Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/323830343a353839343a3a2f33322d3332203d3e20323638313337.roa
File:                     323830343a353839343a3a2f33322d3332203d3e20323638313337.roa (raw, json)
Hash identifier:          xf5FeOfjjj9YTZKBXuMQBnYOcmwTtr/F4pDoofVdW1M=
Subject key identifier:   53:52:D2:A1:69:B1:99:9B:DC:5D:49:F1:3C:73:64:FA:CC:E6:82:69
Certificate issuer:       /CN=3DC690C0DE80131B223BEE70D7F6FF990A15F341
Certificate serial:       242E267BB5A36D5951C6651BE104F1F13DA5B1A4
Authority key identifier: 3D:C6:90:C0:DE:80:13:1B:22:3B:EE:70:D7:F6:FF:99:0A:15:F3:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/323830343a353839343a3a2f33322d3332203d3e20323638313337.roa
Signing time:             Wed 03 Apr 2024 18:30:39 +0000
ROA not before:           Wed 03 Apr 2024 18:25:39 +0000
ROA not after:            Wed 02 Apr 2025 18:30:39 +0000
asID:                     268137
IP address blocks:        2804:5894::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.crl
                          rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:2e:26:7b:b5:a3:6d:59:51:c6:65:1b:e1:04:f1:f1:3d:a5:b1:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DC690C0DE80131B223BEE70D7F6FF990A15F341
        Validity
            Not Before: Apr  3 18:25:39 2024 GMT
            Not After : Apr  2 18:30:39 2025 GMT
        Subject: CN=5352D2A169B1999BDC5D49F13C7364FACCE68269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5f:df:d6:33:2c:81:2d:ca:f4:ed:b2:18:41:
                    97:d0:6a:fa:ec:c5:61:71:14:8c:37:e1:54:eb:49:
                    da:2b:7c:f0:93:24:67:84:c4:e4:99:16:d2:3d:67:
                    fe:e0:1f:8e:ec:4a:51:ce:50:29:71:0e:f0:4f:59:
                    b9:a8:ed:0c:43:a7:d5:45:c8:95:1d:78:da:12:87:
                    51:40:cc:47:6a:4d:37:29:36:dc:39:8d:57:60:73:
                    40:36:60:56:6b:93:59:8f:d2:ed:14:16:e7:3a:5d:
                    59:aa:d1:b7:fe:2f:c9:12:b7:ea:45:a1:22:52:16:
                    1d:6f:5c:af:30:a3:f8:5c:1f:d2:66:a0:05:cc:1c:
                    85:b7:44:1a:89:97:0c:28:c9:99:a9:62:56:33:50:
                    2d:05:f0:6f:af:8b:54:d1:a3:f9:37:5b:51:14:a3:
                    c6:51:36:45:1b:54:44:a9:f8:60:bc:ff:d1:d8:a4:
                    bb:10:e6:a1:a5:88:bb:ee:e1:52:38:f1:a6:13:5f:
                    ce:17:91:37:97:e7:e6:cb:c9:4b:fe:7d:3d:50:b1:
                    8d:db:54:05:cb:6c:12:d5:f9:7c:9e:69:e3:b2:b5:
                    de:90:87:c1:32:27:f6:f2:86:27:31:c1:5e:0f:c4:
                    f8:fc:4a:c1:35:ed:77:68:27:3f:c4:d4:88:4d:ad:
                    85:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:52:D2:A1:69:B1:99:9B:DC:5D:49:F1:3C:73:64:FA:CC:E6:82:69
            X509v3 Authority Key Identifier:
                keyid:3D:C6:90:C0:DE:80:13:1B:22:3B:EE:70:D7:F6:FF:99:0A:15:F3:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/323830343a353839343a3a2f33322d3332203d3e20323638313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5894::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:21:9d:a6:56:59:d3:ff:0f:89:38:e5:7e:d0:fc:c4:51:3f:
         18:ce:be:46:95:01:8f:0c:e6:2f:35:6d:e8:bd:03:b1:ff:2e:
         75:0a:0e:f1:7f:7c:42:13:fa:93:81:1e:a7:e9:02:2a:de:53:
         b6:9a:dd:2d:c5:b6:c7:4b:0d:ac:11:58:16:07:37:62:29:41:
         5c:61:24:c4:19:db:13:9a:54:25:98:21:c5:15:57:69:c6:fc:
         71:17:96:4d:97:20:f4:a5:21:c2:7f:51:c1:d5:2c:d3:fa:5c:
         e6:d0:9c:53:7a:d3:d4:c0:f0:aa:22:3d:a1:ce:3e:e7:11:fb:
         56:ec:9c:65:1a:42:91:08:26:61:f4:00:ff:ea:f9:d9:11:e2:
         78:99:fb:a5:44:c2:d7:4f:a4:09:d2:24:cb:0e:58:dd:8e:66:
         d7:82:87:cf:ee:83:a0:06:be:df:2e:aa:68:01:e2:19:53:9d:
         89:08:19:b7:8a:bd:1d:d3:81:15:8d:c4:b2:41:8b:c8:db:34:
         b9:b5:34:04:2e:22:6e:60:7e:1b:be:6d:7b:93:00:ce:b2:b6:
         2f:ef:a1:f3:ab:1c:26:65:7e:82:a7:36:4e:18:3e:a6:8e:ef:
         88:e7:91:c2:86:16:54:26:d7:89:9d:48:6a:77:51:97:cc:27:
         a9:65:da:1d
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUJC4me7WjbVlRxmUb4QTx8T2lsaQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0RDNjkwQzBERTgwMTMxQjIyM0JFRTcwRDdGNkZGOTkw
QTE1RjM0MTAeFw0yNDA0MDMxODI1MzlaFw0yNTA0MDIxODMwMzlaMDMxMTAvBgNV
BAMTKDUzNTJEMkExNjlCMTk5OUJEQzVENDlGMTNDNzM2NEZBQ0NFNjgyNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3X9/WMyyBLcr07bIYQZfQavrs
xWFxFIw34VTrSdorfPCTJGeExOSZFtI9Z/7gH47sSlHOUClxDvBPWbmo7QxDp9VF
yJUdeNoSh1FAzEdqTTcpNtw5jVdgc0A2YFZrk1mP0u0UFuc6XVmq0bf+L8kSt+pF
oSJSFh1vXK8wo/hcH9JmoAXMHIW3RBqJlwwoyZmpYlYzUC0F8G+vi1TRo/k3W1EU
o8ZRNkUbVESp+GC8/9HYpLsQ5qGliLvu4VI48aYTX84XkTeX5+bLyUv+fT1QsY3b
VAXLbBLV+XyeaeOytd6Qh8EyJ/byhicxwV4PxPj8SsE17XdoJz/E1IhNrYXPAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUU1LSoWmxmZvcXUnxPHNk+szmgmkwHwYDVR0j
BBgwFoAUPcaQwN6AExsiO+5w1/b/mQoV80EwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9KdVlMSFBkS1k1WTFwaEY1TW9xcVdCa00yVjVQQW9uYmtyY3VQdTJSZUgy
LzEvM0RDNjkwQzBERTgwMTMxQjIyM0JFRTcwRDdGNkZGOTkwQTE1RjM0MS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8zREM2OTBDMERFODAxMzFCMjIz
QkVFNzBEN0Y2RkY5OTBBMTVGMzQxLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9K
dVlMSFBkS1k1WTFwaEY1TW9xcVdCa00yVjVQQW9uYmtyY3VQdTJSZUgyLzEvMzIz
ODMwMzQzYTM1MzgzOTM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM4MzEz
MzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKARYlDANBgkqhkiG9w0BAQsFAAOCAQEAkyGdplZZ0/8P
iTjlftD8xFE/GM6+RpUBjwzmLzVt6L0Dsf8udQoO8X98QhP6k4Eep+kCKt5Ttprd
LcW2x0sNrBFYFgc3YilBXGEkxBnbE5pUJZghxRVXacb8cReWTZcg9KUhwn9RwdUs
0/pc5tCcU3rT1MDwqiI9oc4+5xH7VuycZRpCkQgmYfQA/+r52RHieJn7pUTC10+k
CdIkyw5Y3Y5m14KHz+6DoAa+3y6qaAHiGVOdiQgZt4q9HdOBFY3EskGLyNs0ubU0
BC4ibmB+G75te5MAzrK2L++h86scJmV+gqc2Thg+po7viOeRwoYWVCbXiZ1IandR
l8wnqWXaHQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:06 2024 by rpki-client on console-fra.rpki-client.org