Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a313030303a3a2f34382d3438203d3e203631363231.roa
File:                     323830343a346433633a313030303a3a2f34382d3438203d3e203631363231.roa (raw, json)
Hash identifier:          2GmXpx78S2OVoCy2oA9dVDyHzrx41xcH7UZOHQjgkyg=
Subject key identifier:   E5:0E:FA:A5:04:FA:3C:B9:BC:4A:44:74:90:CF:78:97:C9:A9:37:75
Certificate issuer:       /CN=3C7BA9294464BE01B4C2A500708DD55CA879584D
Certificate serial:       03CA11559E02D822DA5078EE6CCCC5E9417C4F15
Authority key identifier: 3C:7B:A9:29:44:64:BE:01:B4:C2:A5:00:70:8D:D5:5C:A8:79:58:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7BA9294464BE01B4C2A500708DD55CA879584D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a313030303a3a2f34382d3438203d3e203631363231.roa
Signing time:             Wed 20 Nov 2024 13:36:20 +0000
ROA not before:           Wed 20 Nov 2024 13:31:20 +0000
ROA not after:            Wed 19 Nov 2025 13:36:20 +0000
asID:                     61621
IP address blocks:        2804:4d3c:1000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3C7BA9294464BE01B4C2A500708DD55CA879584D.crl
                          rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3C7BA9294464BE01B4C2A500708DD55CA879584D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7BA9294464BE01B4C2A500708DD55CA879584D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 01:39:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ca:11:55:9e:02:d8:22:da:50:78:ee:6c:cc:c5:e9:41:7c:4f:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C7BA9294464BE01B4C2A500708DD55CA879584D
        Validity
            Not Before: Nov 20 13:31:20 2024 GMT
            Not After : Nov 19 13:36:20 2025 GMT
        Subject: CN=E50EFAA504FA3CB9BC4A447490CF7897C9A93775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:34:00:6e:6b:74:04:2a:f7:30:8c:cb:5e:d2:
                    9d:e0:77:be:fc:f4:6e:30:a3:83:86:bb:20:60:ee:
                    82:3c:1b:e3:f9:76:fb:c8:04:31:1f:a4:af:47:e8:
                    72:80:bf:e6:17:76:3e:3c:4e:5a:ca:9d:26:c1:15:
                    4c:ab:48:42:a8:7a:bf:68:8f:dd:7c:cf:75:55:0f:
                    c9:cc:33:6c:ad:f9:08:1b:bf:7b:c9:95:00:10:14:
                    f8:b8:c4:6f:81:b9:6d:30:66:49:0a:3e:1c:5e:0c:
                    9f:8e:66:0b:65:b3:8b:ff:fa:55:77:79:5f:10:03:
                    3c:c6:a9:ba:a5:f0:2f:f2:61:c7:bb:5c:e7:92:f6:
                    d2:3e:b0:49:30:fe:05:2e:32:39:67:27:00:d7:4f:
                    b5:1c:d7:11:ca:67:71:01:1c:9e:51:14:60:fe:e9:
                    32:06:69:40:68:50:86:3f:c2:79:18:a3:d9:86:e3:
                    36:94:e4:03:ae:18:6d:ff:95:1c:08:7d:6a:ed:d4:
                    53:47:4e:34:d9:89:db:00:25:36:f0:90:87:ba:b9:
                    42:cb:69:6a:7e:64:4e:78:00:1f:6e:af:17:8d:ed:
                    9f:f5:fa:73:16:65:60:d7:de:06:bd:5d:33:76:a4:
                    d1:b6:c5:16:2b:11:f0:f3:dc:a8:b6:e3:93:eb:da:
                    64:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:0E:FA:A5:04:FA:3C:B9:BC:4A:44:74:90:CF:78:97:C9:A9:37:75
            X509v3 Authority Key Identifier:
                keyid:3C:7B:A9:29:44:64:BE:01:B4:C2:A5:00:70:8D:D5:5C:A8:79:58:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3C7BA9294464BE01B4C2A500708DD55CA879584D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7BA9294464BE01B4C2A500708DD55CA879584D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a313030303a3a2f34382d3438203d3e203631363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d3c:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:98:24:c6:1f:b6:ff:94:9f:cc:5d:3b:53:d3:51:e9:f9:95:
         13:9a:54:a5:12:61:b0:46:45:c8:af:15:94:69:39:1a:59:aa:
         d8:dc:58:46:f2:6e:a8:ab:5e:1f:8b:47:08:4a:0e:0a:8f:3a:
         40:2d:ea:ba:80:22:6e:3c:28:ad:4d:b6:52:fc:26:26:6c:1f:
         b2:e7:5f:f2:16:e1:9d:c4:17:fb:84:d6:d6:06:70:23:69:8e:
         29:4c:21:15:57:b9:75:ed:f0:4f:de:fc:2b:46:8e:49:e6:50:
         81:33:f8:95:3c:a6:ef:06:8f:15:02:d6:f2:24:ca:e6:de:60:
         cd:e9:f5:54:f7:b0:55:9b:51:84:02:e7:f8:58:cd:ea:03:a8:
         54:a8:04:75:89:f1:2b:fc:66:a1:1d:1a:be:7a:5d:14:58:b5:
         34:dc:0d:04:1f:53:a4:b3:ca:84:e0:d7:f3:af:90:c8:e7:c4:
         c4:e7:48:e0:b0:d3:31:f9:b6:33:dc:9f:06:b3:c9:2f:79:cf:
         69:44:24:ac:1d:1e:fd:fc:f4:5e:f2:e1:7f:85:c2:7e:76:42:
         cb:52:95:48:a1:d6:84:9a:4d:3b:bb:16:93:9b:96:cc:ce:24:
         e0:be:e8:22:63:92:ab:d5:03:25:39:4b:1d:21:05:82:f5:32:
         50:02:12:5f
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUA8oRVZ4C2CLaUHjubMzF6UF8TxUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0M3QkE5Mjk0NDY0QkUwMUI0QzJBNTAwNzA4REQ1NUNB
ODc5NTg0RDAeFw0yNDExMjAxMzMxMjBaFw0yNTExMTkxMzM2MjBaMDMxMTAvBgNV
BAMTKEU1MEVGQUE1MDRGQTNDQjlCQzRBNDQ3NDkwQ0Y3ODk3QzlBOTM3NzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1NABua3QEKvcwjMte0p3gd778
9G4wo4OGuyBg7oI8G+P5dvvIBDEfpK9H6HKAv+YXdj48TlrKnSbBFUyrSEKoer9o
j918z3VVD8nMM2yt+Qgbv3vJlQAQFPi4xG+BuW0wZkkKPhxeDJ+OZgtls4v/+lV3
eV8QAzzGqbql8C/yYce7XOeS9tI+sEkw/gUuMjlnJwDXT7Uc1xHKZ3EBHJ5RFGD+
6TIGaUBoUIY/wnkYo9mG4zaU5AOuGG3/lRwIfWrt1FNHTjTZidsAJTbwkIe6uULL
aWp+ZE54AB9urxeN7Z/1+nMWZWDX3ga9XTN2pNG2xRYrEfDz3Ki245Pr2mRnAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQU5Q76pQT6PLm8SkR0kM94l8mpN3UwHwYDVR0j
BBgwFoAUPHupKURkvgG0wqUAcI3VXKh5WE0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHNCOVNvRjRqRmJpem5mNGR4S0RvZTdUc0x2MVFFTGszM2J4YlhrSEE5
UGcvMC8zQzdCQTkyOTQ0NjRCRTAxQjRDMkE1MDA3MDhERDU1Q0E4Nzk1ODRELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDN0JBOTI5NDQ2NEJFMDFC
NEMyQTUwMDcwOERENTVDQTg3OTU4NEQuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hzQjlTb0Y0akZiaXpuZjRkeEtEb2U3VHNMdjFRRUxrMzNieGJYa0hBOVBnLzAv
MzIzODMwMzQzYTM0NjQzMzYzM2EzMTMwMzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDM2MzEzNjMyMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBE08EAAwDQYJKoZIhvcNAQELBQAD
ggEBAHKYJMYftv+Un8xdO1PTUen5lROaVKUSYbBGRcivFZRpORpZqtjcWEbybqir
Xh+LRwhKDgqPOkAt6rqAIm48KK1NtlL8JiZsH7LnX/IW4Z3EF/uE1tYGcCNpjilM
IRVXuXXt8E/e/CtGjknmUIEz+JU8pu8GjxUC1vIkyubeYM3p9VT3sFWbUYQC5/hY
zeoDqFSoBHWJ8Sv8ZqEdGr56XRRYtTTcDQQfU6SzyoTg1/OvkMjnxMTnSOCw0zH5
tjPcnwazyS95z2lEJKwdHv389F7y4X+Fwn52QstSlUih1oSaTTu7FpOblszOJOC+
6CJjkqvVAyU5Sx0hBYL1MlACEl8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:16 2024 by rpki-client on console-ams.rpki-client.org