Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/323830343a313066383a3a2f33322d313238203d3e203532373833.roa
File:                     323830343a313066383a3a2f33322d313238203d3e203532373833.roa (raw, json)
Hash identifier:          jDf87o6AKGn8MnC0MVgAzCBb2Libw6IdyFs8dodk434=
Subject key identifier:   69:3D:11:F9:E3:D8:C9:4C:C7:AA:A6:DB:7D:85:2C:7D:5D:06:DE:81
Certificate issuer:       /CN=3DDE2C96A736983C4145E6A74FA601EF275DE118
Certificate serial:       7FDFD99BE18437D04346A38D9D4FDF952648AD28
Authority key identifier: 3D:DE:2C:96:A7:36:98:3C:41:45:E6:A7:4F:A6:01:EF:27:5D:E1:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/323830343a313066383a3a2f33322d313238203d3e203532373833.roa
Signing time:             Thu 04 Apr 2024 22:41:16 +0000
ROA not before:           Thu 04 Apr 2024 22:36:16 +0000
ROA not after:            Thu 03 Apr 2025 22:41:16 +0000
asID:                     52783
IP address blocks:        2804:10f8::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.crl
                          rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:48:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:df:d9:9b:e1:84:37:d0:43:46:a3:8d:9d:4f:df:95:26:48:ad:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DDE2C96A736983C4145E6A74FA601EF275DE118
        Validity
            Not Before: Apr  4 22:36:16 2024 GMT
            Not After : Apr  3 22:41:16 2025 GMT
        Subject: CN=693D11F9E3D8C94CC7AAA6DB7D852C7D5D06DE81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:51:7e:f4:07:11:4d:91:f8:aa:53:b7:96:cc:
                    d5:9e:33:41:32:58:1e:9f:b6:44:84:39:bd:1c:cc:
                    01:fe:bf:e4:17:ee:1d:35:66:59:4c:c3:83:5c:39:
                    64:cf:b8:6a:c5:da:f1:a9:d7:57:e1:65:98:90:6d:
                    2f:de:94:31:0c:10:68:7e:72:b3:44:c4:2b:f9:fd:
                    74:be:5b:9b:6a:36:db:a6:de:05:64:73:b2:8c:89:
                    6d:a3:44:72:80:89:59:59:32:82:85:69:61:17:12:
                    9b:d8:4e:52:a5:5c:da:61:7c:5a:d2:a3:b0:fc:fa:
                    65:a4:3b:da:ad:78:92:bb:0c:d4:83:15:d6:4e:10:
                    dd:56:ba:7d:ef:20:1e:a6:48:9b:ec:19:02:2d:ba:
                    b8:53:53:61:fe:55:26:5b:1d:98:a2:ab:1e:70:24:
                    3a:1a:a0:39:4b:34:08:fb:25:2e:2f:fc:e7:0b:9f:
                    bb:52:32:43:d0:d1:dc:de:e8:30:87:d7:a8:7b:eb:
                    94:d2:bf:3c:18:7f:cd:9d:fd:59:98:49:ad:6b:b5:
                    65:fe:bc:80:17:f7:bd:1f:d9:9d:1b:83:d8:28:b2:
                    28:bc:e0:04:67:99:2e:a1:aa:2e:cf:be:f0:40:77:
                    78:6f:c5:8f:58:41:c1:c8:c6:e9:b8:0b:fb:c4:a8:
                    b0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:3D:11:F9:E3:D8:C9:4C:C7:AA:A6:DB:7D:85:2C:7D:5D:06:DE:81
            X509v3 Authority Key Identifier:
