Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/323830343a336630383a3a2f33342d3334203d3e20323636363335.roa
File:                     323830343a336630383a3a2f33342d3334203d3e20323636363335.roa (raw, json)
Hash identifier:          6lV9KfL/Wrm4LTlAnEimYrGPFM7gKPDg6W3h1EFgO5U=
Subject key identifier:   83:F5:66:8A:83:06:4A:6A:44:0A:D4:F1:5F:8A:35:90:8F:EE:56:BF
Certificate issuer:       /CN=EA18A86A9BF3C8CF2C923D41C4489A004392ABFB
Certificate serial:       6E3E44ACEA01FD9600512D8F919A3E7A8008FA43
Authority key identifier: EA:18:A8:6A:9B:F3:C8:CF:2C:92:3D:41:C4:48:9A:00:43:92:AB:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/323830343a336630383a3a2f33342d3334203d3e20323636363335.roa
Signing time:             Thu 04 Apr 2024 02:34:39 +0000
ROA not before:           Thu 04 Apr 2024 02:29:39 +0000
ROA not after:            Thu 03 Apr 2025 02:34:39 +0000
asID:                     266635
IP address blocks:        2804:3f08::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.crl
                          rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:3e:44:ac:ea:01:fd:96:00:51:2d:8f:91:9a:3e:7a:80:08:fa:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA18A86A9BF3C8CF2C923D41C4489A004392ABFB
        Validity
            Not Before: Apr  4 02:29:39 2024 GMT
            Not After : Apr  3 02:34:39 2025 GMT
        Subject: CN=83F5668A83064A6A440AD4F15F8A35908FEE56BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:a9:d5:29:d2:17:44:28:b5:4b:8b:79:b1:9e:
                    a1:fc:e7:cb:57:2d:57:35:53:e5:66:76:42:d0:3e:
                    2c:08:5d:13:e7:38:12:09:90:57:43:ee:b0:aa:26:
                    8e:64:c1:23:08:04:1f:0b:d5:13:77:fa:82:8c:9c:
                    cd:26:ce:c9:44:f0:04:06:28:18:6c:91:37:18:54:
                    6d:b4:80:3b:ef:9d:7a:5e:7f:83:b4:f9:37:7e:b7:
                    ae:64:cd:9e:a0:84:20:fc:23:cc:a5:c3:02:d0:73:
                    c7:6a:bb:34:4c:4f:0a:4e:3f:18:c1:e2:f3:8e:c8:
                    01:05:72:7e:ea:b1:8e:ae:fd:f8:82:e9:f1:89:a9:
                    f8:1b:86:9b:c8:e7:6e:c3:41:72:fb:0a:f6:9f:4a:
                    b4:d8:16:fd:df:dd:03:21:9b:72:b5:3d:8e:97:67:
                    d5:5e:08:8d:ec:99:dc:8c:ab:51:fc:93:b9:bb:bc:
                    26:41:ea:8c:d0:ce:5f:49:f3:76:59:fa:da:4e:6c:
                    87:aa:58:27:ce:b9:d0:49:20:3c:6f:05:0e:4d:bc:
                    3b:eb:b6:50:a5:b0:52:da:78:e8:f8:f3:12:ca:93:
                    66:de:08:f9:d2:f3:3c:9f:8e:ef:91:b1:b3:0d:2c:
                    f3:d7:ab:ba:88:d5:0b:2d:da:ae:13:84:ce:57:5b:
                    98:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F5:66:8A:83:06:4A:6A:44:0A:D4:F1:5F:8A:35:90:8F:EE:56:BF
            X509v3 Authority Key Identifier:
                keyid:EA:18:A8:6A:9B:F3:C8:CF:2C:92:3D:41:C4:48:9A:00:43:92:AB:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/323830343a336630383a3a2f33342d3334203d3e20323636363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f08::/34

