Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/323830343a346335303a3a2f33342d3334203d3e20323637333633.roa
File:                     323830343a346335303a3a2f33342d3334203d3e20323637333633.roa (raw, json)
Hash identifier:          kjm/Jf80CAJfGcrywz8qPO21ZONCV7dES7hgZF4cxnA=
Subject key identifier:   3B:9F:9D:8D:56:F9:84:8E:F4:7E:5C:5A:B6:44:BB:4E:5F:48:92:69
Certificate issuer:       /CN=D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA
Certificate serial:       2C62BB51C75E46BF4D08CAED1C11EB90AA507C57
Authority key identifier: D7:C6:5B:91:75:A8:C5:5D:D1:BE:8B:5D:6F:51:15:2D:72:C5:05:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/323830343a346335303a3a2f33342d3334203d3e20323637333633.roa
Signing time:             Thu 04 Apr 2024 13:53:53 +0000
ROA not before:           Thu 04 Apr 2024 13:48:53 +0000
ROA not after:            Thu 03 Apr 2025 13:53:53 +0000
asID:                     267363
IP address blocks:        2804:4c50::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.crl
                          rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:62:bb:51:c7:5e:46:bf:4d:08:ca:ed:1c:11:eb:90:aa:50:7c:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA
        Validity
            Not Before: Apr  4 13:48:53 2024 GMT
            Not After : Apr  3 13:53:53 2025 GMT
        Subject: CN=3B9F9D8D56F9848EF47E5C5AB644BB4E5F489269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:94:18:a5:79:23:98:f8:30:f0:ec:d7:d3:99:
                    d7:b4:01:05:97:7d:6c:59:9a:9e:cd:01:10:5b:31:
                    c2:de:2e:64:69:11:6f:43:de:d6:01:b9:58:fe:db:
                    53:4c:39:bf:5f:f4:e0:39:33:34:2a:b2:29:46:14:
                    7d:c9:2c:38:34:54:b6:42:48:9e:82:1d:67:2d:96:
                    cc:22:9f:a3:dd:ab:a8:9d:94:eb:84:c4:66:54:39:
                    ea:37:f5:42:c0:c9:5c:c8:1d:d5:1f:5b:05:7b:f5:
                    de:60:56:29:50:85:2f:ea:fe:77:8f:86:ee:47:07:
                    c5:69:40:fe:f6:e7:65:ef:e1:fe:7c:9e:2a:a9:52:
                    be:a1:1a:e2:b3:64:d6:74:2d:9a:f2:06:b1:0e:60:
                    9d:9f:8f:8f:5b:de:66:2d:f3:a0:32:b1:1e:b8:26:
                    e6:a7:46:8b:5f:3a:9e:ec:d1:8b:4d:72:b2:d7:2d:
                    81:67:d6:53:bf:43:4c:ef:b7:3b:bb:1f:94:33:d4:
                    7f:2b:2e:60:cd:86:e6:e7:58:41:eb:85:c6:b2:26:
                    d8:40:de:0b:d4:53:c2:6e:2a:c9:27:0c:47:f5:7b:
                    c1:df:13:85:2f:c6:e5:11:6b:78:8d:f7:95:68:bb:
                    9e:06:6a:95:4f:0f:c6:eb:f1:81:14:24:49:11:11:
                    92:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:9F:9D:8D:56:F9:84:8E:F4:7E:5C:5A:B6:44:BB:4E:5F:48:92:69
            X509v3 Authority Key Identifier:
                keyid:D7:C6:5B:91:75:A8:C5:5D:D1:BE:8B:5D:6F:51:15:2D:72:C5:05:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/323830343a346335303a3a2f33342d3334203d3e20323637333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c50::/34

