Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/323830343a353666303a3a2f33332d3333203d3e20323638303333.roa
File:                     323830343a353666303a3a2f33332d3333203d3e20323638303333.roa (raw, json)
Hash identifier:          uuZmfNtQFWkhMKtRs9aSmKP7FAVTDw2846/m2f5wJWs=
Subject key identifier:   48:03:26:1D:A5:C7:A1:03:EB:AE:79:21:17:79:29:0A:AB:0C:23:B0
Certificate issuer:       /CN=EB84E09364662EDCA9ADD7153DBD782F05779B3C
Certificate serial:       02ACCB1506272D68797831B6D03C09A41A46E9CF
Authority key identifier: EB:84:E0:93:64:66:2E:DC:A9:AD:D7:15:3D:BD:78:2F:05:77:9B:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB84E09364662EDCA9ADD7153DBD782F05779B3C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/323830343a353666303a3a2f33332d3333203d3e20323638303333.roa
Signing time:             Thu 31 Oct 2024 14:03:01 +0000
ROA not before:           Thu 31 Oct 2024 13:58:01 +0000
ROA not after:            Thu 30 Oct 2025 14:03:01 +0000
asID:                     268033
IP address blocks:        2804:56f0::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/EB84E09364662EDCA9ADD7153DBD782F05779B3C.crl
                          rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/EB84E09364662EDCA9ADD7153DBD782F05779B3C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB84E09364662EDCA9ADD7153DBD782F05779B3C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:47:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:ac:cb:15:06:27:2d:68:79:78:31:b6:d0:3c:09:a4:1a:46:e9:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB84E09364662EDCA9ADD7153DBD782F05779B3C
        Validity
            Not Before: Oct 31 13:58:01 2024 GMT
            Not After : Oct 30 14:03:01 2025 GMT
        Subject: CN=4803261DA5C7A103EBAE79211779290AAB0C23B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:20:32:5d:92:00:d6:9a:45:d9:bf:aa:1e:af:
                    6c:35:5f:19:48:20:20:e5:a2:d5:06:ec:d4:9f:2e:
                    a5:08:eb:a7:b1:12:ee:19:20:4b:ac:c9:e4:30:f7:
                    3b:2d:63:fc:38:cc:75:74:d0:45:e3:a1:59:49:63:
                    b6:d6:b5:fb:c8:bd:7c:40:d7:1f:1d:da:e8:d9:5c:
                    cc:58:12:e5:80:53:2c:73:10:37:3f:f3:0f:13:71:
                    e5:5e:72:10:40:d1:de:da:77:0c:cc:65:b2:c7:05:
                    9a:a0:ee:44:8f:1c:8f:1c:79:7d:e9:99:c8:1b:67:
                    d7:09:73:0f:8e:3f:bc:16:5d:a5:2d:03:29:46:06:
                    3f:8f:28:76:e5:60:04:d0:d0:11:48:95:aa:92:89:
                    33:a2:e6:34:d1:f9:c6:1c:30:9f:a0:21:54:0d:0f:
                    4a:3b:66:91:53:ee:39:43:62:7a:e0:e9:35:a8:7c:
                    8b:b2:8e:fd:15:47:ed:ac:8e:9f:06:17:62:0f:c8:
                    28:b3:89:3f:93:d6:5e:83:aa:93:29:a0:70:ef:2c:
                    0c:02:8c:80:86:09:06:a0:de:4f:36:1e:d1:0c:4a:
                    3a:c8:02:21:b3:30:d0:71:34:fd:1f:df:58:13:cb:
                    37:e3:5f:ad:14:e7:87:66:40:f2:40:ab:5e:14:5b:
                    78:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:03:26:1D:A5:C7:A1:03:EB:AE:79:21:17:79:29:0A:AB:0C:23:B0
            X509v3 Authority Key Identifier:
                keyid:EB:84:E0:93:64:66:2E:DC:A9:AD:D7:15:3D:BD:78:2F:05:77:9B:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/EB84E09364662EDCA9ADD7153DBD782F05779B3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB84E09364662EDCA9ADD7153DBD782F05779B3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/323830343a353666303a3a2f33332d3333203d3e20323638303333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:56f0::/33

    Signature Algorithm: sha256WithRSAEncryption
         25:91:a8:df:6c:b0:b8:93:5a:11:4f:6d:d1:6d:87:6c:86:c3:
         ee:0f:0a:f6:9e:6c:8e:ba:a1:e5:7f:84:48:93:3c:d8:83:6f:
         cd:1d:4c:59:55:ce:78:e6:92:d0:7a:6b:5d:89:91:b4:20:a2:
         5d:69:73:c8:3d:37:a1:75:24:be:89:59:f2:f3:d5:07:80:93:
         60:2d:10:79:40:3b:27:24:02:30:07:cc:93:87:6a:d7:f6:9a:
         d5:cf:1b:9f:7e:b1:53:62:4b:54:97:dd:ad:23:79:d5:08:09:
         b3:86:ef:4d:f8:ad:8e:b4:7d:72:d2:65:8d:02:9d:88:d5:9a:
         97:ca:c9:3d:ee:9a:18:23:ea:29:c5:8c:e6:0a:76:40:dc:ed:
         30:07:f0:a9:e0:76:1f:0e:9e:84:c1:5b:fd:e1:f6:aa:64:37:
         f6:c6:84:25:91:70:48:0c:a5:97:92:6f:09:dc:e6:c2:9b:73:
         f2:b3:56:b7:15:33:4a:78:89:12:bf:08:47:ad:3f:79:2d:e6:
         1f:07:91:fe:cf:4b:20:64:27:28:dc:a5:97:6f:22:66:10:05:
         53:45:89:b0:cb:86:7d:c6:7d:c1:14:3c:75:a1:e5:53:a1:4c:
         78:c8:9d:87:8d:e6:81:a3:a5:1c:3a:b4:1f:57:23:c0:65:45:
         18:f6:ce:99
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUAqzLFQYnLWh5eDG20DwJpBpG6c8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUI4NEUwOTM2NDY2MkVEQ0E5QURENzE1M0RCRDc4MkYw
NTc3OUIzQzAeFw0yNDEwMzExMzU4MDFaFw0yNTEwMzAxNDAzMDFaMDMxMTAvBgNV
BAMTKDQ4MDMyNjFEQTVDN0ExMDNFQkFFNzkyMTE3NzkyOTBBQUIwQzIzQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKIDJdkgDWmkXZv6oer2w1XxlI
ICDlotUG7NSfLqUI66exEu4ZIEusyeQw9zstY/w4zHV00EXjoVlJY7bWtfvIvXxA
1x8d2ujZXMxYEuWAUyxzEDc/8w8TceVechBA0d7adwzMZbLHBZqg7kSPHI8ceX3p
mcgbZ9cJcw+OP7wWXaUtAylGBj+PKHblYATQ0BFIlaqSiTOi5jTR+cYcMJ+gIVQN
D0o7ZpFT7jlDYnrg6TWofIuyjv0VR+2sjp8GF2IPyCiziT+T1l6DqpMpoHDvLAwC
jICGCQag3k82HtEMSjrIAiGzMNBxNP0f31gTyzfjX60U54dmQPJAq14UW3jhAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUSAMmHaXHoQPrrnkhF3kpCqsMI7AwHwYDVR0j
BBgwFoAU64Tgk2RmLtyprdcVPb14LwV3mzwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUY0cU5rWFVrbjRHbm1LVWRuSGZKV2dFSHV0Z2Nnd0FkWEFOZjU5UHE2
ajIvMC9FQjg0RTA5MzY0NjYyRURDQTlBREQ3MTUzREJENzgyRjA1Nzc5QjNDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VCODRFMDkzNjQ2NjJFRENB
OUFERDcxNTNEQkQ3ODJGMDU3NzlCM0MuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FGNHFOa1hVa240R25tS1VkbkhmSldnRUh1dGdjZ3dBZFhBTmY1OVBxNmoyLzAv
MzIzODMwMzQzYTM1MzY2NjMwM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM4
MzAzMzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKARW8AAwDQYJKoZIhvcNAQELBQADggEBACWRqN9s
sLiTWhFPbdFth2yGw+4PCvaebI66oeV/hEiTPNiDb80dTFlVznjmktB6a12JkbQg
ol1pc8g9N6F1JL6JWfLz1QeAk2AtEHlAOyckAjAHzJOHatf2mtXPG59+sVNiS1SX
3a0jedUICbOG7034rY60fXLSZY0CnYjVmpfKyT3umhgj6inFjOYKdkDc7TAH8Kng
dh8OnoTBW/3h9qpkN/bGhCWRcEgMpZeSbwnc5sKbc/KzVrcVM0p4iRK/CEetP3kt
5h8Hkf7PSyBkJyjcpZdvImYQBVNFibDLhn3GfcEUPHWh5VOhTHjInYeN5oGjpRw6
tB9XI8BlRRj2zpk=
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:39 2024 by rpki-client on console-ams.rpki-client.org