Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/323830343a313737383a613030303a3a2f33352d3335203d3e20323633313436.roa
File:                     323830343a313737383a613030303a3a2f33352d3335203d3e20323633313436.roa (raw, json)
Hash identifier:          UPc95935Rz9H+mBR95Eng8l/33kupx8BHCDWlZo7nEE=
Subject key identifier:   4F:AB:81:1A:5B:99:1B:0F:23:04:C1:17:44:86:3E:38:39:FC:87:32
Certificate issuer:       /CN=E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493
Certificate serial:       12EF3A64CC708F25A7BE53248C94DEDFDB9EACCB
Authority key identifier: E6:FA:E3:A7:A7:90:29:B5:F5:3F:2E:1A:94:0B:19:4F:E9:B3:F4:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/323830343a313737383a613030303a3a2f33352d3335203d3e20323633313436.roa
Signing time:             Thu 04 Apr 2024 07:28:58 +0000
ROA not before:           Thu 04 Apr 2024 07:23:58 +0000
ROA not after:            Thu 03 Apr 2025 07:28:58 +0000
asID:                     263146
IP address blocks:        2804:1778:a000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.crl
                          rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:ef:3a:64:cc:70:8f:25:a7:be:53:24:8c:94:de:df:db:9e:ac:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493
        Validity
            Not Before: Apr  4 07:23:58 2024 GMT
            Not After : Apr  3 07:28:58 2025 GMT
        Subject: CN=4FAB811A5B991B0F2304C11744863E3839FC8732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e2:dc:71:dc:08:5c:eb:07:37:2f:88:a4:cf:
                    d6:02:8f:1d:8f:d3:23:bd:0f:f0:1f:47:ae:2b:a7:
                    14:20:80:b6:41:b3:d5:94:81:5c:f4:f8:fa:b9:c9:
                    e3:f1:6f:1d:80:3b:7a:ac:78:d1:78:88:91:bb:94:
                    33:ef:a1:78:cf:6b:6f:e2:64:d2:57:df:42:b0:d7:
                    b6:a7:99:ca:dc:04:e3:b1:f6:9a:28:11:af:29:28:
                    0a:28:22:a0:49:4c:3a:b1:60:e6:8a:0b:67:7d:0e:
                    51:21:1a:21:27:ec:f3:09:ea:33:ad:2a:a7:9e:69:
                    ab:fa:84:2b:82:7e:93:ff:55:3e:f7:23:13:09:18:
                    bb:93:f2:fa:1a:40:ce:2c:09:6c:f8:16:f2:6a:77:
                    be:6d:37:69:38:64:7d:46:0d:3c:4e:24:c4:6f:fe:
                    ff:30:ed:08:01:d9:39:ea:97:c4:09:72:06:bb:ef:
                    a1:28:18:1b:67:b7:40:56:7c:7e:4a:17:bb:e3:c2:
                    f1:8b:6c:ab:70:66:50:d9:19:f1:b5:86:f0:db:d9:
                    11:26:f8:0b:1e:3d:48:95:c0:32:cd:3e:a7:cc:7c:
                    ff:a4:25:97:bf:62:33:6c:b9:93:2f:71:6f:d1:ca:
                    1e:19:8a:4e:a4:bf:93:d7:43:d3:e1:c2:ff:a4:24:
                    f3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:AB:81:1A:5B:99:1B:0F:23:04:C1:17:44:86:3E:38:39:FC:87:32
            X509v3 Authority Key Identifier:
                keyid:E6:FA:E3:A7:A7:90:29:B5:F5:3F:2E:1A:94:0B:19:4F:E9:B3:F4:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/323830343a313737383a613030303a3a2f33352d3335203d3e20323633313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1778:a000::/35

