Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/33o3YguCo8hoRqzVHbtJpjbFF7NzvGBCbP8XPFcwgecD/1/323830343a333936633a3a2f33322d3438203d3e20323632383436.roa
File:                     323830343a333936633a3a2f33322d3438203d3e20323632383436.roa (raw, json)
Hash identifier:          4KYA/vyJfju3Z08LNsBSemlOgVKzG5gPx8uoq0uqAwY=
Subject key identifier:   06:F7:C2:A9:D0:1B:CE:CD:6D:15:0B:70:CB:B7:E7:8E:F6:69:7B:86
Certificate issuer:       /CN=EAC246C40D838133D032D3CB6AD738DDBFC47537
Certificate serial:       4A8B44502278DE9A7B41A615D5073ECC90F1ACBA
Authority key identifier: EA:C2:46:C4:0D:83:81:33:D0:32:D3:CB:6A:D7:38:DD:BF:C4:75:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC246C40D838133D032D3CB6AD738DDBFC47537.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/33o3YguCo8hoRqzVHbtJpjbFF7NzvGBCbP8XPFcwgecD/1/323830343a333936633a3a2f33322d3438203d3e20323632383436.roa
Signing time:             Wed 03 Apr 2024 22:59:49 +0000
ROA not before:           Wed 03 Apr 2024 22:54:49 +0000
ROA not after:            Wed 02 Apr 2025 22:59:49 +0000
asID:                     262846
IP address blocks:        2804:396c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/33o3YguCo8hoRqzVHbtJpjbFF7NzvGBCbP8XPFcwgecD/1/EAC246C40D838133D032D3CB6AD738DDBFC47537.crl
                          rsync://rpki-repo.registro.br/repo/33o3YguCo8hoRqzVHbtJpjbFF7NzvGBCbP8XPFcwgecD/1/EAC246C40D838133D032D3CB6AD738DDBFC47537.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC246C40D838133D032D3CB6AD738DDBFC47537.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 16:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:8b:44:50:22:78:de:9a:7b:41:a6:15:d5:07:3e:cc:90:f1:ac:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAC246C40D838133D032D3CB6AD738DDBFC47537
        Validity
            Not Before: Apr  3 22:54:49 2024 GMT
            Not After : Apr  2 22:59:49 2025 GMT
        Subject: CN=06F7C2A9D01BCECD6D150B70CBB7E78EF6697B86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:23:4e:6b:15:5b:6a:b9:c6:27:e2:ca:71:9f:
                    8b:e4:b5:aa:54:b5:f0:af:8f:62:62:4d:65:d1:1a:
                    4d:39:00:95:b4:99:c8:97:04:f5:0b:c3:14:10:a7:
                    02:d9:5e:c3:3b:8a:73:e8:0a:45:a1:c2:19:4e:7a:
                    e9:01:63:6a:8d:13:3f:fb:58:b2:f4:33:7e:45:41:
                    04:58:de:4d:f5:28:a2:80:d3:8b:15:b7:1c:d1:d0:
                    a2:72:2e:5c:28:a8:55:52:6c:73:55:48:17:4b:b3:
                    9a:20:f6:6f:1c:80:d6:b1:c9:2c:03:37:98:69:c1:
                    3e:44:b6:c7:ba:1e:83:88:86:0d:5f:37:d6:24:e8:
                    fe:c3:c6:be:82:2f:b2:e4:7d:4d:25:06:ad:93:d1:
                    9f:0d:0d:5f:2b:a1:62:8f:3a:4b:ca:71:b7:7d:0b:
                    d5:e8:47:90:6c:86:7d:cd:1a:a4:da:30:0b:02:3d:
                    db:eb:9a:3c:b6:9e:a1:00:ae:62:a8:20:8b:69:29:
                    f8:68:8d:a5:47:f0:c3:9d:a1:f6:5b:fb:f5:c6:7d:
                    85:0f:fb:18:bb:3b:d6:11:46:b8:05:d5:1a:ef:ad:
                    bb:49:17:af:86:36:02:d9:22:a7:f2:ff:05:76:d1:
                    62:d7:ae:b8:db:cc:60:0d:75:fc:aa:e2:15:22:60:
                    37:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F7:C2:A9:D0:1B:CE:CD:6D:15:0B:70:CB:B7:E7:8E:F6:69:7B:86
            X509v3 Authority Key Identifier:
                keyid:EA:C2:46:C4:0D:83:81:33:D0:32:D3:CB:6A:D7:38:DD:BF:C4:75:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/33o3YguCo8hoRqzVHbtJpjbFF7NzvGBCbP8XPFcwgecD/1/EAC246C40D838133D032D3CB6AD738DDBFC47537.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC246C40D838133D032D3CB6AD738DDBFC47537.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/33o3YguCo8hoRqzVHbtJpjbFF7NzvGBCbP8XPFcwgecD/1/323830343a333936633a3a2f33322d3438203d3e20323632383436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:396c::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:e0:3a:74:ae:13:b2:28:1d:81:fa:5a:82:84:84:1a:59:a8:
         65:a5:6e:47:86:14:6b:29:0a:09:df:0d:e2:c1:95:5f:96:61:
         18:0a:13:6d:af:ff:03:d1:63:b9:35:cf:2d:e2:bf:85:e4:5b:
         2d:89:b2:d5:c3:04:c6:73:2e:12:e3:b5:72:38:64:cb:58:7c:
         f2:ab:b0:bf:1f:2a:31:91:ee:d4:b7:16:32:ca:a3:b8:c4:64:
         9c:a5:9e:e1:66:ab:69:57:08:09:0c:97:7c:fe:85:2a:7d:1b:
         47:e5:d1:07:97:dc:b6:9e:29:42:20:7b:6c:19:2d:98:14:fb:
         85:61:cd:36:7e:e3:c5:81:04:dd:c3:7c:ac:2f:3a:84:4e:ed:
         4b:f4:d8:f7:d0:fb:c1:55:ee:3a:7d:46:50:b3:54:7f:50:d5:
         c3:43:c4:03:c3:cf:ba:aa:c6:a6:6d:13:e0:ac:ca:69:1c:94:
         57:97:9e:4f:6b:b4:52:2a:13:14:77:39:c3:36:1a:aa:f4:93:
         de:79:ea:95:2e:38:f9:fc:67:64:8e:0c:13:9d:0e:16:55:b1:
         f2:92:0f:ce:04:5c:c0:5f:ca:15:89:b6:b5:84:42:c8:5e:40:
         8f:d1:78:1c:00:a4:17:d6:2b:27:96:c7:34:8f:c5:9c:a6:01:
         08:c5:c0:71
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUSotEUCJ43pp7QaYV1Qc+zJDxrLowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUFDMjQ2QzQwRDgzODEzM0QwMzJEM0NCNkFENzM4RERC
RkM0NzUzNzAeFw0yNDA0MDMyMjU0NDlaFw0yNTA0MDIyMjU5NDlaMDMxMTAvBgNV
BAMTKDA2RjdDMkE5RDAxQkNFQ0Q2RDE1MEI3MENCQjdFNzhFRjY2OTdCODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0I05rFVtqucYn4spxn4vktapU
tfCvj2JiTWXRGk05AJW0mciXBPULwxQQpwLZXsM7inPoCkWhwhlOeukBY2qNEz/7
WLL0M35FQQRY3k31KKKA04sVtxzR0KJyLlwoqFVSbHNVSBdLs5og9m8cgNaxySwD
N5hpwT5Etse6HoOIhg1fN9Yk6P7Dxr6CL7LkfU0lBq2T0Z8NDV8roWKPOkvKcbd9
C9XoR5Bshn3NGqTaMAsCPdvrmjy2nqEArmKoIItpKfhojaVH8MOdofZb+/XGfYUP
+xi7O9YRRrgF1RrvrbtJF6+GNgLZIqfy/wV20WLXrrjbzGANdfyq4hUiYDehAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUBvfCqdAbzs1tFQtwy7fnjvZpe4YwHwYDVR0j
BBgwFoAU6sJGxA2DgTPQMtPLatc43b/EdTcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzNvM1lndUNvOGhvUnF6VkhidEpwamJGRjdOenZHQkNiUDhYUEZjd2dl
Y0QvMS9FQUMyNDZDNDBEODM4MTMzRDAzMkQzQ0I2QUQ3MzhEREJGQzQ3NTM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VBQzI0NkM0MEQ4MzgxMzNE
MDMyRDNDQjZBRDczOEREQkZDNDc1MzcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzMzbzNZZ3VDbzhob1JxelZIYnRKcGpiRkY3Tnp2R0JDYlA4WFBGY3dnZWNELzEv
MzIzODMwMzQzYTMzMzkzNjYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjMy
MzgzNDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ5bDANBgkqhkiG9w0BAQsFAAOCAQEAIeA6dK4T
sigdgfpagoSEGlmoZaVuR4YUaykKCd8N4sGVX5ZhGAoTba//A9FjuTXPLeK/heRb
LYmy1cMExnMuEuO1cjhky1h88quwvx8qMZHu1LcWMsqjuMRknKWe4WaraVcICQyX
fP6FKn0bR+XRB5fctp4pQiB7bBktmBT7hWHNNn7jxYEE3cN8rC86hE7tS/TY99D7
wVXuOn1GULNUf1DVw0PEA8PPuqrGpm0T4KzKaRyUV5eeT2u0UioTFHc5wzYaqvST
3nnqlS44+fxnZI4ME50OFlWx8pIPzgRcwF/KFYm2tYRCyF5Aj9F4HACkF9YrJ5bH
NI/FnKYBCMXAcQ==
-----END CERTIFICATE-----
Generated at Tue Nov 26 14:16:47 2024 by rpki-client on console-ams.rpki-client.org