Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/1/323830343a326634343a3a2f33322d313238203d3e20323634383831.roa
File:                     323830343a326634343a3a2f33322d313238203d3e20323634383831.roa (raw, json)
Hash identifier:          bQmvcor3q34o6qwAQxcU/HPBJuHhxZIqVojZt4v0W84=
Subject key identifier:   EE:0D:6B:0C:D6:FC:9B:92:AA:63:C6:36:C2:B1:B0:FB:7B:C3:6D:1B
Certificate issuer:       /CN=EA3BF4282B2E55EC948E8D55C9C500F53DD2E574
Certificate serial:       790F95AD85EA208E44E0FF93CE350B118DE2EE14
Authority key identifier: EA:3B:F4:28:2B:2E:55:EC:94:8E:8D:55:C9:C5:00:F5:3D:D2:E5:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA3BF4282B2E55EC948E8D55C9C500F53DD2E574.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/1/323830343a326634343a3a2f33322d313238203d3e20323634383831.roa
Signing time:             Thu 04 Apr 2024 13:24:45 +0000
ROA not before:           Thu 04 Apr 2024 13:19:45 +0000
ROA not after:            Thu 03 Apr 2025 13:24:45 +0000
asID:                     264881
IP address blocks:        2804:2f44::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/1/EA3BF4282B2E55EC948E8D55C9C500F53DD2E574.crl
                          rsync://rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/1/EA3BF4282B2E55EC948E8D55C9C500F53DD2E574.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA3BF4282B2E55EC948E8D55C9C500F53DD2E574.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:0f:95:ad:85:ea:20:8e:44:e0:ff:93:ce:35:0b:11:8d:e2:ee:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA3BF4282B2E55EC948E8D55C9C500F53DD2E574
        Validity
            Not Before: Apr  4 13:19:45 2024 GMT
            Not After : Apr  3 13:24:45 2025 GMT
        Subject: CN=EE0D6B0CD6FC9B92AA63C636C2B1B0FB7BC36D1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:73:e7:18:e4:b7:22:a0:2e:7a:af:1d:0d:2c:
                    d5:27:64:8e:2c:da:b3:85:98:8d:b2:c2:c9:b4:9c:
                    15:77:56:9f:f8:ee:db:6e:f6:10:6b:a8:e1:f3:60:
                    0c:6d:ee:f2:74:dd:35:d9:e7:b4:f1:22:4d:e2:c6:
                    6f:7d:c2:ca:4f:fb:aa:32:18:5d:59:59:99:e3:7f:
                    60:5a:bc:e9:68:84:b8:56:82:59:71:ef:40:5b:19:
                    86:3b:74:5e:34:4d:2b:a0:e8:18:69:d6:b4:83:8b:
                    af:c2:99:51:04:78:e2:90:d3:d7:b8:e7:03:71:9a:
                    5c:ec:ad:77:76:73:15:60:e6:cf:c1:97:06:e6:c3:
                    8f:51:dc:b8:cd:ef:f9:f5:ba:52:7c:d7:6a:33:91:
                    81:54:43:cc:9e:2c:e9:a4:0e:15:22:6f:cd:d3:be:
                    1a:b5:7e:63:3f:de:66:d8:e1:62:99:6d:a0:c0:cd:
                    54:3c:b9:2e:cd:1e:9e:ae:4b:79:5a:22:8d:9b:6a:
                    59:b8:8b:20:78:1a:d6:b0:5b:42:c9:81:85:c6:23:
                    31:4c:fa:bf:5e:5f:a4:b8:77:6e:a3:03:ae:d6:0f:
                    34:ad:dc:9d:3e:4e:70:90:9a:3e:71:c8:27:8c:0a:
                    e6:1b:9c:c4:7c:db:15:9e:89:bf:2e:52:cd:e4:24:
                    f3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:0D:6B:0C:D6:FC:9B:92:AA:63:C6:36:C2:B1:B0:FB:7B:C3:6D:1B
            X509v3 Authority Key Identifier:
