Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5NT38WEqutJGuPbm2J3S1vqdSLBMKS1QRYfJy4ShajHb/1/323830343a333064343a3a2f33322d3438203d3e20323634393735.roa
File:                     323830343a333064343a3a2f33322d3438203d3e20323634393735.roa (raw, json)
Hash identifier:          9hodS7S6azGx/H1CtY1V/vfiF0fPf5Q8AvUHJA6PSu4=
Subject key identifier:   62:21:8E:E4:D4:2C:65:A8:61:40:20:E0:97:85:34:87:E7:56:D7:F6
Certificate issuer:       /CN=EE8281B7BE13CC06AE2ABA30537E8664C712FA16
Certificate serial:       20E29E6C0EC456F76CA2E77E85482CA54C301CC5
Authority key identifier: EE:82:81:B7:BE:13:CC:06:AE:2A:BA:30:53:7E:86:64:C7:12:FA:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE8281B7BE13CC06AE2ABA30537E8664C712FA16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5NT38WEqutJGuPbm2J3S1vqdSLBMKS1QRYfJy4ShajHb/1/323830343a333064343a3a2f33322d3438203d3e20323634393735.roa
Signing time:             Thu 04 Apr 2024 06:32:49 +0000
ROA not before:           Thu 04 Apr 2024 06:27:49 +0000
ROA not after:            Thu 03 Apr 2025 06:32:49 +0000
asID:                     264975
IP address blocks:        2804:30d4::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5NT38WEqutJGuPbm2J3S1vqdSLBMKS1QRYfJy4ShajHb/1/EE8281B7BE13CC06AE2ABA30537E8664C712FA16.crl
                          rsync://rpki-repo.registro.br/repo/5NT38WEqutJGuPbm2J3S1vqdSLBMKS1QRYfJy4ShajHb/1/EE8281B7BE13CC06AE2ABA30537E8664C712FA16.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE8281B7BE13CC06AE2ABA30537E8664C712FA16.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 12:48:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:e2:9e:6c:0e:c4:56:f7:6c:a2:e7:7e:85:48:2c:a5:4c:30:1c:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE8281B7BE13CC06AE2ABA30537E8664C712FA16
        Validity
            Not Before: Apr  4 06:27:49 2024 GMT
            Not After : Apr  3 06:32:49 2025 GMT
        Subject: CN=62218EE4D42C65A8614020E097853487E756D7F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2b:65:d6:65:e3:11:78:f1:3f:86:bd:89:95:
                    92:4a:3c:33:43:5c:45:db:a0:d5:f7:f8:5e:85:b3:
                    58:cf:c9:76:ed:c2:60:5c:52:15:2e:e8:c1:df:8c:
                    57:d3:68:be:2c:e0:74:3f:03:22:fc:74:13:2b:79:
                    af:00:15:02:95:b3:69:7f:b8:24:c6:61:97:1c:c6:
                    d9:b2:7b:af:9a:74:21:24:07:2e:f6:ce:68:f0:8a:
                    dc:db:56:a9:77:08:7e:76:b6:1f:2b:8e:01:e2:f2:
                    47:f5:6e:d0:fd:10:50:16:71:a9:56:ee:20:ff:71:
                    2f:0a:8d:7e:ff:05:e3:10:47:6d:a0:39:ea:d3:a2:
                    dc:9d:19:47:dd:de:00:68:b1:6c:e9:b8:66:f7:4e:
                    49:3d:44:7c:ca:38:11:01:25:7f:1b:04:25:0b:e6:
                    90:35:f8:40:e0:42:88:b9:83:13:f8:33:82:91:87:
                    2c:07:86:c8:1e:67:58:c1:2b:ee:cb:ce:33:3f:d5:
                    08:11:dd:d9:0b:01:f4:4f:43:33:da:52:58:a9:4b:
                    58:fb:63:5f:4e:79:b4:36:65:1a:d0:83:ee:da:6d:
                    f4:61:d8:a5:ed:64:fc:cc:ad:f2:6a:22:b4:24:a5:
                    0b:89:d8:f3:53:93:a0:e5:c2:82:f5:7a:14:39:83:
                    4d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:21:8E:E4:D4:2C:65:A8:61:40:20:E0:97:85:34:87:E7:56:D7:F6
            X509v3 Authority Key Identifier:
