Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/1/323830343a353239383a3a2f33322d3334203d3e20323638353238.roa
File:                     323830343a353239383a3a2f33322d3334203d3e20323638353238.roa (raw, json)
Hash identifier:          zFOeII8hqDqXQwzzoTHpMhnArIxPXh1BabkIJEWN9tw=
Subject key identifier:   F5:51:C7:1B:78:EB:D6:AA:C1:E6:68:F0:F7:90:EA:A8:D8:37:33:EB
Certificate issuer:       /CN=3A9605B2DF9025F5056C61296B879441CB6D80F9
Certificate serial:       32CC16B71DD9BB2D9839DDAF14885C47D378AE53
Authority key identifier: 3A:96:05:B2:DF:90:25:F5:05:6C:61:29:6B:87:94:41:CB:6D:80:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A9605B2DF9025F5056C61296B879441CB6D80F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/1/323830343a353239383a3a2f33322d3334203d3e20323638353238.roa
Signing time:             Thu 04 Apr 2024 07:41:34 +0000
ROA not before:           Thu 04 Apr 2024 07:36:34 +0000
ROA not after:            Thu 03 Apr 2025 07:41:34 +0000
asID:                     268528
IP address blocks:        2804:5298::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/1/3A9605B2DF9025F5056C61296B879441CB6D80F9.crl
                          rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/1/3A9605B2DF9025F5056C61296B879441CB6D80F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A9605B2DF9025F5056C61296B879441CB6D80F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:42:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:cc:16:b7:1d:d9:bb:2d:98:39:dd:af:14:88:5c:47:d3:78:ae:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A9605B2DF9025F5056C61296B879441CB6D80F9
        Validity
            Not Before: Apr  4 07:36:34 2024 GMT
            Not After : Apr  3 07:41:34 2025 GMT
        Subject: CN=F551C71B78EBD6AAC1E668F0F790EAA8D83733EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9e:a6:bf:75:7d:05:6a:80:11:d9:38:6a:c8:
                    28:95:2c:4e:7d:16:18:a6:89:ff:80:6a:16:6d:20:
                    82:ab:a4:ef:d7:9a:b1:b5:81:45:41:0a:e6:7e:77:
                    8a:86:0b:f8:7a:27:9c:2a:83:a3:66:9b:ba:93:6c:
                    63:8e:13:a5:58:64:e8:73:4e:cb:bf:22:12:7d:3c:
                    1b:1d:b4:1c:70:cb:86:d8:1a:da:2d:a6:99:55:09:
                    1d:8c:78:78:38:f7:a3:07:ac:e9:79:03:4e:5e:1c:
                    92:e3:ed:dc:2d:be:ff:bf:5e:1f:07:49:da:80:c2:
                    15:a0:15:f0:b1:aa:d2:18:bb:0a:6d:14:48:97:6c:
                    b5:88:83:b6:fb:19:9b:c8:a8:5f:eb:96:5a:b9:4d:
                    0c:a4:0d:c9:ed:b9:a5:af:bb:fa:9e:70:09:60:0d:
                    77:11:fc:ff:1d:12:09:2c:90:b8:76:35:8e:0b:47:
                    f7:c3:a8:72:4e:6a:f8:86:82:2c:a0:2d:96:7f:48:
                    5e:39:61:70:ea:e0:38:9c:a3:f4:ae:6b:76:49:08:
                    b5:72:2f:73:48:af:e1:ee:f5:22:ac:a1:09:c4:ab:
                    e0:bb:92:2c:82:20:26:ac:ca:db:89:86:d6:a1:8e:
                    90:87:e5:52:26:15:11:8a:b0:72:37:82:49:18:c6:
                    bc:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:51:C7:1B:78:EB:D6:AA:C1:E6:68:F0:F7:90:EA:A8:D8:37:33:EB
            X509v3 Authority Key Identifier:
