Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/odX2xJL2T7Eh3ptkU4v3LinCDUhzKT2xyFgeWPBrshS/1/323830343a316433343a3a2f33322d3438203d3e20323634333534.roa
File:                     323830343a316433343a3a2f33322d3438203d3e20323634333534.roa (raw, json)
Hash identifier:          sg1c6lBSL5u6as5+8x8wweLfFHXWgMlRCgGQ1MCzn+0=
Subject key identifier:   9A:2B:F2:D9:E7:27:83:66:B9:47:5E:0E:96:39:03:B4:B3:95:FB:DD
Certificate issuer:       /CN=3701790BFCD740698BF2D59FB7800495728B1041
Certificate serial:       428DDAAE0B7B65A9F8332382071486D40D68C632
Authority key identifier: 37:01:79:0B:FC:D7:40:69:8B:F2:D5:9F:B7:80:04:95:72:8B:10:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3701790BFCD740698BF2D59FB7800495728B1041.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/odX2xJL2T7Eh3ptkU4v3LinCDUhzKT2xyFgeWPBrshS/1/323830343a316433343a3a2f33322d3438203d3e20323634333534.roa
Signing time:             Thu 04 Apr 2024 05:34:49 +0000
ROA not before:           Thu 04 Apr 2024 05:29:49 +0000
ROA not after:            Thu 03 Apr 2025 05:34:49 +0000
asID:                     264354
IP address blocks:        2804:1d34::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/odX2xJL2T7Eh3ptkU4v3LinCDUhzKT2xyFgeWPBrshS/1/3701790BFCD740698BF2D59FB7800495728B1041.crl
                          rsync://rpki-repo.registro.br/repo/odX2xJL2T7Eh3ptkU4v3LinCDUhzKT2xyFgeWPBrshS/1/3701790BFCD740698BF2D59FB7800495728B1041.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3701790BFCD740698BF2D59FB7800495728B1041.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:8d:da:ae:0b:7b:65:a9:f8:33:23:82:07:14:86:d4:0d:68:c6:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3701790BFCD740698BF2D59FB7800495728B1041
        Validity
            Not Before: Apr  4 05:29:49 2024 GMT
            Not After : Apr  3 05:34:49 2025 GMT
        Subject: CN=9A2BF2D9E7278366B9475E0E963903B4B395FBDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3b:67:ee:8c:4e:9c:2d:10:f8:af:02:fb:8c:
                    af:7c:02:d5:e3:01:7d:e9:a4:f2:e0:73:e5:2b:f8:
                    65:a6:9f:ea:32:bf:fa:a0:dd:ce:6d:b9:9e:48:09:
                    7a:42:3c:40:6f:42:27:ba:9d:25:76:4f:ad:4f:de:
                    e1:33:54:b6:08:da:f4:3c:d3:7a:06:fa:a5:3b:10:
                    98:80:07:38:1f:8f:ee:3a:c3:1e:07:d7:7f:e0:17:
                    dc:4f:24:5b:63:9b:97:b0:3b:50:98:d3:bc:59:44:
                    49:14:ad:bf:10:b9:5c:09:49:b1:8e:92:89:61:58:
                    19:20:27:94:30:e3:4e:0e:bf:7c:ed:f3:fa:b8:bb:
                    08:6e:67:7f:8f:47:06:ef:51:8d:b2:6e:0a:5a:e5:
                    c4:c6:b1:2c:62:8c:bb:18:17:fb:8a:7c:c6:21:29:
                    dc:c0:c7:4e:67:a9:ec:23:02:48:3c:ab:6e:66:bd:
                    75:4f:17:dd:82:c7:d5:d2:76:79:d2:f3:aa:00:1e:
                    6a:cb:66:56:08:65:dc:0d:fc:f8:f4:99:50:d0:1c:
                    82:0f:e0:7f:dc:08:9f:d7:8d:41:49:1d:be:ca:57:
                    eb:0d:96:cb:77:f0:69:27:2a:c0:73:bf:98:a2:99:
                    73:0c:69:20:be:b6:8b:19:06:b8:70:0a:23:2a:e0:
                    4e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:2B:F2:D9:E7:27:83:66:B9:47:5E:0E:96:39:03:B4:B3:95:FB:DD
            X509v3 Authority Key Identifier:
                keyid:37:01:79:0B:FC:D7:40:69:8B:F2:D5:9F:B7:80:04:95:72:8B:10:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/odX2xJL2T7Eh3ptkU4v3LinCDUhzKT2xyFgeWPBrshS/1/3701790BFCD740698BF2D59FB7800495728B1041.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3701790BFCD740698BF2D59FB7800495728B1041.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/odX2xJL2T7Eh3ptkU4v3LinCDUhzKT2xyFgeWPBrshS/1/323830343a316433343a3a2f33322d3438203d3e20323634333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1d34::/32

    Signature Algorithm: sha256WithRSAEncryption
         c5:5a:c5:e5:e7:04:18:c9:7a:04:2c:e4:f4:ff:b2:cb:e1:9b:
         b7:7d:93:c0:bc:32:9a:77:74:69:32:66:01:76:ea:f8:55:64:
         17:e1:71:5e:ba:36:5c:f0:77:05:18:4b:94:fe:2c:89:67:68:
         36:64:9e:d8:d6:1e:29:59:6c:7a:0f:7f:c1:50:32:b9:dc:4a:
         05:9d:fd:7e:8e:b3:34:fb:c1:9b:7b:93:6c:80:52:6d:c8:ad:
         2f:77:6e:02:42:2d:a5:6b:b6:26:48:a7:97:37:70:0c:60:fe:
         73:47:2b:fb:a4:05:30:69:88:d4:50:59:c3:82:e9:2b:5f:79:
         07:61:e6:b6:2c:b4:57:9e:04:6e:41:66:8b:37:a3:61:ea:20:
         1a:24:e5:14:7e:0f:0e:a3:da:46:85:a0:b5:06:90:13:49:20:
         73:d0:a1:eb:d4:92:ee:ad:64:63:79:1d:fa:77:84:e0:a9:f0:
         13:47:51:6a:3a:10:e0:aa:79:5f:b2:1a:74:0e:88:f1:42:0f:
         ed:e7:42:05:64:ba:6b:7a:1f:14:92:67:0b:94:71:68:4e:ae:
         c3:0e:56:f3:1f:2c:a3:8b:d4:46:3d:e4:e4:8b:9b:d9:8b:ab:
         02:e6:20:f4:da:b2:48:5f:2a:88:61:78:1a:eb:65:1c:7f:52:
         52:aa:cd:8a
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUQo3argt7Zan4MyOCBxSG1A1oxjIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzcwMTc5MEJGQ0Q3NDA2OThCRjJENTlGQjc4MDA0OTU3
MjhCMTA0MTAeFw0yNDA0MDQwNTI5NDlaFw0yNTA0MDMwNTM0NDlaMDMxMTAvBgNV
BAMTKDlBMkJGMkQ5RTcyNzgzNjZCOTQ3NUUwRTk2MzkwM0I0QjM5NUZCREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcO2fujE6cLRD4rwL7jK98AtXj
AX3ppPLgc+Ur+GWmn+oyv/qg3c5tuZ5ICXpCPEBvQie6nSV2T61P3uEzVLYI2vQ8
03oG+qU7EJiABzgfj+46wx4H13/gF9xPJFtjm5ewO1CY07xZREkUrb8QuVwJSbGO
kolhWBkgJ5Qw404Ov3zt8/q4uwhuZ3+PRwbvUY2ybgpa5cTGsSxijLsYF/uKfMYh
KdzAx05nqewjAkg8q25mvXVPF92Cx9XSdnnS86oAHmrLZlYIZdwN/Pj0mVDQHIIP
4H/cCJ/XjUFJHb7KV+sNlst38GknKsBzv5iimXMMaSC+tosZBrhwCiMq4E5FAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUmivy2ecng2a5R14OljkDtLOV+90wHwYDVR0j
BBgwFoAUNwF5C/zXQGmL8tWft4AElXKLEEEwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9vZFgyeEpMMlQ3RWgzcHRrVTR2M0xpbkNEVWh6S1QyeHlGZ2VXUEJyc2hT
LzEvMzcwMTc5MEJGQ0Q3NDA2OThCRjJENTlGQjc4MDA0OTU3MjhCMTA0MS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8zNzAxNzkwQkZDRDc0MDY5OEJG
MkQ1OUZCNzgwMDQ5NTcyOEIxMDQxLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9v
ZFgyeEpMMlQ3RWgzcHRrVTR2M0xpbkNEVWh6S1QyeHlGZ2VXUEJyc2hTLzEvMzIz
ODMwMzQzYTMxNjQzMzM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM0MzMz
NTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKAQdNDANBgkqhkiG9w0BAQsFAAOCAQEAxVrF5ecEGMl6
BCzk9P+yy+Gbt32TwLwymnd0aTJmAXbq+FVkF+FxXro2XPB3BRhLlP4siWdoNmSe
2NYeKVlseg9/wVAyudxKBZ39fo6zNPvBm3uTbIBSbcitL3duAkItpWu2Jkinlzdw
DGD+c0cr+6QFMGmI1FBZw4LpK195B2Hmtiy0V54EbkFmizejYeogGiTlFH4PDqPa
RoWgtQaQE0kgc9Ch69SS7q1kY3kd+neE4KnwE0dRajoQ4Kp5X7IadA6I8UIP7edC
BWS6a3ofFJJnC5RxaE6uww5W8x8so4vURj3k5Iub2YurAuYg9NqySF8qiGF4Gutl
HH9SUqrNig==
-----END CERTIFICATE-----
Generated at Sat Nov 23 13:12:25 2024 by rpki-client on console-fra.rpki-client.org