    Signature Algorithm: sha256WithRSAEncryption
         77:f4:f7:a8:20:7e:04:64:38:6b:6a:64:9c:70:3f:e9:fe:ef:
         90:04:7e:d8:88:55:df:8a:a5:e7:cb:d7:a6:95:4b:7f:14:67:
         36:9f:a6:a8:1e:1f:15:40:3c:a8:70:bc:60:66:1b:45:51:c7:
         13:d6:01:dd:59:fd:df:e1:26:2b:82:1d:a5:36:b7:7e:f2:57:
         a3:89:62:b1:9a:72:14:d6:3d:22:0b:dc:f9:9b:51:2d:49:33:
         2b:02:67:cc:b0:ea:18:e5:4b:16:c2:42:30:f8:76:f4:a8:3c:
         6a:d1:05:7c:c3:00:1f:96:7c:b2:a0:e6:99:68:97:7a:b3:b9:
         89:f0:fc:a4:ad:d2:00:a9:bd:bf:49:04:81:5b:49:2e:d9:f5:
         91:2b:1c:39:4a:70:27:d8:58:46:31:08:95:97:a8:76:ac:82:
         48:a0:b3:87:e1:3d:24:b0:22:0e:cc:54:94:a5:14:74:96:aa:
         d6:78:39:6d:33:ce:a6:28:13:37:51:9c:97:18:76:20:a7:22:
         c6:ab:50:36:35:1e:3d:13:64:ea:f2:13:1c:dc:55:34:ac:10:
         fb:6d:06:2c:60:43:ad:21:33:b0:d4:db:f3:02:5b:97:e8:ea:
         d0:8c:c6:eb:82:1d:f9:da:65:a0:0f:1b:1d:d3:d8:49:c0:fa:
         ef:11:47:9d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULGK7UcdeRr9NCMrtHBHrkKpQfFcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDdDNjVCOTE3NUE4QzU1REQxQkU4QjVENkY1MTE1MkQ3
MkM1MDVBQTAeFw0yNDA0MDQxMzQ4NTNaFw0yNTA0MDMxMzUzNTNaMDMxMTAvBgNV
BAMTKDNCOUY5RDhENTZGOTg0OEVGNDdFNUM1QUI2NDRCQjRFNUY0ODkyNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzlBileSOY+DDw7NfTmde0AQWX
fWxZmp7NARBbMcLeLmRpEW9D3tYBuVj+21NMOb9f9OA5MzQqsilGFH3JLDg0VLZC
SJ6CHWctlswin6Pdq6idlOuExGZUOeo39ULAyVzIHdUfWwV79d5gVilQhS/q/neP
hu5HB8VpQP7252Xv4f58niqpUr6hGuKzZNZ0LZryBrEOYJ2fj49b3mYt86AysR64
JuanRotfOp7s0YtNcrLXLYFn1lO/Q0zvtzu7H5Qz1H8rLmDNhubnWEHrhcayJthA
3gvUU8JuKsknDEf1e8HfE4UvxuURa3iN95Vou54GapVPD8br8YEUJEkREZKZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUO5+djVb5hI70flxatkS7Tl9IkmkwHwYDVR0j
BBgwFoAU18ZbkXWoxV3Rvotdb1EVLXLFBaowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODZFM1lqSHA0bXEzdGhvaGdhOWVaajJGallFQUIxYnR6dVVWbzFDZXBk
YXcvMS9EN0M2NUI5MTc1QThDNTVERDFCRThCNUQ2RjUxMTUyRDcyQzUwNUFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3QzY1QjkxNzVBOEM1NURE
MUJFOEI1RDZGNTExNTJENzJDNTA1QUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg2RTNZakhwNG1xM3Rob2hnYTllWmoyRmpZRUFCMWJ0enVVVm8xQ2VwZGF3LzEv
MzIzODMwMzQzYTM0NjMzNTMwM2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNjM3
MzMzNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKARMUAAwDQYJKoZIhvcNAQELBQADggEBAHf096gg
fgRkOGtqZJxwP+n+75AEftiIVd+KpefL16aVS38UZzafpqgeHxVAPKhwvGBmG0VR
xxPWAd1Z/d/hJiuCHaU2t37yV6OJYrGachTWPSIL3PmbUS1JMysCZ8yw6hjlSxbC
QjD4dvSoPGrRBXzDAB+WfLKg5plol3qzuYnw/KSt0gCpvb9JBIFbSS7Z9ZErHDlK
cCfYWEYxCJWXqHasgkigs4fhPSSwIg7MVJSlFHSWqtZ4OW0zzqYoEzdRnJcYdiCn
IsarUDY1Hj0TZOryExzcVTSsEPttBixgQ60hM7DU2/MCW5fo6tCMxuuCHfnaZaAP
Gx3T2EnA+u8RR50=
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:39 2024 by rpki-client on console-fra.rpki-client.org