Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343164303a3a2f33322d3438203d3e20323637343538.roa
File:                     323830343a343164303a3a2f33322d3438203d3e20323637343538.roa (raw, json)
Hash identifier:          a6j/KcP9LGqdiXHZWCuDZw4xcgprwaOaXc/U/4yxwYU=
Subject key identifier:   73:1A:3E:2F:86:9F:A8:37:5B:97:71:04:BF:AA:3E:D9:B6:38:1F:66
Certificate issuer:       /CN=B3C39F223BEC24B86B77E49B462362F62DB24BE4
Certificate serial:       5ED0EC48395E25114C45012EA67AE080A219782A
Authority key identifier: B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343164303a3a2f33322d3438203d3e20323637343538.roa
Signing time:             Wed 07 Aug 2024 22:33:24 +0000
ROA not before:           Wed 07 Aug 2024 22:28:24 +0000
ROA not after:            Wed 06 Aug 2025 22:33:24 +0000
asID:                     267458
IP address blocks:        2804:41d0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.crl
                          rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 13:03:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:d0:ec:48:39:5e:25:11:4c:45:01:2e:a6:7a:e0:80:a2:19:78:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3C39F223BEC24B86B77E49B462362F62DB24BE4
        Validity
            Not Before: Aug  7 22:28:24 2024 GMT
            Not After : Aug  6 22:33:24 2025 GMT
        Subject: CN=731A3E2F869FA8375B977104BFAA3ED9B6381F66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4c:a6:ae:d9:10:59:d6:3a:05:94:39:fc:b8:
                    e1:11:f4:5e:ce:9e:58:81:1f:65:30:5e:df:7e:20:
                    e7:af:3e:69:4f:97:a6:48:e1:db:b9:db:05:98:dc:
                    bc:e5:c1:1a:91:27:05:ea:ce:0b:5d:77:35:6d:26:
                    86:21:23:fe:87:5d:c9:44:72:f5:6b:66:0f:e2:d2:
                    93:fe:31:a7:7a:f5:71:9e:a0:1c:7c:c9:33:0e:64:
                    4b:1d:fa:ba:4e:75:f4:d3:60:0d:32:2b:3c:40:94:
                    19:b9:0d:b5:51:60:0a:5e:74:22:3a:6a:68:b5:3f:
                    6c:af:be:41:e2:28:06:30:4f:92:84:c5:50:b8:cf:
                    e5:b8:7d:19:88:2b:9d:d9:f8:33:e2:7d:b1:13:9a:
                    82:03:99:c7:1b:a9:2c:b5:92:41:26:53:a3:45:4f:
                    43:04:2e:29:73:6b:91:f5:8e:45:16:28:e1:f6:67:
                    7c:a3:4d:54:ee:13:1d:fd:cc:a4:38:c9:12:75:48:
                    9c:e2:fb:df:f5:c7:96:7d:67:ad:c5:28:64:71:ee:
                    c0:be:25:16:1d:9a:91:2f:8d:9e:5b:64:14:f5:56:
                    12:aa:f4:10:4f:ee:e0:83:59:bb:63:0d:fb:ed:87:
                    2a:40:2d:89:11:03:07:dd:a9:dc:ac:a1:cf:c8:b5:
                    ee:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:1A:3E:2F:86:9F:A8:37:5B:97:71:04:BF:AA:3E:D9:B6:38:1F:66
            X509v3 Authority Key Identifier:
