Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/323830343a6233383a3a2f33322d3438203d3e203532373538.roa
File:                     323830343a6233383a3a2f33322d3438203d3e203532373538.roa (raw, json)
Hash identifier:          0p9YCwNWzd/mHzHNbqFHzPqcVttapgPE//huduTwDNg=
Subject key identifier:   06:94:17:F1:0F:CE:D0:95:FC:30:8B:74:29:B2:21:AF:02:4E:A6:86
Certificate issuer:       /CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
Certificate serial:       5505ED62D3BEE292C22657C25A363F2ACFFA0D20
Authority key identifier: B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/323830343a6233383a3a2f33322d3438203d3e203532373538.roa
Signing time:             Fri 05 Apr 2024 03:07:33 +0000
ROA not before:           Fri 05 Apr 2024 03:02:33 +0000
ROA not after:            Fri 04 Apr 2025 03:07:33 +0000
asID:                     52758
IP address blocks:        2804:b38::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.crl
                          rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 20:15:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:05:ed:62:d3:be:e2:92:c2:26:57:c2:5a:36:3f:2a:cf:fa:0d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
        Validity
            Not Before: Apr  5 03:02:33 2024 GMT
            Not After : Apr  4 03:07:33 2025 GMT
        Subject: CN=069417F10FCED095FC308B7429B221AF024EA686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c5:00:8a:39:27:71:44:2a:cc:c8:6f:13:69:
                    3a:d1:3a:03:53:1f:65:db:7c:68:f3:e8:f8:b6:80:
                    9e:ea:6e:74:f2:70:f2:ca:7b:86:d4:e1:d2:f0:51:
                    37:41:b5:d0:f3:92:b2:4e:e0:ca:16:6e:a8:68:e9:
                    97:3a:97:a5:f5:05:7f:f7:bd:3c:66:9f:36:8b:08:
                    f0:2b:bb:cb:b6:53:6f:e3:e9:2f:2d:0c:0e:f8:f7:
                    3c:d9:53:1b:87:ea:18:87:69:e4:f2:ba:ae:49:e3:
                    b5:b6:26:d6:4b:af:5b:f2:8a:7e:76:26:dd:ae:d7:
                    a2:c0:d9:c2:30:8c:23:79:6f:24:b1:41:4e:06:8c:
                    bd:1c:10:84:08:20:d1:00:69:4a:ef:6a:12:a3:42:
                    58:94:e8:0a:9e:a5:ad:d8:aa:6d:45:a7:e3:13:27:
                    fd:c4:c2:07:32:a8:39:4b:62:a1:a3:bd:55:29:c4:
                    09:ea:89:7c:e5:96:03:8d:8f:a6:7d:e1:b1:15:45:
                    79:ac:5c:92:7b:cd:37:95:04:57:6f:62:87:15:8a:
                    55:22:eb:e2:98:99:e7:6b:ae:20:51:6a:fc:96:de:
                    bc:8d:65:f4:54:d5:57:e1:15:09:4e:24:c4:62:5b:
                    5c:72:e3:a6:26:11:20:25:07:53:25:35:d2:12:4f:
                    67:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:94:17:F1:0F:CE:D0:95:FC:30:8B:74:29:B2:21:AF:02:4E:A6:86
            X509v3 Authority Key Identifier:
                keyid:B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/323830343a6233383a3a2f33322d3438203d3e203532373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b38::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:af:2e:cd:be:c2:e3:7e:da:d0:c5:99:db:49:76:d4:13:33:
         61:27:10:d0:77:ae:b5:e0:bb:bf:5f:43:03:ba:26:6f:fb:20:
         39:b8:ad:da:22:85:02:03:fa:13:a6:be:86:8e:01:51:64:52:
         90:2a:08:fa:a1:15:ba:1f:32:51:db:0e:f2:b3:ef:71:62:39:
         1b:d0:c0:20:39:6e:66:4b:52:61:c5:28:48:c9:a1:0e:90:ff:
         83:99:3e:92:54:e4:b4:47:e8:c3:34:22:4c:fd:14:1a:04:69:
         1f:c5:c8:f6:fe:da:50:12:5e:8e:f1:c8:28:35:44:6e:e5:de:
         0a:7d:d5:93:66:ae:34:ed:88:2a:ec:22:de:d6:02:6b:8c:fb:
         a2:a7:59:0d:97:c1:12:b7:1e:19:a1:98:f2:82:72:8f:99:20:
         31:79:37:7c:53:36:52:10:e0:62:29:12:ac:c7:b3:a9:71:33:
         17:43:91:47:33:9d:85:ab:37:10:cd:85:5a:58:c8:3d:82:45:
         07:4f:cd:a3:39:50:ff:6f:93:24:d2:c8:1f:41:30:9b:d6:e5:
         4a:46:40:f9:4e:96:df:73:50:67:73:01:9f:66:54:64:ed:70:
         8b:04:1e:f3:ad:fc:52:a6:0b:70:9a:1b:93:78:bf:26:3b:7f:
         ef:de:4a:7d
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUVQXtYtO+4pLCJlfCWjY/Ks/6DSAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjNFNDVGRjNGRDIxRkI3NzVGNzUwMzBCN0IyNEMwMjRF
MzcwQzZEQjAeFw0yNDA0MDUwMzAyMzNaFw0yNTA0MDQwMzA3MzNaMDMxMTAvBgNV
BAMTKDA2OTQxN0YxMEZDRUQwOTVGQzMwOEI3NDI5QjIyMUFGMDI0RUE2ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDExQCKOSdxRCrMyG8TaTrROgNT
H2XbfGjz6Pi2gJ7qbnTycPLKe4bU4dLwUTdBtdDzkrJO4MoWbqho6Zc6l6X1BX/3
vTxmnzaLCPAru8u2U2/j6S8tDA749zzZUxuH6hiHaeTyuq5J47W2JtZLr1vyin52
Jt2u16LA2cIwjCN5bySxQU4GjL0cEIQIINEAaUrvahKjQliU6Aqepa3Yqm1Fp+MT
J/3EwgcyqDlLYqGjvVUpxAnqiXzllgONj6Z94bEVRXmsXJJ7zTeVBFdvYocVilUi
6+KYmedrriBRavyW3ryNZfRU1VfhFQlOJMRiW1xy46YmESAlB1MlNdIST2dTAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUBpQX8Q/O0JX8MIt0KbIhrwJOpoYwHwYDVR0j
BBgwFoAUs+Rf8/0h+3dfdQMLeyTAJONwxtswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR25yREU2MTdxa2ppN2o0ODVtdXR1OWRXNkFhd3BvVlN5UzNqYVR4YjR1
c2gvMS9CM0U0NUZGM0ZEMjFGQjc3NUY3NTAzMEI3QjI0QzAyNEUzNzBDNkRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IzRTQ1RkYzRkQyMUZCNzc1
Rjc1MDMwQjdCMjRDMDI0RTM3MEM2REIuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0duckRFNjE3cWtqaTdqNDg1bXV0dTlkVzZBYXdwb1ZTeVMzamFUeGI0dXNoLzEv
MzIzODMwMzQzYTYyMzMzODNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzIzNzM1
Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBAs4MA0GCSqGSIb3DQEBCwUAA4IBAQAury7NvsLjftrQ
xZnbSXbUEzNhJxDQd6614Lu/X0MDuiZv+yA5uK3aIoUCA/oTpr6GjgFRZFKQKgj6
oRW6HzJR2w7ys+9xYjkb0MAgOW5mS1JhxShIyaEOkP+DmT6SVOS0R+jDNCJM/RQa
BGkfxcj2/tpQEl6O8cgoNURu5d4KfdWTZq407Ygq7CLe1gJrjPuip1kNl8EStx4Z
oZjygnKPmSAxeTd8UzZSEOBiKRKsx7OpcTMXQ5FHM52FqzcQzYVaWMg9gkUHT82j
OVD/b5Mk0sgfQTCb1uVKRkD5Tpbfc1BncwGfZlRk7XCLBB7zrfxSpgtwmhuTeL8m
O3/v3kp9
-----END CERTIFICATE-----
Generated at Fri Jun 28 21:05:23 2024 by rpki-client on console-ams.rpki-client.org