Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/323830343a6637343a3a2f33322d3438203d3e20323633353836.roa
File:                     323830343a6637343a3a2f33322d3438203d3e20323633353836.roa (raw, json)
Hash identifier:          VJzecU48ioa3iAVVf/f2xHbHXBr8u/4DSSwkheRhY3M=
Subject key identifier:   5C:05:97:F3:FA:BE:ED:14:35:D7:77:78:54:D0:78:A6:3B:A6:2F:5A
Certificate issuer:       /CN=9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A
Certificate serial:       3438DA936F0854A3C6BEF6649BBDE5A4B80A4AF5
Authority key identifier: 9C:96:A5:BD:45:B0:FB:8E:B4:DC:60:35:24:F9:AF:E8:41:D3:0D:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/323830343a6637343a3a2f33322d3438203d3e20323633353836.roa
Signing time:             Tue 02 Jul 2024 17:47:13 +0000
ROA not before:           Tue 02 Jul 2024 17:42:13 +0000
ROA not after:            Tue 01 Jul 2025 17:47:13 +0000
asID:                     263586
IP address blocks:        2804:f74::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.crl
                          rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 04:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:38:da:93:6f:08:54:a3:c6:be:f6:64:9b:bd:e5:a4:b8:0a:4a:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A
        Validity
            Not Before: Jul  2 17:42:13 2024 GMT
            Not After : Jul  1 17:47:13 2025 GMT
        Subject: CN=5C0597F3FABEED1435D7777854D078A63BA62F5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:14:70:db:ec:83:fe:fa:38:6f:f7:70:2b:46:
                    22:0f:29:99:72:62:56:cb:f8:5f:df:66:f8:96:69:
                    d2:e5:81:d6:ac:c4:f5:39:2c:1d:e4:b5:f4:36:0a:
                    2a:ff:14:10:80:0c:46:64:e0:c4:88:bf:28:09:ff:
                    59:8e:17:d0:d3:60:c9:ef:51:69:85:16:56:4a:8f:
                    40:11:af:7c:71:4d:24:61:1b:15:40:f9:b2:de:1b:
                    6a:b1:10:f9:b4:f4:ac:34:90:00:dd:9d:12:87:b5:
                    d0:97:18:d7:03:50:26:17:7f:a6:4f:ee:33:c6:bf:
                    cf:f3:f3:75:4f:7a:a9:d5:a3:93:83:00:0d:8f:dc:
                    98:0b:8a:2a:8d:79:40:e8:65:71:6b:a1:c0:a4:b6:
                    fb:05:12:96:03:3c:9d:1b:48:e0:ce:95:52:b3:11:
                    b9:c5:fe:67:ed:45:1c:4d:7d:2c:d1:31:99:7a:d5:
                    08:7b:cc:0a:a8:0a:eb:cf:0e:63:76:75:f6:ee:65:
                    68:ce:bc:29:48:24:12:31:30:fe:ad:a7:4d:39:47:
                    8c:2d:21:de:19:a7:be:fe:6a:f2:e9:92:fa:9d:19:
                    65:6a:0b:01:49:de:d8:b7:53:ce:39:4a:43:b3:5e:
                    16:1c:9f:37:5e:2d:bc:68:51:fb:50:d6:7b:12:42:
                    34:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:05:97:F3:FA:BE:ED:14:35:D7:77:78:54:D0:78:A6:3B:A6:2F:5A
            X509v3 Authority Key Identifier:
                keyid:9C:96:A5:BD:45:B0:FB:8E:B4:DC:60:35:24:F9:AF:E8:41:D3:0D:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/323830343a6637343a3a2f33322d3438203d3e20323633353836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f74::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:48:55:33:3e:a5:98:0e:e0:05:4a:eb:c8:ab:c5:78:aa:28:
         95:20:ec:6b:1b:d5:28:bd:92:b7:1a:6e:8d:b0:eb:f8:99:bc:
         2f:7f:a0:38:e1:8c:1a:88:76:45:f5:d4:21:01:73:51:f6:90:
         17:ae:0c:76:39:06:3b:25:42:9d:b7:84:5c:34:eb:97:75:d3:
         9a:57:2b:fe:5f:a0:60:b5:ad:83:7b:12:8a:b0:c1:27:ae:af:
         2d:7d:76:59:d2:b0:21:35:ba:04:08:d3:f1:54:a8:b4:9e:93:
         77:0e:61:ed:34:2f:9f:80:11:06:ce:09:4b:0e:60:05:2d:46:
         fa:20:fd:d1:ea:ee:06:d5:39:1d:24:37:31:e6:d4:db:08:60:
         f5:f5:ce:36:17:fe:8f:b1:76:d0:41:e3:d1:e6:60:17:65:3b:
         e9:da:71:89:ff:ca:25:5b:1b:76:22:0c:34:31:05:c8:85:36:
         1e:99:bf:10:0e:7c:d1:11:25:b2:27:7f:b4:4b:0d:db:78:67:
         39:d2:cf:86:1d:c6:83:d5:1f:e6:de:26:f2:f0:a2:2b:e9:e4:
         88:96:93:72:13:79:34:e4:71:35:59:22:2b:e5:90:a2:50:18:
         de:7d:13:b3:9f:51:1d:5e:6e:3b:b2:d1:e2:49:58:cf:e9:91:
         d2:20:4e:0f
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUNDjak28IVKPGvvZkm73lpLgKSvUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUM5NkE1QkQ0NUIwRkI4RUI0REM2MDM1MjRGOUFGRTg0
MUQzMEQ1QTAeFw0yNDA3MDIxNzQyMTNaFw0yNTA3MDExNzQ3MTNaMDMxMTAvBgNV
BAMTKDVDMDU5N0YzRkFCRUVEMTQzNUQ3Nzc3ODU0RDA3OEE2M0JBNjJGNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxFHDb7IP++jhv93ArRiIPKZly
YlbL+F/fZviWadLlgdasxPU5LB3ktfQ2Cir/FBCADEZk4MSIvygJ/1mOF9DTYMnv
UWmFFlZKj0ARr3xxTSRhGxVA+bLeG2qxEPm09Kw0kADdnRKHtdCXGNcDUCYXf6ZP
7jPGv8/z83VPeqnVo5ODAA2P3JgLiiqNeUDoZXFrocCktvsFEpYDPJ0bSODOlVKz
EbnF/mftRRxNfSzRMZl61Qh7zAqoCuvPDmN2dfbuZWjOvClIJBIxMP6tp005R4wt
Id4Zp77+avLpkvqdGWVqCwFJ3ti3U845SkOzXhYcnzdeLbxoUftQ1nsSQjRHAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUXAWX8/q+7RQ113d4VNB4pjumL1owHwYDVR0j
BBgwFoAUnJalvUWw+4603GA1JPmv6EHTDVowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1IzejJwcmM0cnJ1cGVCYmVvekJhVUZVNDlCWUdaNkFuTUVHYWFKM2FM
UjEvMC85Qzk2QTVCRDQ1QjBGQjhFQjREQzYwMzUyNEY5QUZFODQxRDMwRDVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDOTZBNUJENDVCMEZCOEVC
NERDNjAzNTI0RjlBRkU4NDFEMzBENUEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dSM3oycHJjNHJydXBlQmJlb3pCYVVGVTQ5QllHWjZBbk1FR2FhSjNhTFIxLzAv
MzIzODMwMzQzYTY2MzczNDNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzMzM1
MzgzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgED3QwDQYJKoZIhvcNAQELBQADggEBAD1IVTM+pZgO
4AVK68irxXiqKJUg7Gsb1Si9krcabo2w6/iZvC9/oDjhjBqIdkX11CEBc1H2kBeu
DHY5BjslQp23hFw065d105pXK/5foGC1rYN7EoqwwSeury19dlnSsCE1ugQI0/FU
qLSek3cOYe00L5+AEQbOCUsOYAUtRvog/dHq7gbVOR0kNzHm1NsIYPX1zjYX/o+x
dtBB49HmYBdlO+nacYn/yiVbG3YiDDQxBciFNh6ZvxAOfNERJbInf7RLDdt4ZznS
z4YdxoPVH+beJvLwoivp5IiWk3ITeTTkcTVZIivlkKJQGN59E7OfUR1ebjuy0eJJ
WM/pkdIgTg8=
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:08 2024 by rpki-client on console-fra.rpki-client.org