Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9JYxPqRzkNYudjmyo5hjjuupxkTMxGMupLrqayP3oeJB/1/323830343a3331343a3a2f33322d3438203d3e203631353638.roa
File:                     323830343a3331343a3a2f33322d3438203d3e203631353638.roa (raw, json)
Hash identifier:          +Fh7pkPAbKic3vlXoIyPzFxwwtxyqFBsKdepYBaFXkc=
Subject key identifier:   23:CD:0F:1B:85:2E:23:3C:9D:1B:B0:0F:BF:DC:5F:F5:21:07:E9:60
Certificate issuer:       /CN=82D7A16EB6BF37C8E973234ED46660A264ABEF9E
Certificate serial:       3B9E39A0F4102B4AF32613D4AF4F87CD8BAF3048
Authority key identifier: 82:D7:A1:6E:B6:BF:37:C8:E9:73:23:4E:D4:66:60:A2:64:AB:EF:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82D7A16EB6BF37C8E973234ED46660A264ABEF9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9JYxPqRzkNYudjmyo5hjjuupxkTMxGMupLrqayP3oeJB/1/323830343a3331343a3a2f33322d3438203d3e203631353638.roa
Signing time:             Thu 04 Apr 2024 00:17:48 +0000
ROA not before:           Thu 04 Apr 2024 00:12:48 +0000
ROA not after:            Thu 03 Apr 2025 00:17:48 +0000
asID:                     61568
IP address blocks:        2804:314::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9JYxPqRzkNYudjmyo5hjjuupxkTMxGMupLrqayP3oeJB/1/82D7A16EB6BF37C8E973234ED46660A264ABEF9E.crl
                          rsync://rpki-repo.registro.br/repo/9JYxPqRzkNYudjmyo5hjjuupxkTMxGMupLrqayP3oeJB/1/82D7A16EB6BF37C8E973234ED46660A264ABEF9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82D7A16EB6BF37C8E973234ED46660A264ABEF9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:36:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:9e:39:a0:f4:10:2b:4a:f3:26:13:d4:af:4f:87:cd:8b:af:30:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82D7A16EB6BF37C8E973234ED46660A264ABEF9E
        Validity
            Not Before: Apr  4 00:12:48 2024 GMT
            Not After : Apr  3 00:17:48 2025 GMT
        Subject: CN=23CD0F1B852E233C9D1BB00FBFDC5FF52107E960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d0:d0:02:2a:70:f5:e4:f7:6b:fe:18:4c:ad:
                    0c:d0:6e:63:b6:60:9a:9b:59:48:d4:02:a1:ea:86:
                    35:d5:fb:a4:c2:ac:17:72:9e:12:bd:19:da:87:65:
                    a4:5b:b7:95:fb:3d:7d:c9:ba:af:3e:36:0b:75:d3:
                    47:f9:9e:17:0b:26:8a:2b:62:2a:be:09:96:5d:68:
                    cc:22:d8:20:dc:f0:5f:c1:a6:96:db:57:da:b1:74:
                    79:60:4e:6e:b8:02:1e:b2:f9:f4:4f:c4:ea:30:15:
                    07:9d:fa:16:61:b6:95:3f:93:b6:91:75:84:86:d9:
                    b5:b2:38:07:97:9f:31:da:9c:da:c4:3d:4b:d5:2a:
                    30:19:0c:0e:99:fe:d7:9b:88:cd:f3:83:7c:77:1e:
                    cd:f9:f0:bc:b5:44:65:6f:55:ac:96:cd:5a:eb:91:
                    83:f6:02:10:84:bc:12:db:80:61:f2:b4:4d:33:81:
                    56:08:9f:e3:c8:cb:a9:0b:60:cf:25:0b:8f:b9:02:
                    ba:fa:3b:fb:74:a4:4c:c9:3b:85:9e:90:2d:13:68:
                    43:a8:76:cc:bd:22:3c:4b:12:a0:f4:37:04:7a:dd:
                    e0:ae:26:aa:a8:c6:dc:55:e3:d9:46:f4:00:50:76:
                    f7:b1:85:db:74:e4:47:30:a6:f1:54:fd:85:0c:98:
                    99:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:CD:0F:1B:85:2E:23:3C:9D:1B:B0:0F:BF:DC:5F:F5:21:07:E9:60
            X509v3 Authority Key Identifier:
                keyid:82:D7:A1:6E:B6:BF:37:C8:E9:73:23:4E:D4:66:60:A2:64:AB:EF:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9JYxPqRzkNYudjmyo5hjjuupxkTMxGMupLrqayP3oeJB/1/82D7A16EB6BF37C8E973234ED46660A264ABEF9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82D7A16EB6BF37C8E973234ED46660A264ABEF9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9JYxPqRzkNYudjmyo5hjjuupxkTMxGMupLrqayP3oeJB/1/323830343a3331343a3a2f33322d3438203d3e203631353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:314::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:ca:67:78:3d:4b:7d:72:d3:88:9b:ff:d5:9c:c9:53:f4:69:
         c7:5a:82:f3:22:92:7b:21:14:04:e1:55:c9:e1:6f:22:12:96:
         02:50:eb:76:b3:95:02:59:ef:3d:74:10:cd:bf:aa:1a:d8:ae:
         82:04:eb:c7:bc:76:9a:68:25:1e:05:26:06:e8:00:83:98:a1:
         7b:9b:8c:18:64:8a:dc:9a:6b:b8:a2:60:a8:f0:a0:92:f6:27:
         ce:53:da:83:2a:70:98:4f:47:7d:da:9b:83:9e:ac:76:fd:99:
         22:e4:d4:0d:57:29:d6:66:59:dc:68:ee:89:0d:56:46:bf:d9:
         df:af:92:fc:78:db:34:14:8a:ec:3c:42:22:32:dc:76:d9:42:
         0e:92:01:ca:d9:27:c2:0b:de:a4:56:a5:3b:90:4c:5c:4f:bc:
         b7:d7:30:2a:bf:99:6f:b7:66:56:c4:4d:9e:d9:02:ff:97:60:
         f9:50:ea:a5:5a:62:af:25:9e:93:16:9a:ea:a1:39:7a:d1:2e:
         01:b9:2a:c2:4a:17:a5:48:2c:28:a5:13:04:a6:0d:ec:be:1f:
         2d:69:b1:40:72:fe:7c:40:f1:b0:de:fc:87:a4:ec:5c:e4:4a:
         f6:0d:6c:69:f1:34:7b:a3:6f:a1:f2:75:12:c1:45:6a:ca:b0:
         86:d0:9a:0e
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUO545oPQQK0rzJhPUr0+HzYuvMEgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODJEN0ExNkVCNkJGMzdDOEU5NzMyMzRFRDQ2NjYwQTI2
NEFCRUY5RTAeFw0yNDA0MDQwMDEyNDhaFw0yNTA0MDMwMDE3NDhaMDMxMTAvBgNV
BAMTKDIzQ0QwRjFCODUyRTIzM0M5RDFCQjAwRkJGREM1RkY1MjEwN0U5NjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC10NACKnD15Pdr/hhMrQzQbmO2
YJqbWUjUAqHqhjXV+6TCrBdynhK9GdqHZaRbt5X7PX3Juq8+Ngt100f5nhcLJoor
Yiq+CZZdaMwi2CDc8F/BppbbV9qxdHlgTm64Ah6y+fRPxOowFQed+hZhtpU/k7aR
dYSG2bWyOAeXnzHanNrEPUvVKjAZDA6Z/tebiM3zg3x3Hs358Ly1RGVvVayWzVrr
kYP2AhCEvBLbgGHytE0zgVYIn+PIy6kLYM8lC4+5Arr6O/t0pEzJO4WekC0TaEOo
dsy9IjxLEqD0NwR63eCuJqqoxtxV49lG9ABQdvexhdt05EcwpvFU/YUMmJkTAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUI80PG4UuIzydG7APv9xf9SEH6WAwHwYDVR0j
BBgwFoAUgtehbra/N8jpcyNO1GZgomSr754wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOUpZeFBxUnprTll1ZGpteW81aGpqdXVweGtUTXhHTXVwTHJxYXlQM29l
SkIvMS84MkQ3QTE2RUI2QkYzN0M4RTk3MzIzNEVENDY2NjBBMjY0QUJFRjlFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgyRDdBMTZFQjZCRjM3QzhF
OTczMjM0RUQ0NjY2MEEyNjRBQkVGOUUuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlKWXhQcVJ6a05ZdWRqbXlvNWhqanV1cHhrVE14R011cExycWF5UDNvZUpCLzEv
MzIzODMwMzQzYTMzMzEzNDNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDM2MzEzNTM2
Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBAMUMA0GCSqGSIb3DQEBCwUAA4IBAQAnymd4PUt9ctOI
m//VnMlT9GnHWoLzIpJ7IRQE4VXJ4W8iEpYCUOt2s5UCWe89dBDNv6oa2K6CBOvH
vHaaaCUeBSYG6ACDmKF7m4wYZIrcmmu4omCo8KCS9ifOU9qDKnCYT0d92puDnqx2
/Zki5NQNVynWZlncaO6JDVZGv9nfr5L8eNs0FIrsPEIiMtx22UIOkgHK2SfCC96k
VqU7kExcT7y31zAqv5lvt2ZWxE2e2QL/l2D5UOqlWmKvJZ6TFprqoTl60S4BuSrC
ShelSCwopRMEpg3svh8tabFAcv58QPGw3vyHpOxc5Er2DWxp8TR7o2+h8nUSwUVq
yrCG0JoO
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:55 2024 by rpki-client on console-fra.rpki-client.org