Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/323830343a353666303a343030303a3a2f33342d3334203d3e20323638303333.roa
File:                     323830343a353666303a343030303a3a2f33342d3334203d3e20323638303333.roa (raw, json)
Hash identifier:          pWBzu5d5Pd/Vgznq0yzH2WDLbC0IJO9Ihe8HarnnjDw=
Subject key identifier:   3A:75:0B:CF:64:2B:60:D2:27:9C:A0:41:CA:DD:9E:16:BF:A4:A1:38
Certificate issuer:       /CN=EB84E09364662EDCA9ADD7153DBD782F05779B3C
Certificate serial:       2002200BADD9AFC5459F69292F9905514687BC5C
Authority key identifier: EB:84:E0:93:64:66:2E:DC:A9:AD:D7:15:3D:BD:78:2F:05:77:9B:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB84E09364662EDCA9ADD7153DBD782F05779B3C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/323830343a353666303a343030303a3a2f33342d3334203d3e20323638303333.roa
Signing time:             Thu 31 Oct 2024 14:03:06 +0000
ROA not before:           Thu 31 Oct 2024 13:58:06 +0000
ROA not after:            Thu 30 Oct 2025 14:03:06 +0000
asID:                     268033
IP address blocks:        2804:56f0:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/EB84E09364662EDCA9ADD7153DBD782F05779B3C.crl
                          rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/EB84E09364662EDCA9ADD7153DBD782F05779B3C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB84E09364662EDCA9ADD7153DBD782F05779B3C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:47:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:02:20:0b:ad:d9:af:c5:45:9f:69:29:2f:99:05:51:46:87:bc:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB84E09364662EDCA9ADD7153DBD782F05779B3C
        Validity
            Not Before: Oct 31 13:58:06 2024 GMT
            Not After : Oct 30 14:03:06 2025 GMT
        Subject: CN=3A750BCF642B60D2279CA041CADD9E16BFA4A138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:12:dc:5b:b5:29:e9:46:4a:ec:6a:9a:dd:6a:
                    fd:98:15:dc:de:04:6a:4b:76:7b:80:05:84:64:2d:
                    56:b0:b6:44:65:4f:a0:00:48:10:04:0f:25:19:36:
                    67:0e:8a:0e:5d:1a:2d:46:83:62:4f:14:90:15:28:
                    cf:4d:e8:9a:d1:8e:3e:ea:ab:41:39:15:64:bc:79:
                    b9:79:9a:67:b4:fd:ea:fc:dd:44:44:2b:34:a9:2b:
                    17:6b:37:71:a4:15:bd:97:41:ce:e3:cc:9c:c5:14:
                    4d:f3:c3:14:60:bd:8a:c4:07:63:de:ad:ef:1d:7f:
                    37:4d:e7:1c:ab:31:6d:e9:b0:38:ba:e0:ca:c0:6e:
                    22:1e:b3:f2:6d:ea:38:bd:16:36:f2:70:51:aa:b4:
                    58:31:db:8a:0b:f7:db:ca:4e:70:50:67:2b:f8:a5:
                    10:72:f0:3a:09:81:6e:7c:14:3d:23:1f:0c:3e:36:
                    6f:be:13:6a:8a:36:42:43:bf:b5:74:c4:59:73:25:
                    9b:03:d0:b6:c8:f6:a0:04:86:e8:7e:85:23:38:27:
                    4d:35:38:b3:fe:aa:51:d6:55:2e:56:5b:20:01:cb:
                    94:83:29:07:58:77:5b:33:5f:3a:33:de:b1:d7:34:
                    aa:63:07:85:a6:a1:2a:06:f7:cc:55:e5:a2:c2:d1:
                    4e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:75:0B:CF:64:2B:60:D2:27:9C:A0:41:CA:DD:9E:16:BF:A4:A1:38
            X509v3 Authority Key Identifier:
                keyid:EB:84:E0:93:64:66:2E:DC:A9:AD:D7:15:3D:BD:78:2F:05:77:9B:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/EB84E09364662EDCA9ADD7153DBD782F05779B3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB84E09364662EDCA9ADD7153DBD782F05779B3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/323830343a353666303a343030303a3a2f33342d3334203d3e20323638303333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:56f0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         09:39:29:fe:bc:69:33:9d:7f:01:e7:9b:96:65:48:d7:4a:ae:
         f7:19:de:c4:1f:73:b9:b0:93:6b:f3:12:83:e5:ac:ec:8b:46:
         3b:07:e2:17:7c:9c:26:c8:82:1c:bd:2d:b0:e8:0b:10:45:6a:
         55:3f:fa:f6:b8:b1:6e:a5:84:05:22:56:9f:d8:27:4b:ae:fd:
         19:40:f1:84:3d:cc:47:50:41:de:2f:6c:1b:15:fc:ee:11:fb:
         c4:ef:98:6f:d7:0f:12:1d:46:d5:f0:bc:38:a9:48:aa:b3:89:
         8e:4e:77:48:30:bc:07:3c:d6:82:66:9e:a4:c0:e5:ab:e6:1f:
         8c:38:08:f4:2e:ae:e5:63:fc:d3:57:0e:6e:99:35:89:53:d3:
         85:d3:fd:c9:3f:d1:49:e1:c4:e1:a7:24:25:d1:81:0f:92:af:
         76:1b:c9:db:08:f2:b9:e3:54:9a:77:b4:7b:3a:82:a3:58:9c:
         60:02:3a:d0:78:d2:45:74:01:8a:1d:e7:98:88:9a:99:91:05:
         97:bf:f7:f5:77:12:86:53:c2:d2:17:c9:17:9d:fb:2f:96:c4:
         93:05:72:21:8a:85:05:34:d0:14:69:65:3c:e8:59:19:f4:0b:
         d2:47:59:e8:4d:0d:11:de:d4:68:85:13:d5:d1:bf:23:7c:49:
         81:aa:26:46
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUIAIgC63Zr8VFn2kpL5kFUUaHvFwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUI4NEUwOTM2NDY2MkVEQ0E5QURENzE1M0RCRDc4MkYw
NTc3OUIzQzAeFw0yNDEwMzExMzU4MDZaFw0yNTEwMzAxNDAzMDZaMDMxMTAvBgNV
BAMTKDNBNzUwQkNGNjQyQjYwRDIyNzlDQTA0MUNBREQ5RTE2QkZBNEExMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/EtxbtSnpRkrsaprdav2YFdze
BGpLdnuABYRkLVawtkRlT6AASBAEDyUZNmcOig5dGi1Gg2JPFJAVKM9N6JrRjj7q
q0E5FWS8ebl5mme0/er83UREKzSpKxdrN3GkFb2XQc7jzJzFFE3zwxRgvYrEB2Pe
re8dfzdN5xyrMW3psDi64MrAbiIes/Jt6ji9FjbycFGqtFgx24oL99vKTnBQZyv4
pRBy8DoJgW58FD0jHww+Nm++E2qKNkJDv7V0xFlzJZsD0LbI9qAEhuh+hSM4J001
OLP+qlHWVS5WWyABy5SDKQdYd1szXzoz3rHXNKpjB4WmoSoG98xV5aLC0U6TAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUOnULz2QrYNInnKBByt2eFr+koTgwHwYDVR0j
BBgwFoAU64Tgk2RmLtyprdcVPb14LwV3mzwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUY0cU5rWFVrbjRHbm1LVWRuSGZKV2dFSHV0Z2Nnd0FkWEFOZjU5UHE2
ajIvMC9FQjg0RTA5MzY0NjYyRURDQTlBREQ3MTUzREJENzgyRjA1Nzc5QjNDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VCODRFMDkzNjQ2NjJFRENB
OUFERDcxNTNEQkQ3ODJGMDU3NzlCM0MuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FGNHFOa1hVa240R25tS1VkbkhmSldnRUh1dGdjZ3dBZFhBTmY1OVBxNmoyLzAv
MzIzODMwMzQzYTM1MzY2NjMwM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzODMwMzMzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEVvBAMA0GCSqGSIb3DQEBCwUA
A4IBAQAJOSn+vGkznX8B55uWZUjXSq73Gd7EH3O5sJNr8xKD5azsi0Y7B+IXfJwm
yIIcvS2w6AsQRWpVP/r2uLFupYQFIlaf2CdLrv0ZQPGEPcxHUEHeL2wbFfzuEfvE
75hv1w8SHUbV8Lw4qUiqs4mOTndIMLwHPNaCZp6kwOWr5h+MOAj0Lq7lY/zTVw5u
mTWJU9OF0/3JP9FJ4cThpyQl0YEPkq92G8nbCPK541Sad7R7OoKjWJxgAjrQeNJF
dAGKHeeYiJqZkQWXv/f1dxKGU8LSF8kXnfsvlsSTBXIhioUFNNAUaWU86FkZ9AvS
R1noTQ0R3tRohRPV0b8jfEmBqiZG
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:39 2024 by rpki-client on console-ams.rpki-client.org