Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/323830343a336437343a3130323a3a2f34382d3438203d3e20323636353332.roa
File:                     323830343a336437343a3130323a3a2f34382d3438203d3e20323636353332.roa (raw, json)
Hash identifier:          jrsuzmGCmj/Wkhi7/wOBJLGq+Pv9nvnXrlSsInhuwQ0=
Subject key identifier:   EA:F4:81:2A:A4:46:FB:15:DE:A3:31:63:88:A7:84:54:09:82:B8:7D
Certificate issuer:       /CN=392AEBF74273723B76684580562B17A77CDEF042
Certificate serial:       49F0B81A8CB67C391114A87E1632C6DEE6067727
Authority key identifier: 39:2A:EB:F7:42:73:72:3B:76:68:45:80:56:2B:17:A7:7C:DE:F0:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/392AEBF74273723B76684580562B17A77CDEF042.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/323830343a336437343a3130323a3a2f34382d3438203d3e20323636353332.roa
Signing time:             Thu 04 Apr 2024 18:18:29 +0000
ROA not before:           Thu 04 Apr 2024 18:13:29 +0000
ROA not after:            Thu 03 Apr 2025 18:18:29 +0000
asID:                     266532
IP address blocks:        2804:3d74:102::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/392AEBF74273723B76684580562B17A77CDEF042.crl
                          rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/392AEBF74273723B76684580562B17A77CDEF042.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/392AEBF74273723B76684580562B17A77CDEF042.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 03 Jul 2024 06:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:f0:b8:1a:8c:b6:7c:39:11:14:a8:7e:16:32:c6:de:e6:06:77:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=392AEBF74273723B76684580562B17A77CDEF042
        Validity
            Not Before: Apr  4 18:13:29 2024 GMT
            Not After : Apr  3 18:18:29 2025 GMT
        Subject: CN=EAF4812AA446FB15DEA3316388A784540982B87D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7d:e8:4a:a5:64:a5:aa:58:26:3d:06:04:14:
                    38:06:b8:ae:29:75:66:5a:87:da:77:4a:6a:f1:21:
                    26:c9:12:64:5a:09:ba:0d:cc:66:ad:f2:b9:68:39:
                    b1:0a:1b:eb:db:de:9d:ad:30:87:da:8e:47:22:a0:
                    2f:8d:ef:0f:82:8c:82:ee:92:8b:b8:fb:12:63:a0:
                    d5:31:de:99:34:4a:9f:9e:bb:98:7e:92:24:d9:71:
                    22:7d:40:6f:88:6b:90:38:a7:57:c6:c2:f9:24:e8:
                    de:70:dc:72:63:4c:25:8b:93:d2:f6:5a:3c:ef:21:
                    b6:d2:19:0a:ac:64:60:ac:f0:3f:de:85:b1:9f:11:
                    c5:45:20:94:34:e8:e1:84:da:77:76:c4:95:1c:c9:
                    0f:b3:56:b5:a9:63:6c:53:c5:62:2d:5f:23:fd:22:
                    8e:4e:3a:8b:8b:26:14:50:eb:44:b3:19:54:d0:24:
                    eb:fe:ff:cf:d9:50:f5:44:94:dd:bb:73:3c:a8:10:
                    20:b8:ec:bc:aa:70:97:0c:83:be:a4:0b:9b:bc:89:
                    46:ae:10:06:b4:fd:3c:d2:04:a4:39:59:a6:78:37:
                    23:4b:39:b9:01:4a:e8:bd:a5:88:85:92:94:a2:5b:
                    4e:7e:64:08:48:3d:93:18:97:b4:9a:1a:2b:25:7a:
                    c5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F4:81:2A:A4:46:FB:15:DE:A3:31:63:88:A7:84:54:09:82:B8:7D
            X509v3 Authority Key Identifier:
