Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/323830343a353932383a633030303a3a2f33342d3334203d3e20323638313732.roa
File:                     323830343a353932383a633030303a3a2f33342d3334203d3e20323638313732.roa (raw, json)
Hash identifier:          1l0GyH2YYt8MUtroJLwb7ls/O7cPjJbBVcZWrh5Rlv4=
Subject key identifier:   4F:ED:CF:D6:C6:3C:31:28:27:04:76:38:D1:CA:32:C5:62:6A:7B:01
Certificate issuer:       /CN=3D90D603749AF57040F7092DF1F2D266672E47E7
Certificate serial:       6FA307743E4EA477A7202252A40F7459BD8326D2
Authority key identifier: 3D:90:D6:03:74:9A:F5:70:40:F7:09:2D:F1:F2:D2:66:67:2E:47:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D90D603749AF57040F7092DF1F2D266672E47E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/323830343a353932383a633030303a3a2f33342d3334203d3e20323638313732.roa
Signing time:             Fri 03 May 2024 15:01:17 +0000
ROA not before:           Fri 03 May 2024 14:56:17 +0000
ROA not after:            Fri 02 May 2025 15:01:17 +0000
asID:                     268172
IP address blocks:        2804:5928:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/3D90D603749AF57040F7092DF1F2D266672E47E7.crl
                          rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/3D90D603749AF57040F7092DF1F2D266672E47E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D90D603749AF57040F7092DF1F2D266672E47E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 16:25:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:a3:07:74:3e:4e:a4:77:a7:20:22:52:a4:0f:74:59:bd:83:26:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D90D603749AF57040F7092DF1F2D266672E47E7
        Validity
            Not Before: May  3 14:56:17 2024 GMT
            Not After : May  2 15:01:17 2025 GMT
        Subject: CN=4FEDCFD6C63C312827047638D1CA32C5626A7B01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:09:2b:61:ee:b5:bd:85:fd:f3:f2:e7:01:f4:
                    4b:b0:a2:0f:1e:ec:94:f5:29:c4:5a:7b:cc:e2:4f:
                    59:d0:1f:80:86:ec:31:e2:9a:30:05:12:ef:d4:20:
                    65:ff:2a:03:d7:e2:1f:45:90:8f:98:c0:25:75:c3:
                    ba:46:1e:c3:96:22:71:ed:a0:3b:b2:4a:a8:e3:a9:
                    3f:47:85:0f:a3:97:61:53:98:b9:24:80:13:3e:25:
                    c5:49:f8:4f:c4:43:a1:5e:78:e7:65:9c:c3:df:cb:
                    45:d4:ea:7e:9a:e8:99:ba:55:fe:35:31:21:e0:39:
                    86:cc:55:62:c6:81:dc:a0:29:1e:88:bb:76:43:98:
                    4d:41:b1:f3:37:e0:c7:a7:3e:17:bb:5b:c7:a4:0f:
                    82:15:8f:9c:a7:8a:90:a2:24:65:c1:6e:b6:04:c0:
                    64:4e:e3:13:25:9f:1f:c4:fe:6e:78:fc:7e:c9:ee:
                    b5:6b:6b:26:e7:48:d0:24:44:fd:3f:74:ab:c7:9a:
                    40:3e:e8:fd:91:86:24:a2:d4:99:6a:ff:b0:76:30:
                    20:e3:45:65:72:34:4d:ba:d2:ab:77:29:c1:0a:1c:
                    a9:69:59:28:7e:cd:4f:94:c5:5a:3d:5b:99:98:4b:
                    4e:d9:a1:61:4e:2e:39:9a:73:d6:55:d3:4c:83:65:
                    28:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:ED:CF:D6:C6:3C:31:28:27:04:76:38:D1:CA:32:C5:62:6A:7B:01
            X509v3 Authority Key Identifier:
                keyid:3D:90:D6:03:74:9A:F5:70:40:F7:09:2D:F1:F2:D2:66:67:2E:47:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/3D90D603749AF57040F7092DF1F2D266672E47E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D90D603749AF57040F7092DF1F2D266672E47E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/323830343a353932383a633030303a3a2f33342d3334203d3e20323638313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5928:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         20:0b:bf:ec:90:cf:23:8d:cb:00:d8:88:80:15:8e:be:f0:2e:
         b7:19:8a:55:35:d4:ed:6a:ac:8d:bb:18:b1:80:dd:dc:80:04:
         2e:0c:9c:45:f8:e8:70:45:70:bc:ea:67:61:d3:89:97:30:d6:
         16:e2:24:b9:af:28:6c:8a:b6:ab:9c:fb:55:f3:85:74:f9:77:
         0b:f2:3d:0d:59:92:af:df:04:0b:74:17:22:dd:c6:5b:49:ca:
         f3:16:43:3e:05:81:3a:eb:12:43:28:59:24:0e:40:d2:72:95:
         fe:00:01:a4:29:f9:9f:6c:d3:ff:19:55:23:4b:22:85:02:c0:
         5c:f6:f7:87:cb:e6:87:ed:84:55:cb:c2:8d:c2:a3:cf:e9:41:
         4f:77:19:ed:6c:08:bc:d0:b0:53:4d:d0:2c:79:5e:40:14:ca:
         e0:3a:94:52:d3:8e:dd:38:6f:7b:8f:df:3a:56:a8:9b:72:b3:
         69:5f:4a:b3:2e:b2:52:27:0e:be:8e:1f:33:7f:e0:44:e4:35:
         fb:16:9e:65:38:73:2a:45:fc:1b:ce:a1:86:7b:36:6f:03:71:
         ca:1a:eb:c4:2b:42:b5:1b:b5:94:2e:74:7a:e9:07:ee:71:62:
         24:12:e6:d9:2a:a7:3e:d8:a8:96:cb:0f:22:16:e3:9c:01:91:
         1c:5e:d9:47
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUb6MHdD5OpHenICJSpA90Wb2DJtIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q5MEQ2MDM3NDlBRjU3MDQwRjcwOTJERjFGMkQyNjY2
NzJFNDdFNzAeFw0yNDA1MDMxNDU2MTdaFw0yNTA1MDIxNTAxMTdaMDMxMTAvBgNV
BAMTKDRGRURDRkQ2QzYzQzMxMjgyNzA0NzYzOEQxQ0EzMkM1NjI2QTdCMDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/CSth7rW9hf3z8ucB9Euwog8e
7JT1KcRae8ziT1nQH4CG7DHimjAFEu/UIGX/KgPX4h9FkI+YwCV1w7pGHsOWInHt
oDuySqjjqT9HhQ+jl2FTmLkkgBM+JcVJ+E/EQ6FeeOdlnMPfy0XU6n6a6Jm6Vf41
MSHgOYbMVWLGgdygKR6Iu3ZDmE1BsfM34MenPhe7W8ekD4IVj5ynipCiJGXBbrYE
wGRO4xMlnx/E/m54/H7J7rVraybnSNAkRP0/dKvHmkA+6P2RhiSi1Jlq/7B2MCDj
RWVyNE260qt3KcEKHKlpWSh+zU+UxVo9W5mYS07ZoWFOLjmac9ZV00yDZShrAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUT+3P1sY8MSgnBHY40coyxWJqewEwHwYDVR0j
BBgwFoAUPZDWA3Sa9XBA9wkt8fLSZmcuR+cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2hWZGdTYXVEUmo2ZERpWXl3OXEyOG9HVDZCUFJrdG9HMTdDRENqNWF0
eEYvMC8zRDkwRDYwMzc0OUFGNTcwNDBGNzA5MkRGMUYyRDI2NjY3MkU0N0U3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNEOTBENjAzNzQ5QUY1NzA0
MEY3MDkyREYxRjJEMjY2NjcyRTQ3RTcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdoVmRnU2F1RFJqNmREaVl5dzlxMjhvR1Q2QlBSa3RvRzE3Q0RDajVhdHhGLzAv
MzIzODMwMzQzYTM1MzkzMjM4M2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzODMxMzczMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEWSjAMA0GCSqGSIb3DQEBCwUA
A4IBAQAgC7/skM8jjcsA2IiAFY6+8C63GYpVNdTtaqyNuxixgN3cgAQuDJxF+Ohw
RXC86mdh04mXMNYW4iS5ryhsirarnPtV84V0+XcL8j0NWZKv3wQLdBci3cZbScrz
FkM+BYE66xJDKFkkDkDScpX+AAGkKfmfbNP/GVUjSyKFAsBc9veHy+aH7YRVy8KN
wqPP6UFPdxntbAi80LBTTdAseV5AFMrgOpRS047dOG97j986VqibcrNpX0qzLrJS
Jw6+jh8zf+BE5DX7Fp5lOHMqRfwbzqGGezZvA3HKGuvEK0K1G7WULnR66QfucWIk
EubZKqc+2KiWyw8iFuOcAZEcXtlH
-----END CERTIFICATE-----
Generated at Sat Nov 23 15:35:21 2024 by rpki-client on console-fra.rpki-client.org