    Signature Algorithm: sha256WithRSAEncryption
         85:1b:2c:e7:da:fb:32:38:5b:db:be:42:c2:07:71:01:75:4f:
         73:a0:46:59:72:d1:e7:9a:7b:f0:2d:73:2a:fc:4b:b3:18:e8:
         7c:d1:1d:a2:20:db:92:e1:86:4a:32:b4:4b:2c:62:03:49:fa:
         e0:63:58:ad:e9:11:11:ef:50:bc:83:45:67:37:4d:b2:22:c9:
         61:13:da:25:3b:37:ff:0c:f4:38:8d:01:08:35:bd:32:9d:64:
         d2:8f:e9:2d:93:90:2b:30:6e:fd:c3:72:39:76:99:85:9f:e5:
         6c:bc:62:d7:48:b4:a5:e1:19:eb:6a:42:33:53:7f:82:d0:b3:
         c3:1a:50:c3:c7:8c:4d:a0:dd:62:87:0c:05:50:fa:cc:ba:6f:
         0e:d0:fd:f3:90:5f:e1:31:72:37:b9:e6:77:a0:31:b6:a5:f2:
         85:02:47:45:98:9d:66:58:02:ba:3a:28:f1:61:27:2e:ba:2c:
         3d:74:4e:73:5c:68:81:fc:c2:da:e0:fd:b1:cd:8f:a7:36:19:
         da:21:75:52:9c:bc:b7:d2:b5:8a:b6:4b:6b:72:83:65:67:e6:
         50:5a:c0:d9:12:42:f5:5c:9a:6a:05:b0:0d:59:21:ee:3d:bc:
         3b:56:64:8d:4e:7f:8f:10:2c:10:42:0f:ba:0b:ef:9e:60:e4:
         7e:97:8f:80
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbj5ErOoB/ZYAUS2PkZo+eoAI+kMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUExOEE4NkE5QkYzQzhDRjJDOTIzRDQxQzQ0ODlBMDA0
MzkyQUJGQjAeFw0yNDA0MDQwMjI5MzlaFw0yNTA0MDMwMjM0MzlaMDMxMTAvBgNV
BAMTKDgzRjU2NjhBODMwNjRBNkE0NDBBRDRGMTVGOEEzNTkwOEZFRTU2QkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0qdUp0hdEKLVLi3mxnqH858tX
LVc1U+VmdkLQPiwIXRPnOBIJkFdD7rCqJo5kwSMIBB8L1RN3+oKMnM0mzslE8AQG
KBhskTcYVG20gDvvnXpef4O0+Td+t65kzZ6ghCD8I8ylwwLQc8dquzRMTwpOPxjB
4vOOyAEFcn7qsY6u/fiC6fGJqfgbhpvI527DQXL7CvafSrTYFv3f3QMhm3K1PY6X
Z9VeCI3smdyMq1H8k7m7vCZB6ozQzl9J83ZZ+tpObIeqWCfOudBJIDxvBQ5NvDvr
tlClsFLaeOj48xLKk2beCPnS8zyfju+RsbMNLPPXq7qI1Qst2q4ThM5XW5hpAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUg/VmioMGSmpECtTxX4o1kI/uVr8wHwYDVR0j
BBgwFoAU6hioapvzyM8skj1BxEiaAEOSq/swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2JqanN0RHNkczdRdENjcmRnZXpUREJ0ZjFaY1VVYURLTjViOE1UMVE2
VEEvMS9FQTE4QTg2QTlCRjNDOENGMkM5MjNENDFDNDQ4OUEwMDQzOTJBQkZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VBMThBODZBOUJGM0M4Q0Yy
QzkyM0Q0MUM0NDg5QTAwNDM5MkFCRkIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdiampzdERzZHM3UXRDY3JkZ2V6VERCdGYxWmNVVWFES041YjhNVDFRNlRBLzEv
MzIzODMwMzQzYTMzNjYzMDM4M2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNjM2
MzYzMzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKAQ/CAAwDQYJKoZIhvcNAQELBQADggEBAIUbLOfa
+zI4W9u+QsIHcQF1T3OgRlly0eeae/Atcyr8S7MY6HzRHaIg25LhhkoytEssYgNJ
+uBjWK3pERHvULyDRWc3TbIiyWET2iU7N/8M9DiNAQg1vTKdZNKP6S2TkCswbv3D
cjl2mYWf5Wy8YtdItKXhGetqQjNTf4LQs8MaUMPHjE2g3WKHDAVQ+sy6bw7Q/fOQ
X+Excje55negMbal8oUCR0WYnWZYAro6KPFhJy66LD10TnNcaIH8wtrg/bHNj6c2
GdohdVKcvLfStYq2S2tyg2Vn5lBawNkSQvVcmmoFsA1ZIe49vDtWZI1Of48QLBBC
D7oL755g5H6Xj4A=
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:38 2024 by rpki-client on console-ams.rpki-client.org