    Signature Algorithm: sha256WithRSAEncryption
         4c:f8:e0:d0:07:e5:1c:a6:47:59:59:19:ec:71:9c:ad:56:9e:
         ef:a5:8d:83:d3:e7:83:65:2b:5c:c0:ce:c3:72:f3:89:b0:25:
         ea:eb:54:5e:6c:8a:b7:6b:61:4f:31:41:fa:84:2f:fd:3d:85:
         6d:8f:ba:7e:94:9a:88:cd:26:1a:1d:3e:09:9b:5f:d1:7d:1d:
         9f:b1:d1:dc:e4:0b:28:43:13:04:b6:7c:7c:59:fb:52:d8:80:
         1d:bc:23:9d:77:6f:db:60:35:ee:8e:20:f2:ff:89:ff:83:0a:
         cb:29:1f:e3:46:72:3b:cf:95:62:29:03:a9:5c:ed:c0:c8:5f:
         ab:be:6a:4e:2d:bb:61:71:c6:3e:02:33:39:46:07:cf:3c:c0:
         32:55:f5:32:a4:8c:dd:bc:8c:ce:2c:e9:af:30:ca:a5:58:d6:
         cf:9c:5f:aa:64:87:26:83:17:7a:e2:d1:6f:8a:60:87:3c:20:
         a9:50:04:e9:8e:ee:8e:da:81:4a:48:24:7a:9f:46:1a:0c:8a:
         81:6c:de:70:0a:4c:11:aa:52:30:a6:19:08:31:3d:ee:b7:9a:
         74:0b:33:05:d4:dd:00:8a:82:a1:dd:90:be:99:ec:29:50:6e:
         88:05:87:96:c5:39:f8:1a:b3:e8:56:5f:ff:39:8e:7d:f3:13:
         54:0e:59:a7
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUEu86ZMxwjyWnvlMkjJTe39uerMswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTZGQUUzQTdBNzkwMjlCNUY1M0YyRTFBOTQwQjE5NEZF
OUIzRjQ5MzAeFw0yNDA0MDQwNzIzNThaFw0yNTA0MDMwNzI4NThaMDMxMTAvBgNV
BAMTKDRGQUI4MTFBNUI5OTFCMEYyMzA0QzExNzQ0ODYzRTM4MzlGQzg3MzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC54txx3Ahc6wc3L4ikz9YCjx2P
0yO9D/AfR64rpxQggLZBs9WUgVz0+Pq5yePxbx2AO3qseNF4iJG7lDPvoXjPa2/i
ZNJX30Kw17anmcrcBOOx9pooEa8pKAooIqBJTDqxYOaKC2d9DlEhGiEn7PMJ6jOt
Kqeeaav6hCuCfpP/VT73IxMJGLuT8voaQM4sCWz4FvJqd75tN2k4ZH1GDTxOJMRv
/v8w7QgB2Tnql8QJcga776EoGBtnt0BWfH5KF7vjwvGLbKtwZlDZGfG1hvDb2REm
+AsePUiVwDLNPqfMfP+kJZe/YjNsuZMvcW/Ryh4Zik6kv5PXQ9Phwv+kJPPHAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUT6uBGluZGw8jBMEXRIY+ODn8hzIwHwYDVR0j
BBgwFoAU5vrjp6eQKbX1Py4alAsZT+mz9JMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN05SZFFOYURVYlQ3RDF0Z29TeFJuaEw5MVp5SzZFU1dHS1ZHU2huSHhX
Z1AvMS9FNkZBRTNBN0E3OTAyOUI1RjUzRjJFMUE5NDBCMTk0RkU5QjNGNDkzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U2RkFFM0E3QTc5MDI5QjVG
NTNGMkUxQTk0MEIxOTRGRTlCM0Y0OTMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdOUmRRTmFEVWJUN0QxdGdvU3hSbmhMOTFaeUs2RVNXR0tWR1Nobkh4V2dQLzEv
MzIzODMwMzQzYTMxMzczNzM4M2E2MTMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk
M2UyMDMyMzYzMzMxMzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSgEF3igMA0GCSqGSIb3DQEBCwUA
A4IBAQBM+ODQB+UcpkdZWRnscZytVp7vpY2D0+eDZStcwM7DcvOJsCXq61RebIq3
a2FPMUH6hC/9PYVtj7p+lJqIzSYaHT4Jm1/RfR2fsdHc5AsoQxMEtnx8WftS2IAd
vCOdd2/bYDXujiDy/4n/gwrLKR/jRnI7z5ViKQOpXO3AyF+rvmpOLbthccY+AjM5
RgfPPMAyVfUypIzdvIzOLOmvMMqlWNbPnF+qZIcmgxd64tFvimCHPCCpUATpju6O
2oFKSCR6n0YaDIqBbN5wCkwRqlIwphkIMT3ut5p0CzMF1N0AioKh3ZC+mewpUG6I
BYeWxTn4GrPoVl//OY598xNUDlmn
-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:32 2024 by rpki-client on console-fra.rpki-client.org