Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/1/323830343a3830633a3a2f33322d3332203d3e20323632333433.roa
File:                     323830343a3830633a3a2f33322d3332203d3e20323632333433.roa (raw, json)
Hash identifier:          PNpEZAzSqsfwmoSeUasS1KYeCaf1Kpl46bg6y95bTqk=
Subject key identifier:   A7:E1:2F:5E:AC:27:D0:7F:B6:90:7A:64:D5:2F:4A:B9:39:5A:BC:F0
Certificate issuer:       /CN=3F0A020836A7712EC0C3C17FC164D37F5AB5E703
Certificate serial:       3D5D65294B1095191E7C332CA27664F86CE3BC0E
Authority key identifier: 3F:0A:02:08:36:A7:71:2E:C0:C3:C1:7F:C1:64:D3:7F:5A:B5:E7:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F0A020836A7712EC0C3C17FC164D37F5AB5E703.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/1/323830343a3830633a3a2f33322d3332203d3e20323632333433.roa
Signing time:             Wed 08 Feb 2023 16:55:33 +0000
ROA not before:           Wed 08 Feb 2023 16:50:33 +0000
ROA not after:            Wed 07 Feb 2024 16:55:33 +0000
asID:                     262343
IP address blocks:        2804:80c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/1/3F0A020836A7712EC0C3C17FC164D37F5AB5E703.crl
                          rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/1/3F0A020836A7712EC0C3C17FC164D37F5AB5E703.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F0A020836A7712EC0C3C17FC164D37F5AB5E703.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 04:06:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:5d:65:29:4b:10:95:19:1e:7c:33:2c:a2:76:64:f8:6c:e3:bc:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F0A020836A7712EC0C3C17FC164D37F5AB5E703
        Validity
            Not Before: Feb  8 16:50:33 2023 GMT
            Not After : Feb  7 16:55:33 2024 GMT
        Subject: CN=A7E12F5EAC27D07FB6907A64D52F4AB9395ABCF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:91:b5:83:1c:2f:a2:1b:f5:c8:6a:67:90:fc:
                    49:53:23:d0:87:1a:c3:ba:ed:37:a2:6e:92:23:be:
                    36:0c:bd:46:09:3f:e1:3f:8d:55:ee:6d:85:9f:57:
                    3a:02:3f:0b:1c:0f:e1:91:19:7e:8a:fc:e5:36:c0:
                    06:e6:02:bf:aa:e3:6f:62:fa:0c:39:f6:a2:bb:ad:
                    26:34:4c:04:c5:74:d5:4c:ac:1e:aa:a1:15:fa:3f:
                    0b:4d:c9:98:a8:f3:36:6b:ec:2a:77:2d:fb:56:1d:
                    ed:db:6b:1d:33:15:6e:d5:ad:66:60:73:8f:50:43:
                    9f:07:13:fd:09:21:18:7c:82:52:30:af:17:18:e1:
                    d8:ff:87:af:d1:0a:27:ab:d9:88:36:95:ed:86:98:
                    4c:12:41:0b:b3:c9:ae:03:b8:fc:da:13:5f:e2:ce:
                    a8:b9:0f:99:d8:f0:41:95:4e:bd:37:f2:81:d1:e5:
                    6c:e9:46:90:fa:20:cc:5a:53:98:d7:30:18:c4:4c:
                    1f:52:ac:d2:2b:15:75:5e:d8:c5:93:d2:dd:f3:ed:
                    cd:20:25:39:f6:f8:2e:65:53:f5:a1:01:b6:45:57:
                    f3:5e:77:29:41:65:77:f5:a5:5a:c1:64:2e:4d:f3:
                    c9:87:1d:93:19:94:43:71:8b:8c:93:a7:21:14:49:
                    9d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E1:2F:5E:AC:27:D0:7F:B6:90:7A:64:D5:2F:4A:B9:39:5A:BC:F0
            X509v3 Authority Key Identifier:
