Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a383030303a3a2f33332d3333203d3e20323633333338.roa
File:                     323830343a313439343a383030303a3a2f33332d3333203d3e20323633333338.roa (raw, json)
Hash identifier:          2O0NAfE3w2zwyetKlr0fJtryHerxaHJxJVwss/AdKOc=
Subject key identifier:   3E:66:B5:7B:38:3C:5D:B8:4A:0C:E1:D5:51:B1:42:C7:19:8A:89:1A
Certificate issuer:       /CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
Certificate serial:       761011B12CC18CC375711CC7381D3BB61259D0FB
Authority key identifier: 7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a383030303a3a2f33332d3333203d3e20323633333338.roa
Signing time:             Mon 21 Oct 2024 13:04:41 +0000
ROA not before:           Mon 21 Oct 2024 12:59:41 +0000
ROA not after:            Mon 20 Oct 2025 13:04:41 +0000
asID:                     263338
IP address blocks:        2804:1494:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl
                          rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 02:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:10:11:b1:2c:c1:8c:c3:75:71:1c:c7:38:1d:3b:b6:12:59:d0:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
        Validity
            Not Before: Oct 21 12:59:41 2024 GMT
            Not After : Oct 20 13:04:41 2025 GMT
        Subject: CN=3E66B57B383C5DB84A0CE1D551B142C7198A891A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0d:00:e9:51:3d:86:86:70:ed:51:48:52:09:
                    56:81:f2:ed:13:08:2c:81:50:3f:b2:cd:14:6e:34:
                    5d:8b:69:98:e1:ea:4e:8b:05:08:95:ae:bc:19:63:
                    e0:05:17:c8:6a:f8:6b:eb:39:64:26:49:25:10:21:
                    4b:1e:b9:c7:25:dc:42:e5:e4:8c:a9:44:97:19:12:
                    2f:1e:ed:85:00:3d:59:cc:ab:1c:8e:4a:1a:61:25:
                    1b:4a:31:dc:48:a4:8b:6d:9e:ea:c3:40:e6:78:83:
                    c9:ee:71:31:9d:88:22:0e:d0:44:27:19:b3:15:f3:
                    86:8e:12:cb:74:d9:8f:d8:74:84:e1:69:c7:fd:82:
                    63:78:72:af:f7:05:cc:76:75:ca:b7:5e:a2:64:9f:
                    a5:75:d2:bf:90:1b:ef:91:84:54:cd:a9:20:61:34:
                    dc:e1:e8:2d:ec:1e:0b:2f:eb:b9:90:a4:7c:97:24:
                    17:65:82:77:1f:f4:a5:21:93:1c:71:e9:5a:7d:41:
                    34:3a:d3:a1:e7:59:8a:11:fa:2c:7c:2b:b9:64:b8:
                    2f:cd:92:1b:1b:49:c0:7a:37:7a:1f:dc:d3:9e:6b:
                    48:26:4a:9a:d3:23:79:7a:b4:08:db:95:a1:fb:cf:
                    32:4a:26:6f:0d:98:74:a3:13:fb:cd:42:ce:c1:a0:
                    96:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:66:B5:7B:38:3C:5D:B8:4A:0C:E1:D5:51:B1:42:C7:19:8A:89:1A
            X509v3 Authority Key Identifier:
                keyid:7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a383030303a3a2f33332d3333203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1494:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         35:5d:9b:d6:02:1b:50:b3:03:53:08:b8:ab:78:f9:ba:e7:ba:
         94:6e:39:9c:ae:1f:05:8e:24:12:ff:05:39:4f:83:fc:53:31:
         0e:6d:04:f9:7b:ef:70:3c:64:17:85:6d:6d:46:84:84:ff:c9:
         fe:8b:74:28:c4:22:59:5c:50:f8:c5:78:ea:c6:38:b1:d0:3f:
         2b:27:21:ac:5b:57:23:ba:14:12:d9:ee:61:1a:f6:31:51:e6:
         dd:35:5f:aa:33:b0:58:32:73:f4:64:64:29:c2:78:87:e4:5e:
         00:5b:67:b7:38:b1:99:53:ef:fd:28:99:1a:ac:72:55:26:82:
         7c:5e:f2:da:af:42:31:7d:65:d9:15:7f:e0:29:eb:ce:f9:6b:
         79:cf:36:87:10:c5:cb:eb:43:a5:57:81:a7:a6:70:e2:27:e4:
         0f:88:62:6d:fa:b0:62:03:0d:2d:be:91:46:65:ad:b4:c1:5c:
         93:23:aa:66:6f:99:e9:7b:77:40:9a:53:1a:2e:fc:28:f1:18:
         b8:6b:1b:39:05:8a:58:c4:fd:e0:0d:2e:df:1c:d5:50:09:ec:
         e8:b4:e0:48:9a:2b:a4:e5:2b:45:fc:11:9b:a1:9b:97:50:38:
         c3:aa:1e:6f:56:bf:4b:4b:18:c2:e9:f3:b8:03:b2:cb:46:e8:
         59:0f:08:b8
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUdhARsSzBjMN1cRzHOB07thJZ0PswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0I0NjM4NTNFQTRBQzAxMkJEOUYzMTk0Q0ZBMzNBRjMy
NTkxREYwQjAeFw0yNDEwMjExMjU5NDFaFw0yNTEwMjAxMzA0NDFaMDMxMTAvBgNV
BAMTKDNFNjZCNTdCMzgzQzVEQjg0QTBDRTFENTUxQjE0MkM3MTk4QTg5MUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSDQDpUT2GhnDtUUhSCVaB8u0T
CCyBUD+yzRRuNF2LaZjh6k6LBQiVrrwZY+AFF8hq+GvrOWQmSSUQIUseuccl3ELl
5IypRJcZEi8e7YUAPVnMqxyOShphJRtKMdxIpIttnurDQOZ4g8nucTGdiCIO0EQn
GbMV84aOEst02Y/YdIThacf9gmN4cq/3Bcx2dcq3XqJkn6V10r+QG++RhFTNqSBh
NNzh6C3sHgsv67mQpHyXJBdlgncf9KUhkxxx6Vp9QTQ606HnWYoR+ix8K7lkuC/N
khsbScB6N3of3NOea0gmSprTI3l6tAjblaH7zzJKJm8NmHSjE/vNQs7BoJarAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUPma1ezg8XbhKDOHVUbFCxxmKiRowHwYDVR0j
BBgwFoAUe0Y4U+pKwBK9nzGUz6M68yWR3wswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXZwOXc4Z2hZY2JWZURlZnZNRENDaGJZVEdvZXB1WEVua1lNcWVRWlAx
UEQvMC83QjQ2Mzg1M0VBNEFDMDEyQkQ5RjMxOTRDRkEzM0FGMzI1OTFERjBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdCNDYzODUzRUE0QUMwMTJC
RDlGMzE5NENGQTMzQUYzMjU5MURGMEIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F2cDl3OGdoWWNiVmVEZWZ2TURDQ2hiWVRHb2VwdVhFbmtZTXFlUVpQMVBELzAv
MzIzODMwMzQzYTMxMzQzOTM0M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzMzMzMzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEFJSAMA0GCSqGSIb3DQEBCwUA
A4IBAQA1XZvWAhtQswNTCLirePm657qUbjmcrh8FjiQS/wU5T4P8UzEObQT5e+9w
PGQXhW1tRoSE/8n+i3QoxCJZXFD4xXjqxjix0D8rJyGsW1cjuhQS2e5hGvYxUebd
NV+qM7BYMnP0ZGQpwniH5F4AW2e3OLGZU+/9KJkarHJVJoJ8XvLar0IxfWXZFX/g
KevO+Wt5zzaHEMXL60OlV4GnpnDiJ+QPiGJt+rBiAw0tvpFGZa20wVyTI6pmb5np
e3dAmlMaLvwo8Ri4axs5BYpYxP3gDS7fHNVQCezotOBImiuk5StF/BGboZuXUDjD
qh5vVr9LSxjC6fO4A7LLRuhZDwi4
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:51:20 2024 by rpki-client on console-fra.rpki-client.org