Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/323830343a333037343a3a2f33332d3333203d3e20323634393532.roa
File:                     323830343a333037343a3a2f33332d3333203d3e20323634393532.roa (raw, json)
Hash identifier:          MpCMGkeThU4IijDyqYMxhxgezj9ej5T17e6RiKu14no=
Subject key identifier:   EE:35:8B:E6:54:FF:85:C0:DE:8C:F5:25:F2:A4:E9:0A:60:6E:CE:BE
Certificate issuer:       /CN=3E212DB1B302950E59672700155B176D07CFDAEA
Certificate serial:       64015EFF21A50D599E0806CF14D170A0B7057F2C
Authority key identifier: 3E:21:2D:B1:B3:02:95:0E:59:67:27:00:15:5B:17:6D:07:CF:DA:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/323830343a333037343a3a2f33332d3333203d3e20323634393532.roa
Signing time:             Tue 30 Apr 2024 15:27:16 +0000
ROA not before:           Tue 30 Apr 2024 15:22:16 +0000
ROA not after:            Tue 29 Apr 2025 15:27:16 +0000
asID:                     264952
IP address blocks:        2804:3074::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.crl
                          rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Oct 2024 22:53:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:01:5e:ff:21:a5:0d:59:9e:08:06:cf:14:d1:70:a0:b7:05:7f:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E212DB1B302950E59672700155B176D07CFDAEA
        Validity
            Not Before: Apr 30 15:22:16 2024 GMT
            Not After : Apr 29 15:27:16 2025 GMT
        Subject: CN=EE358BE654FF85C0DE8CF525F2A4E90A606ECEBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:23:d7:ad:84:ea:32:80:76:10:31:fd:4c:2c:
                    0a:3d:dd:5e:25:e1:82:52:af:05:5f:8b:09:c8:73:
                    dc:26:30:19:2d:c7:41:de:86:e5:c3:93:08:64:04:
                    73:4c:96:5c:e7:30:63:07:4b:8a:bf:7f:1e:10:0b:
                    09:cf:f0:91:54:0c:4b:6f:17:d1:23:b8:24:b3:c4:
                    cc:af:b1:b6:03:cc:f5:08:b7:fd:93:b4:bf:0f:5e:
                    cc:ac:25:ac:fa:11:67:a6:61:3e:99:a5:5c:b2:7c:
                    83:04:27:f5:ae:a7:fd:45:8d:d6:73:d4:96:4a:f2:
                    f6:48:a7:1d:ec:87:cd:51:7e:72:7b:bb:fb:85:66:
                    c6:71:77:d7:fd:95:be:d9:70:56:c9:1d:11:37:b7:
                    79:5d:72:17:c7:3e:3c:92:7f:90:1e:64:74:5c:a9:
                    f0:3a:fa:ac:e2:45:a2:ce:d0:bd:4a:48:34:1e:a6:
                    ba:54:6f:2a:3b:72:9b:71:ae:09:c7:c1:11:9b:2e:
                    08:0b:9c:da:ff:df:a0:64:06:3a:a3:c3:35:e0:2c:
                    52:2e:67:49:b3:62:79:90:64:67:58:5a:fc:30:1d:
                    64:5f:1a:4c:46:d2:f2:a2:50:e8:a7:6e:af:19:4c:
                    a7:2b:ab:84:08:c5:77:1c:b0:89:38:b1:c9:21:a9:
                    7c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:35:8B:E6:54:FF:85:C0:DE:8C:F5:25:F2:A4:E9:0A:60:6E:CE:BE
            X509v3 Authority Key Identifier:
                keyid:3E:21:2D:B1:B3:02:95:0E:59:67:27:00:15:5B:17:6D:07:CF:DA:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/323830343a333037343a3a2f33332d3333203d3e20323634393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3074::/33

