Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FvFoodmrvtW77P2dLTPcGuvgjUtAJKjKJBGWPJb41YFZ/0/323830343a333838343a633030303a3a2f33342d3334203d3e20323636343833.roa
File:                     323830343a333838343a633030303a3a2f33342d3334203d3e20323636343833.roa (raw, json)
Hash identifier:          /QrBAzlhnnxWWnLyYm+ffEQoxTofU/5Nb+mW07bKeYA=
Subject key identifier:   3B:67:13:8B:C4:F2:3C:AC:97:B2:87:DC:24:C8:57:16:DA:D2:34:0B
Certificate issuer:       /CN=045C70D44AB71632AB16AA37E88D48AC51F08992
Certificate serial:       1C7A18F6A6967EE9850807ED1DD83ED3F81272AB
Authority key identifier: 04:5C:70:D4:4A:B7:16:32:AB:16:AA:37:E8:8D:48:AC:51:F0:89:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/045C70D44AB71632AB16AA37E88D48AC51F08992.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FvFoodmrvtW77P2dLTPcGuvgjUtAJKjKJBGWPJb41YFZ/0/323830343a333838343a633030303a3a2f33342d3334203d3e20323636343833.roa
Signing time:             Mon 11 Nov 2024 12:22:40 +0000
ROA not before:           Mon 11 Nov 2024 12:17:40 +0000
ROA not after:            Mon 10 Nov 2025 12:22:40 +0000
asID:                     266483
IP address blocks:        2804:3884:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FvFoodmrvtW77P2dLTPcGuvgjUtAJKjKJBGWPJb41YFZ/0/045C70D44AB71632AB16AA37E88D48AC51F08992.crl
                          rsync://rpki-repo.registro.br/repo/FvFoodmrvtW77P2dLTPcGuvgjUtAJKjKJBGWPJb41YFZ/0/045C70D44AB71632AB16AA37E88D48AC51F08992.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/045C70D44AB71632AB16AA37E88D48AC51F08992.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:7a:18:f6:a6:96:7e:e9:85:08:07:ed:1d:d8:3e:d3:f8:12:72:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=045C70D44AB71632AB16AA37E88D48AC51F08992
        Validity
            Not Before: Nov 11 12:17:40 2024 GMT
            Not After : Nov 10 12:22:40 2025 GMT
        Subject: CN=3B67138BC4F23CAC97B287DC24C85716DAD2340B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:45:96:e8:63:35:c7:0d:e1:2e:30:30:da:8a:
                    0a:75:2d:57:b3:62:c1:2f:9e:06:99:8f:ae:39:c9:
                    05:3d:91:73:75:c6:0d:9c:47:cb:15:f1:69:6a:38:
                    6b:c6:90:20:24:0e:70:1a:e2:b2:fe:9a:c4:cd:8b:
                    7c:77:24:5b:6e:a3:4a:95:89:3d:bf:37:5b:0e:6f:
                    1c:bc:fa:ff:e2:50:6e:ee:80:5b:15:d4:55:41:07:
                    b7:c1:58:a4:30:86:ab:3e:20:f3:5f:d9:f8:04:58:
                    fd:5a:3f:ad:17:70:e8:dd:14:39:07:37:b7:8d:84:
                    0d:e3:bc:2c:34:97:f4:98:2b:74:8f:f2:67:5d:08:
                    65:7c:de:a2:21:dd:f5:b9:76:75:35:9d:84:ab:db:
                    28:2a:e0:e7:e4:fb:34:f5:a3:5c:fe:13:05:6f:b6:
                    a4:59:b2:9d:5c:77:fa:7a:8e:1f:6a:85:33:18:8c:
                    9a:5e:ac:ec:4e:cf:a3:d4:9e:1a:e1:ea:24:44:08:
                    8e:99:66:1a:41:62:08:02:7d:b5:a3:3c:96:f5:72:
                    8a:fe:c5:36:2b:32:19:7f:ba:32:93:87:26:83:c8:
                    fa:bc:b5:d4:86:17:d3:4c:ba:11:9b:1c:d7:d3:12:
                    cd:6c:ff:bb:66:3a:0b:db:46:e0:aa:fd:7a:f3:c6:
                    23:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:67:13:8B:C4:F2:3C:AC:97:B2:87:DC:24:C8:57:16:DA:D2:34:0B
            X509v3 Authority Key Identifier:
                keyid:04:5C:70:D4:4A:B7:16:32:AB:16:AA:37:E8:8D:48:AC:51:F0:89:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FvFoodmrvtW77P2dLTPcGuvgjUtAJKjKJBGWPJb41YFZ/0/045C70D44AB71632AB16AA37E88D48AC51F08992.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/045C70D44AB71632AB16AA37E88D48AC51F08992.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FvFoodmrvtW77P2dLTPcGuvgjUtAJKjKJBGWPJb41YFZ/0/323830343a333838343a633030303a3a2f33342d3334203d3e20323636343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3884:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         80:84:27:e3:8f:0f:fb:19:04:0d:59:54:08:75:37:3a:fc:e7:
         e2:ac:7f:fb:1f:c0:4d:53:94:63:66:1f:15:d3:0a:18:54:6c:
         ce:e4:2e:e0:ef:2a:70:7b:a7:73:f7:79:35:f2:ac:63:5e:12:
         2e:6c:d8:61:1c:ce:3e:2f:c7:b1:62:93:0e:64:36:d9:bc:b7:
         ee:67:b7:4d:a7:4d:ce:81:7a:9e:59:b6:46:75:de:4a:44:c0:
         7c:cb:a9:0c:f7:33:d4:5f:85:69:fb:87:3b:48:f9:1d:e7:f5:
         c5:a5:52:d2:85:e9:d1:a3:63:c3:50:96:59:40:ff:f5:af:3c:
         09:2e:91:83:ef:2f:27:37:58:db:6c:ff:86:a7:c2:36:d3:fa:
         ae:73:d5:b7:ad:41:e8:6c:bb:0e:01:cb:10:23:e9:ae:50:67:
         c3:ee:86:65:e8:76:6a:7e:52:51:3b:8c:52:73:ef:b6:b6:cd:
         dc:c9:1d:3f:74:fc:bb:b5:03:c0:02:12:0e:a6:a4:32:c6:cd:
         3f:77:d5:e9:ed:48:70:25:c2:54:03:20:37:77:23:f8:73:b1:
         c4:7e:72:a5:d3:58:84:e6:4e:95:64:6e:4c:50:8e:d9:79:0f:
         36:89:28:ff:3f:df:0f:47:b0:c8:78:ef:10:47:f9:9e:11:5b:
         82:13:94:00
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUHHoY9qaWfumFCAftHdg+0/gScqswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ1QzcwRDQ0QUI3MTYzMkFCMTZBQTM3RTg4RDQ4QUM1
MUYwODk5MjAeFw0yNDExMTExMjE3NDBaFw0yNTExMTAxMjIyNDBaMDMxMTAvBgNV
BAMTKDNCNjcxMzhCQzRGMjNDQUM5N0IyODdEQzI0Qzg1NzE2REFEMjM0MEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHRZboYzXHDeEuMDDaigp1LVez
YsEvngaZj645yQU9kXN1xg2cR8sV8WlqOGvGkCAkDnAa4rL+msTNi3x3JFtuo0qV
iT2/N1sObxy8+v/iUG7ugFsV1FVBB7fBWKQwhqs+IPNf2fgEWP1aP60XcOjdFDkH
N7eNhA3jvCw0l/SYK3SP8mddCGV83qIh3fW5dnU1nYSr2ygq4Ofk+zT1o1z+EwVv
tqRZsp1cd/p6jh9qhTMYjJperOxOz6PUnhrh6iRECI6ZZhpBYggCfbWjPJb1cor+
xTYrMhl/ujKThyaDyPq8tdSGF9NMuhGbHNfTEs1s/7tmOgvbRuCq/XrzxiPJAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUO2cTi8TyPKyXsofcJMhXFtrSNAswHwYDVR0j
BBgwFoAUBFxw1Eq3FjKrFqo36I1IrFHwiZIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnZGb29kbXJ2dFc3N1AyZExUUGNHdXZnalV0QUpLaktKQkdXUEpiNDFZ
RlovMC8wNDVDNzBENDRBQjcxNjMyQUIxNkFBMzdFODhENDhBQzUxRjA4OTkyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA0NUM3MEQ0NEFCNzE2MzJB
QjE2QUEzN0U4OEQ0OEFDNTFGMDg5OTIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Z2Rm9vZG1ydnRXNzdQMmRMVFBjR3V2Z2pVdEFKS2pLSkJHV1BKYjQxWUZaLzAv
MzIzODMwMzQzYTMzMzgzODM0M2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNjM0MzgzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEOITAMA0GCSqGSIb3DQEBCwUA
A4IBAQCAhCfjjw/7GQQNWVQIdTc6/OfirH/7H8BNU5RjZh8V0woYVGzO5C7g7ypw
e6dz93k18qxjXhIubNhhHM4+L8exYpMOZDbZvLfuZ7dNp03OgXqeWbZGdd5KRMB8
y6kM9zPUX4Vp+4c7SPkd5/XFpVLShenRo2PDUJZZQP/1rzwJLpGD7y8nN1jbbP+G
p8I20/quc9W3rUHobLsOAcsQI+muUGfD7oZl6HZqflJRO4xSc++2ts3cyR0/dPy7
tQPAAhIOpqQyxs0/d9Xp7UhwJcJUAyA3dyP4c7HEfnKl01iE5k6VZG5MUI7ZeQ82
iSj/P98PR7DIeO8QR/meEVuCE5QA
-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:37 2024 by rpki-client on console-fra.rpki-client.org