:b8:e7:
                    5a:77:d3:6a:f3:37:85:97:69:58:89:dd:f2:b6:77:
                    de:80:b1:ca:6b:f6:f1:76:bd:80:9e:41:dd:21:ca:
                    18:89:68:30:1d:1d:d6:84:7a:b5:33:61:f9:53:f2:
                    4c:cf:b0:74:4f:f0:a9:4b:18:e5:49:e1:72:a3:74:
                    f3:ab:a1:85:b3:42:a0:36:e7:63:96:52:04:c5:d3:
                    2b:70:14:18:69:85:19:e4:cc:e7:b6:10:7e:69:bb:
                    5e:a8:88:66:7e:9f:57:49:7d:4c:7f:6c:44:25:06:
                    be:b7:af:99:ef:0f:eb:06:02:33:ab:9f:34:0f:b4:
                    c3:89:5a:f5:01:e3:6a:d0:c0:5e:72:94:d3:78:1b:
                    85:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:B0:0F:9E:F0:33:7E:11:FF:70:5C:BE:37:73:61:DA:55:85:8A:C2
            X509v3 Authority Key Identifier:
                keyid:3D:90:D6:03:74:9A:F5:70:40:F7:09:2D:F1:F2:D2:66:67:2E:47:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/3D90D603749AF57040F7092DF1F2D266672E47E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D90D603749AF57040F7092DF1F2D266672E47E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/323830343a353932383a343030303a3a2f33342d3334203d3e20323638313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5928:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         9a:ad:35:7b:3c:f3:dd:87:25:25:e0:a2:14:b7:7d:72:fa:40:
         fd:3a:b2:f3:c2:18:b3:50:ba:f3:1e:6a:b7:fb:d1:d1:ce:53:
         10:e8:33:88:61:8d:97:4a:a4:4d:82:0c:7e:07:a3:30:77:93:
         17:a8:5f:da:c5:e1:78:f5:d2:bb:42:01:22:c0:76:b3:93:55:
         20:a2:9c:61:6e:e1:97:94:23:19:03:74:db:06:d2:a6:17:e1:
         ea:2b:a7:4e:dc:69:33:e4:8b:d1:bc:3f:70:7a:13:37:10:ab:
         1b:75:7c:68:82:db:40:1d:4f:3b:e6:4b:b2:79:46:de:c1:7d:
         ab:1d:62:84:4d:86:b6:de:47:9b:88:5f:78:10:bf:4b:fe:88:
         65:a4:a5:7e:b6:57:e1:65:d6:42:29:c0:cb:ef:41:f1:69:df:
         31:72:79:7c:08:4b:b8:44:b2:47:bb:4f:b7:34:dc:3a:69:6f:
         f9:1f:4d:74:57:3d:1e:e4:34:ac:1d:79:c2:bb:05:00:9e:23:
         17:e1:52:c9:cd:9b:07:d1:d6:85:84:4d:f3:d4:95:ef:a9:d5:
         ae:cb:30:00:0b:ba:fc:7d:3e:1a:53:32:d9:e9:9a:b6:d3:c5:
         92:72:a7:fb:68:4c:7e:60:37:ed:c7:5d:5a:4c:59:48:b6:36:
         32:55:32:5b
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUBuG7isIuKt/J1/KmQVUC2ILYTcYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q5MEQ2MDM3NDlBRjU3MDQwRjcwOTJERjFGMkQyNjY2
NzJFNDdFNzAeFw0yNDA1MDMxNDU2MzJaFw0yNTA1MDIxNTAxMzJaMDMxMTAvBgNV
BAMTKDMzQjAwRjlFRjAzMzdFMTFGRjcwNUNCRTM3NzM2MURBNTU4NThBQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw2kq8teNJyZivts2zi+mj3D4z
CNcob4dv5g2ItPVHImDCYvCViKBIi0/P561wSpJRIXJW8d+IZZqpA3affCgTQlkZ
STsgGhDHN4dBnr+8+sYQaIu/2EsmlZ5ngAnjxmdswclQowU9SoGQAg/EcaxtD9HJ
nke451p302rzN4WXaViJ3fK2d96Ascpr9vF2vYCeQd0hyhiJaDAdHdaEerUzYflT
8kzPsHRP8KlLGOVJ4XKjdPOroYWzQqA252OWUgTF0ytwFBhphRnkzOe2EH5pu16o
iGZ+n1dJfUx/bEQlBr63r5nvD+sGAjOrnzQPtMOJWvUB42rQwF5ylNN4G4XLAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUM7APnvAzfhH/cFy+N3Nh2lWFisIwHwYDVR0j
BBgwFoAUPZDWA3Sa9XBA9wkt8fLSZmcuR+cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2hWZGdTYXVEUmo2ZERpWXl3OXEyOG9HVDZCUFJrdG9HMTdDRENqNWF0
eEYvMC8zRDkwRDYwMzc0OUFGNTcwNDBGNzA5MkRGMUYyRDI2NjY3MkU0N0U3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNEOTBENjAzNzQ5QUY1NzA0
MEY3MDkyREYxRjJEMjY2NjcyRTQ3RTcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdoVmRnU2F1RFJqNmREaVl5dzlxMjhvR1Q2QlBSa3RvRzE3Q0RDajVhdHhGLzAv
MzIzODMwMzQzYTM1MzkzMjM4M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzODMxMzczMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEWShAMA0GCSqGSIb3DQEBCwUA
A4IBAQCarTV7PPPdhyUl4KIUt31y+kD9OrLzwhizULrzHmq3+9HRzlMQ6DOIYY2X
SqRNggx+B6Mwd5MXqF/axeF49dK7QgEiwHazk1UgopxhbuGXlCMZA3TbBtKmF+Hq
K6dO3Gkz5IvRvD9wehM3EKsbdXxogttAHU875kuyeUbewX2rHWKETYa23kebiF94
EL9L/ohlpKV+tlfhZdZCKcDL70Hxad8xcnl8CEu4RLJHu0+3NNw6aW/5H010Vz0e
5DSsHXnCuwUAniMX4VLJzZsH0daFhE3z1JXvqdWuyzAAC7r8fT4aUzLZ6Zq208WS
cqf7aEx+YDftx11aTFlItjYyVTJb
-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:07 2024 by rpki-client on console-ams.rpki-client.org