                keyid:EE:82:81:B7:BE:13:CC:06:AE:2A:BA:30:53:7E:86:64:C7:12:FA:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5NT38WEqutJGuPbm2J3S1vqdSLBMKS1QRYfJy4ShajHb/1/EE8281B7BE13CC06AE2ABA30537E8664C712FA16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE8281B7BE13CC06AE2ABA30537E8664C712FA16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5NT38WEqutJGuPbm2J3S1vqdSLBMKS1QRYfJy4ShajHb/1/323830343a333064343a3a2f33322d3438203d3e20323634393735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:30d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:2d:59:71:e4:f3:8c:77:e2:5a:3c:f6:80:6e:95:2b:4e:3d:
         98:7e:26:36:51:b3:25:44:90:f4:35:b6:b5:11:dd:be:64:13:
         cb:e4:96:c5:f0:cc:18:4e:b6:27:55:6e:40:fc:d4:87:52:b7:
         f6:3e:79:d1:30:0a:d6:f7:1b:31:88:b5:3c:b3:f7:c4:99:7c:
         b0:2d:a9:b3:11:ca:b9:88:87:b9:d9:fa:1d:87:c9:4d:4a:ac:
         15:f7:0f:8b:19:31:63:81:28:41:60:7d:41:39:75:d5:b1:70:
         be:00:da:c1:4f:c3:2f:e8:01:aa:d7:8f:67:56:5f:72:c7:6a:
         30:8b:d9:9d:04:b4:84:5f:ef:17:ee:fb:d5:56:3b:40:ab:5d:
         03:34:b3:a3:99:5d:48:31:59:16:88:88:40:aa:51:d6:4b:8f:
         bb:de:23:c0:0a:85:d3:4d:b4:bd:87:9f:43:28:c2:ec:ff:b5:
         8a:de:bc:23:98:1f:6d:2e:66:fe:cd:0c:ca:9d:7e:80:c3:e4:
         cd:76:32:4e:eb:4f:6b:b8:62:6a:d5:a7:8b:8d:7b:0d:5c:ac:
         f3:8e:92:f7:89:fe:68:3e:a0:32:e1:6c:7c:99:9c:79:a1:d0:
         44:34:db:c1:ac:21:73:f7:62:d1:50:f4:68:d7:eb:4f:95:53:
         59:20:55:bc
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUIOKebA7EVvdsoud+hUgspUwwHMUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU4MjgxQjdCRTEzQ0MwNkFFMkFCQTMwNTM3RTg2NjRD
NzEyRkExNjAeFw0yNDA0MDQwNjI3NDlaFw0yNTA0MDMwNjMyNDlaMDMxMTAvBgNV
BAMTKDYyMjE4RUU0RDQyQzY1QTg2MTQwMjBFMDk3ODUzNDg3RTc1NkQ3RjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQK2XWZeMRePE/hr2JlZJKPDND
XEXboNX3+F6Fs1jPyXbtwmBcUhUu6MHfjFfTaL4s4HQ/AyL8dBMrea8AFQKVs2l/
uCTGYZccxtmye6+adCEkBy72zmjwitzbVql3CH52th8rjgHi8kf1btD9EFAWcalW
7iD/cS8KjX7/BeMQR22gOerTotydGUfd3gBosWzpuGb3Tkk9RHzKOBEBJX8bBCUL
5pA1+EDgQoi5gxP4M4KRhywHhsgeZ1jBK+7LzjM/1QgR3dkLAfRPQzPaUlipS1j7
Y19OebQ2ZRrQg+7abfRh2KXtZPzMrfJqIrQkpQuJ2PNTk6DlwoL1ehQ5g00LAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUYiGO5NQsZahhQCDgl4U0h+dW1/YwHwYDVR0j
BBgwFoAU7oKBt74TzAauKrowU36GZMcS+hYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNU5UMzhXRXF1dEpHdVBibTJKM1MxdnFkU0xCTUtTMVFSWWZKeTRTaGFq
SGIvMS9FRTgyODFCN0JFMTNDQzA2QUUyQUJBMzA1MzdFODY2NEM3MTJGQTE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VFODI4MUI3QkUxM0NDMDZB
RTJBQkEzMDUzN0U4NjY0QzcxMkZBMTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVOVDM4V0VxdXRKR3VQYm0ySjNTMXZxZFNMQk1LUzFRUllmSnk0U2hhakhiLzEv
MzIzODMwMzQzYTMzMzA2NDM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM0
MzkzNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQw1DANBgkqhkiG9w0BAQsFAAOCAQEAhC1ZceTz
jHfiWjz2gG6VK049mH4mNlGzJUSQ9DW2tRHdvmQTy+SWxfDMGE62J1VuQPzUh1K3
9j550TAK1vcbMYi1PLP3xJl8sC2psxHKuYiHudn6HYfJTUqsFfcPixkxY4EoQWB9
QTl11bFwvgDawU/DL+gBqtePZ1ZfcsdqMIvZnQS0hF/vF+771VY7QKtdAzSzo5ld
SDFZFoiIQKpR1kuPu94jwAqF0020vYefQyjC7P+1it68I5gfbS5m/s0Myp1+gMPk
zXYyTutPa7hiatWni417DVys846S94n+aD6gMuFsfJmceaHQRDTbwawhc/di0VD0
aNfrT5VTWSBVvA==
-----END CERTIFICATE-----
Generated at Mon Nov 25 13:02:10 2024 by rpki-client on console-fra.rpki-client.org