Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/323830343a336630383a633030303a3a2f34302d3430203d3e20323636363335.roa
File:                     323830343a336630383a633030303a3a2f34302d3430203d3e20323636363335.roa (raw, json)
Hash identifier:          mEmYHzMH6AlPEcNO8y0B4h70PmMu5ZUoYlfmgBW1YpA=
Subject key identifier:   A1:30:77:4C:F7:50:2D:86:F7:5B:DF:D9:9B:EC:94:35:E2:CD:95:55
Certificate issuer:       /CN=EA18A86A9BF3C8CF2C923D41C4489A004392ABFB
Certificate serial:       22850BBA50BB5C067F4F76DE301F351698B75F8C
Authority key identifier: EA:18:A8:6A:9B:F3:C8:CF:2C:92:3D:41:C4:48:9A:00:43:92:AB:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/323830343a336630383a633030303a3a2f34302d3430203d3e20323636363335.roa
Signing time:             Thu 04 Apr 2024 02:34:39 +0000
ROA not before:           Thu 04 Apr 2024 02:29:39 +0000
ROA not after:            Thu 03 Apr 2025 02:34:39 +0000
asID:                     266635
IP address blocks:        2804:3f08:c000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.crl
                          rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:85:0b:ba:50:bb:5c:06:7f:4f:76:de:30:1f:35:16:98:b7:5f:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA18A86A9BF3C8CF2C923D41C4489A004392ABFB
        Validity
            Not Before: Apr  4 02:29:39 2024 GMT
            Not After : Apr  3 02:34:39 2025 GMT
        Subject: CN=A130774CF7502D86F75BDFD99BEC9435E2CD9555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:34:44:99:1c:6a:8e:c8:ff:2e:5a:6a:2e:c6:
                    3f:1b:ca:bd:75:79:c8:57:30:85:71:f6:3b:99:4a:
                    ef:b6:60:ad:4e:7c:ba:d8:d6:c8:e7:4c:58:2a:22:
                    42:e5:92:09:41:6f:29:00:f7:cf:18:f8:66:02:74:
                    9b:41:ac:cc:5a:cb:11:86:13:ed:f3:ec:2b:4a:aa:
                    9b:4b:56:19:93:bb:2d:e5:4b:2c:35:88:41:de:80:
                    45:8f:12:d7:72:29:d1:2d:ee:46:bb:7d:60:6f:38:
                    ce:aa:07:f2:ca:e9:f2:c3:64:1a:f9:9c:31:cf:b7:
                    b9:9a:3b:d5:3c:8f:21:4a:70:e2:25:f5:28:f6:20:
                    09:9f:24:1d:56:cd:8d:42:70:b3:34:8c:99:ad:01:
                    87:74:65:bb:67:da:e2:64:48:10:cc:78:23:5b:b4:
                    79:e8:62:6c:d8:40:67:48:31:98:1f:25:c8:d2:00:
                    04:81:7a:d1:04:5d:55:58:ec:f8:8e:a7:d1:38:b4:
                    de:07:00:a6:b0:f9:08:bb:93:98:bb:5b:95:37:fa:
                    6d:cc:15:3f:47:b0:d2:fd:1a:74:c4:8c:8b:29:aa:
                    d8:5f:0c:50:63:a7:23:77:ac:a3:e9:17:c7:e5:3c:
                    62:f0:b8:54:47:7d:05:58:1c:1f:b9:2e:11:00:1a:
                    12:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:30:77:4C:F7:50:2D:86:F7:5B:DF:D9:9B:EC:94:35:E2:CD:95:55
            X509v3 Authority Key Identifier:
                keyid:EA:18:A8:6A:9B:F3:C8:CF:2C:92:3D:41:C4:48:9A:00:43:92:AB:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/323830343a336630383a633030303a3a2f34302d3430203d3e20323636363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f08:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         0b:d6:74:d9:b7:3e:f4:72:5f:02:d7:9d:d2:fa:c9:27:20:3f:
         80:f3:1e:4d:2d:5c:6e:b6:7b:d4:30:07:1a:30:e4:1b:91:b1:
         ef:ae:75:ca:3d:3f:dd:cf:92:5d:76:99:16:5a:26:12:e1:2b:
         25:1f:6c:d0:c5:b5:13:8c:b5:94:fb:4d:d1:fe:b1:14:ff:57:
         81:67:e2:46:ac:90:f9:6a:ae:de:54:b1:84:3b:8b:86:18:ca:
         df:12:8d:f4:ff:c2:8f:a4:b9:59:d3:ca:d8:10:9c:2b:02:19:
         c8:56:4d:89:40:d0:da:f8:d5:65:83:7f:74:c2:28:c7:36:89:
         c0:c1:2e:58:19:9f:17:ad:30:8d:63:8c:1f:7f:3b:50:b7:3e:
         e3:9c:18:be:b9:d0:db:ea:37:2d:56:95:63:31:5e:b6:f4:65:
         9c:17:23:9e:4d:fb:37:34:47:00:fc:5f:22:0a:19:8b:5e:c2:
         29:89:fb:2d:1b:ff:f4:fc:21:f3:f1:ae:67:39:3e:d0:06:f2:
         49:cc:a6:ee:a6:9e:6e:11:14:66:16:2b:61:da:9b:d9:5e:fa:
         97:90:e0:99:70:d0:7d:b0:c0:ab:e3:4f:cb:a1:59:63:34:ce:
         3c:b8:da:43:5d:a2:6b:26:f6:cd:69:ec:26:68:3f:db:fc:4c:
         7f:39:74:d4
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUIoULulC7XAZ/T3beMB81Fpi3X4wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUExOEE4NkE5QkYzQzhDRjJDOTIzRDQxQzQ0ODlBMDA0
MzkyQUJGQjAeFw0yNDA0MDQwMjI5MzlaFw0yNTA0MDMwMjM0MzlaMDMxMTAvBgNV
BAMTKEExMzA3NzRDRjc1MDJEODZGNzVCREZEOTlCRUM5NDM1RTJDRDk1NTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3NESZHGqOyP8uWmouxj8byr11
echXMIVx9juZSu+2YK1OfLrY1sjnTFgqIkLlkglBbykA988Y+GYCdJtBrMxayxGG
E+3z7CtKqptLVhmTuy3lSyw1iEHegEWPEtdyKdEt7ka7fWBvOM6qB/LK6fLDZBr5
nDHPt7maO9U8jyFKcOIl9Sj2IAmfJB1WzY1CcLM0jJmtAYd0Zbtn2uJkSBDMeCNb
tHnoYmzYQGdIMZgfJcjSAASBetEEXVVY7PiOp9E4tN4HAKaw+Qi7k5i7W5U3+m3M
FT9HsNL9GnTEjIspqthfDFBjpyN3rKPpF8flPGLwuFRHfQVYHB+5LhEAGhLDAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUoTB3TPdQLYb3W9/Zm+yUNeLNlVUwHwYDVR0j
BBgwFoAU6hioapvzyM8skj1BxEiaAEOSq/swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2JqanN0RHNkczdRdENjcmRnZXpUREJ0ZjFaY1VVYURLTjViOE1UMVE2
VEEvMS9FQTE4QTg2QTlCRjNDOENGMkM5MjNENDFDNDQ4OUEwMDQzOTJBQkZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VBMThBODZBOUJGM0M4Q0Yy
QzkyM0Q0MUM0NDg5QTAwNDM5MkFCRkIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdiampzdERzZHM3UXRDY3JkZ2V6VERCdGYxWmNVVWFES041YjhNVDFRNlRBLzEv
MzIzODMwMzQzYTMzNjYzMDM4M2E2MzMwMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzNjM2MzMzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEPwjAMA0GCSqGSIb3DQEBCwUA
A4IBAQAL1nTZtz70cl8C153S+sknID+A8x5NLVxutnvUMAcaMOQbkbHvrnXKPT/d
z5JddpkWWiYS4SslH2zQxbUTjLWU+03R/rEU/1eBZ+JGrJD5aq7eVLGEO4uGGMrf
Eo30/8KPpLlZ08rYEJwrAhnIVk2JQNDa+NVlg390wijHNonAwS5YGZ8XrTCNY4wf
fztQtz7jnBi+udDb6jctVpVjMV629GWcFyOeTfs3NEcA/F8iChmLXsIpifstG//0
/CHz8a5nOT7QBvJJzKbupp5uERRmFith2pvZXvqXkOCZcNB9sMCr40/LoVljNM48
uNpDXaJrJvbNaewmaD/b/Ex/OXTU
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:16 2024 by rpki-client on console-fra.rpki-client.org