Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/323830343a366536633a3a2f33322d3332203d3e20323730353936.roa
File:                     323830343a366536633a3a2f33322d3332203d3e20323730353936.roa (raw, json)
Hash identifier:          9A2sDiJyWgxKZwGLOG/bX9JgCBbv6nuXGli5Xf/H4cw=
Subject key identifier:   0C:57:D5:9E:C1:F2:62:BC:1B:EA:5B:9F:AE:8C:94:99:69:16:40:34
Certificate issuer:       /CN=E90FADD185C99957F5FCF5080635615A398C0DA4
Certificate serial:       4D638E15A084E34B1A5ECE8CAA334806F71FE1B4
Authority key identifier: E9:0F:AD:D1:85:C9:99:57:F5:FC:F5:08:06:35:61:5A:39:8C:0D:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E90FADD185C99957F5FCF5080635615A398C0DA4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/323830343a366536633a3a2f33322d3332203d3e20323730353936.roa
Signing time:             Mon 03 Jun 2024 20:19:05 +0000
ROA not before:           Mon 03 Jun 2024 20:14:05 +0000
ROA not after:            Mon 02 Jun 2025 20:19:05 +0000
asID:                     270596
IP address blocks:        2804:6e6c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/E90FADD185C99957F5FCF5080635615A398C0DA4.crl
                          rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/E90FADD185C99957F5FCF5080635615A398C0DA4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E90FADD185C99957F5FCF5080635615A398C0DA4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:63:8e:15:a0:84:e3:4b:1a:5e:ce:8c:aa:33:48:06:f7:1f:e1:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E90FADD185C99957F5FCF5080635615A398C0DA4
        Validity
            Not Before: Jun  3 20:14:05 2024 GMT
            Not After : Jun  2 20:19:05 2025 GMT
        Subject: CN=0C57D59EC1F262BC1BEA5B9FAE8C949969164034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ec:49:4d:f2:15:54:f7:eb:13:61:9a:ca:14:
                    77:aa:7e:4d:de:55:c2:00:72:35:b2:6c:28:13:af:
                    fd:6d:19:30:b8:5c:6a:8c:f6:f4:1b:e8:72:a3:42:
                    b8:6f:50:f6:e5:62:ff:17:fd:bb:63:6a:9b:21:39:
                    a4:0d:6b:c8:44:30:ca:74:48:8b:86:7e:00:e3:bb:
                    3f:25:96:ce:55:48:b8:54:32:e0:5a:a0:4a:b8:91:
                    8f:1c:09:56:6e:1a:0e:40:bb:7b:2f:23:ed:e5:ee:
                    3c:a7:18:eb:81:ef:61:d1:7e:8b:47:21:f7:3c:b2:
                    25:e2:d4:89:4f:d7:cc:fe:66:6e:48:fa:d9:50:27:
                    19:b7:2b:9c:63:6c:c0:4c:00:c0:90:e5:b4:81:cb:
                    f0:89:7f:ee:08:a4:b4:fc:85:69:cf:51:36:71:6a:
                    7f:4b:5a:eb:67:a3:b1:ee:c6:a3:19:cb:8e:79:98:
                    47:ee:8a:b9:0d:5a:e9:09:a6:3f:f0:ac:61:45:cd:
                    de:51:fe:f8:9e:77:73:41:5b:c4:e3:1c:13:91:aa:
                    de:3c:54:62:59:1b:88:83:9e:c5:ea:f8:02:b7:3c:
                    a0:9a:ab:a9:b9:5b:17:91:82:6b:ae:92:9a:c7:33:
                    ae:98:91:ca:b3:94:d5:0b:21:60:16:94:7e:a0:ba:
                    6e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:57:D5:9E:C1:F2:62:BC:1B:EA:5B:9F:AE:8C:94:99:69:16:40:34
            X509v3 Authority Key Identifier:
                keyid:E9:0F:AD:D1:85:C9:99:57:F5:FC:F5:08:06:35:61:5A:39:8C:0D:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/E90FADD185C99957F5FCF5080635615A398C0DA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E90FADD185C99957F5FCF5080635615A398C0DA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/323830343a366536633a3a2f33322d3332203d3e20323730353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e6c::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:ed:1a:bd:d8:86:54:83:9a:f6:c9:5a:4f:26:f7:cf:35:7f:
         16:01:40:88:a9:97:07:d1:dc:8b:54:16:fd:e6:2d:c1:e7:63:
         43:60:be:9e:66:0a:b3:9c:72:02:04:ee:27:14:9f:d0:06:df:
         7f:7c:87:03:52:15:e8:82:d3:90:c6:45:26:cb:53:60:bb:11:
         2a:cd:71:af:0a:61:68:d7:df:86:d3:34:54:44:65:7a:e9:74:
         25:1f:80:76:6a:c1:8c:02:8a:c3:10:9e:0b:c8:29:73:c7:7e:
         83:ca:31:62:f3:ff:d3:47:77:11:42:08:4b:b2:16:4e:00:98:
         1b:25:80:03:33:a4:b3:36:e3:c1:56:83:bf:0d:6c:cc:24:cf:
         c4:dc:5f:45:0c:83:89:29:13:7e:40:7b:2f:56:04:7b:de:77:
         2e:9e:08:c1:c1:d6:c8:25:08:d2:1d:b3:f3:ac:69:2f:b3:d8:
         2d:7a:64:cf:bc:ec:6d:20:5e:4b:57:24:10:30:bc:47:68:2c:
         32:48:4f:ce:09:df:ae:1a:1d:36:37:52:0f:56:03:90:cc:aa:
         39:d7:2e:bf:6e:52:3c:e3:91:2e:6d:cd:66:a7:c3:3c:3d:f0:
         c2:2d:b1:b7:13:22:e5:cc:55:bf:0d:73:11:09:f3:d7:bf:9f:
         d2:e6:4d:61
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUTWOOFaCE40saXs6MqjNIBvcf4bQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTkwRkFERDE4NUM5OTk1N0Y1RkNGNTA4MDYzNTYxNUEz
OThDMERBNDAeFw0yNDA2MDMyMDE0MDVaFw0yNTA2MDIyMDE5MDVaMDMxMTAvBgNV
BAMTKDBDNTdENTlFQzFGMjYyQkMxQkVBNUI5RkFFOEM5NDk5NjkxNjQwMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX7ElN8hVU9+sTYZrKFHeqfk3e
VcIAcjWybCgTr/1tGTC4XGqM9vQb6HKjQrhvUPblYv8X/btjapshOaQNa8hEMMp0
SIuGfgDjuz8lls5VSLhUMuBaoEq4kY8cCVZuGg5Au3svI+3l7jynGOuB72HRfotH
Ifc8siXi1IlP18z+Zm5I+tlQJxm3K5xjbMBMAMCQ5bSBy/CJf+4IpLT8hWnPUTZx
an9LWutno7HuxqMZy455mEfuirkNWukJpj/wrGFFzd5R/vied3NBW8TjHBORqt48
VGJZG4iDnsXq+AK3PKCaq6m5WxeRgmuukprHM66YkcqzlNULIWAWlH6gum5xAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUDFfVnsHyYrwb6lufroyUmWkWQDQwHwYDVR0j
BBgwFoAU6Q+t0YXJmVf1/PUIBjVhWjmMDaQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTN4TDJ6d3hNMW5RbUVRUzdWOFk5TjhYejFSaEtMZ0ZWYXdxcjhCYVJ3
MTkvMC9FOTBGQUREMTg1Qzk5OTU3RjVGQ0Y1MDgwNjM1NjE1QTM5OEMwREE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U5MEZBREQxODVDOTk5NTdG
NUZDRjUwODA2MzU2MTVBMzk4QzBEQTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0UzeEwyend4TTFuUW1FUVM3VjhZOU44WHoxUmhLTGdGVmF3cXI4QmFSdzE5LzAv
MzIzODMwMzQzYTM2NjUzNjYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMw
MzUzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARubDANBgkqhkiG9w0BAQsFAAOCAQEAbe0avdiG
VIOa9slaTyb3zzV/FgFAiKmXB9Hci1QW/eYtwedjQ2C+nmYKs5xyAgTuJxSf0Abf
f3yHA1IV6ILTkMZFJstTYLsRKs1xrwphaNffhtM0VERleul0JR+AdmrBjAKKwxCe
C8gpc8d+g8oxYvP/00d3EUIIS7IWTgCYGyWAAzOkszbjwVaDvw1szCTPxNxfRQyD
iSkTfkB7L1YEe953Lp4IwcHWyCUI0h2z86xpL7PYLXpkz7zsbSBeS1ckEDC8R2gs
MkhPzgnfrhodNjdSD1YDkMyqOdcuv25SPOORLm3NZqfDPD3wwi2xtxMi5cxVvw1z
EQnz17+f0uZNYQ==
-----END CERTIFICATE-----
Generated at Mon Nov 25 22:02:57 2024 by rpki-client on console-fra.rpki-client.org