                keyid:3A:96:05:B2:DF:90:25:F5:05:6C:61:29:6B:87:94:41:CB:6D:80:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/1/3A9605B2DF9025F5056C61296B879441CB6D80F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A9605B2DF9025F5056C61296B879441CB6D80F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/1/323830343a353239383a3a2f33322d3334203d3e20323638353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5298::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:43:a2:c7:c8:4b:22:6a:af:58:83:3a:11:32:1d:ef:96:88:
         84:53:ec:f2:da:01:4e:bb:3d:19:86:73:70:95:34:10:30:13:
         b5:ad:76:61:e9:56:2e:2a:ef:21:3f:2f:47:ff:c3:6e:c6:a2:
         be:cb:08:4c:58:9f:da:37:42:e9:5e:8e:82:5e:ed:d6:6e:c3:
         c9:3a:fa:58:5d:ab:c9:bc:26:60:da:41:ed:7e:99:b4:9f:79:
         c4:ac:3d:c9:a2:06:df:3b:06:63:8b:3c:3c:16:78:73:b4:e9:
         b7:76:90:13:03:3a:c4:1b:7c:73:04:e2:67:d3:b8:e6:d1:4e:
         2d:a9:09:4d:ea:1c:3d:49:d2:56:b0:f4:98:16:71:da:d8:f1:
         68:13:18:4f:f1:f6:f1:5c:f4:81:f8:a0:37:7d:36:b1:7d:49:
         06:e4:96:8b:de:b4:70:94:b6:12:8f:a9:98:1f:0d:ab:65:21:
         ff:7f:71:d4:06:5a:68:64:41:54:fe:33:2f:06:8e:90:31:d2:
         a9:6e:e6:d8:6d:a8:22:8b:eb:cb:07:3f:bc:cb:77:36:f4:b4:
         0f:79:db:b4:cf:63:dc:ef:df:57:c6:56:b7:ac:b7:87:d7:ed:
         c4:0a:42:7c:66:76:57:fc:27:34:2e:d1:0a:2e:47:b4:00:d4:
         d0:11:ee:5a
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUMswWtx3Zuy2YOd2vFIhcR9N4rlMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0E5NjA1QjJERjkwMjVGNTA1NkM2MTI5NkI4Nzk0NDFD
QjZEODBGOTAeFw0yNDA0MDQwNzM2MzRaFw0yNTA0MDMwNzQxMzRaMDMxMTAvBgNV
BAMTKEY1NTFDNzFCNzhFQkQ2QUFDMUU2NjhGMEY3OTBFQUE4RDgzNzMzRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXnqa/dX0FaoAR2ThqyCiVLE59
Fhimif+AahZtIIKrpO/XmrG1gUVBCuZ+d4qGC/h6J5wqg6Nmm7qTbGOOE6VYZOhz
Tsu/IhJ9PBsdtBxwy4bYGtotpplVCR2MeHg496MHrOl5A05eHJLj7dwtvv+/Xh8H
SdqAwhWgFfCxqtIYuwptFEiXbLWIg7b7GZvIqF/rllq5TQykDcntuaWvu/qecAlg
DXcR/P8dEgkskLh2NY4LR/fDqHJOaviGgiygLZZ/SF45YXDq4Dico/Sua3ZJCLVy
L3NIr+Hu9SKsoQnEq+C7kiyCICasytuJhtahjpCH5VImFRGKsHI3gkkYxrylAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU9VHHG3jr1qrB5mjw95DqqNg3M+swHwYDVR0j
BBgwFoAUOpYFst+QJfUFbGEpa4eUQcttgPkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQndlelBxQ3RwRlpFN1ZtcVJTeVBRRlBzTHc1Y1NKMm52UGlGMjlSQ0w0
OXYvMS8zQTk2MDVCMkRGOTAyNUY1MDU2QzYxMjk2Qjg3OTQ0MUNCNkQ4MEY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBOTYwNUIyREY5MDI1RjUw
NTZDNjEyOTZCODc5NDQxQ0I2RDgwRjkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J3ZXpQcUN0cEZaRTdWbXFSU3lQUUZQc0x3NWNTSjJudlBpRjI5UkNMNDl2LzEv
MzIzODMwMzQzYTM1MzIzOTM4M2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjM4
MzUzMjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARSmDANBgkqhkiG9w0BAQsFAAOCAQEAGUOix8hL
ImqvWIM6ETId75aIhFPs8toBTrs9GYZzcJU0EDATta12YelWLirvIT8vR//Dbsai
vssITFif2jdC6V6Ogl7t1m7DyTr6WF2rybwmYNpB7X6ZtJ95xKw9yaIG3zsGY4s8
PBZ4c7Tpt3aQEwM6xBt8cwTiZ9O45tFOLakJTeocPUnSVrD0mBZx2tjxaBMYT/H2
8Vz0gfigN302sX1JBuSWi960cJS2Eo+pmB8Nq2Uh/39x1AZaaGRBVP4zLwaOkDHS
qW7m2G2oIovrywc/vMt3NvS0D3nbtM9j3O/fV8ZWt6y3h9ftxApCfGZ2V/wnNC7R
Ci5HtADU0BHuWg==
-----END CERTIFICATE-----
Generated at Tue Nov 26 02:25:35 2024 by rpki-client on console-ams.rpki-client.org