Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Gnt2oBFw1nkj6p3pEKWKzFXJ8XnpThdftjJaKn9PUVd/0/323830343a323931383a3a2f33322d313238203d3e20323633393937.roa
File:                     323830343a323931383a3a2f33322d313238203d3e20323633393937.roa (raw, json)
Hash identifier:          TiQWPLN74I1oiUDv5n0vsE+gLd9/LC/HAn5cUf+20x4=
Subject key identifier:   F6:F4:36:10:BA:02:B2:AE:2C:9B:39:C3:2A:46:5A:65:21:BB:47:8F
Certificate issuer:       /CN=EECD69E43DA771167383CFC54582803D1F9D9CDF
Certificate serial:       5736F569E53D15E12E613310E9DEA0EB1DD4ADEE
Authority key identifier: EE:CD:69:E4:3D:A7:71:16:73:83:CF:C5:45:82:80:3D:1F:9D:9C:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EECD69E43DA771167383CFC54582803D1F9D9CDF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Gnt2oBFw1nkj6p3pEKWKzFXJ8XnpThdftjJaKn9PUVd/0/323830343a323931383a3a2f33322d313238203d3e20323633393937.roa
Signing time:             Mon 18 Nov 2024 17:04:06 +0000
ROA not before:           Mon 18 Nov 2024 16:59:06 +0000
ROA not after:            Mon 17 Nov 2025 17:04:06 +0000
asID:                     263997
IP address blocks:        2804:2918::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Gnt2oBFw1nkj6p3pEKWKzFXJ8XnpThdftjJaKn9PUVd/0/EECD69E43DA771167383CFC54582803D1F9D9CDF.crl
                          rsync://rpki-repo.registro.br/repo/4Gnt2oBFw1nkj6p3pEKWKzFXJ8XnpThdftjJaKn9PUVd/0/EECD69E43DA771167383CFC54582803D1F9D9CDF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EECD69E43DA771167383CFC54582803D1F9D9CDF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 20:38:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:36:f5:69:e5:3d:15:e1:2e:61:33:10:e9:de:a0:eb:1d:d4:ad:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EECD69E43DA771167383CFC54582803D1F9D9CDF
        Validity
            Not Before: Nov 18 16:59:06 2024 GMT
            Not After : Nov 17 17:04:06 2025 GMT
        Subject: CN=F6F43610BA02B2AE2C9B39C32A465A6521BB478F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d4:68:7e:6a:f0:c7:80:7b:86:84:4e:7e:29:
                    9a:32:0f:32:c1:d7:82:4b:ad:3c:bd:40:eb:45:19:
                    0e:ea:83:ae:57:ef:eb:81:66:e5:a9:5c:bd:5f:71:
                    0a:87:2f:bd:c2:f4:0e:71:b0:53:55:31:ab:20:6c:
                    b4:c3:51:90:c4:de:03:81:ff:7a:bf:1c:8d:5e:60:
                    a6:e9:02:a8:9e:e8:69:76:de:5e:45:8f:fc:42:93:
                    58:24:e3:a3:4e:b0:01:fb:6c:f2:6b:a8:05:45:4e:
                    73:42:fb:41:0a:66:7d:a8:a5:73:58:db:77:6c:0c:
                    63:16:c6:cf:25:60:ad:69:d6:5e:da:4e:af:3c:54:
                    6f:91:ac:06:d6:12:b3:ab:fc:98:48:11:96:11:0d:
                    df:a2:5b:58:0b:10:5f:1e:d8:4b:8e:35:bd:31:df:
                    a6:77:4d:e7:18:27:32:60:69:b5:7e:7d:85:2c:b1:
                    3f:45:a5:d6:e7:6e:d4:6a:08:04:67:65:44:63:90:
                    7b:a7:d0:e6:82:f7:b8:13:a6:cd:02:58:6d:7f:d0:
                    4f:24:fc:4b:cc:cd:45:b2:7d:ad:aa:d8:14:41:ac:
                    6f:25:41:a1:d3:f8:7f:ea:b6:4b:de:3a:3f:75:99:
                    96:a6:79:99:f8:1e:98:af:b8:6f:50:97:12:34:52:
                    ef:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F4:36:10:BA:02:B2:AE:2C:9B:39:C3:2A:46:5A:65:21:BB:47:8F
            X509v3 Authority Key Identifier:
