Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/323830343a313238633a3a2f33322d313238203d3e20323633343833.roa
File:                     323830343a313238633a3a2f33322d313238203d3e20323633343833.roa (raw, json)
Hash identifier:          O+hQOGfnQhCmATCvwTbLHE9ENR7W4Dk2ydN+3T940P0=
Subject key identifier:   54:42:0F:AC:9F:3A:CB:0A:6F:44:29:EB:5B:C4:EE:00:3E:38:23:6B
Certificate issuer:       /CN=14DAF3CA356C52B03F2BDD7F43D3D5BCB24D25C1
Certificate serial:       3AB8084B3CA46809AC55E30B0582FCDB9E86CBD2
Authority key identifier: 14:DA:F3:CA:35:6C:52:B0:3F:2B:DD:7F:43:D3:D5:BC:B2:4D:25:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14DAF3CA356C52B03F2BDD7F43D3D5BCB24D25C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/323830343a313238633a3a2f33322d313238203d3e20323633343833.roa
Signing time:             Fri 26 Apr 2024 14:45:29 +0000
ROA not before:           Fri 26 Apr 2024 14:40:29 +0000
ROA not after:            Fri 25 Apr 2025 14:45:29 +0000
asID:                     263483
IP address blocks:        2804:128c::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/14DAF3CA356C52B03F2BDD7F43D3D5BCB24D25C1.crl
                          rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/14DAF3CA356C52B03F2BDD7F43D3D5BCB24D25C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14DAF3CA356C52B03F2BDD7F43D3D5BCB24D25C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:b8:08:4b:3c:a4:68:09:ac:55:e3:0b:05:82:fc:db:9e:86:cb:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14DAF3CA356C52B03F2BDD7F43D3D5BCB24D25C1
        Validity
            Not Before: Apr 26 14:40:29 2024 GMT
            Not After : Apr 25 14:45:29 2025 GMT
        Subject: CN=54420FAC9F3ACB0A6F4429EB5BC4EE003E38236B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:49:fa:5d:ec:23:38:04:29:15:d0:1a:b9:25:
                    57:9b:02:98:e1:9c:96:6b:d0:7b:88:00:bb:40:c4:
                    3a:70:ef:1f:e5:b2:90:b0:67:a8:e4:6c:dc:32:ec:
                    32:83:f0:3d:b8:91:4d:15:c1:16:7c:87:5d:69:ca:
                    96:c3:36:f2:c4:f7:2d:b2:11:72:8e:0c:63:54:6b:
                    e1:ca:e4:d4:22:a7:c2:8c:8b:b2:a6:71:7c:09:0a:
                    bb:c3:97:c1:49:90:42:5b:1b:2b:6f:74:aa:f5:74:
                    ed:e7:a4:3d:c7:34:f3:8e:1d:5c:15:c8:41:11:b1:
                    31:54:de:a2:f7:6a:88:6f:a4:a9:cc:52:ba:17:68:
                    83:6a:40:03:7f:79:e6:ec:30:04:1d:cd:80:dd:fd:
                    5b:17:1c:a7:1f:d1:18:41:c0:7e:a5:22:c5:5d:e7:
                    34:31:f1:de:4a:0c:18:57:55:5b:f1:3d:98:eb:a2:
                    ba:0e:94:91:84:db:3a:96:ab:fc:4e:e1:c4:96:b8:
                    c0:ba:19:26:8d:2a:a5:ef:b9:fa:ea:29:f3:68:f2:
                    df:28:a8:32:97:e3:6a:5b:cc:55:12:08:70:aa:13:
                    cd:d3:c2:73:f6:7a:47:c3:a3:01:57:07:3e:b7:7a:
                    05:f9:e6:d3:90:6f:1b:6d:b4:76:6e:82:9d:ad:b5:
                    62:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:42:0F:AC:9F:3A:CB:0A:6F:44:29:EB:5B:C4:EE:00:3E:38:23:6B
            X509v3 Authority Key Identifier:
