Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/323830343a333332633a3a2f33332d3333203d3e20323635333739.roa
File:                     323830343a333332633a3a2f33332d3333203d3e20323635333739.roa (raw, json)
Hash identifier:          brSrUgQ4Mn795Q97YgmRGSii5oBxp6E1/VM9ntNE+D0=
Subject key identifier:   A1:ED:3C:E3:BB:F8:C8:79:A4:28:B7:C8:B0:F1:CB:10:55:F3:F5:E8
Certificate issuer:       /CN=54204F38B6BA00E08F89389BEA820C255D02514C
Certificate serial:       01BABCD264161613873DBB4E18997C79DA57D56C
Authority key identifier: 54:20:4F:38:B6:BA:00:E0:8F:89:38:9B:EA:82:0C:25:5D:02:51:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54204F38B6BA00E08F89389BEA820C255D02514C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/323830343a333332633a3a2f33332d3333203d3e20323635333739.roa
Signing time:             Wed 03 Apr 2024 18:32:07 +0000
ROA not before:           Wed 03 Apr 2024 18:27:07 +0000
ROA not after:            Wed 02 Apr 2025 18:32:07 +0000
asID:                     265379
IP address blocks:        2804:332c::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/54204F38B6BA00E08F89389BEA820C255D02514C.crl
                          rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/54204F38B6BA00E08F89389BEA820C255D02514C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54204F38B6BA00E08F89389BEA820C255D02514C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:38:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ba:bc:d2:64:16:16:13:87:3d:bb:4e:18:99:7c:79:da:57:d5:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54204F38B6BA00E08F89389BEA820C255D02514C
        Validity
            Not Before: Apr  3 18:27:07 2024 GMT
            Not After : Apr  2 18:32:07 2025 GMT
        Subject: CN=A1ED3CE3BBF8C879A428B7C8B0F1CB1055F3F5E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:21:62:8f:0d:f5:bb:a1:2a:49:cc:31:2d:5d:
                    79:ec:32:e9:fe:7d:3a:23:cd:ac:54:04:b9:70:72:
                    c2:41:11:af:5e:b4:30:7e:27:d0:dd:ce:e4:7e:34:
                    20:c5:ce:3c:35:5c:80:ee:51:1c:1a:b0:65:17:87:
                    b5:a1:14:06:b2:6a:fb:94:81:26:5e:62:76:1e:8d:
                    6b:88:64:54:5a:16:ea:a3:4e:4a:08:a5:0b:3f:77:
                    39:99:a0:84:ff:ee:3e:88:59:97:fc:9d:37:2a:2f:
                    9f:4b:3c:df:d7:e0:63:3a:d9:10:f7:07:2e:bd:4b:
                    ad:e5:72:70:c5:d2:da:a5:8e:92:d9:9e:04:3a:50:
                    5b:29:61:97:9c:0e:c8:b5:4d:48:18:58:1d:ef:4f:
                    34:c3:8f:de:4d:65:da:d8:e3:b6:08:45:21:00:1f:
                    28:9b:26:72:0a:23:bd:69:6c:e5:f6:90:67:94:8c:
                    09:10:9e:db:8c:7f:d0:72:74:3b:8f:e6:24:d8:a5:
                    13:64:4d:80:ee:9e:d5:3f:02:ec:06:29:bf:f9:55:
                    86:13:cf:de:c3:d8:e6:37:45:f8:94:ab:53:79:6a:
                    45:91:8c:54:da:2f:0c:7f:a8:53:15:59:c1:10:a5:
                    22:14:5a:0f:6a:45:93:74:01:6f:9f:86:92:f2:dc:
                    d2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:ED:3C:E3:BB:F8:C8:79:A4:28:B7:C8:B0:F1:CB:10:55:F3:F5:E8
            X509v3 Authority Key Identifier:
                keyid:54:20:4F:38:B6:BA:00:E0:8F:89:38:9B:EA:82:0C:25:5D:02:51:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/54204F38B6BA00E08F89389BEA820C255D02514C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54204F38B6BA00E08F89389BEA820C255D02514C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/323830343a333332633a3a2f33332d3333203d3e20323635333739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:332c::/33

    Signature Algorithm: sha256WithRSAEncryption
         a3:f6:9b:72:db:56:97:f2:e4:d2:0c:6c:f5:d8:ae:47:5e:c0:
         4d:8c:89:44:19:38:af:61:b4:56:e5:0a:32:2e:f1:a1:e3:b1:
         63:d1:ab:cd:04:31:58:a3:6c:b3:bc:a8:99:cb:de:67:b0:d4:
         84:de:1e:b3:29:fb:7b:73:e5:fb:49:ed:79:e0:f1:e0:bb:c1:
         4a:b9:89:5f:96:a6:54:80:f0:b7:b6:29:0f:23:78:fe:45:42:
         22:f1:02:bd:b9:78:7d:a4:61:6d:a1:67:fe:15:5e:bf:ea:ff:
         30:14:aa:d6:c0:e0:b8:d8:50:3e:ec:d2:2a:4e:19:09:b9:12:
         b6:d9:9e:3c:e3:5e:b3:23:b5:93:92:4d:b9:b3:06:39:59:4f:
         95:bb:ce:d3:6e:68:63:41:f5:76:76:97:65:a0:35:e5:d4:87:
         3c:00:13:ef:1e:d3:a8:af:42:9d:67:76:c5:62:a1:db:69:d3:
         91:25:a9:77:75:80:0b:2d:ca:5f:f1:3b:94:bf:40:3a:a9:35:
         3c:70:f6:54:ee:31:b4:99:d5:ee:e2:69:66:33:e3:7d:83:52:
         26:58:1c:a2:42:20:e7:68:8b:c1:2a:e7:04:c8:67:a8:fb:ac:
         3b:22:eb:42:b7:4a:c6:8e:36:96:35:ea:46:6a:54:55:fc:d7:
         e2:96:ca:e6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUAbq80mQWFhOHPbtOGJl8edpX1WwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTQyMDRGMzhCNkJBMDBFMDhGODkzODlCRUE4MjBDMjU1
RDAyNTE0QzAeFw0yNDA0MDMxODI3MDdaFw0yNTA0MDIxODMyMDdaMDMxMTAvBgNV
BAMTKEExRUQzQ0UzQkJGOEM4NzlBNDI4QjdDOEIwRjFDQjEwNTVGM0Y1RTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCIWKPDfW7oSpJzDEtXXnsMun+
fTojzaxUBLlwcsJBEa9etDB+J9DdzuR+NCDFzjw1XIDuURwasGUXh7WhFAayavuU
gSZeYnYejWuIZFRaFuqjTkoIpQs/dzmZoIT/7j6IWZf8nTcqL59LPN/X4GM62RD3
By69S63lcnDF0tqljpLZngQ6UFspYZecDsi1TUgYWB3vTzTDj95NZdrY47YIRSEA
HyibJnIKI71pbOX2kGeUjAkQntuMf9BydDuP5iTYpRNkTYDuntU/AuwGKb/5VYYT
z97D2OY3RfiUq1N5akWRjFTaLwx/qFMVWcEQpSIUWg9qRZN0AW+fhpLy3NJdAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUoe0847v4yHmkKLfIsPHLEFXz9egwHwYDVR0j
BBgwFoAUVCBPOLa6AOCPiTib6oIMJV0CUUwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODFNQkVORkxIOW43NzRBN0d0QnBYMmlpRG92YkxaTTN2S1BjVjJjN1l3
cHAvMS81NDIwNEYzOEI2QkEwMEUwOEY4OTM4OUJFQTgyMEMyNTVEMDI1MTRDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU0MjA0RjM4QjZCQTAwRTA4
Rjg5Mzg5QkVBODIwQzI1NUQwMjUxNEMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzgxTUJFTkZMSDluNzc0QTdHdEJwWDJpaURvdmJMWk0zdktQY1YyYzdZd3BwLzEv
MzIzODMwMzQzYTMzMzMzMjYzM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM1
MzMzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAQzLAAwDQYJKoZIhvcNAQELBQADggEBAKP2m3Lb
Vpfy5NIMbPXYrkdewE2MiUQZOK9htFblCjIu8aHjsWPRq80EMVijbLO8qJnL3mew
1ITeHrMp+3tz5ftJ7Xng8eC7wUq5iV+WplSA8Le2KQ8jeP5FQiLxAr25eH2kYW2h
Z/4VXr/q/zAUqtbA4LjYUD7s0ipOGQm5ErbZnjzjXrMjtZOSTbmzBjlZT5W7ztNu
aGNB9XZ2l2WgNeXUhzwAE+8e06ivQp1ndsViodtp05ElqXd1gAstyl/xO5S/QDqp
NTxw9lTuMbSZ1e7iaWYz432DUiZYHKJCIOdoi8Eq5wTIZ6j7rDsi60K3SsaONpY1
6kZqVFX81+KWyuY=
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:25 2024 by rpki-client on console-fra.rpki-client.org