                keyid:B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343164303a3a2f33322d3438203d3e20323637343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:91:f4:a1:fc:57:75:34:6b:f0:46:3e:d6:ab:c4:e1:92:4c:
         b8:89:19:57:f7:69:73:b1:f3:8b:98:7a:64:79:64:64:e9:b7:
         46:75:54:96:52:a4:69:94:91:4c:d6:95:3c:61:b2:c7:74:8e:
         7c:8e:24:b6:e9:71:9c:2a:ee:7c:23:3d:38:75:9c:63:7d:4a:
         31:e3:53:03:25:2b:e1:fb:f1:9a:fa:86:87:3a:7c:00:22:56:
         e9:ca:86:59:f2:7e:d6:54:2a:70:ee:ac:77:14:07:f8:f1:0c:
         f9:70:b9:55:b0:b4:8c:cd:35:4b:ff:d5:b0:89:25:76:0b:55:
         dc:66:ff:46:fa:0d:a8:7c:c1:da:12:7d:95:58:1f:2a:2d:74:
         e2:cc:70:89:54:bc:32:e2:2b:d3:62:d1:78:16:40:4d:c0:b9:
         6c:be:c3:44:df:0a:3e:5f:9a:ad:fe:91:99:21:4f:30:06:8a:
         f8:69:30:59:ca:3f:f6:17:13:23:cc:f7:f1:2d:65:13:8f:25:
         36:28:f2:5d:49:59:1b:6b:f1:7f:ee:d6:cb:e6:d5:ac:57:18:
         d3:94:74:29:4a:ae:c5:68:45:50:41:e8:0a:d5:a0:86:ae:14:
         e9:2d:fd:81:cc:9a:36:7f:fa:98:3d:19:a4:29:45:8a:3b:df:
         7f:63:1a:cb
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUXtDsSDleJRFMRQEupnrggKIZeCowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjNDMzlGMjIzQkVDMjRCODZCNzdFNDlCNDYyMzYyRjYy
REIyNEJFNDAeFw0yNDA4MDcyMjI4MjRaFw0yNTA4MDYyMjMzMjRaMDMxMTAvBgNV
BAMTKDczMUEzRTJGODY5RkE4Mzc1Qjk3NzEwNEJGQUEzRUQ5QjYzODFGNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiTKau2RBZ1joFlDn8uOER9F7O
nliBH2UwXt9+IOevPmlPl6ZI4du52wWY3LzlwRqRJwXqzgtddzVtJoYhI/6HXclE
cvVrZg/i0pP+Mad69XGeoBx8yTMOZEsd+rpOdfTTYA0yKzxAlBm5DbVRYApedCI6
ami1P2yvvkHiKAYwT5KExVC4z+W4fRmIK53Z+DPifbETmoIDmccbqSy1kkEmU6NF
T0MELilza5H1jkUWKOH2Z3yjTVTuEx39zKQ4yRJ1SJzi+9/1x5Z9Z63FKGRx7sC+
JRYdmpEvjZ5bZBT1VhKq9BBP7uCDWbtjDfvthypALYkRAwfdqdysoc/Ite4FAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUcxo+L4afqDdbl3EEv6o+2bY4H2YwHwYDVR0j
BBgwFoAUs8OfIjvsJLhrd+SbRiNi9i2yS+QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2FRZmEzdThCOEFkYUpkOGtBNVZBVU55OG9jUmFBY2tCeWNmckhVcUFh
WXYvMS9CM0MzOUYyMjNCRUMyNEI4NkI3N0U0OUI0NjIzNjJGNjJEQjI0QkU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IzQzM5RjIyM0JFQzI0Qjg2
Qjc3RTQ5QjQ2MjM2MkY2MkRCMjRCRTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dhUWZhM3U4QjhBZGFKZDhrQTVWQVVOeThvY1JhQWNrQnljZnJIVXFBYVl2LzEv
MzIzODMwMzQzYTM0MzE2NDMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM3
MzQzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARB0DANBgkqhkiG9w0BAQsFAAOCAQEAVZH0ofxX
dTRr8EY+1qvE4ZJMuIkZV/dpc7Hzi5h6ZHlkZOm3RnVUllKkaZSRTNaVPGGyx3SO
fI4ktulxnCrufCM9OHWcY31KMeNTAyUr4fvxmvqGhzp8ACJW6cqGWfJ+1lQqcO6s
dxQH+PEM+XC5VbC0jM01S//VsIkldgtV3Gb/RvoNqHzB2hJ9lVgfKi104sxwiVS8
MuIr02LReBZATcC5bL7DRN8KPl+arf6RmSFPMAaK+GkwWco/9hcTI8z38S1lE48l
NijyXUlZG2vxf+7Wy+bVrFcY05R0KUquxWhFUEHoCtWghq4U6S39gcyaNn/6mD0Z
pClFijvff2Mayw==
-----END CERTIFICATE-----
Generated at Fri Sep 27 12:53:14 2024 by rpki-client on console-ams.rpki-client.org