Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/1/323830343a3939343a3a2f33322d3332203d3e203238313339.roa
File:                     323830343a3939343a3a2f33322d3332203d3e203238313339.roa (raw, json)
Hash identifier:          pIF44yanUHRb7qZhSTtkozy7P4wVrnyHGCBwJzqclFE=
Subject key identifier:   3D:AD:1C:64:41:B9:2C:3A:51:19:D9:51:15:01:ED:76:C1:8E:75:87
Certificate issuer:       /CN=7EDE5A1D4AEC36DA897FAB540829FFA15F101665
Certificate serial:       60A50749183FAB1B6214BE6FD0C311C888D896D4
Authority key identifier: 7E:DE:5A:1D:4A:EC:36:DA:89:7F:AB:54:08:29:FF:A1:5F:10:16:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EDE5A1D4AEC36DA897FAB540829FFA15F101665.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/1/323830343a3939343a3a2f33322d3332203d3e203238313339.roa
Signing time:             Thu 04 Apr 2024 06:37:31 +0000
ROA not before:           Thu 04 Apr 2024 06:32:31 +0000
ROA not after:            Thu 03 Apr 2025 06:37:31 +0000
asID:                     28139
IP address blocks:        2804:994::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/1/7EDE5A1D4AEC36DA897FAB540829FFA15F101665.crl
                          rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/1/7EDE5A1D4AEC36DA897FAB540829FFA15F101665.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EDE5A1D4AEC36DA897FAB540829FFA15F101665.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:42:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:a5:07:49:18:3f:ab:1b:62:14:be:6f:d0:c3:11:c8:88:d8:96:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EDE5A1D4AEC36DA897FAB540829FFA15F101665
        Validity
            Not Before: Apr  4 06:32:31 2024 GMT
            Not After : Apr  3 06:37:31 2025 GMT
        Subject: CN=3DAD1C6441B92C3A5119D9511501ED76C18E7587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9b:fc:00:e3:d8:b0:0a:c6:6a:dc:68:41:58:
                    bb:0f:dc:9f:e0:e9:5c:96:9c:a8:c8:b5:9c:1a:99:
                    03:aa:8d:46:e8:8e:a8:f6:66:c1:e2:48:8d:82:96:
                    a2:bd:37:b6:ff:83:dc:6d:b4:ff:b5:6d:5e:45:d3:
                    6b:e7:1f:10:e0:77:c8:a8:8d:b0:0e:d2:8c:5a:4d:
                    e9:15:1c:48:29:23:b9:3c:0c:7b:b1:e5:3a:78:26:
                    5d:46:7f:a5:ce:5e:b4:2f:b2:d4:1b:5e:05:6f:48:
                    0f:8d:94:88:52:5f:36:13:96:ff:bb:02:a1:33:25:
                    d5:cb:4d:ce:87:bf:6e:ff:fc:11:93:0b:c8:49:77:
                    19:83:8a:2e:15:91:33:c9:c5:55:b5:1c:70:35:34:
                    4b:23:05:86:57:2b:98:93:20:ab:9e:1d:88:be:76:
                    33:d3:a9:54:ef:65:ea:79:7b:7f:d9:18:7d:69:50:
                    fb:f7:e3:18:c3:ac:7e:b5:60:83:58:ec:89:0f:b9:
                    54:c9:c8:c6:9e:24:12:29:23:c4:d4:78:98:bf:df:
                    55:b2:71:fb:f6:4b:d3:62:f4:b7:05:ec:83:3a:a8:
                    c2:00:46:3d:94:2f:d8:a8:45:8a:19:e6:af:63:66:
                    35:1f:a4:1d:58:6c:61:c7:ea:7d:17:05:be:c0:27:
                    94:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:AD:1C:64:41:B9:2C:3A:51:19:D9:51:15:01:ED:76:C1:8E:75:87
            X509v3 Authority Key Identifier:
                keyid:7E:DE:5A:1D:4A:EC:36:DA:89:7F:AB:54:08:29:FF:A1:5F:10:16:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/1/7EDE5A1D4AEC36DA897FAB540829FFA15F101665.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EDE5A1D4AEC36DA897FAB540829FFA15F101665.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/1/323830343a3939343a3a2f33322d3332203d3e203238313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:994::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:38:ac:13:77:d5:b3:20:b2:a4:ca:0e:4a:a0:78:27:b4:24:
         df:50:b6:35:f7:9b:6c:f6:3a:72:2a:9f:a2:ef:cd:6a:3f:7c:
         15:6f:93:86:f7:17:dd:0a:89:9d:e7:de:ab:63:02:c0:6a:d8:
         db:3a:0c:e8:80:00:97:24:bb:18:cc:c6:ee:7d:76:51:1e:03:
         86:e4:a8:28:76:d8:cf:e3:6f:3a:38:a5:42:2d:20:45:92:13:
         fa:ec:58:62:d2:d8:b2:03:67:70:5f:40:2a:20:48:c7:00:f6:
         d3:39:7d:12:98:a0:e3:27:06:f7:eb:b8:09:ad:28:6b:14:4d:
         e4:03:79:d8:4e:f3:70:9d:fc:f2:e4:1d:b4:29:69:d1:51:b9:
         e5:d5:16:d0:2b:5a:21:8b:e0:36:cd:2d:00:75:3a:4d:ed:f7:
         94:4f:c2:8d:9e:69:8f:6c:de:78:b0:32:1b:4d:f6:e3:7f:39:
         ff:8a:f9:f6:d5:4d:a6:51:34:06:c8:99:e9:f7:af:e1:78:df:
         74:6f:7c:57:0c:d4:2f:80:8d:a6:d5:4f:05:98:d1:64:0e:46:
         11:17:4f:a7:d2:71:27:74:82:59:54:ca:9b:ac:e1:d0:f8:d0:
         17:93:55:c8:ad:de:7e:3e:d0:32:77:67:a5:54:5d:10:24:17:
         b2:30:0a:3c
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUYKUHSRg/qxtiFL5v0MMRyIjYltQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0VERTVBMUQ0QUVDMzZEQTg5N0ZBQjU0MDgyOUZGQTE1
RjEwMTY2NTAeFw0yNDA0MDQwNjMyMzFaFw0yNTA0MDMwNjM3MzFaMDMxMTAvBgNV
BAMTKDNEQUQxQzY0NDFCOTJDM0E1MTE5RDk1MTE1MDFFRDc2QzE4RTc1ODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBm/wA49iwCsZq3GhBWLsP3J/g
6VyWnKjItZwamQOqjUbojqj2ZsHiSI2ClqK9N7b/g9xttP+1bV5F02vnHxDgd8io
jbAO0oxaTekVHEgpI7k8DHux5Tp4Jl1Gf6XOXrQvstQbXgVvSA+NlIhSXzYTlv+7
AqEzJdXLTc6Hv27//BGTC8hJdxmDii4VkTPJxVW1HHA1NEsjBYZXK5iTIKueHYi+
djPTqVTvZep5e3/ZGH1pUPv34xjDrH61YINY7IkPuVTJyMaeJBIpI8TUeJi/31Wy
cfv2S9Ni9LcF7IM6qMIARj2UL9ioRYoZ5q9jZjUfpB1YbGHH6n0XBb7AJ5ShAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUPa0cZEG5LDpRGdlRFQHtdsGOdYcwHwYDVR0j
BBgwFoAUft5aHUrsNtqJf6tUCCn/oV8QFmUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTZoRW4xWlZVNG5DWlFFTXpxMUZuWm15N2VpblB5QUxHVGdqclM4eW1w
aUwvMS83RURFNUExRDRBRUMzNkRBODk3RkFCNTQwODI5RkZBMTVGMTAxNjY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdFREU1QTFENEFFQzM2REE4
OTdGQUI1NDA4MjlGRkExNUYxMDE2NjUuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0E2aEVuMVpWVTRuQ1pRRU16cTFGblpteTdlaW5QeUFMR1RnanJTOHltcGlMLzEv
MzIzODMwMzQzYTM5MzkzNDNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzgzMTMz
Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBAmUMA0GCSqGSIb3DQEBCwUAA4IBAQCUOKwTd9WzILKk
yg5KoHgntCTfULY195ts9jpyKp+i781qP3wVb5OG9xfdComd596rYwLAatjbOgzo
gACXJLsYzMbufXZRHgOG5KgodtjP4286OKVCLSBFkhP67Fhi0tiyA2dwX0AqIEjH
APbTOX0SmKDjJwb367gJrShrFE3kA3nYTvNwnfzy5B20KWnRUbnl1RbQK1ohi+A2
zS0AdTpN7feUT8KNnmmPbN54sDIbTfbjfzn/ivn21U2mUTQGyJnp96/heN90b3xX
DNQvgI2m1U8FmNFkDkYRF0+n0nEndIJZVMqbrOHQ+NAXk1XIrd5+PtAyd2elVF0Q
JBeyMAo8
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:41 2024 by rpki-client on console-ams.rpki-client.org