                keyid:39:2A:EB:F7:42:73:72:3B:76:68:45:80:56:2B:17:A7:7C:DE:F0:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/392AEBF74273723B76684580562B17A77CDEF042.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/392AEBF74273723B76684580562B17A77CDEF042.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/323830343a336437343a3130323a3a2f34382d3438203d3e20323636353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d74:102::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:ec:fc:eb:04:52:30:ac:57:da:db:f1:e9:e9:bd:8a:fc:38:
         b4:d4:b9:07:a9:13:24:bb:15:ff:6d:c7:03:ab:3f:1e:c3:72:
         f0:b9:96:82:eb:dd:ba:fe:6b:98:9f:42:09:7e:04:ce:57:ac:
         d4:0b:c7:c3:61:c6:72:95:22:25:1b:c5:08:3c:3b:20:3f:b4:
         65:b9:89:3e:1b:d6:91:fe:2b:22:0a:43:8a:01:a7:d0:68:0e:
         72:16:c2:b0:3c:88:a7:7b:1a:8e:8b:29:c3:71:6a:27:8c:e4:
         7c:39:51:1e:ed:e4:a1:2f:f3:8c:f9:e3:ef:32:06:5f:dc:c8:
         f4:7d:0f:3a:f5:43:87:13:f3:6f:33:7d:04:28:dd:ed:6b:75:
         78:ff:49:e5:e7:4f:53:31:fa:fc:5a:42:86:5e:b2:cb:9d:99:
         91:6e:69:28:39:1a:7d:a4:f6:56:0d:f0:65:2c:4f:40:8d:79:
         71:2b:21:d2:1e:00:79:7e:77:90:e3:45:bd:9c:5a:9b:db:11:
         54:47:63:51:26:55:85:ec:16:78:87:b7:f2:e0:7c:a3:e1:b0:
         e5:3f:a1:c2:8a:47:97:9b:4d:73:4c:85:2d:0b:cf:92:0e:07:
         79:de:5c:ba:0c:bd:a6:97:46:b7:0c:80:06:f9:f9:cf:f8:10:
         a0:b7:ad:66
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUSfC4Goy2fDkRFKh+FjLG3uYGdycwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzkyQUVCRjc0MjczNzIzQjc2Njg0NTgwNTYyQjE3QTc3
Q0RFRjA0MjAeFw0yNDA0MDQxODEzMjlaFw0yNTA0MDMxODE4MjlaMDMxMTAvBgNV
BAMTKEVBRjQ4MTJBQTQ0NkZCMTVERUEzMzE2Mzg4QTc4NDU0MDk4MkI4N0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWfehKpWSlqlgmPQYEFDgGuK4p
dWZah9p3SmrxISbJEmRaCboNzGat8rloObEKG+vb3p2tMIfajkcioC+N7w+CjILu
kou4+xJjoNUx3pk0Sp+eu5h+kiTZcSJ9QG+Ia5A4p1fGwvkk6N5w3HJjTCWLk9L2
WjzvIbbSGQqsZGCs8D/ehbGfEcVFIJQ06OGE2nd2xJUcyQ+zVrWpY2xTxWItXyP9
Io5OOouLJhRQ60SzGVTQJOv+/8/ZUPVElN27czyoECC47LyqcJcMg76kC5u8iUau
EAa0/TzSBKQ5WaZ4NyNLObkBSui9pYiFkpSiW05+ZAhIPZMYl7SaGislesWHAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQU6vSBKqRG+xXeozFjiKeEVAmCuH0wHwYDVR0j
BBgwFoAUOSrr90Jzcjt2aEWAVisXp3ze8EIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWJodzNGSzNXUlJZTUF6cW56S2ZZUnNQY2pBWXI1dTNtalA0TnpuNkp2
dEwvMS8zOTJBRUJGNzQyNzM3MjNCNzY2ODQ1ODA1NjJCMTdBNzdDREVGMDQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM5MkFFQkY3NDI3MzcyM0I3
NjY4NDU4MDU2MkIxN0E3N0NERUYwNDIuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzliaHczRkszV1JSWU1BenFuektmWVJzUGNqQVlyNXUzbWpQNE56bjZKdnRMLzEv
MzIzODMwMzQzYTMzNjQzNzM0M2EzMTMwMzIzYTNhMmYzNDM4MmQzNDM4MjAzZDNl
MjAzMjM2MzYzNTMzMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBD10AQIwDQYJKoZIhvcNAQELBQAD
ggEBAJzs/OsEUjCsV9rb8enpvYr8OLTUuQepEyS7Ff9txwOrPx7DcvC5loLr3br+
a5ifQgl+BM5XrNQLx8NhxnKVIiUbxQg8OyA/tGW5iT4b1pH+KyIKQ4oBp9BoDnIW
wrA8iKd7Go6LKcNxaieM5Hw5UR7t5KEv84z54+8yBl/cyPR9Dzr1Q4cT828zfQQo
3e1rdXj/SeXnT1Mx+vxaQoZessudmZFuaSg5Gn2k9lYN8GUsT0CNeXErIdIeAHl+
d5DjRb2cWpvbEVRHY1EmVYXsFniHt/LgfKPhsOU/ocKKR5ebTXNMhS0Lz5IOB3ne
XLoMvaaXRrcMgAb5+c/4EKC3rWY=
-----END CERTIFICATE-----
Generated at Tue Jul 2 08:49:46 2024 by rpki-client on console-ams.rpki-client.org