Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ByCxDjvqHw87NiHDgvmYw3AxF9csyng5thtZNYXhvXJs/1/323830343a326433303a3a2f33322d3438203d3e20323635323635.roa
File:                     323830343a326433303a3a2f33322d3438203d3e20323635323635.roa (raw, json)
Hash identifier:          xOjiQ+y4T41Sh2w/aRonb896v136lUq/V5s2HPoV7hQ=
Subject key identifier:   14:34:E7:B0:71:D3:31:56:23:5B:A0:7F:77:73:58:FE:05:16:F1:00
Certificate issuer:       /CN=733F4B034A3788745713B6F81B211FD8957CF1EE
Certificate serial:       736A172866C7E836021F54E77ABE6CFC904AE458
Authority key identifier: 73:3F:4B:03:4A:37:88:74:57:13:B6:F8:1B:21:1F:D8:95:7C:F1:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/733F4B034A3788745713B6F81B211FD8957CF1EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ByCxDjvqHw87NiHDgvmYw3AxF9csyng5thtZNYXhvXJs/1/323830343a326433303a3a2f33322d3438203d3e20323635323635.roa
Signing time:             Thu 04 Apr 2024 23:14:27 +0000
ROA not before:           Thu 04 Apr 2024 23:09:27 +0000
ROA not after:            Thu 03 Apr 2025 23:14:27 +0000
asID:                     265265
IP address blocks:        2804:2d30::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ByCxDjvqHw87NiHDgvmYw3AxF9csyng5thtZNYXhvXJs/1/733F4B034A3788745713B6F81B211FD8957CF1EE.crl
                          rsync://rpki-repo.registro.br/repo/ByCxDjvqHw87NiHDgvmYw3AxF9csyng5thtZNYXhvXJs/1/733F4B034A3788745713B6F81B211FD8957CF1EE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/733F4B034A3788745713B6F81B211FD8957CF1EE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:6a:17:28:66:c7:e8:36:02:1f:54:e7:7a:be:6c:fc:90:4a:e4:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733F4B034A3788745713B6F81B211FD8957CF1EE
        Validity
            Not Before: Apr  4 23:09:27 2024 GMT
            Not After : Apr  3 23:14:27 2025 GMT
        Subject: CN=1434E7B071D33156235BA07F777358FE0516F100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b3:e4:b5:40:8f:b1:77:5c:23:4f:18:6f:f0:
                    0f:67:2b:9a:16:d4:17:64:cd:e8:53:ec:65:60:c8:
                    35:cb:28:21:d6:39:39:e4:c0:fa:b2:4b:35:4c:59:
                    7f:21:6a:79:ad:7d:3b:72:a0:52:04:74:fe:a9:bf:
                    5f:8d:84:2a:76:3a:01:bd:64:8b:3e:79:94:05:4c:
                    1e:f8:e2:a0:4e:2b:f3:37:93:87:8d:f1:4e:36:ba:
                    6b:11:5f:80:2c:40:aa:1d:cb:cb:34:e2:9a:8c:05:
                    d3:b4:fa:26:3b:a5:eb:cf:76:92:f8:5a:82:dd:10:
                    6b:0a:0c:17:e9:97:c1:d3:0c:24:e6:99:3e:23:3a:
                    66:19:20:cf:6b:da:ab:82:b1:5c:fa:39:cc:a1:90:
                    de:55:93:03:bd:7c:c7:63:94:2e:22:bb:90:ee:87:
                    0b:a6:eb:df:11:87:d0:8d:72:99:62:ce:76:9a:61:
                    91:10:b6:bf:ec:75:c1:12:8d:54:53:2c:10:a3:96:
                    ef:6e:4c:2e:7f:ec:fa:a7:4e:10:8c:27:4a:d3:5b:
                    cb:f4:16:81:db:e7:e6:27:da:0b:b3:fd:e3:6d:37:
                    26:cb:11:53:a8:db:e8:5a:33:38:0b:24:f6:ce:3a:
                    82:f5:0d:d9:ea:be:61:6f:7b:2f:19:28:54:7b:15:
                    f6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:34:E7:B0:71:D3:31:56:23:5B:A0:7F:77:73:58:FE:05:16:F1:00
            X509v3 Authority Key Identifier:
                keyid:73:3F:4B:03:4A:37:88:74:57:13:B6:F8:1B:21:1F:D8:95:7C:F1:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ByCxDjvqHw87NiHDgvmYw3AxF9csyng5thtZNYXhvXJs/1/733F4B034A3788745713B6F81B211FD8957CF1EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/733F4B034A3788745713B6F81B211FD8957CF1EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ByCxDjvqHw87NiHDgvmYw3AxF9csyng5thtZNYXhvXJs/1/323830343a326433303a3a2f33322d3438203d3e20323635323635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d30::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:61:f3:21:63:f3:c0:60:cf:a0:f0:c5:14:de:6e:4b:3b:58:
         46:58:b2:4c:99:7b:c8:3b:12:43:05:29:e0:aa:de:d6:a9:69:
         7c:2c:6f:7d:d4:8f:65:5b:51:65:3d:22:8f:be:c3:7b:19:00:
         0c:70:59:d2:2f:db:7c:93:f8:f2:9d:16:3f:3d:69:1f:dd:52:
         42:44:b1:27:02:c3:12:4b:36:50:9c:7c:c0:15:88:23:ee:f8:
         4b:b5:80:86:b0:6a:e4:3f:d8:04:9f:43:2d:f0:e1:94:e9:7f:
         a6:26:82:ae:9e:4c:53:be:ed:e5:bb:ce:7c:1a:c6:6c:69:4e:
         c2:41:b2:ee:55:21:ce:09:5c:c1:10:7c:e0:b2:60:61:57:4a:
         08:38:8f:e8:72:18:38:54:b1:d2:0d:5c:f2:e6:bb:ac:57:5e:
         85:e1:e9:7c:7b:ee:5b:90:97:32:62:1a:1a:0b:86:c3:4f:17:
         86:6f:48:d0:85:4c:b0:b7:b6:c2:2d:49:0f:6f:45:2d:6e:50:
         46:61:5a:e8:a9:55:95:f4:ac:66:20:f2:50:1f:b3:d6:5f:26:
         8a:8e:8c:8b:52:56:80:2e:ad:1d:cf:89:fe:7a:f0:be:da:23:
         cf:e1:1d:cb:7c:61:b9:3e:c6:f7:dd:52:40:a9:76:d1:d2:fa:
         f9:0d:46:f7
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUc2oXKGbH6DYCH1Tner5s/JBK5FgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzMzRjRCMDM0QTM3ODg3NDU3MTNCNkY4MUIyMTFGRDg5
NTdDRjFFRTAeFw0yNDA0MDQyMzA5MjdaFw0yNTA0MDMyMzE0MjdaMDMxMTAvBgNV
BAMTKDE0MzRFN0IwNzFEMzMxNTYyMzVCQTA3Rjc3NzM1OEZFMDUxNkYxMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+s+S1QI+xd1wjTxhv8A9nK5oW
1BdkzehT7GVgyDXLKCHWOTnkwPqySzVMWX8hanmtfTtyoFIEdP6pv1+NhCp2OgG9
ZIs+eZQFTB744qBOK/M3k4eN8U42umsRX4AsQKody8s04pqMBdO0+iY7pevPdpL4
WoLdEGsKDBfpl8HTDCTmmT4jOmYZIM9r2quCsVz6OcyhkN5VkwO9fMdjlC4iu5Du
hwum698Rh9CNcpliznaaYZEQtr/sdcESjVRTLBCjlu9uTC5/7PqnThCMJ0rTW8v0
FoHb5+Yn2guz/eNtNybLEVOo2+haMzgLJPbOOoL1DdnqvmFvey8ZKFR7FfblAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUFDTnsHHTMVYjW6B/d3NY/gUW8QAwHwYDVR0j
BBgwFoAUcz9LA0o3iHRXE7b4GyEf2JV88e4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnlDeERqdnFIdzg3TmlIRGd2bVl3M0F4Rjljc3luZzV0aHRaTllYaHZY
SnMvMS83MzNGNEIwMzRBMzc4ODc0NTcxM0I2RjgxQjIxMUZEODk1N0NGMUVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzczM0Y0QjAzNEEzNzg4NzQ1
NzEzQjZGODFCMjExRkQ4OTU3Q0YxRUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J5Q3hEanZxSHc4N05pSERndm1ZdzNBeEY5Y3N5bmc1dGh0Wk5ZWGh2WEpzLzEv
MzIzODMwMzQzYTMyNjQzMzMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM1
MzIzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQtMDANBgkqhkiG9w0BAQsFAAOCAQEAWWHzIWPz
wGDPoPDFFN5uSztYRliyTJl7yDsSQwUp4Kre1qlpfCxvfdSPZVtRZT0ij77DexkA
DHBZ0i/bfJP48p0WPz1pH91SQkSxJwLDEks2UJx8wBWII+74S7WAhrBq5D/YBJ9D
LfDhlOl/piaCrp5MU77t5bvOfBrGbGlOwkGy7lUhzglcwRB84LJgYVdKCDiP6HIY
OFSx0g1c8ua7rFdeheHpfHvuW5CXMmIaGguGw08Xhm9I0IVMsLe2wi1JD29FLW5Q
RmFa6KlVlfSsZiDyUB+z1l8mio6Mi1JWgC6tHc+J/nrwvtojz+Edy3xhuT7G991S
QKl20dL6+Q1G9w==
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:18 2024 by rpki-client on console-fra.rpki-client.org