                keyid:EA:3B:F4:28:2B:2E:55:EC:94:8E:8D:55:C9:C5:00:F5:3D:D2:E5:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/1/EA3BF4282B2E55EC948E8D55C9C500F53DD2E574.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA3BF4282B2E55EC948E8D55C9C500F53DD2E574.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/1/323830343a326634343a3a2f33322d313238203d3e20323634383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f44::/32

    Signature Algorithm: sha256WithRSAEncryption
         c7:72:e9:2c:69:0f:e1:c2:07:cc:01:50:45:d7:51:25:d1:7d:
         eb:18:c8:66:ce:97:1d:8e:4e:54:47:e7:7d:8e:81:5e:7c:79:
         75:c8:37:47:09:2f:f2:aa:3e:51:b6:63:8a:90:ba:67:90:d9:
         d5:31:a7:44:5c:95:72:c7:70:35:b5:44:99:91:66:49:f4:53:
         59:da:1c:c1:bb:0d:05:bf:e0:93:68:90:7d:4c:6d:93:5e:53:
         16:de:c5:05:26:c4:af:94:03:24:b4:61:16:8d:43:a1:bc:58:
         64:c6:76:d3:74:9f:47:50:ee:b4:80:46:f0:67:15:06:f4:ad:
         54:8f:9a:12:25:9b:21:36:cc:76:05:ae:ec:43:ac:a9:46:e0:
         83:93:d1:10:22:e2:83:a5:f3:44:f3:86:f1:88:c5:4b:ee:64:
         d9:ac:3b:08:fc:4c:87:d1:f5:89:85:94:e1:16:9f:ca:ce:7a:
         82:8a:74:50:c9:51:3b:11:76:98:7c:4e:1d:5f:cf:92:04:05:
         0c:d9:fa:8a:c2:19:c5:4f:9b:61:8b:8b:13:1c:9c:f1:e9:e1:
         82:01:30:c0:91:ba:b8:b9:d0:bf:02:ce:b2:ff:b7:c0:5f:c3:
         2c:d2:75:75:42:8b:01:2c:4c:d9:ae:3f:bf:63:eb:97:83:19:
         68:cb:b2:d6
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUeQ+VrYXqII5E4P+TzjULEY3i7hQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUEzQkY0MjgyQjJFNTVFQzk0OEU4RDU1QzlDNTAwRjUz
REQyRTU3NDAeFw0yNDA0MDQxMzE5NDVaFw0yNTA0MDMxMzI0NDVaMDMxMTAvBgNV
BAMTKEVFMEQ2QjBDRDZGQzlCOTJBQTYzQzYzNkMyQjFCMEZCN0JDMzZEMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChc+cY5LcioC56rx0NLNUnZI4s
2rOFmI2ywsm0nBV3Vp/47ttu9hBrqOHzYAxt7vJ03TXZ57TxIk3ixm99wspP+6oy
GF1ZWZnjf2BavOlohLhWgllx70BbGYY7dF40TSug6Bhp1rSDi6/CmVEEeOKQ09e4
5wNxmlzsrXd2cxVg5s/Blwbmw49R3LjN7/n1ulJ812ozkYFUQ8yeLOmkDhUib83T
vhq1fmM/3mbY4WKZbaDAzVQ8uS7NHp6uS3laIo2balm4iyB4GtawW0LJgYXGIzFM
+r9eX6S4d26jA67WDzSt3J0+TnCQmj5xyCeMCuYbnMR82xWeib8uUs3kJPMFAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU7g1rDNb8m5KqY8Y2wrGw+3vDbRswHwYDVR0j
BBgwFoAU6jv0KCsuVeyUjo1VycUA9T3S5XQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlNTcVRwaUNMRUpuRDFlbzZ0b29Tc1EzTHAyTFJMMjN0R043M0RyREZn
YzYvMS9FQTNCRjQyODJCMkU1NUVDOTQ4RThENTVDOUM1MDBGNTNERDJFNTc0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VBM0JGNDI4MkIyRTU1RUM5
NDhFOEQ1NUM5QzUwMEY1M0REMkU1NzQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZTU3FUcGlDTEVKbkQxZW82dG9vU3NRM0xwMkxSTDIzdEdONzNEckRGZ2M2LzEv
MzIzODMwMzQzYTMyNjYzNDM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzQzODM4MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBC9EMA0GCSqGSIb3DQEBCwUAA4IBAQDHcuks
aQ/hwgfMAVBF11El0X3rGMhmzpcdjk5UR+d9joFefHl1yDdHCS/yqj5RtmOKkLpn
kNnVMadEXJVyx3A1tUSZkWZJ9FNZ2hzBuw0Fv+CTaJB9TG2TXlMW3sUFJsSvlAMk
tGEWjUOhvFhkxnbTdJ9HUO60gEbwZxUG9K1Uj5oSJZshNsx2Ba7sQ6ypRuCDk9EQ
IuKDpfNE84bxiMVL7mTZrDsI/EyH0fWJhZThFp/KznqCinRQyVE7EXaYfE4dX8+S
BAUM2fqKwhnFT5thi4sTHJzx6eGCATDAkbq4udC/As6y/7fAX8Ms0nV1QosBLEzZ
rj+/Y+uXgxloy7LW
-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:32 2024 by rpki-client on console-ams.rpki-client.org