Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/1/323830343a313438383a3a2f33332d3333203d3e203238313235.roa
File:                     323830343a313438383a3a2f33332d3333203d3e203238313235.roa (raw, json)
Hash identifier:          upebU3+I8K+55gTi5r95GLMyDRq9QoNnaIJZk/6gEvA=
Subject key identifier:   3E:7E:CC:2D:7A:EE:C7:2F:93:6F:78:51:91:C5:5E:0F:2F:70:07:C1
Certificate issuer:       /CN=CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA
Certificate serial:       1D1356A1BBCF8C58B3A4BCC4E27B3526E2F8DC5B
Authority key identifier: CB:E4:C6:7A:3A:BB:A9:2F:30:95:F9:4E:12:28:F0:63:65:E6:AE:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/1/323830343a313438383a3a2f33332d3333203d3e203238313235.roa
Signing time:             Wed 03 Apr 2024 20:20:50 +0000
ROA not before:           Wed 03 Apr 2024 20:15:50 +0000
ROA not after:            Wed 02 Apr 2025 20:20:50 +0000
asID:                     28125
IP address blocks:        2804:1488::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/1/CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA.crl
                          rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/1/CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 19:12:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:13:56:a1:bb:cf:8c:58:b3:a4:bc:c4:e2:7b:35:26:e2:f8:dc:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA
        Validity
            Not Before: Apr  3 20:15:50 2024 GMT
            Not After : Apr  2 20:20:50 2025 GMT
        Subject: CN=3E7ECC2D7AEEC72F936F785191C55E0F2F7007C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3b:74:76:e0:50:ce:6f:d1:2b:4c:5c:3e:16:
                    fa:28:23:4a:86:90:86:75:d0:d8:6d:26:d3:a3:9c:
                    8a:47:0b:3f:c2:06:ab:26:9b:05:8a:50:83:d7:95:
                    74:c3:a7:59:ba:28:63:39:e6:c5:5e:88:1d:bb:c0:
                    dd:09:7d:c8:fc:89:c2:ac:90:9f:03:fd:aa:b6:b5:
                    32:90:c6:8d:f9:4c:38:0b:72:18:4d:8a:46:e3:0e:
                    ad:44:ea:70:f2:0e:1d:92:f8:d7:29:52:88:a8:f9:
                    7f:05:37:91:1d:17:e9:20:40:cb:88:b7:bf:ad:be:
                    14:55:3a:46:05:c2:19:48:19:4f:c4:70:68:f7:ef:
                    ad:13:be:f8:aa:2e:8a:29:2a:21:65:aa:a1:63:00:
                    1a:1e:74:38:bb:17:ff:6e:82:e4:9b:f3:90:8d:43:
                    c9:ad:86:bd:fe:1b:e3:d3:af:75:33:a4:e7:1b:ec:
                    d4:46:df:37:8e:ae:97:e0:d5:ad:ed:31:38:f4:27:
                    5b:67:13:1a:74:ef:d0:a6:77:8d:e9:19:44:41:2d:
                    c9:d2:cd:06:2d:76:de:d5:86:25:53:c2:fa:d8:74:
                    bc:3e:ab:25:20:79:52:a3:e4:a6:38:b1:04:c7:22:
                    31:a7:74:3a:bc:3b:eb:67:e7:e4:ae:fa:72:3c:2e:
                    e3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:7E:CC:2D:7A:EE:C7:2F:93:6F:78:51:91:C5:5E:0F:2F:70:07:C1
            X509v3 Authority Key Identifier:
                keyid:CB:E4:C6:7A:3A:BB:A9:2F:30:95:F9:4E:12:28:F0:63:65:E6:AE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/1/CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/1/323830343a313438383a3a2f33332d3333203d3e203238313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1488::/33

    Signature Algorithm: sha256WithRSAEncryption
         ac:62:9b:65:01:2a:c2:39:da:56:3e:e8:75:98:91:df:f7:f0:
         9e:bd:88:8e:63:9e:c4:32:26:9b:de:fb:2a:5e:b8:90:d2:92:
         f2:e0:4d:6a:07:48:a7:da:fd:55:53:f7:8f:2d:e7:31:ef:77:
         97:98:cb:1a:52:59:a1:c5:7b:4e:de:1d:25:b0:e0:08:a5:07:
         56:99:ec:53:d6:74:de:2e:bc:85:09:7d:e4:26:1d:f8:fd:77:
         c6:c9:ea:7b:7c:aa:a3:c1:88:d4:4d:81:9d:98:15:f3:9a:33:
         48:b7:43:9c:c1:ba:07:38:9e:90:30:93:c3:14:49:c9:91:13:
         6c:c1:6e:cb:b8:e6:2f:fd:c2:9a:bd:f5:4c:c1:a1:5f:5e:cb:
         c7:92:95:cc:8b:40:53:b5:51:37:a5:5a:d2:54:b0:92:b7:c5:
         8e:5a:9d:83:13:6b:23:e9:75:d0:1f:50:e5:c2:25:b6:ea:91:
         8a:fe:33:6e:d7:d9:fb:1e:b6:2a:5e:48:12:02:fc:f4:d6:44:
         cd:d7:cc:92:55:9e:81:89:e9:1e:7e:47:d2:9b:3d:c8:61:75:
         c8:b8:07:15:fa:c7:18:17:62:65:0c:6a:21:ed:4e:d7:f8:dc:
         7a:7d:1a:8a:e4:2a:8b:18:57:0f:33:61:62:84:7a:bb:b2:22:
         9a:44:a3:a0
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUHRNWobvPjFizpLzE4ns1JuL43FswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JFNEM2N0EzQUJCQTkyRjMwOTVGOTRFMTIyOEYwNjM2
NUU2QUVFQTAeFw0yNDA0MDMyMDE1NTBaFw0yNTA0MDIyMDIwNTBaMDMxMTAvBgNV
BAMTKDNFN0VDQzJEN0FFRUM3MkY5MzZGNzg1MTkxQzU1RTBGMkY3MDA3QzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuO3R24FDOb9ErTFw+FvooI0qG
kIZ10NhtJtOjnIpHCz/CBqsmmwWKUIPXlXTDp1m6KGM55sVeiB27wN0Jfcj8icKs
kJ8D/aq2tTKQxo35TDgLchhNikbjDq1E6nDyDh2S+NcpUoio+X8FN5EdF+kgQMuI
t7+tvhRVOkYFwhlIGU/EcGj3760TvviqLoopKiFlqqFjABoedDi7F/9uguSb85CN
Q8mthr3+G+PTr3UzpOcb7NRG3zeOrpfg1a3tMTj0J1tnExp079Cmd43pGURBLcnS
zQYtdt7VhiVTwvrYdLw+qyUgeVKj5KY4sQTHIjGndDq8O+tn5+Su+nI8LuOhAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUPn7MLXruxy+Tb3hRkcVeDy9wB8EwHwYDVR0j
BBgwFoAUy+TGejq7qS8wlflOEijwY2XmruowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSkJYeDFtWmJSZ3dEcTF3Qjk5SkJjRmRzWVJZOGFKNmFMS1h4MldxNnRl
aE4vMS9DQkU0QzY3QTNBQkJBOTJGMzA5NUY5NEUxMjI4RjA2MzY1RTZBRUVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NCRTRDNjdBM0FCQkE5MkYz
MDk1Rjk0RTEyMjhGMDYzNjVFNkFFRUEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0pCWHgxbVpiUmd3RHExd0I5OUpCY0Zkc1lSWThhSjZhTEtYeDJXcTZ0ZWhOLzEv
MzIzODMwMzQzYTMxMzQzODM4M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzODMx
MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwDgQCAAIwCAMGBygEFIgAMA0GCSqGSIb3DQEBCwUAA4IBAQCsYptlASrC
OdpWPuh1mJHf9/CevYiOY57EMiab3vsqXriQ0pLy4E1qB0in2v1VU/ePLecx73eX
mMsaUlmhxXtO3h0lsOAIpQdWmexT1nTeLryFCX3kJh34/XfGyep7fKqjwYjUTYGd
mBXzmjNIt0OcwboHOJ6QMJPDFEnJkRNswW7LuOYv/cKavfVMwaFfXsvHkpXMi0BT
tVE3pVrSVLCSt8WOWp2DE2sj6XXQH1DlwiW26pGK/jNu19n7HrYqXkgSAvz01kTN
18ySVZ6BiekefkfSmz3IYXXIuAcV+scYF2JlDGoh7U7X+Nx6fRqK5CqLGFcPM2Fi
hHq7siKaRKOg
-----END CERTIFICATE-----
Generated at Fri Jun 28 19:18:13 2024 by rpki-client on console-fra.rpki-client.org