Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/323830343a336630383a3a2f33322d3332203d3e20323636363335.roa
File:                     323830343a336630383a3a2f33322d3332203d3e20323636363335.roa (raw, json)
Hash identifier:          jo27i5QLOwkoW3ftSCdcTvi8zYTnkQNrrp7PyfXE60k=
Subject key identifier:   F1:5D:48:AA:9F:88:64:E2:C9:67:3B:01:74:C5:73:90:B7:B6:EC:9C
Certificate issuer:       /CN=EA18A86A9BF3C8CF2C923D41C4489A004392ABFB
Certificate serial:       1A147DC10ED59A945EAD977F626BF5B503C92DB8
Authority key identifier: EA:18:A8:6A:9B:F3:C8:CF:2C:92:3D:41:C4:48:9A:00:43:92:AB:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/323830343a336630383a3a2f33322d3332203d3e20323636363335.roa
Signing time:             Thu 04 Apr 2024 02:34:39 +0000
ROA not before:           Thu 04 Apr 2024 02:29:39 +0000
ROA not after:            Thu 03 Apr 2025 02:34:39 +0000
asID:                     266635
IP address blocks:        2804:3f08::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.crl
                          rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:14:7d:c1:0e:d5:9a:94:5e:ad:97:7f:62:6b:f5:b5:03:c9:2d:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA18A86A9BF3C8CF2C923D41C4489A004392ABFB
        Validity
            Not Before: Apr  4 02:29:39 2024 GMT
            Not After : Apr  3 02:34:39 2025 GMT
        Subject: CN=F15D48AA9F8864E2C9673B0174C57390B7B6EC9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7f:48:97:b8:d2:44:fd:59:85:73:3b:85:e8:
                    93:3a:23:66:f2:c5:69:84:99:92:dc:c6:d1:4b:63:
                    30:fa:d4:48:e2:93:ae:a0:6f:a7:ca:9c:73:b5:4c:
                    e4:2f:e3:b6:52:60:37:6a:ed:92:5e:d6:40:c5:dd:
                    2e:4d:03:46:81:a0:ce:a2:21:ab:23:e3:75:87:42:
                    13:cb:11:83:d0:04:33:e1:00:29:f8:40:92:80:f4:
                    a3:c3:6b:d7:3d:31:57:f9:08:b2:70:44:10:d2:a6:
                    f6:21:a2:d1:0f:fd:a8:58:50:cb:74:4a:f7:37:ab:
                    b1:12:b9:e8:bc:28:37:a1:9b:c4:0e:f8:fd:11:04:
                    16:73:2d:cf:64:e1:06:d5:44:4b:11:bc:73:a3:60:
                    9b:10:b5:1c:aa:22:15:f0:6d:11:8e:a8:4d:00:eb:
                    48:50:67:5f:c1:3b:20:96:92:d1:94:ee:23:e1:0a:
                    f2:99:bf:84:18:2d:3a:60:53:ec:6b:59:15:0b:14:
                    45:48:23:f1:51:ec:b0:c9:c8:88:bd:9d:d5:d0:93:
                    91:80:61:d7:92:d0:72:e8:ce:a0:78:83:7f:98:d5:
                    d3:2b:f5:11:65:c4:ce:95:6f:e4:bb:19:1c:8b:c2:
                    9f:1e:34:64:d0:10:0a:c9:cf:e8:37:d2:b2:99:90:
                    9b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:5D:48:AA:9F:88:64:E2:C9:67:3B:01:74:C5:73:90:B7:B6:EC:9C
            X509v3 Authority Key Identifier:
                keyid:EA:18:A8:6A:9B:F3:C8:CF:2C:92:3D:41:C4:48:9A:00:43:92:AB:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/323830343a336630383a3a2f33322d3332203d3e20323636363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f08::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:4f:6f:04:85:a6:f2:02:92:82:91:70:39:13:72:9e:e7:bd:
         6f:a5:85:70:3b:9c:c2:21:3c:be:f8:45:74:13:db:df:45:09:
         db:50:12:cb:f7:fb:ff:17:53:f0:fe:47:15:c6:9e:96:48:0e:
         fa:0d:34:5d:70:29:a1:a9:82:f7:ca:25:0f:70:06:51:b2:57:
         76:80:1f:85:27:aa:26:b7:71:ce:db:0f:a5:32:43:46:d8:f8:
         8a:19:c2:73:40:9b:d9:28:8c:11:7b:25:ac:82:38:a5:97:d4:
         38:1c:10:0a:45:8b:21:b8:d7:df:63:51:cc:f5:81:28:fb:3b:
         1b:8b:ea:fa:72:de:bc:71:cf:2c:f6:07:89:18:b1:89:37:06:
         04:37:c7:6f:94:9d:9a:2a:a3:da:b6:9e:54:50:ca:75:2d:bc:
         ce:3e:a3:40:c8:4f:1a:3d:da:5a:9e:48:42:b3:cc:e3:9b:b4:
         8c:68:b6:3b:a7:b2:5d:89:81:db:3e:66:34:f9:b3:7a:8b:4c:
         a1:ec:fa:6c:af:c2:5e:92:fd:4e:03:d2:e6:60:32:1e:78:2f:
         8d:73:ae:02:09:ab:d4:95:64:b8:de:a9:b3:dd:d9:08:30:13:
         5a:86:89:71:7b:64:cf:b3:01:b9:02:39:83:32:9b:5c:55:a8:
         96:6e:04:d9
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUGhR9wQ7VmpRerZd/Ymv1tQPJLbgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUExOEE4NkE5QkYzQzhDRjJDOTIzRDQxQzQ0ODlBMDA0
MzkyQUJGQjAeFw0yNDA0MDQwMjI5MzlaFw0yNTA0MDMwMjM0MzlaMDMxMTAvBgNV
BAMTKEYxNUQ0OEFBOUY4ODY0RTJDOTY3M0IwMTc0QzU3MzkwQjdCNkVDOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvf0iXuNJE/VmFczuF6JM6I2by
xWmEmZLcxtFLYzD61Ejik66gb6fKnHO1TOQv47ZSYDdq7ZJe1kDF3S5NA0aBoM6i
Iasj43WHQhPLEYPQBDPhACn4QJKA9KPDa9c9MVf5CLJwRBDSpvYhotEP/ahYUMt0
Svc3q7ESuei8KDehm8QO+P0RBBZzLc9k4QbVREsRvHOjYJsQtRyqIhXwbRGOqE0A
60hQZ1/BOyCWktGU7iPhCvKZv4QYLTpgU+xrWRULFEVII/FR7LDJyIi9ndXQk5GA
YdeS0HLozqB4g3+Y1dMr9RFlxM6Vb+S7GRyLwp8eNGTQEArJz+g30rKZkJuZAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU8V1Iqp+IZOLJZzsBdMVzkLe27JwwHwYDVR0j
BBgwFoAU6hioapvzyM8skj1BxEiaAEOSq/swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2JqanN0RHNkczdRdENjcmRnZXpUREJ0ZjFaY1VVYURLTjViOE1UMVE2
VEEvMS9FQTE4QTg2QTlCRjNDOENGMkM5MjNENDFDNDQ4OUEwMDQzOTJBQkZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VBMThBODZBOUJGM0M4Q0Yy
QzkyM0Q0MUM0NDg5QTAwNDM5MkFCRkIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdiampzdERzZHM3UXRDY3JkZ2V6VERCdGYxWmNVVWFES041YjhNVDFRNlRBLzEv
MzIzODMwMzQzYTMzNjYzMDM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM2
MzYzMzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ/CDANBgkqhkiG9w0BAQsFAAOCAQEAZU9vBIWm
8gKSgpFwORNynue9b6WFcDucwiE8vvhFdBPb30UJ21ASy/f7/xdT8P5HFcaelkgO
+g00XXApoamC98olD3AGUbJXdoAfhSeqJrdxztsPpTJDRtj4ihnCc0Cb2SiMEXsl
rII4pZfUOBwQCkWLIbjX32NRzPWBKPs7G4vq+nLevHHPLPYHiRixiTcGBDfHb5Sd
miqj2raeVFDKdS28zj6jQMhPGj3aWp5IQrPM45u0jGi2O6eyXYmB2z5mNPmzeotM
oez6bK/CXpL9TgPS5mAyHngvjXOuAgmr1JVkuN6ps93ZCDATWoaJcXtkz7MBuQI5
gzKbXFWolm4E2Q==
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:38 2024 by rpki-client on console-ams.rpki-client.org