Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/323830343a343934343a3a2f33322d3336203d3e20323637313734.roa
File:                     323830343a343934343a3a2f33322d3336203d3e20323637313734.roa (raw, json)
Hash identifier:          2+CyEwEwI6Y4MD2mIo1LTA8DNvss+3doYn4uufN0Fgg=
Subject key identifier:   94:C9:5D:EB:E9:4C:0F:42:CD:6B:B6:1B:D3:77:88:51:F4:F5:FB:CA
Certificate issuer:       /CN=3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156
Certificate serial:       72AEF88D241D0C5817093A544B41A2DD10C0C3C8
Authority key identifier: 3C:E2:7E:93:82:4D:1A:8C:BB:A8:C9:A4:EF:11:5E:F9:DC:A0:01:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/323830343a343934343a3a2f33322d3336203d3e20323637313734.roa
Signing time:             Thu 04 Apr 2024 08:59:11 +0000
ROA not before:           Thu 04 Apr 2024 08:54:11 +0000
ROA not after:            Thu 03 Apr 2025 08:59:11 +0000
asID:                     267174
IP address blocks:        2804:4944::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.crl
                          rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:ae:f8:8d:24:1d:0c:58:17:09:3a:54:4b:41:a2:dd:10:c0:c3:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156
        Validity
            Not Before: Apr  4 08:54:11 2024 GMT
            Not After : Apr  3 08:59:11 2025 GMT
        Subject: CN=94C95DEBE94C0F42CD6BB61BD3778851F4F5FBCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:06:e0:ca:68:71:ff:e7:eb:86:94:ab:5a:63:
                    ce:8b:44:9e:27:a9:30:c9:a8:38:bf:ab:ec:3b:99:
                    53:c7:bb:72:b9:63:8e:2b:75:9d:27:f5:da:64:8a:
                    aa:cd:cd:d3:98:89:72:ca:af:b9:1a:61:73:21:f0:
                    aa:cc:66:fc:4c:6b:2f:67:90:77:b9:cb:0b:ea:7e:
                    d9:53:78:70:8f:7e:e2:eb:b0:ab:15:70:44:73:06:
                    03:35:18:3e:77:59:d4:7e:d7:e0:94:64:e7:0f:97:
                    ea:08:aa:87:b1:b7:5d:93:5f:91:19:58:45:c5:b0:
                    49:03:32:13:ad:6a:a5:7c:b5:02:7b:ee:fe:1a:5c:
                    e3:4a:5f:64:c1:e3:7c:a8:05:ac:8e:69:74:54:11:
                    f0:b7:80:4f:23:ef:8e:e2:e7:d6:6d:98:5c:c3:4c:
                    0d:c2:b7:2c:76:04:1f:17:59:73:42:43:4e:96:ce:
                    80:6c:34:e8:c6:26:d9:48:d5:fc:ab:58:93:58:43:
                    c8:a3:5d:f5:ee:96:fc:94:1d:ef:d1:21:87:5f:37:
                    3b:14:56:22:cb:66:4f:ca:45:7b:0f:49:b3:83:00:
                    ba:51:ea:90:16:3d:e1:64:b1:2c:0b:37:9c:b2:02:
                    72:8a:44:3a:a4:30:d9:12:ec:1c:06:f1:36:4c:da:
                    34:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C9:5D:EB:E9:4C:0F:42:CD:6B:B6:1B:D3:77:88:51:F4:F5:FB:CA
            X509v3 Authority Key Identifier:
                keyid:3C:E2:7E:93:82:4D:1A:8C:BB:A8:C9:A4:EF:11:5E:F9:DC:A0:01:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/323830343a343934343a3a2f33322d3336203d3e20323637313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4944::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:0c:7a:e8:0f:ed:72:c0:e2:09:9b:02:eb:d1:6e:e3:41:f1:
         b4:4e:bf:b5:4b:32:ea:9a:18:94:05:32:34:fc:cb:e1:0e:4c:
         54:1a:2d:a2:4b:89:37:b9:79:28:e1:a5:2f:c9:40:37:5c:a8:
         6a:9f:5a:14:24:fa:cc:c0:d2:64:87:9b:c9:23:b9:7d:a9:ed:
         1d:4b:e9:1c:bf:a0:71:36:43:2d:1c:12:9b:18:98:22:ff:4b:
         8e:ef:b3:1d:6b:1e:07:43:2c:09:c6:f3:76:a9:73:af:35:b1:
         05:9b:80:d7:87:ad:4f:17:a3:a3:61:0f:08:1e:93:06:86:31:
         e8:c1:a1:d2:b7:c1:b4:af:74:d6:71:7f:1b:05:d5:a6:f8:ff:
         25:49:ae:f9:f7:4a:83:81:1e:73:6f:5e:d5:84:ac:be:aa:d2:
         5b:0b:df:dc:5c:68:f3:20:45:b7:3b:b8:b9:5e:c8:c0:d9:2c:
         3c:07:f9:55:c7:68:87:c8:78:30:34:d5:f8:65:db:a1:29:72:
         d7:a4:3b:6c:7c:cf:74:f7:17:f2:ac:fa:70:d0:03:e7:01:3d:
         ae:a0:b2:56:d1:4c:fb:ca:bd:97:80:4e:de:0d:18:e5:37:a1:
         69:f1:c6:34:2e:1f:9e:31:e5:d0:3f:a2:1a:79:c4:52:fa:6e:
         f8:8e:89:ec
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUcq74jSQdDFgXCTpUS0Gi3RDAw8gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0NFMjdFOTM4MjREMUE4Q0JCQThDOUE0RUYxMTVFRjlE
Q0EwMDE1NjAeFw0yNDA0MDQwODU0MTFaFw0yNTA0MDMwODU5MTFaMDMxMTAvBgNV
BAMTKDk0Qzk1REVCRTk0QzBGNDJDRDZCQjYxQkQzNzc4ODUxRjRGNUZCQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBBuDKaHH/5+uGlKtaY86LRJ4n
qTDJqDi/q+w7mVPHu3K5Y44rdZ0n9dpkiqrNzdOYiXLKr7kaYXMh8KrMZvxMay9n
kHe5ywvqftlTeHCPfuLrsKsVcERzBgM1GD53WdR+1+CUZOcPl+oIqoext12TX5EZ
WEXFsEkDMhOtaqV8tQJ77v4aXONKX2TB43yoBayOaXRUEfC3gE8j747i59ZtmFzD
TA3Ctyx2BB8XWXNCQ06WzoBsNOjGJtlI1fyrWJNYQ8ijXfXulvyUHe/RIYdfNzsU
ViLLZk/KRXsPSbODALpR6pAWPeFksSwLN5yyAnKKRDqkMNkS7BwG8TZM2jRnAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUlMld6+lMD0LNa7Yb03eIUfT1+8owHwYDVR0j
BBgwFoAUPOJ+k4JNGoy7qMmk7xFe+dygAVYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVhKTEJhbXZ5c2h6WVBnQkVzeXdwUnJHNUZvRWVaTm12Z0FEYzZleDg4
bmUvMS8zQ0UyN0U5MzgyNEQxQThDQkJBOEM5QTRFRjExNUVGOURDQTAwMTU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDRTI3RTkzODI0RDFBOENC
QkE4QzlBNEVGMTE1RUY5RENBMDAxNTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlYSkxCYW12eXNoellQZ0JFc3l3cFJyRzVGb0VlWk5tdmdBRGM2ZXg4OG5lLzEv
MzIzODMwMzQzYTM0MzkzNDM0M2EzYTJmMzMzMjJkMzMzNjIwM2QzZTIwMzIzNjM3
MzEzNzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARJRDANBgkqhkiG9w0BAQsFAAOCAQEAKgx66A/t
csDiCZsC69Fu40HxtE6/tUsy6poYlAUyNPzL4Q5MVBotokuJN7l5KOGlL8lAN1yo
ap9aFCT6zMDSZIebySO5fantHUvpHL+gcTZDLRwSmxiYIv9Lju+zHWseB0MsCcbz
dqlzrzWxBZuA14etTxejo2EPCB6TBoYx6MGh0rfBtK901nF/GwXVpvj/JUmu+fdK
g4Eec29e1YSsvqrSWwvf3Fxo8yBFtzu4uV7IwNksPAf5Vcdoh8h4MDTV+GXboSly
16Q7bHzPdPcX8qz6cNAD5wE9rqCyVtFM+8q9l4BO3g0Y5TehafHGNC4fnjHl0D+i
GnnEUvpu+I6J7A==
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:01 2024 by rpki-client on console-ams.rpki-client.org