    Signature Algorithm: sha256WithRSAEncryption
         28:e5:6f:13:ad:ce:bd:9e:57:36:c2:e3:1e:3e:06:26:1f:89:
         d9:85:39:08:d1:6c:4a:dd:7d:9a:a0:13:39:8a:2f:50:1e:be:
         6a:22:23:74:f3:16:49:00:f5:0f:6a:1c:be:aa:bd:60:e3:44:
         a8:69:21:3f:db:35:20:48:0a:f4:8a:10:d1:6c:3d:92:84:40:
         a0:5d:00:b1:4f:5d:7a:bf:a2:25:03:a1:0c:0e:19:a5:d4:09:
         d8:89:12:84:ca:48:5e:9b:57:e8:78:3d:fc:a9:18:9b:1a:06:
         96:5e:d2:13:20:89:b3:63:90:d7:ab:c9:70:26:99:73:9b:8f:
         ee:7e:a6:3f:a8:3a:b3:be:14:58:4a:49:71:da:cc:5a:3c:62:
         ae:7f:f9:02:4a:be:ff:e4:0b:db:cc:dc:6c:3a:43:a9:85:84:
         5c:7e:5e:ba:2f:fa:8e:58:40:28:1a:12:e8:85:3b:a9:81:ec:
         2e:54:78:92:9a:b0:33:80:3b:c0:41:9a:e4:32:3d:80:8c:62:
         09:03:ad:6e:f1:2a:ab:50:fc:b1:d4:e6:a5:32:25:1c:41:61:
         18:9c:d0:70:cf:10:a1:47:71:d7:29:39:39:c8:05:50:f0:6b:
         73:8d:e1:5f:3e:93:15:3a:2e:42:b9:44:5e:1f:ab:98:36:13:
         a3:62:70:ee
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZAFe/yGlDVmeCAbPFNFwoLcFfywwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0UyMTJEQjFCMzAyOTUwRTU5NjcyNzAwMTU1QjE3NkQw
N0NGREFFQTAeFw0yNDA0MzAxNTIyMTZaFw0yNTA0MjkxNTI3MTZaMDMxMTAvBgNV
BAMTKEVFMzU4QkU2NTRGRjg1QzBERThDRjUyNUYyQTRFOTBBNjA2RUNFQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwI9ethOoygHYQMf1MLAo93V4l
4YJSrwVfiwnIc9wmMBktx0HehuXDkwhkBHNMllznMGMHS4q/fx4QCwnP8JFUDEtv
F9EjuCSzxMyvsbYDzPUIt/2TtL8PXsysJaz6EWemYT6ZpVyyfIMEJ/Wup/1FjdZz
1JZK8vZIpx3sh81RfnJ7u/uFZsZxd9f9lb7ZcFbJHRE3t3ldchfHPjySf5AeZHRc
qfA6+qziRaLO0L1KSDQeprpUbyo7cptxrgnHwRGbLggLnNr/36BkBjqjwzXgLFIu
Z0mzYnmQZGdYWvwwHWRfGkxG0vKiUOinbq8ZTKcrq4QIxXccsIk4sckhqXz7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU7jWL5lT/hcDejPUl8qTpCmBuzr4wHwYDVR0j
BBgwFoAUPiEtsbMClQ5ZZycAFVsXbQfP2uowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHVVc2c0S2RyS0Z4cTlxZzhMemdrVkxrcWRBRWM5a203ZVZkeURGUkNT
S2EvMC8zRTIxMkRCMUIzMDI5NTBFNTk2NzI3MDAxNTVCMTc2RDA3Q0ZEQUVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNFMjEyREIxQjMwMjk1MEU1
OTY3MjcwMDE1NUIxNzZEMDdDRkRBRUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h1VXNnNEtkcktGeHE5cWc4THpna1ZMa3FkQUVjOWttN2VWZHlERlJDU0thLzAv
MzIzODMwMzQzYTMzMzAzNzM0M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM0
MzkzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAQwdAAwDQYJKoZIhvcNAQELBQADggEBACjlbxOt
zr2eVzbC4x4+BiYfidmFOQjRbErdfZqgEzmKL1AevmoiI3TzFkkA9Q9qHL6qvWDj
RKhpIT/bNSBICvSKENFsPZKEQKBdALFPXXq/oiUDoQwOGaXUCdiJEoTKSF6bV+h4
PfypGJsaBpZe0hMgibNjkNeryXAmmXObj+5+pj+oOrO+FFhKSXHazFo8Yq5/+QJK
vv/kC9vM3Gw6Q6mFhFx+Xrov+o5YQCgaEuiFO6mB7C5UeJKasDOAO8BBmuQyPYCM
YgkDrW7xKqtQ/LHU5qUyJRxBYRic0HDPEKFHcdcpOTnIBVDwa3ON4V8+kxU6LkK5
RF4fq5g2E6NicO4=
-----END CERTIFICATE-----
Generated at Tue Oct 22 22:57:32 2024 by rpki-client on console-fra.rpki-client.org