                keyid:3F:0A:02:08:36:A7:71:2E:C0:C3:C1:7F:C1:64:D3:7F:5A:B5:E7:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/1/3F0A020836A7712EC0C3C17FC164D37F5AB5E703.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F0A020836A7712EC0C3C17FC164D37F5AB5E703.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/1/323830343a3830633a3a2f33322d3332203d3e20323632333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:80c::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:38:84:90:29:0f:3e:f8:2a:8b:c7:b4:3f:15:5f:2f:9a:4b:
         18:94:5d:4f:0b:56:3f:97:cf:dc:25:d0:9d:ab:1f:80:c5:b2:
         d4:ea:cf:6e:be:1b:38:f1:a7:c2:0d:03:5a:e7:95:49:1f:a3:
         ab:2c:31:57:d6:b9:58:b9:81:eb:c4:53:b9:54:34:df:a4:a7:
         25:14:67:dc:89:54:1f:20:42:42:04:54:c6:fc:03:8f:d4:8a:
         c6:89:f5:c4:9c:7e:20:b0:8d:2f:da:d4:d4:f9:65:92:cd:1f:
         29:d7:f5:10:6d:8f:50:7e:da:00:6f:7d:60:e6:58:8e:9c:fb:
         28:2a:52:4c:db:5f:a9:93:d6:90:3c:60:ae:be:ae:e5:f7:7c:
         3d:b3:5c:26:67:b5:48:f0:8b:74:ca:d1:23:65:1f:40:7f:4e:
         63:c0:9e:5c:1c:89:bd:70:f5:96:67:b3:3b:f1:35:5e:bb:fd:
         2b:37:d9:f2:10:b0:8a:06:bc:62:fd:1c:3a:88:f6:5e:b6:05:
         78:bc:da:2d:06:01:5d:56:25:36:5e:23:fb:f4:35:4a:2c:d3:
         a9:20:f9:79:c5:d7:e2:89:da:8e:77:d5:49:b1:61:f7:ac:53:
         af:a6:5c:40:46:4f:e2:9f:a6:e6:0f:10:b0:1c:41:6e:57:a4:
         6b:da:97:77
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUPV1lKUsQlRkefDMsonZk+GzjvA4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0YwQTAyMDgzNkE3NzEyRUMwQzNDMTdGQzE2NEQzN0Y1
QUI1RTcwMzAeFw0yMzAyMDgxNjUwMzNaFw0yNDAyMDcxNjU1MzNaMDMxMTAvBgNV
BAMTKEE3RTEyRjVFQUMyN0QwN0ZCNjkwN0E2NEQ1MkY0QUI5Mzk1QUJDRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+kbWDHC+iG/XIameQ/ElTI9CH
GsO67TeibpIjvjYMvUYJP+E/jVXubYWfVzoCPwscD+GRGX6K/OU2wAbmAr+q429i
+gw59qK7rSY0TATFdNVMrB6qoRX6PwtNyZio8zZr7Cp3LftWHe3bax0zFW7VrWZg
c49QQ58HE/0JIRh8glIwrxcY4dj/h6/RCier2Yg2le2GmEwSQQuzya4DuPzaE1/i
zqi5D5nY8EGVTr038oHR5WzpRpD6IMxaU5jXMBjETB9SrNIrFXVe2MWT0t3z7c0g
JTn2+C5lU/WhAbZFV/NedylBZXf1pVrBZC5N88mHHZMZlENxi4yTpyEUSZ0nAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUp+EvXqwn0H+2kHpk1S9KuTlavPAwHwYDVR0j
BBgwFoAUPwoCCDancS7Aw8F/wWTTf1q15wMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGszNHhnNUFZak5uMXZTZlo3enc0S3J5d3paRDh2NllFN3lvMzR2S3BX
b2ovMS8zRjBBMDIwODM2QTc3MTJFQzBDM0MxN0ZDMTY0RDM3RjVBQjVFNzAzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNGMEEwMjA4MzZBNzcxMkVD
MEMzQzE3RkMxNjREMzdGNUFCNUU3MDMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RrMzR4ZzVBWWpObjF2U2ZaN3p3NEtyeXd6WkQ4djZZRTd5bzM0dktwV29qLzEv
MzIzODMwMzQzYTM4MzA2MzNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzMjMz
MzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgECAwwDQYJKoZIhvcNAQELBQADggEBAC04hJApDz74
KovHtD8VXy+aSxiUXU8LVj+Xz9wl0J2rH4DFstTqz26+Gzjxp8INA1rnlUkfo6ss
MVfWuVi5gevEU7lUNN+kpyUUZ9yJVB8gQkIEVMb8A4/UisaJ9cScfiCwjS/a1NT5
ZZLNHynX9RBtj1B+2gBvfWDmWI6c+ygqUkzbX6mT1pA8YK6+ruX3fD2zXCZntUjw
i3TK0SNlH0B/TmPAnlwcib1w9ZZnszvxNV67/Ss32fIQsIoGvGL9HDqI9l62BXi8
2i0GAV1WJTZeI/v0NUos06kg+XnF1+KJ2o531UmxYfesU6+mXEBGT+KfpuYPELAc
QW5XpGval3c=
-----END CERTIFICATE-----
Generated at Tue Jan 9 03:49:09 2024 by rpki-client on console.sobornost.net