Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/n3bRx5jhRCUF39MPeZK7jJ8ZYLSSKo71cK2fsADYtc1/0/323830343a343433633a3a2f33322d313238203d3e20323637363131.roa
File:                     323830343a343433633a3a2f33322d313238203d3e20323637363131.roa (raw, json)
Hash identifier:          JCNYcN6ptZS0UzuHJquKpkayP2Fvn1XnJJPK/vRPpLo=
Subject key identifier:   50:80:D3:49:03:8C:06:3C:2B:CA:EA:7E:22:CB:77:04:5A:59:0E:D0
Certificate issuer:       /CN=3F34DB83950F2AE7FBA8DB28D91D12099C22D557
Certificate serial:       745E408B173067803E68C05E2004421D73D29E26
Authority key identifier: 3F:34:DB:83:95:0F:2A:E7:FB:A8:DB:28:D9:1D:12:09:9C:22:D5:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F34DB83950F2AE7FBA8DB28D91D12099C22D557.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/n3bRx5jhRCUF39MPeZK7jJ8ZYLSSKo71cK2fsADYtc1/0/323830343a343433633a3a2f33322d313238203d3e20323637363131.roa
Signing time:             Sun 22 Sep 2024 17:41:31 +0000
ROA not before:           Sun 22 Sep 2024 17:36:31 +0000
ROA not after:            Sun 21 Sep 2025 17:41:31 +0000
asID:                     267611
IP address blocks:        2804:443c::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/n3bRx5jhRCUF39MPeZK7jJ8ZYLSSKo71cK2fsADYtc1/0/3F34DB83950F2AE7FBA8DB28D91D12099C22D557.crl
                          rsync://rpki-repo.registro.br/repo/n3bRx5jhRCUF39MPeZK7jJ8ZYLSSKo71cK2fsADYtc1/0/3F34DB83950F2AE7FBA8DB28D91D12099C22D557.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F34DB83950F2AE7FBA8DB28D91D12099C22D557.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:5e:40:8b:17:30:67:80:3e:68:c0:5e:20:04:42:1d:73:d2:9e:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F34DB83950F2AE7FBA8DB28D91D12099C22D557
        Validity
            Not Before: Sep 22 17:36:31 2024 GMT
            Not After : Sep 21 17:41:31 2025 GMT
        Subject: CN=5080D349038C063C2BCAEA7E22CB77045A590ED0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:88:2c:13:e5:53:38:6a:e1:93:d6:8a:c0:0c:
                    6c:f5:1a:c8:4e:6b:61:61:04:3c:d5:27:f4:c7:33:
                    dc:66:c1:ca:1f:70:b6:4e:94:51:03:5f:f9:0f:ba:
                    3b:73:65:e7:6e:3c:fd:60:8e:75:fc:42:c1:79:04:
                    c4:fc:24:51:63:3d:70:c8:ec:19:ca:93:ba:b5:9a:
                    7c:6e:61:61:db:e9:1e:a6:fd:1a:19:29:ae:ca:40:
                    01:88:c8:f1:e9:eb:0d:98:03:4b:68:9f:96:fa:d1:
                    1a:aa:fc:13:70:0b:a9:4d:a8:7c:27:7c:31:77:14:
                    20:5a:0f:96:62:fe:42:c2:c4:cd:82:a0:ff:a6:65:
                    2a:4b:be:05:d2:56:2c:f0:4f:9f:4f:fb:4d:3d:93:
                    d9:9c:31:cf:52:16:d7:ea:45:4a:ed:67:25:ac:ea:
                    87:99:74:f5:91:3d:92:b1:86:02:6c:80:84:86:36:
                    05:82:87:54:00:d6:b0:f9:e7:d8:2d:39:c5:2f:73:
                    21:aa:8e:dc:6d:87:96:66:1a:7a:63:28:cf:7e:38:
                    3c:f1:de:dd:9b:bd:21:6e:23:a3:32:6b:c4:74:b1:
                    00:28:a7:b4:2e:55:0b:e1:bd:46:3a:7f:28:d3:04:
                    df:ab:30:65:62:61:ee:61:7a:a1:3d:69:79:e7:2e:
                    85:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:80:D3:49:03:8C:06:3C:2B:CA:EA:7E:22:CB:77:04:5A:59:0E:D0
            X509v3 Authority Key Identifier:
                keyid:3F:34:DB:83:95:0F:2A:E7:FB:A8:DB:28:D9:1D:12:09:9C:22:D5:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/n3bRx5jhRCUF39MPeZK7jJ8ZYLSSKo71cK2fsADYtc1/0/3F34DB83950F2AE7FBA8DB28D91D12099C22D557.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F34DB83950F2AE7FBA8DB28D91D12099C22D557.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/n3bRx5jhRCUF39MPeZK7jJ8ZYLSSKo71cK2fsADYtc1/0/323830343a343433633a3a2f33322d313238203d3e20323637363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:443c::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:0d:b1:c9:89:7c:e6:87:f8:9f:92:e5:36:0d:e1:0b:7b:bd:
         63:58:9e:69:a9:50:bf:a4:5e:c9:ad:b3:23:28:40:a4:3e:e4:
         e9:5a:06:84:39:a0:23:62:7d:4a:fa:d8:96:9a:82:c0:4a:28:
         db:43:38:d5:18:13:bb:d8:f4:92:2b:1b:2c:33:e0:6b:0c:f1:
         4f:0f:2f:a0:2f:44:07:5f:72:37:94:2f:70:a4:e4:9e:e5:6c:
         2a:63:e5:71:2f:18:0d:35:c1:c6:f4:4a:41:d0:f1:3e:ea:63:
         16:2b:d3:bc:cc:86:85:1e:6c:70:6e:a4:64:8b:80:29:ed:c3:
         80:eb:4b:62:ad:87:de:d6:83:19:87:af:32:bf:31:9a:c8:42:
         d3:7b:6e:cb:f8:65:d2:07:d3:a9:70:d8:63:84:03:cc:14:0f:
         eb:b9:f1:86:59:e2:54:6a:cc:c5:6e:dd:43:fc:48:ee:6d:9c:
         65:28:98:3c:19:a3:83:1e:19:c3:96:d8:0f:01:0e:4d:5d:f3:
         8f:92:0c:77:de:5c:35:10:6b:f9:3a:60:34:0a:00:cb:7e:80:
         82:3d:20:90:c4:70:6e:3f:2b:44:2e:51:de:6d:9f:63:d0:1f:
         3c:70:7d:fd:7c:7b:76:05:8d:d8:b5:9c:fd:4b:22:45:b2:6c:
         36:35:cb:85
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUdF5AixcwZ4A+aMBeIARCHXPSniYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0YzNERCODM5NTBGMkFFN0ZCQThEQjI4RDkxRDEyMDk5
QzIyRDU1NzAeFw0yNDA5MjIxNzM2MzFaFw0yNTA5MjExNzQxMzFaMDMxMTAvBgNV
BAMTKDUwODBEMzQ5MDM4QzA2M0MyQkNBRUE3RTIyQ0I3NzA0NUE1OTBFRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkiCwT5VM4auGT1orADGz1GshO
a2FhBDzVJ/THM9xmwcofcLZOlFEDX/kPujtzZeduPP1gjnX8QsF5BMT8JFFjPXDI
7BnKk7q1mnxuYWHb6R6m/RoZKa7KQAGIyPHp6w2YA0ton5b60Rqq/BNwC6lNqHwn
fDF3FCBaD5Zi/kLCxM2CoP+mZSpLvgXSVizwT59P+009k9mcMc9SFtfqRUrtZyWs
6oeZdPWRPZKxhgJsgISGNgWCh1QA1rD559gtOcUvcyGqjtxth5ZmGnpjKM9+ODzx
3t2bvSFuI6Mya8R0sQAop7QuVQvhvUY6fyjTBN+rMGViYe5heqE9aXnnLoWLAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUUIDTSQOMBjwryup+Ist3BFpZDtAwHwYDVR0j
BBgwFoAUPzTbg5UPKuf7qNso2R0SCZwi1VcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9uM2JSeDVqaFJDVUYzOU1QZVpLN2pKOFpZTFNTS283MWNLMmZzQURZdGMx
LzAvM0YzNERCODM5NTBGMkFFN0ZCQThEQjI4RDkxRDEyMDk5QzIyRDU1Ny5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8zRjM0REI4Mzk1MEYyQUU3RkJB
OERCMjhEOTFEMTIwOTlDMjJENTU3LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9u
M2JSeDVqaFJDVUYzOU1QZVpLN2pKOFpZTFNTS283MWNLMmZzQURZdGMxLzAvMzIz
ODMwMzQzYTM0MzQzMzYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2Mzcz
NjMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcB
Af8EETAPMA0EAgACMAcDBQAoBEQ8MA0GCSqGSIb3DQEBCwUAA4IBAQAuDbHJiXzm
h/ifkuU2DeELe71jWJ5pqVC/pF7JrbMjKECkPuTpWgaEOaAjYn1K+tiWmoLASijb
QzjVGBO72PSSKxssM+BrDPFPDy+gL0QHX3I3lC9wpOSe5WwqY+VxLxgNNcHG9EpB
0PE+6mMWK9O8zIaFHmxwbqRki4Ap7cOA60tirYfe1oMZh68yvzGayELTe27L+GXS
B9OpcNhjhAPMFA/rufGGWeJUaszFbt1D/EjubZxlKJg8GaODHhnDltgPAQ5NXfOP
kgx33lw1EGv5OmA0CgDLfoCCPSCQxHBuPytELlHebZ9j0B88cH39fHt2BY3YtZz9
SyJFsmw2NcuF
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:14 2024 by rpki-client on console-ams.rpki-client.org