Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/323830343a326231303a313830303a3a2f33392d3339203d3e203532393136.roa
File:                     323830343a326231303a313830303a3a2f33392d3339203d3e203532393136.roa (raw, json)
Hash identifier:          pKW80g9sl7YOLehX+GZJaBqJeMfzM+SCzn70iOuPiYU=
Subject key identifier:   F1:92:DA:99:9B:D9:5E:84:08:71:5A:B7:C8:04:CB:3C:6D:CA:C7:23
Certificate issuer:       /CN=EF908A177FAF3EDEEAF39EF1BC3B208225302E77
Certificate serial:       4B6038FA7407AD8FFE364F320AE333A49D0C38E5
Authority key identifier: EF:90:8A:17:7F:AF:3E:DE:EA:F3:9E:F1:BC:3B:20:82:25:30:2E:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/323830343a326231303a313830303a3a2f33392d3339203d3e203532393136.roa
Signing time:             Wed 03 Apr 2024 20:51:35 +0000
ROA not before:           Wed 03 Apr 2024 20:46:35 +0000
ROA not after:            Wed 02 Apr 2025 20:51:35 +0000
asID:                     52916
IP address blocks:        2804:2b10:1800::/39 maxlen: 39

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.crl
                          rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 09:37:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:60:38:fa:74:07:ad:8f:fe:36:4f:32:0a:e3:33:a4:9d:0c:38:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF908A177FAF3EDEEAF39EF1BC3B208225302E77
        Validity
            Not Before: Apr  3 20:46:35 2024 GMT
            Not After : Apr  2 20:51:35 2025 GMT
        Subject: CN=F192DA999BD95E8408715AB7C804CB3C6DCAC723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:91:e1:95:e5:ab:1b:4a:87:cf:cd:46:15:73:
                    8e:90:dd:09:40:f8:95:3c:6a:39:7f:6e:bd:67:f9:
                    48:1b:d3:d5:5b:af:6a:a5:5b:cd:27:ec:77:41:64:
                    73:58:36:c9:ba:ae:eb:3f:ff:21:42:38:5e:44:37:
                    16:03:61:11:c9:2e:97:40:30:b3:55:82:19:0e:f3:
                    28:b2:7f:7c:c1:e0:2c:92:72:ee:5b:ae:87:4c:5f:
                    54:79:6b:f4:5b:49:20:27:56:3b:33:91:18:88:6d:
                    c5:93:91:68:59:d4:dc:a6:48:23:06:36:a8:ed:73:
                    fb:52:1d:eb:6b:35:2b:14:1f:ba:53:d2:a9:71:b1:
                    78:71:50:68:92:00:f0:b5:53:75:a0:3b:17:69:cb:
                    03:bc:3d:e2:61:d3:3f:09:cd:8d:45:be:6d:2a:59:
                    85:60:fb:85:ef:24:aa:9e:cb:ec:00:85:7d:24:ce:
                    83:ac:a2:ef:61:5d:5e:e2:4a:54:3a:b9:08:6b:37:
                    b3:1e:ac:bc:20:3b:b7:f8:96:6d:d5:aa:14:2d:11:
                    10:1b:33:a4:c6:bd:be:b5:f5:05:63:78:46:ca:49:
                    32:98:0f:41:ec:47:e5:a6:0c:1c:a0:50:2a:2a:f7:
                    59:fc:de:a1:9e:49:79:19:bc:61:30:0a:03:4a:48:
                    1b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:92:DA:99:9B:D9:5E:84:08:71:5A:B7:C8:04:CB:3C:6D:CA:C7:23
            X509v3 Authority Key Identifier:
                keyid:EF:90:8A:17:7F:AF:3E:DE:EA:F3:9E:F1:BC:3B:20:82:25:30:2E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/323830343a326231303a313830303a3a2f33392d3339203d3e203532393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b10:1800::/39

    Signature Algorithm: sha256WithRSAEncryption
         07:35:bc:8e:81:fe:b7:a7:c4:ca:17:55:e6:69:1b:88:50:80:
         2f:ad:80:5a:c9:6d:e5:55:89:ae:2b:af:b5:82:13:ac:de:2b:
         ab:ff:28:55:66:d9:d4:b0:ca:d4:a1:38:20:ba:46:a4:28:6d:
         6a:3b:56:8e:27:61:f6:ef:14:d8:2d:77:cc:b6:69:a3:64:3c:
         2c:9c:1a:75:09:9f:30:5a:ce:ec:45:b9:2c:1b:d1:e0:c3:23:
         db:bf:6b:af:0d:d9:2e:3a:fa:85:73:4b:2c:ff:b7:fa:f5:ad:
         38:43:4c:20:69:43:bf:70:3f:50:36:02:cf:da:9d:ba:ee:d8:
         99:5b:6c:a8:37:60:f5:12:87:e4:04:32:f0:ab:f9:3c:4c:35:
         ad:dc:0e:9c:17:8d:44:91:58:5e:c1:bf:73:88:05:43:c4:8e:
         55:f4:4a:4d:72:29:bd:7c:52:a3:54:2a:68:1d:e8:99:b0:15:
         79:a3:68:7d:73:a9:84:d1:0c:87:94:f5:ea:59:c5:d7:19:1e:
         a1:9f:73:b2:f8:69:34:ec:12:41:c2:00:a4:74:aa:1c:32:4c:
         bb:04:34:82:01:ca:fb:88:de:a4:72:2d:f5:9f:ed:af:a4:23:
         8e:df:35:34:d4:6f:36:29:2a:31:d6:82:4f:05:3f:42:71:84:
         c5:05:f0:21
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUS2A4+nQHrY/+Nk8yCuMzpJ0MOOUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUY5MDhBMTc3RkFGM0VERUVBRjM5RUYxQkMzQjIwODIy
NTMwMkU3NzAeFw0yNDA0MDMyMDQ2MzVaFw0yNTA0MDIyMDUxMzVaMDMxMTAvBgNV
BAMTKEYxOTJEQTk5OUJEOTVFODQwODcxNUFCN0M4MDRDQjNDNkRDQUM3MjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2keGV5asbSofPzUYVc46Q3QlA
+JU8ajl/br1n+Ugb09Vbr2qlW80n7HdBZHNYNsm6rus//yFCOF5ENxYDYRHJLpdA
MLNVghkO8yiyf3zB4CyScu5brodMX1R5a/RbSSAnVjszkRiIbcWTkWhZ1NymSCMG
Nqjtc/tSHetrNSsUH7pT0qlxsXhxUGiSAPC1U3WgOxdpywO8PeJh0z8JzY1Fvm0q
WYVg+4XvJKqey+wAhX0kzoOsou9hXV7iSlQ6uQhrN7MerLwgO7f4lm3VqhQtERAb
M6TGvb619QVjeEbKSTKYD0HsR+WmDBygUCoq91n83qGeSXkZvGEwCgNKSBu7AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU8ZLamZvZXoQIcVq3yATLPG3KxyMwHwYDVR0j
BBgwFoAU75CKF3+vPt7q857xvDsggiUwLncwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTFWOWU4UEs4YWNGcGhrdjJyeEpKVm9hVFI0cjNhVnlDZkhWenJxM3Vo
NGovMS9FRjkwOEExNzdGQUYzRURFRUFGMzlFRjFCQzNCMjA4MjI1MzAyRTc3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VGOTA4QTE3N0ZBRjNFREVF
QUYzOUVGMUJDM0IyMDgyMjUzMDJFNzcuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0UxVjllOFBLOGFjRnBoa3YycnhKSlZvYVRSNHIzYVZ5Q2ZIVnpycTN1aDRqLzEv
MzIzODMwMzQzYTMyNjIzMTMwM2EzMTM4MzAzMDNhM2EyZjMzMzkyZDMzMzkyMDNk
M2UyMDM1MzIzOTMxMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgEoBCsQGDANBgkqhkiG9w0BAQsFAAOC
AQEABzW8joH+t6fEyhdV5mkbiFCAL62AWslt5VWJriuvtYITrN4rq/8oVWbZ1LDK
1KE4ILpGpChtajtWjidh9u8U2C13zLZpo2Q8LJwadQmfMFrO7EW5LBvR4MMj279r
rw3ZLjr6hXNLLP+3+vWtOENMIGlDv3A/UDYCz9qduu7YmVtsqDdg9RKH5AQy8Kv5
PEw1rdwOnBeNRJFYXsG/c4gFQ8SOVfRKTXIpvXxSo1QqaB3ombAVeaNofXOphNEM
h5T16lnF1xkeoZ9zsvhpNOwSQcIApHSqHDJMuwQ0ggHK+4jepHIt9Z/tr6Qjjt81
NNRvNikqMdaCTwU/QnGExQXwIQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:24 2024 by rpki-client on console-ams.rpki-client.org