Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/1/323830343a333664343a3a2f33322d3332203d3e20323636333735.roa
File:                     323830343a333664343a3a2f33322d3332203d3e20323636333735.roa (raw, json)
Hash identifier:          b5Iu6nOkRnL9BQBv9dJW7WqyFvVdagOyH9hLE1KD9/s=
Subject key identifier:   CD:D8:00:25:BA:EC:0E:90:CD:59:26:D5:BE:A4:82:2B:0C:91:94:9F
Certificate issuer:       /CN=52DC1D0D4DA270646A5CC0BE564DD3E2ED696E7F
Certificate serial:       58883E3BD7D019E70CF9EFF1B28362F071A37749
Authority key identifier: 52:DC:1D:0D:4D:A2:70:64:6A:5C:C0:BE:56:4D:D3:E2:ED:69:6E:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52DC1D0D4DA270646A5CC0BE564DD3E2ED696E7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/1/323830343a333664343a3a2f33322d3332203d3e20323636333735.roa
Signing time:             Thu 04 Apr 2024 17:46:27 +0000
ROA not before:           Thu 04 Apr 2024 17:41:27 +0000
ROA not after:            Thu 03 Apr 2025 17:46:27 +0000
asID:                     266375
IP address blocks:        2804:36d4::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/1/52DC1D0D4DA270646A5CC0BE564DD3E2ED696E7F.crl
                          rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/1/52DC1D0D4DA270646A5CC0BE564DD3E2ED696E7F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52DC1D0D4DA270646A5CC0BE564DD3E2ED696E7F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:12:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:88:3e:3b:d7:d0:19:e7:0c:f9:ef:f1:b2:83:62:f0:71:a3:77:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52DC1D0D4DA270646A5CC0BE564DD3E2ED696E7F
        Validity
            Not Before: Apr  4 17:41:27 2024 GMT
            Not After : Apr  3 17:46:27 2025 GMT
        Subject: CN=CDD80025BAEC0E90CD5926D5BEA4822B0C91949F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:96:45:29:02:d5:04:eb:8a:a9:46:2e:70:12:
                    c4:66:0d:66:30:48:ed:b8:e5:2c:89:50:85:09:b3:
                    14:dc:96:6c:af:8d:b2:d2:05:fd:49:d7:ba:93:dd:
                    02:49:7a:e9:39:fc:93:f6:bf:14:71:a2:33:67:6d:
                    d8:b6:f4:f9:07:29:ec:71:4c:fb:d3:95:f2:53:05:
                    79:88:1f:98:04:23:cb:1c:04:72:1a:68:e8:97:8f:
                    99:9f:03:70:67:06:b2:88:3a:26:8a:db:c6:86:ce:
                    36:26:ef:6f:a1:64:bc:55:b4:95:4b:22:a9:6d:1d:
                    a4:90:98:ef:a4:03:35:35:78:dd:02:70:e1:f0:2a:
                    b2:a9:9a:18:e8:4b:12:f8:e0:61:96:0e:29:ff:df:
                    a1:2c:44:96:02:6a:31:55:98:1c:02:00:eb:b6:d6:
                    01:72:62:7a:ef:02:00:e8:5b:3b:0b:c8:4c:dc:23:
                    d1:88:c0:71:37:ae:4c:3c:7e:88:97:92:c0:0a:a9:
                    67:2b:10:66:38:db:35:3c:70:96:00:f6:9d:ef:21:
                    f8:7f:2c:b3:af:de:98:ee:c9:64:a8:1e:2d:e1:f2:
                    d7:da:fe:f9:27:3f:71:f8:3f:c1:b3:3c:ff:a2:96:
                    68:2b:97:95:9d:2a:f0:22:0f:66:26:e1:5c:c8:2d:
                    4e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:D8:00:25:BA:EC:0E:90:CD:59:26:D5:BE:A4:82:2B:0C:91:94:9F
            X509v3 Authority Key Identifier:
                keyid:52:DC:1D:0D:4D:A2:70:64:6A:5C:C0:BE:56:4D:D3:E2:ED:69:6E:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/1/52DC1D0D4DA270646A5CC0BE564DD3E2ED696E7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52DC1D0D4DA270646A5CC0BE564DD3E2ED696E7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/1/323830343a333664343a3a2f33322d3332203d3e20323636333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:36d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:68:7f:2e:ae:e8:84:6f:87:27:ae:bd:31:73:43:02:b9:38:
         2f:e3:f9:8e:18:3f:05:c2:cf:05:79:9a:9f:47:06:d0:bf:5d:
         eb:e9:cd:ca:a0:8b:32:f5:20:ee:7a:a4:e9:a3:82:d1:f4:c1:
         36:75:de:7c:80:97:aa:52:0b:d1:8d:44:f0:66:36:bf:3c:83:
         91:a1:ed:d5:de:0a:30:6b:76:9b:24:b9:32:83:09:6f:52:6e:
         35:6c:39:3a:54:08:35:8a:13:3c:98:dd:64:38:ab:76:d4:53:
         08:63:49:46:dc:f4:ce:b9:fe:c0:e9:23:53:65:d5:4d:6c:3e:
         8b:e5:9f:cf:b2:ff:98:cd:b8:18:e8:33:6b:d4:98:4d:1d:87:
         87:05:5f:e1:b1:10:53:ad:a5:42:07:d5:34:6d:78:14:26:ec:
         80:fc:50:44:66:2e:9a:96:57:ea:7a:b6:48:69:e4:a9:dc:9b:
         28:5d:9d:bb:e2:8c:10:06:15:74:28:e8:66:9c:70:55:7e:fb:
         01:e3:4d:bc:fa:14:70:31:21:65:45:cf:a1:22:ec:ad:0c:70:
         ab:5c:a7:a0:25:a1:d7:87:70:1f:4f:44:50:45:14:c5:cc:84:
         2a:d7:05:91:69:a4:b4:61:f8:93:4f:6a:4f:56:03:48:6c:a2:
         72:cf:98:17
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUWIg+O9fQGecM+e/xsoNi8HGjd0kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTJEQzFEMEQ0REEyNzA2NDZBNUNDMEJFNTY0REQzRTJF
RDY5NkU3RjAeFw0yNDA0MDQxNzQxMjdaFw0yNTA0MDMxNzQ2MjdaMDMxMTAvBgNV
BAMTKENERDgwMDI1QkFFQzBFOTBDRDU5MjZENUJFQTQ4MjJCMEM5MTk0OUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCflkUpAtUE64qpRi5wEsRmDWYw
SO245SyJUIUJsxTclmyvjbLSBf1J17qT3QJJeuk5/JP2vxRxojNnbdi29PkHKexx
TPvTlfJTBXmIH5gEI8scBHIaaOiXj5mfA3BnBrKIOiaK28aGzjYm72+hZLxVtJVL
IqltHaSQmO+kAzU1eN0CcOHwKrKpmhjoSxL44GGWDin/36EsRJYCajFVmBwCAOu2
1gFyYnrvAgDoWzsLyEzcI9GIwHE3rkw8foiXksAKqWcrEGY42zU8cJYA9p3vIfh/
LLOv3pjuyWSoHi3h8tfa/vknP3H4P8GzPP+ilmgrl5WdKvAiD2Ym4VzILU6DAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUzdgAJbrsDpDNWSbVvqSCKwyRlJ8wHwYDVR0j
BBgwFoAUUtwdDU2icGRqXMC+Vk3T4u1pbn8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjU4Vm9yMmVTUTFmMThZR2FxaGltTmRqeVlvSG5RS3lLdjhXanluNjhG
NzYvMS81MkRDMUQwRDREQTI3MDY0NkE1Q0MwQkU1NjRERDNFMkVENjk2RTdGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUyREMxRDBENERBMjcwNjQ2
QTVDQzBCRTU2NEREM0UyRUQ2OTZFN0YuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y1OFZvcjJlU1ExZjE4WUdhcWhpbU5kanlZb0huUUt5S3Y4V2p5bjY4Rjc2LzEv
MzIzODMwMzQzYTMzMzY2NDM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM2
MzMzNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ21DANBgkqhkiG9w0BAQsFAAOCAQEAimh/Lq7o
hG+HJ669MXNDArk4L+P5jhg/BcLPBXman0cG0L9d6+nNyqCLMvUg7nqk6aOC0fTB
NnXefICXqlIL0Y1E8GY2vzyDkaHt1d4KMGt2myS5MoMJb1JuNWw5OlQINYoTPJjd
ZDirdtRTCGNJRtz0zrn+wOkjU2XVTWw+i+Wfz7L/mM24GOgza9SYTR2HhwVf4bEQ
U62lQgfVNG14FCbsgPxQRGYumpZX6nq2SGnkqdybKF2du+KMEAYVdCjoZpxwVX77
AeNNvPoUcDEhZUXPoSLsrQxwq1ynoCWh14dwH09EUEUUxcyEKtcFkWmktGH4k09q
T1YDSGyics+YFw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:11 2024 by rpki-client on console-fra.rpki-client.org