Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/323830343a3339303a3a2f33322d313238203d3e203532393536.roa
File:                     323830343a3339303a3a2f33322d313238203d3e203532393536.roa (raw, json)
Hash identifier:          QtsGAZdlng7VBvGgNsMpKmKSFR+Gu5VJM11YoY55ow4=
Subject key identifier:   BA:AD:E0:A5:72:10:8D:81:99:55:0D:3D:20:DD:E4:57:FE:39:AE:50
Certificate issuer:       /CN=E69EBBEF4F3EB2DE9A368F108A8194F2D4125979
Certificate serial:       2F1EB092981F98B9E6660EE56BE0D604D11490E0
Authority key identifier: E6:9E:BB:EF:4F:3E:B2:DE:9A:36:8F:10:8A:81:94:F2:D4:12:59:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/323830343a3339303a3a2f33322d313238203d3e203532393536.roa
Signing time:             Wed 03 Jul 2024 15:07:41 +0000
ROA not before:           Wed 03 Jul 2024 15:02:41 +0000
ROA not after:            Wed 02 Jul 2025 15:07:41 +0000
asID:                     52956
IP address blocks:        2804:390::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.crl
                          rsync://rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:1e:b0:92:98:1f:98:b9:e6:66:0e:e5:6b:e0:d6:04:d1:14:90:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E69EBBEF4F3EB2DE9A368F108A8194F2D4125979
        Validity
            Not Before: Jul  3 15:02:41 2024 GMT
            Not After : Jul  2 15:07:41 2025 GMT
        Subject: CN=BAADE0A572108D8199550D3D20DDE457FE39AE50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:18:48:15:dd:7a:13:e1:2e:89:93:60:05:ae:
                    3d:49:54:2b:69:8b:5e:57:ae:b3:d1:dc:13:b3:14:
                    6a:9b:96:38:9a:91:e1:23:dd:a7:19:de:88:0c:65:
                    c9:60:7d:90:8a:4c:c6:f4:cf:60:ff:08:aa:ff:34:
                    fb:4b:14:4f:32:7e:1c:22:ed:03:35:4b:9b:f7:71:
                    c1:b8:b3:a6:e5:09:70:74:05:5e:6b:74:98:79:ed:
                    34:f9:7a:78:a0:a8:25:22:21:33:5b:f9:ad:b1:f8:
                    af:9e:5a:f7:73:64:35:fe:9f:7a:5f:96:f5:86:b1:
                    4f:87:95:0f:f1:0f:eb:ab:45:a7:24:d7:40:c6:d8:
                    6c:45:6d:ef:b7:5f:7b:87:0b:aa:f2:04:bb:10:5f:
                    5e:25:cf:ef:81:dd:cc:a3:c1:ba:c7:b4:8b:63:0f:
                    6f:76:92:cf:94:b9:f2:a6:29:40:27:91:22:65:eb:
                    9f:e1:44:6d:d4:d6:bd:77:ec:1b:ed:1c:a6:94:80:
                    b8:68:24:47:2e:a3:5e:3b:b6:f3:8f:29:93:6b:b3:
                    06:4b:e7:2e:bd:bf:b8:7c:0d:57:75:61:cf:60:81:
                    b2:de:d5:61:35:1d:8f:50:9e:94:7d:f8:53:01:44:
                    e2:7e:49:c6:6f:ae:3e:9a:0e:ed:66:0e:1b:a1:4a:
                    e1:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:AD:E0:A5:72:10:8D:81:99:55:0D:3D:20:DD:E4:57:FE:39:AE:50
            X509v3 Authority Key Identifier:
                keyid:E6:9E:BB:EF:4F:3E:B2:DE:9A:36:8F:10:8A:81:94:F2:D4:12:59:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/323830343a3339303a3a2f33322d313238203d3e203532393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:390::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:d3:a9:c3:c1:e3:e2:f4:af:aa:6f:d0:f0:cd:ef:86:3c:7d:
         99:00:c5:82:b9:58:13:52:79:07:e9:16:17:15:2e:38:3a:92:
         42:0c:79:08:0f:fe:6d:e6:3f:17:b0:1a:3c:ce:28:fd:ca:e0:
         1a:f0:b7:c4:8c:30:70:55:d9:6c:f0:a5:95:65:83:9d:7a:c6:
         d4:8a:97:3e:27:ea:a3:ed:8c:2a:50:5f:20:17:cc:d5:de:d3:
         c6:45:69:22:ee:6b:ba:39:f2:d5:59:4c:43:f3:01:db:1d:3a:
         59:2c:e8:2f:74:75:0d:b6:23:1d:ee:fa:f3:7b:57:24:10:f8:
         c0:1b:6d:4b:88:fc:68:03:7d:6d:1b:35:bf:9d:88:8a:62:f3:
         17:d9:6c:cc:65:98:70:5e:1d:4c:c6:29:2d:ac:15:61:20:01:
         fe:11:1a:7a:05:38:6b:a3:25:d2:a5:ef:31:1f:49:7d:ce:1a:
         5a:29:33:b2:f5:41:63:37:6e:e5:b3:70:1c:94:01:50:18:c3:
         aa:de:7a:0c:76:69:16:95:b3:d4:59:ae:21:1b:c0:df:76:35:
         80:52:67:32:f4:53:51:4a:56:0b:c9:70:33:54:61:5c:35:88:
         c5:9b:45:38:08:52:ae:32:19:ee:fc:41:ae:68:06:e2:95:67:
         c0:71:db:9e
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIULx6wkpgfmLnmZg7la+DWBNEUkOAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTY5RUJCRUY0RjNFQjJERTlBMzY4RjEwOEE4MTk0RjJE
NDEyNTk3OTAeFw0yNDA3MDMxNTAyNDFaFw0yNTA3MDIxNTA3NDFaMDMxMTAvBgNV
BAMTKEJBQURFMEE1NzIxMDhEODE5OTU1MEQzRDIwRERFNDU3RkUzOUFFNTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2GEgV3XoT4S6Jk2AFrj1JVCtp
i15XrrPR3BOzFGqbljiakeEj3acZ3ogMZclgfZCKTMb0z2D/CKr/NPtLFE8yfhwi
7QM1S5v3ccG4s6blCXB0BV5rdJh57TT5enigqCUiITNb+a2x+K+eWvdzZDX+n3pf
lvWGsU+HlQ/xD+urRack10DG2GxFbe+3X3uHC6ryBLsQX14lz++B3cyjwbrHtItj
D292ks+UufKmKUAnkSJl65/hRG3U1r137BvtHKaUgLhoJEcuo147tvOPKZNrswZL
5y69v7h8DVd1Yc9ggbLe1WE1HY9QnpR9+FMBROJ+ScZvrj6aDu1mDhuhSuG9AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUuq3gpXIQjYGZVQ09IN3kV/45rlAwHwYDVR0j
BBgwFoAU5p67708+st6aNo8QioGU8tQSWXkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnR0NHJlRVdwaUpzYWdzRUozQkQ0WlpDZmNZN2FqenhMajZuYjFlRVc1
ZlovMC9FNjlFQkJFRjRGM0VCMkRFOUEzNjhGMTA4QTgxOTRGMkQ0MTI1OTc5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U2OUVCQkVGNEYzRUIyREU5
QTM2OEYxMDhBODE5NEYyRDQxMjU5NzkuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ0dDRyZUVXcGlKc2Fnc0VKM0JENFpaQ2ZjWTdhanp4TGo2bmIxZUVXNWZaLzAv
MzIzODMwMzQzYTMzMzkzMDNhM2EyZjMzMzIyZDMxMzIzODIwM2QzZTIwMzUzMjM5
MzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEA5AwDQYJKoZIhvcNAQELBQADggEBAFDTqcPB4+L0
r6pv0PDN74Y8fZkAxYK5WBNSeQfpFhcVLjg6kkIMeQgP/m3mPxewGjzOKP3K4Brw
t8SMMHBV2WzwpZVlg516xtSKlz4n6qPtjCpQXyAXzNXe08ZFaSLua7o58tVZTEPz
AdsdOlks6C90dQ22Ix3u+vN7VyQQ+MAbbUuI/GgDfW0bNb+diIpi8xfZbMxlmHBe
HUzGKS2sFWEgAf4RGnoFOGujJdKl7zEfSX3OGlopM7L1QWM3buWzcByUAVAYw6re
egx2aRaVs9RZriEbwN92NYBSZzL0U1FKVgvJcDNUYVw1iMWbRTgIUq4yGe78Qa5o
BuKVZ8Bx254=
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:32:39 2024 by rpki-client on console-ams.rpki-client.org