                keyid:EE:CD:69:E4:3D:A7:71:16:73:83:CF:C5:45:82:80:3D:1F:9D:9C:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Gnt2oBFw1nkj6p3pEKWKzFXJ8XnpThdftjJaKn9PUVd/0/EECD69E43DA771167383CFC54582803D1F9D9CDF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EECD69E43DA771167383CFC54582803D1F9D9CDF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Gnt2oBFw1nkj6p3pEKWKzFXJ8XnpThdftjJaKn9PUVd/0/323830343a323931383a3a2f33322d313238203d3e20323633393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2918::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:96:52:c4:ca:ae:35:23:48:75:6b:ac:9e:49:d9:73:b4:ed:
         00:67:19:7b:ad:9c:8d:a2:38:8c:f7:17:de:90:0f:7d:3b:93:
         56:35:74:52:e8:73:c4:6f:a8:2c:bf:0c:76:70:22:47:d5:bb:
         4b:84:01:1a:a3:f1:2f:c5:a1:99:59:2c:e9:4c:af:32:7d:f6:
         e6:ea:40:a0:db:3a:88:bb:51:16:76:96:38:d0:7d:f8:b1:a7:
         77:3a:2f:5f:3c:0b:4c:f0:e6:9c:53:44:fc:04:15:6e:be:94:
         05:2d:ef:0a:06:8c:f0:df:be:02:50:b5:25:4a:92:3c:9b:81:
         78:62:10:5c:f8:76:d2:f5:b1:d8:43:11:2d:3f:54:5d:39:1f:
         d9:48:92:f3:f1:47:a7:54:cf:42:1f:76:17:be:e8:3f:51:2f:
         16:d3:01:06:eb:a8:5d:8b:81:d7:e4:fe:08:f2:de:d7:45:aa:
         f0:ea:8d:d3:fc:ab:ad:73:a5:a4:19:21:97:18:02:e8:e3:2b:
         a7:c1:cb:a0:55:7d:7c:a5:2e:73:3c:56:0d:36:22:58:14:ff:
         a3:02:01:74:36:97:4a:70:77:4e:74:f1:9b:c1:d9:d4:fb:f0:
         d9:64:4a:4e:e7:8c:3f:53:6e:3b:e6:59:49:2d:56:f4:0c:50:
         52:66:5a:d8
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUVzb1aeU9FeEuYTMQ6d6g6x3Ure4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUVDRDY5RTQzREE3NzExNjczODNDRkM1NDU4MjgwM0Qx
RjlEOUNERjAeFw0yNDExMTgxNjU5MDZaFw0yNTExMTcxNzA0MDZaMDMxMTAvBgNV
BAMTKEY2RjQzNjEwQkEwMkIyQUUyQzlCMzlDMzJBNDY1QTY1MjFCQjQ3OEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ1Gh+avDHgHuGhE5+KZoyDzLB
14JLrTy9QOtFGQ7qg65X7+uBZuWpXL1fcQqHL73C9A5xsFNVMasgbLTDUZDE3gOB
/3q/HI1eYKbpAqie6Gl23l5Fj/xCk1gk46NOsAH7bPJrqAVFTnNC+0EKZn2opXNY
23dsDGMWxs8lYK1p1l7aTq88VG+RrAbWErOr/JhIEZYRDd+iW1gLEF8e2EuONb0x
36Z3TecYJzJgabV+fYUssT9FpdbnbtRqCARnZURjkHun0OaC97gTps0CWG1/0E8k
/EvMzUWyfa2q2BRBrG8lQaHT+H/qtkveOj91mZameZn4HpivuG9QlxI0Uu/nAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU9vQ2ELoCsq4smznDKkZaZSG7R48wHwYDVR0j
BBgwFoAU7s1p5D2ncRZzg8/FRYKAPR+dnN8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdudDJvQkZ3MW5rajZwM3BFS1dLekZYSjhYbnBUaGRmdGpKYUtuOVBV
VmQvMC9FRUNENjlFNDNEQTc3MTE2NzM4M0NGQzU0NTgyODAzRDFGOUQ5Q0RGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VFQ0Q2OUU0M0RBNzcxMTY3
MzgzQ0ZDNTQ1ODI4MDNEMUY5RDlDREYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHbnQyb0JGdzFua2o2cDNwRUtXS3pGWEo4WG5wVGhkZnRqSmFLbjlQVVZkLzAv
MzIzODMwMzQzYTMyMzkzMTM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzMzOTM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBCkYMA0GCSqGSIb3DQEBCwUAA4IBAQBlllLE
yq41I0h1a6yeSdlztO0AZxl7rZyNojiM9xfekA99O5NWNXRS6HPEb6gsvwx2cCJH
1btLhAEao/EvxaGZWSzpTK8yffbm6kCg2zqIu1EWdpY40H34sad3Oi9fPAtM8Oac
U0T8BBVuvpQFLe8KBozw374CULUlSpI8m4F4YhBc+HbS9bHYQxEtP1RdOR/ZSJLz
8UenVM9CH3YXvug/US8W0wEG66hdi4HX5P4I8t7XRarw6o3T/Kutc6WkGSGXGALo
4yunwcugVX18pS5zPFYNNiJYFP+jAgF0NpdKcHdOdPGbwdnU+/DZZEpO54w/U247
5llJLVb0DFBSZlrY
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:22 2024 by rpki-client on console-ams.rpki-client.org