Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/0/323830343a363931383a3a2f33322d313238203d3e20323730323438.roa
File:                     323830343a363931383a3a2f33322d313238203d3e20323730323438.roa (raw, json)
Hash identifier:          4B2SUP0u30696QaJziz1KXCadg3k4SB6atjENxD89X4=
Subject key identifier:   6E:E9:29:12:27:65:36:34:54:9B:06:63:FB:0D:AD:5B:94:12:74:AE
Certificate issuer:       /CN=EAC5221FCF24AF9D3D00430E7824205E5F92E2BC
Certificate serial:       382D8FE3D1CD80CA06D8D06A5C407E3542CFC241
Authority key identifier: EA:C5:22:1F:CF:24:AF:9D:3D:00:43:0E:78:24:20:5E:5F:92:E2:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC5221FCF24AF9D3D00430E7824205E5F92E2BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/0/323830343a363931383a3a2f33322d313238203d3e20323730323438.roa
Signing time:             Wed 04 Sep 2024 18:53:49 +0000
ROA not before:           Wed 04 Sep 2024 18:48:49 +0000
ROA not after:            Wed 03 Sep 2025 18:53:49 +0000
asID:                     270248
IP address blocks:        2804:6918::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/0/EAC5221FCF24AF9D3D00430E7824205E5F92E2BC.crl
                          rsync://rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/0/EAC5221FCF24AF9D3D00430E7824205E5F92E2BC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC5221FCF24AF9D3D00430E7824205E5F92E2BC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 02:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:2d:8f:e3:d1:cd:80:ca:06:d8:d0:6a:5c:40:7e:35:42:cf:c2:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAC5221FCF24AF9D3D00430E7824205E5F92E2BC
        Validity
            Not Before: Sep  4 18:48:49 2024 GMT
            Not After : Sep  3 18:53:49 2025 GMT
        Subject: CN=6EE9291227653634549B0663FB0DAD5B941274AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3c:e1:4e:e9:d2:9c:49:eb:98:06:f1:6b:5e:
                    97:e5:cf:9d:fc:5e:1b:c7:75:ea:58:3b:1e:a9:a7:
                    ac:53:21:d5:a1:6c:36:c6:9a:20:3f:9e:0d:7f:d5:
                    d5:4c:4b:da:25:01:ae:88:4c:a2:d2:d3:c3:ba:eb:
                    bf:62:ab:9e:6c:59:17:dc:ac:78:95:2b:64:aa:4c:
                    77:8a:b1:8b:a0:74:2d:41:49:af:90:ca:ee:8d:9b:
                    47:b1:21:9e:3e:77:e8:21:db:8d:cc:4f:4d:e5:8a:
                    7c:ff:18:9b:44:81:2b:e3:05:b2:4b:77:14:41:f8:
                    46:96:6f:a7:f3:07:a3:2b:6f:68:06:0c:9f:0c:83:
                    a9:63:38:51:6b:f0:c4:21:2b:f0:c9:7f:0d:dc:8e:
                    d1:ac:c0:f4:7b:cb:ad:5d:4f:23:32:97:a2:93:d7:
                    01:52:79:0b:b2:ba:60:8b:f6:20:2a:e0:c3:46:2d:
                    38:98:67:d4:48:84:2d:1a:72:71:2f:7d:32:e6:3c:
                    2c:7f:4c:0e:fb:44:69:aa:54:ab:42:ee:87:41:1e:
                    c5:ac:44:98:7c:a3:13:5e:d5:17:fc:ea:38:5f:d9:
                    fb:5f:3a:fe:10:4e:da:0f:d4:59:1b:ee:af:78:f0:
                    08:31:0b:a9:eb:14:33:94:d6:bd:fd:04:ec:90:e7:
                    51:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E9:29:12:27:65:36:34:54:9B:06:63:FB:0D:AD:5B:94:12:74:AE
            X509v3 Authority Key Identifier:
                keyid:EA:C5:22:1F:CF:24:AF:9D:3D:00:43:0E:78:24:20:5E:5F:92:E2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/0/EAC5221FCF24AF9D3D00430E7824205E5F92E2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC5221FCF24AF9D3D00430E7824205E5F92E2BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/0/323830343a363931383a3a2f33322d313238203d3e20323730323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6918::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:46:97:85:4e:df:b3:36:db:fd:b9:bb:10:58:ba:37:e9:16:
         7b:ea:30:1d:42:d8:08:78:05:3a:27:f5:67:06:10:94:fb:68:
         12:43:37:62:8d:7d:ce:92:dd:1a:74:1e:1a:ce:5c:3e:9e:b7:
         a6:d8:d8:13:c7:d4:05:71:b2:f7:e1:cf:53:06:8a:58:5d:74:
         b8:e8:a9:e0:3c:eb:46:80:bb:e5:1e:7f:3a:31:b5:3d:49:63:
         f1:f5:74:db:47:50:67:9a:cc:3d:0a:ef:c2:34:4c:ca:47:3b:
         1f:59:64:d9:99:ba:33:df:e5:e2:a2:8d:92:a7:60:8c:d4:70:
         86:90:80:95:ed:38:7d:b7:ec:3d:1a:7c:c8:dc:09:09:2f:37:
         4a:1f:68:eb:f7:c9:82:2b:e4:df:52:c4:e9:5e:84:c1:fd:d1:
         d3:98:5e:8b:14:6b:a0:ba:86:22:7d:fa:d6:02:3c:4a:82:a0:
         01:5c:1e:94:2b:4c:da:e9:70:a1:39:37:7e:e0:34:6e:f1:03:
         70:00:80:79:53:f6:91:27:4b:a7:4f:96:75:50:10:d5:ff:63:
         96:61:57:d9:1a:33:54:fe:43:bc:a8:5f:3f:15:fd:dc:02:75:
         bb:e9:52:1b:21:34:d0:c9:46:55:10:6a:55:9a:1b:eb:4c:03:
         9f:ed:66:7a
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUOC2P49HNgMoG2NBqXEB+NULPwkEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUFDNTIyMUZDRjI0QUY5RDNEMDA0MzBFNzgyNDIwNUU1
RjkyRTJCQzAeFw0yNDA5MDQxODQ4NDlaFw0yNTA5MDMxODUzNDlaMDMxMTAvBgNV
BAMTKDZFRTkyOTEyMjc2NTM2MzQ1NDlCMDY2M0ZCMERBRDVCOTQxMjc0QUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLPOFO6dKcSeuYBvFrXpflz538
XhvHdepYOx6pp6xTIdWhbDbGmiA/ng1/1dVMS9olAa6ITKLS08O6679iq55sWRfc
rHiVK2SqTHeKsYugdC1BSa+Qyu6Nm0exIZ4+d+gh243MT03linz/GJtEgSvjBbJL
dxRB+EaWb6fzB6Mrb2gGDJ8Mg6ljOFFr8MQhK/DJfw3cjtGswPR7y61dTyMyl6KT
1wFSeQuyumCL9iAq4MNGLTiYZ9RIhC0acnEvfTLmPCx/TA77RGmqVKtC7odBHsWs
RJh8oxNe1Rf86jhf2ftfOv4QTtoP1Fkb7q948AgxC6nrFDOU1r39BOyQ51FnAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUbukpEidlNjRUmwZj+w2tW5QSdK4wHwYDVR0j
BBgwFoAU6sUiH88kr509AEMOeCQgXl+S4rwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUhFTmkzREJlaER0TVRtQk1TMXlSQTMzQWlWUlA1TWtpS3o5d01lNVFx
bjcvMC9FQUM1MjIxRkNGMjRBRjlEM0QwMDQzMEU3ODI0MjA1RTVGOTJFMkJDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VBQzUyMjFGQ0YyNEFGOUQz
RDAwNDMwRTc4MjQyMDVFNUY5MkUyQkMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FIRU5pM0RCZWhEdE1UbUJNUzF5UkEzM0FpVlJQNU1raUt6OXdNZTVRcW43LzAv
MzIzODMwMzQzYTM2MzkzMTM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzAzMjM0Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBGkYMA0GCSqGSIb3DQEBCwUAA4IBAQBBRpeF
Tt+zNtv9ubsQWLo36RZ76jAdQtgIeAU6J/VnBhCU+2gSQzdijX3Okt0adB4azlw+
nrem2NgTx9QFcbL34c9TBopYXXS46KngPOtGgLvlHn86MbU9SWPx9XTbR1Bnmsw9
Cu/CNEzKRzsfWWTZmboz3+Xioo2Sp2CM1HCGkICV7Th9t+w9GnzI3AkJLzdKH2jr
98mCK+TfUsTpXoTB/dHTmF6LFGuguoYiffrWAjxKgqABXB6UK0za6XChOTd+4DRu
8QNwAIB5U/aRJ0unT5Z1UBDV/2OWYVfZGjNU/kO8qF8/Ff3cAnW76VIbITTQyUZV
EGpVmhvrTAOf7WZ6
-----END CERTIFICATE-----
Generated at Tue Nov 26 02:25:34 2024 by rpki-client on console-ams.rpki-client.org