                keyid:3D:DE:2C:96:A7:36:98:3C:41:45:E6:A7:4F:A6:01:EF:27:5D:E1:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/323830343a313066383a3a2f33322d313238203d3e203532373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:10f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:53:d4:7d:5f:3a:b7:29:09:88:63:dc:69:f3:95:0e:58:18:
         8d:18:1a:64:1b:c9:08:d2:0c:36:be:04:e6:25:ee:7d:7b:dc:
         4e:f9:1f:bd:3d:82:1b:7b:5e:2d:e4:c0:d4:4b:01:6d:c9:a9:
         d3:ab:26:db:63:27:99:ea:b4:ec:e8:c8:de:cf:87:ac:5c:6c:
         0e:d3:96:d9:da:04:a3:8e:f1:d9:45:c5:35:22:22:e2:99:5b:
         af:aa:06:41:96:1d:b7:c6:5d:24:29:6a:b4:99:9a:75:e3:b1:
         83:ea:f4:ac:23:55:51:b1:97:22:24:2d:69:dd:e2:c9:7f:86:
         cd:34:a0:6d:18:a1:5a:7b:35:ef:b7:1e:fa:4a:eb:db:ac:c4:
         18:3d:06:52:92:ff:1c:85:44:c4:46:7f:cc:d1:28:12:4e:a5:
         4b:d8:a9:20:b9:d7:5e:0e:60:53:74:ae:78:aa:ed:95:59:c6:
         6a:ed:85:ee:14:8e:0b:8e:84:cc:1c:82:fb:28:20:64:81:28:
         69:f8:33:e4:20:6a:c3:e4:e3:2f:21:9f:f7:74:39:5b:85:48:
         bb:9e:bc:fc:41:24:64:9e:d9:c3:c9:e2:69:48:97:78:f8:f8:
         e4:2b:6c:98:4c:c6:0b:39:25:5e:a7:8c:db:aa:f3:f7:50:0d:
         3b:ca:6e:86
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUf9/Zm+GEN9BDRqONnU/flSZIrSgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0RERTJDOTZBNzM2OTgzQzQxNDVFNkE3NEZBNjAxRUYy
NzVERTExODAeFw0yNDA0MDQyMjM2MTZaFw0yNTA0MDMyMjQxMTZaMDMxMTAvBgNV
BAMTKDY5M0QxMUY5RTNEOEM5NENDN0FBQTZEQjdEODUyQzdENUQwNkRFODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcUX70BxFNkfiqU7eWzNWeM0Ey
WB6ftkSEOb0czAH+v+QX7h01ZllMw4NcOWTPuGrF2vGp11fhZZiQbS/elDEMEGh+
crNExCv5/XS+W5tqNtum3gVkc7KMiW2jRHKAiVlZMoKFaWEXEpvYTlKlXNphfFrS
o7D8+mWkO9qteJK7DNSDFdZOEN1Wun3vIB6mSJvsGQIturhTU2H+VSZbHZiiqx5w
JDoaoDlLNAj7JS4v/OcLn7tSMkPQ0dze6DCH16h765TSvzwYf82d/VmYSa1rtWX+
vIAX970f2Z0bg9gosii84ARnmS6hqi7PvvBAd3hvxY9YQcHIxum4C/vEqLBLAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUaT0R+ePYyUzHqqbbfYUsfV0G3oEwHwYDVR0j
BBgwFoAUPd4slqc2mDxBReanT6YB7ydd4RgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjRNd2U4ZHhwdWZLdXJTZjJCeG5TS3ZZZTNoOFJzc2l2NTU3eEI5TjlY
WUEvMS8zRERFMkM5NkE3MzY5ODNDNDE0NUU2QTc0RkE2MDFFRjI3NURFMTE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNEREUyQzk2QTczNjk4M0M0
MTQ1RTZBNzRGQTYwMUVGMjc1REUxMTguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I0TXdlOGR4cHVmS3VyU2YyQnhuU0t2WWUzaDhSc3NpdjU1N3hCOU45WFlBLzEv
MzIzODMwMzQzYTMxMzA2NjM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzNTMy
MzczODMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQQ+DANBgkqhkiG9w0BAQsFAAOCAQEAI1PUfV86
tykJiGPcafOVDlgYjRgaZBvJCNIMNr4E5iXufXvcTvkfvT2CG3teLeTA1EsBbcmp
06sm22Mnmeq07OjI3s+HrFxsDtOW2doEo47x2UXFNSIi4plbr6oGQZYdt8ZdJClq
tJmadeOxg+r0rCNVUbGXIiQtad3iyX+GzTSgbRihWns177ce+krr26zEGD0GUpL/
HIVExEZ/zNEoEk6lS9ipILnXXg5gU3SueKrtlVnGau2F7hSOC46EzByC+yggZIEo
afgz5CBqw+TjLyGf93Q5W4VIu568/EEkZJ7Zw8niaUiXePj45CtsmEzGCzklXqeM
26rz91ANO8puhg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:57 2024 by rpki-client on console-fra.rpki-client.org