                keyid:14:DA:F3:CA:35:6C:52:B0:3F:2B:DD:7F:43:D3:D5:BC:B2:4D:25:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/14DAF3CA356C52B03F2BDD7F43D3D5BCB24D25C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14DAF3CA356C52B03F2BDD7F43D3D5BCB24D25C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/323830343a313238633a3a2f33322d313238203d3e20323633343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:128c::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:77:70:fd:c4:f4:5a:73:fb:2f:de:db:85:9a:aa:83:17:19:
         9b:fe:a1:b9:90:1a:1b:4a:61:b1:9d:fb:6b:4e:15:f2:aa:b9:
         2a:cd:70:75:4d:bf:04:f5:de:fc:20:5a:55:d6:78:97:bb:24:
         ac:59:57:63:3e:8f:7e:5d:69:80:da:cb:a7:d1:28:1c:09:8b:
         c5:e0:9c:e0:9b:b5:3b:8b:27:b9:f9:3c:52:5d:59:70:c2:ae:
         0a:7c:03:7c:3b:e7:a3:41:76:da:99:03:fc:39:81:97:f8:74:
         8f:05:42:c3:b9:0b:04:1d:7e:68:ad:d5:f7:bc:29:31:21:74:
         aa:b8:bf:ef:f6:2c:85:bf:93:72:eb:57:5e:9f:17:8a:87:2e:
         2c:36:02:c7:a6:fa:01:f2:c6:8b:98:7c:e5:84:20:2b:06:98:
         56:6f:a2:c2:44:64:b4:9c:3b:6e:1a:3c:77:3e:e6:90:a3:79:
         31:3d:8e:9f:7a:1c:e2:2c:27:d9:83:99:7f:64:6d:a0:2f:76:
         9b:9e:61:40:1a:31:8c:ba:20:20:64:fd:39:5b:27:f1:e3:dd:
         0b:1d:2b:bf:40:15:0a:ec:34:22:25:7f:29:af:57:5a:51:9a:
         d9:31:e0:e3:05:a5:ce:92:81:64:37:89:a8:69:27:3c:7e:8f:
         3b:74:e8:62
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUOrgISzykaAmsVeMLBYL8256Gy9IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTREQUYzQ0EzNTZDNTJCMDNGMkJERDdGNDNEM0Q1QkNC
MjREMjVDMTAeFw0yNDA0MjYxNDQwMjlaFw0yNTA0MjUxNDQ1MjlaMDMxMTAvBgNV
BAMTKDU0NDIwRkFDOUYzQUNCMEE2RjQ0MjlFQjVCQzRFRTAwM0UzODIzNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2Sfpd7CM4BCkV0Bq5JVebApjh
nJZr0HuIALtAxDpw7x/lspCwZ6jkbNwy7DKD8D24kU0VwRZ8h11pypbDNvLE9y2y
EXKODGNUa+HK5NQip8KMi7KmcXwJCrvDl8FJkEJbGytvdKr1dO3npD3HNPOOHVwV
yEERsTFU3qL3aohvpKnMUroXaINqQAN/eebsMAQdzYDd/VsXHKcf0RhBwH6lIsVd
5zQx8d5KDBhXVVvxPZjroroOlJGE2zqWq/xO4cSWuMC6GSaNKqXvufrqKfNo8t8o
qDKX42pbzFUSCHCqE83TwnP2ekfDowFXBz63egX55tOQbxtttHZugp2ttWKTAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUVEIPrJ86ywpvRCnrW8TuAD44I2swHwYDVR0j
BBgwFoAUFNrzyjVsUrA/K91/Q9PVvLJNJcEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0RZM2YzRGZOazhtdG1BaUhxOGpRN1R6c2dBY0JITnZQbkNmS3VOZFVt
NzgvMC8xNERBRjNDQTM1NkM1MkIwM0YyQkREN0Y0M0QzRDVCQ0IyNEQyNUMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE0REFGM0NBMzU2QzUyQjAz
RjJCREQ3RjQzRDNENUJDQjI0RDI1QzEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dEWTNmM0RmTms4bXRtQWlIcThqUTdUenNnQWNCSE52UG5DZkt1TmRVbTc4LzAv
MzIzODMwMzQzYTMxMzIzODYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzMzNDM4MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBBKMMA0GCSqGSIb3DQEBCwUAA4IBAQAMd3D9
xPRac/sv3tuFmqqDFxmb/qG5kBobSmGxnftrThXyqrkqzXB1Tb8E9d78IFpV1niX
uySsWVdjPo9+XWmA2sun0SgcCYvF4Jzgm7U7iye5+TxSXVlwwq4KfAN8O+ejQXba
mQP8OYGX+HSPBULDuQsEHX5ordX3vCkxIXSquL/v9iyFv5Ny61denxeKhy4sNgLH
pvoB8saLmHzlhCArBphWb6LCRGS0nDtuGjx3PuaQo3kxPY6fehziLCfZg5l/ZG2g
L3abnmFAGjGMuiAgZP05Wyfx490LHSu/QBUK7DQiJX8pr1daUZrZMeDjBaXOkoFk
N4moaSc8fo87dOhi
-----END CERTIFICATE-----
Generated at Tue Nov 26 08:30:20 2024 by rpki-client on console-ams.rpki-client.org