Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/323830343a6531633a3a2f33332d3333203d3e203532353435.roa
File:                     323830343a6531633a3a2f33332d3333203d3e203532353435.roa (raw, json)
Hash identifier:          SjVZxp7ZXgiIrATP5OMxg4qspmDRl12YjvC8bOS7k9w=
Subject key identifier:   94:D7:76:8B:33:47:87:54:DC:0C:C6:24:63:E0:26:0A:09:43:F4:D7
Certificate issuer:       /CN=3525DEC2C298F98A0A0CC888E805E01C39FD63D7
Certificate serial:       7867297489681425AE97FE7674317060AF3A69DF
Authority key identifier: 35:25:DE:C2:C2:98:F9:8A:0A:0C:C8:88:E8:05:E0:1C:39:FD:63:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/323830343a6531633a3a2f33332d3333203d3e203532353435.roa
Signing time:             Thu 04 Apr 2024 01:52:34 +0000
ROA not before:           Thu 04 Apr 2024 01:47:34 +0000
ROA not after:            Thu 03 Apr 2025 01:52:34 +0000
asID:                     52545
IP address blocks:        2804:e1c::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.crl
                          rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:67:29:74:89:68:14:25:ae:97:fe:76:74:31:70:60:af:3a:69:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3525DEC2C298F98A0A0CC888E805E01C39FD63D7
        Validity
            Not Before: Apr  4 01:47:34 2024 GMT
            Not After : Apr  3 01:52:34 2025 GMT
        Subject: CN=94D7768B33478754DC0CC62463E0260A0943F4D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b0:a0:20:a3:9e:0e:7e:7b:ed:20:78:73:23:
                    87:f4:99:5b:b4:3a:0b:c4:3f:77:0a:c5:c8:f5:e8:
                    bd:69:a3:33:d4:02:12:71:3c:e0:7d:08:7b:05:c6:
                    98:ef:57:4b:0b:3d:30:6e:60:9c:3f:23:c0:a9:d1:
                    ea:34:30:82:c9:ec:35:b2:67:87:46:15:a8:71:ac:
                    2b:1d:8c:61:6d:60:b8:06:4d:11:76:2b:45:6f:32:
                    dd:6e:a1:80:af:8d:f2:71:e5:a3:37:af:e5:0d:ad:
                    58:3d:8e:9e:d8:c0:97:43:5d:dc:09:f7:2b:1c:a5:
                    5e:bf:97:2b:99:d4:81:57:2d:30:4e:28:f0:3d:c4:
                    92:7a:f8:05:14:48:ff:7d:11:15:03:d8:a5:5d:fa:
                    4e:ce:94:52:6c:d3:fe:32:57:62:e3:c5:95:38:37:
                    a2:09:b5:15:eb:8c:85:70:66:20:9d:0a:7d:31:f9:
                    8d:6f:50:a8:f8:85:10:f7:b9:3a:f6:22:6e:ee:f4:
                    04:ae:c1:97:be:fd:f0:7d:b8:07:85:38:9b:0c:a4:
                    1f:bf:9b:5d:4a:40:70:05:07:b2:b5:ab:3e:08:c3:
                    36:6e:2a:69:b9:01:d9:f8:9a:7c:82:e6:af:38:8e:
                    d0:a6:4a:ab:88:5c:20:36:ae:14:fe:e5:82:1d:4f:
                    cf:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:D7:76:8B:33:47:87:54:DC:0C:C6:24:63:E0:26:0A:09:43:F4:D7
            X509v3 Authority Key Identifier:
                keyid:35:25:DE:C2:C2:98:F9:8A:0A:0C:C8:88:E8:05:E0:1C:39:FD:63:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/323830343a6531633a3a2f33332d3333203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e1c::/33

