Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343164303a383030303a3a2f33342d3334203d3e20323637343538.roa
File:                     323830343a343164303a383030303a3a2f33342d3334203d3e20323637343538.roa (raw, json)
Hash identifier:          ACLox5Av/SEcTaVUNfl4GY3NtK9vsRUgYRPhUzeSWYc=
Subject key identifier:   E3:CA:A4:F9:05:5B:D9:75:82:8A:31:DE:21:22:44:1E:B1:E5:AE:F8
Certificate issuer:       /CN=B3C39F223BEC24B86B77E49B462362F62DB24BE4
Certificate serial:       5AB442C907A0ADD7C02F42BDCDFF911617AE8463
Authority key identifier: B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343164303a383030303a3a2f33342d3334203d3e20323637343538.roa
Signing time:             Mon 22 Apr 2024 19:01:08 +0000
ROA not before:           Mon 22 Apr 2024 18:56:08 +0000
ROA not after:            Mon 21 Apr 2025 19:01:08 +0000
asID:                     267458
IP address blocks:        2804:41d0:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.crl
                          rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 02:53:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:b4:42:c9:07:a0:ad:d7:c0:2f:42:bd:cd:ff:91:16:17:ae:84:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3C39F223BEC24B86B77E49B462362F62DB24BE4
        Validity
            Not Before: Apr 22 18:56:08 2024 GMT
            Not After : Apr 21 19:01:08 2025 GMT
        Subject: CN=E3CAA4F9055BD975828A31DE2122441EB1E5AEF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cd:d2:0f:b1:0e:7f:32:94:7e:d7:28:af:90:
                    b5:ce:c1:dd:a9:29:d2:34:67:79:7e:96:c4:2c:66:
                    1f:a5:c0:3f:e9:9b:6c:57:77:4e:9b:aa:e2:33:a0:
                    cd:1d:0a:18:a9:3d:57:17:21:cb:73:5f:b3:95:40:
                    97:c4:05:11:1e:75:2a:f5:c4:d5:4b:fd:60:a3:e9:
                    4b:2f:18:a8:c1:0f:64:61:d2:86:9b:b8:ef:bb:77:
                    af:b5:f6:0d:9d:16:94:fc:14:45:3c:cf:b5:20:72:
                    d9:e1:cb:e8:a0:37:56:04:09:f3:c4:53:c1:40:88:
                    65:b1:d8:09:65:82:fb:42:d3:0c:46:1b:d6:49:d3:
                    fc:ea:c2:f6:7a:e2:8f:c5:10:f4:14:68:70:78:4c:
                    78:34:27:57:9d:71:9c:93:f7:d6:98:fc:b3:49:9a:
                    44:da:2b:c6:9c:71:3c:13:01:ac:37:43:9c:02:47:
                    7b:15:bc:0c:2f:0e:2e:47:cc:f2:68:a5:1f:27:ca:
                    44:4f:8d:dc:5b:02:81:14:72:00:81:4b:c9:0d:76:
                    65:5e:6e:d3:dd:e4:fc:73:63:f1:61:60:40:1c:5d:
                    34:3b:e9:cb:60:80:d8:d6:3c:11:cf:01:04:3f:7e:
                    d3:cf:83:ec:e5:11:0f:db:0a:86:e7:84:a4:d8:dc:
                    0f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:CA:A4:F9:05:5B:D9:75:82:8A:31:DE:21:22:44:1E:B1:E5:AE:F8
            X509v3 Authority Key Identifier:
                keyid:B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343164303a383030303a3a2f33342d3334203d3e20323637343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41d0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         f2:79:90:58:fb:5f:09:8b:ba:7f:87:46:c4:a2:90:f8:fc:bf:
         d1:82:35:1a:c4:a8:dc:1d:4f:40:f7:7d:45:0a:7d:9a:55:fe:
         ec:a5:ea:f0:a3:52:5d:a1:91:54:ca:49:c1:7d:71:e8:e7:d3:
         54:ca:7d:27:a0:95:a7:ec:86:62:2e:9a:e6:81:1c:98:b4:6c:
         48:f5:ca:d6:b6:bb:e1:3d:5a:76:ea:37:48:b6:58:89:19:6a:
         fa:49:a9:b5:b4:a6:4d:47:29:aa:b9:80:23:66:0e:12:39:3a:
         52:95:60:0a:98:a1:4d:5f:fb:01:4b:6e:3b:5f:51:db:85:1c:
         52:45:68:73:6d:e7:81:12:1c:00:f6:67:f5:8e:e5:b8:01:c6:
         95:8b:2f:a7:41:10:f2:f6:33:3b:0f:70:00:5f:92:40:71:ad:
         77:f4:1c:30:fc:59:b0:84:c6:46:0b:8b:13:c2:3b:84:ff:7f:
         29:07:4d:ce:6b:37:af:e6:a9:0a:3d:fc:9f:71:c8:0b:69:e8:
         11:34:ac:d5:e2:eb:0b:ec:28:e5:27:ba:90:6d:f6:a6:32:d7:
         ef:52:d3:e5:e3:e5:9b:cf:2a:8a:cc:0d:c6:6e:18:41:c3:c0:
         41:ab:6b:d2:1b:0e:28:e4:d6:f2:5c:f3:33:01:b3:07:8b:4e:
         2d:0a:2d:83
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUWrRCyQegrdfAL0K9zf+RFheuhGMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjNDMzlGMjIzQkVDMjRCODZCNzdFNDlCNDYyMzYyRjYy
REIyNEJFNDAeFw0yNDA0MjIxODU2MDhaFw0yNTA0MjExOTAxMDhaMDMxMTAvBgNV
BAMTKEUzQ0FBNEY5MDU1QkQ5NzU4MjhBMzFERTIxMjI0NDFFQjFFNUFFRjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2zdIPsQ5/MpR+1yivkLXOwd2p
KdI0Z3l+lsQsZh+lwD/pm2xXd06bquIzoM0dChipPVcXIctzX7OVQJfEBREedSr1
xNVL/WCj6UsvGKjBD2Rh0oabuO+7d6+19g2dFpT8FEU8z7Ugctnhy+igN1YECfPE
U8FAiGWx2AllgvtC0wxGG9ZJ0/zqwvZ64o/FEPQUaHB4THg0J1edcZyT99aY/LNJ
mkTaK8accTwTAaw3Q5wCR3sVvAwvDi5HzPJopR8nykRPjdxbAoEUcgCBS8kNdmVe
btPd5PxzY/FhYEAcXTQ76ctggNjWPBHPAQQ/ftPPg+zlEQ/bCobnhKTY3A+jAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU48qk+QVb2XWCijHeISJEHrHlrvgwHwYDVR0j
BBgwFoAUs8OfIjvsJLhrd+SbRiNi9i2yS+QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2FRZmEzdThCOEFkYUpkOGtBNVZBVU55OG9jUmFBY2tCeWNmckhVcUFh
WXYvMS9CM0MzOUYyMjNCRUMyNEI4NkI3N0U0OUI0NjIzNjJGNjJEQjI0QkU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IzQzM5RjIyM0JFQzI0Qjg2
Qjc3RTQ5QjQ2MjM2MkY2MkRCMjRCRTQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dhUWZhM3U4QjhBZGFKZDhrQTVWQVVOeThvY1JhQWNrQnljZnJIVXFBYVl2LzEv
MzIzODMwMzQzYTM0MzE2NDMwM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNzM0MzUzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEQdCAMA0GCSqGSIb3DQEBCwUA
A4IBAQDyeZBY+18Ji7p/h0bEopD4/L/RgjUaxKjcHU9A931FCn2aVf7sperwo1Jd
oZFUyknBfXHo59NUyn0noJWn7IZiLprmgRyYtGxI9crWtrvhPVp26jdItliJGWr6
Sam1tKZNRymquYAjZg4SOTpSlWAKmKFNX/sBS247X1HbhRxSRWhzbeeBEhwA9mf1
juW4AcaViy+nQRDy9jM7D3AAX5JAca139Bww/FmwhMZGC4sTwjuE/38pB03Oazev
5qkKPfyfccgLaegRNKzV4usL7CjlJ7qQbfamMtfvUtPl4+WbzyqKzA3GbhhBw8BB
q2vSGw4o5NbyXPMzAbMHi04tCi2D
-----END CERTIFICATE-----
Generated at Sat Jun 29 03:28:46 2024 by rpki-client on console-ams.rpki-client.org