    Signature Algorithm: sha256WithRSAEncryption
         9b:10:60:e7:4d:35:29:d2:0b:46:b3:1b:0b:70:03:d4:96:50:
         e9:c8:39:c2:20:2d:8a:12:ec:c6:ab:66:e1:46:a5:2e:77:d3:
         88:c8:38:70:a6:93:3e:e1:b8:dc:07:7a:3d:26:9f:c0:7d:21:
         03:f1:c4:02:1b:0a:6a:c2:32:65:f6:e0:fa:23:c1:1f:d3:b3:
         96:13:e3:85:42:b2:1f:a6:90:94:53:0e:a7:34:53:de:b8:4d:
         f0:57:c0:21:09:8d:0e:72:05:ff:c4:db:2c:e6:1a:32:ae:14:
         9e:88:c9:f5:c3:85:93:fc:34:c6:ba:58:87:92:62:45:a4:ab:
         24:d1:6c:8b:7e:d7:43:d0:81:e4:a6:ba:f3:01:d4:ef:51:d9:
         f2:2b:6c:98:c7:38:63:4f:7d:f8:58:b5:68:40:e7:a5:a5:17:
         c5:8f:48:99:ee:d8:58:0f:94:15:bb:51:09:52:9f:7d:f6:cf:
         2f:10:b6:4a:5b:28:b7:28:3f:62:20:78:d7:35:12:28:f3:c7:
         18:1b:09:56:f5:f6:86:42:71:72:30:a2:c0:5f:7a:86:30:7f:
         fa:db:67:c7:6f:85:cd:e3:26:cd:c0:eb:73:df:d8:2c:71:2f:
         9b:18:31:96:8e:1d:85:be:a9:42:80:5b:aa:73:b5:13:7d:05:
         4c:f5:3b:cd
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUeGcpdIloFCWul/52dDFwYK86ad8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzUyNURFQzJDMjk4Rjk4QTBBMENDODg4RTgwNUUwMUMz
OUZENjNENzAeFw0yNDA0MDQwMTQ3MzRaFw0yNTA0MDMwMTUyMzRaMDMxMTAvBgNV
BAMTKDk0RDc3NjhCMzM0Nzg3NTREQzBDQzYyNDYzRTAyNjBBMDk0M0Y0RDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFsKAgo54OfnvtIHhzI4f0mVu0
OgvEP3cKxcj16L1pozPUAhJxPOB9CHsFxpjvV0sLPTBuYJw/I8Cp0eo0MILJ7DWy
Z4dGFahxrCsdjGFtYLgGTRF2K0VvMt1uoYCvjfJx5aM3r+UNrVg9jp7YwJdDXdwJ
9yscpV6/lyuZ1IFXLTBOKPA9xJJ6+AUUSP99ERUD2KVd+k7OlFJs0/4yV2LjxZU4
N6IJtRXrjIVwZiCdCn0x+Y1vUKj4hRD3uTr2Im7u9ASuwZe+/fB9uAeFOJsMpB+/
m11KQHAFB7K1qz4IwzZuKmm5Adn4mnyC5q84jtCmSquIXCA2rhT+5YIdT89/AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUlNd2izNHh1TcDMYkY+AmCglD9NcwHwYDVR0j
BBgwFoAUNSXewsKY+YoKDMiI6AXgHDn9Y9cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0FMUTJHakRRU3NZUW03Q1NYdEhld1FIZlFGOFFxdEJIdnM0TWdIbTFx
eHgvMy8zNTI1REVDMkMyOThGOThBMEEwQ0M4ODhFODA1RTAxQzM5RkQ2M0Q3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM1MjVERUMyQzI5OEY5OEEw
QTBDQzg4OEU4MDVFMDFDMzlGRDYzRDcuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dBTFEyR2pEUVNzWVFtN0NTWHRIZXdRSGZRRjhRcXRCSHZzNE1nSG0xcXh4LzMv
MzIzODMwMzQzYTY1MzE2MzNhM2EyZjMzMzMyZDMzMzMyMDNkM2UyMDM1MzIzNTM0
MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E
EjAQMA4EAgACMAgDBgcoBA4cADANBgkqhkiG9w0BAQsFAAOCAQEAmxBg5001KdIL
RrMbC3AD1JZQ6cg5wiAtihLsxqtm4UalLnfTiMg4cKaTPuG43Ad6PSafwH0hA/HE
AhsKasIyZfbg+iPBH9OzlhPjhUKyH6aQlFMOpzRT3rhN8FfAIQmNDnIF/8TbLOYa
Mq4UnojJ9cOFk/w0xrpYh5JiRaSrJNFsi37XQ9CB5Ka68wHU71HZ8itsmMc4Y099
+Fi1aEDnpaUXxY9Ime7YWA+UFbtRCVKfffbPLxC2Slsotyg/YiB41zUSKPPHGBsJ
VvX2hkJxcjCiwF96hjB/+ttnx2+FzeMmzcDrc9/YLHEvmxgxlo4dhb6pQoBbqnO1
E30FTPU7zQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:37 2024 by rpki-client on console-fra.rpki-client.org