Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a3a2f34382d3438203d3e20323632343933.roa
File:                     323830343a6665633a3a2f34382d3438203d3e20323632343933.roa (raw, json)
Hash identifier:          RHy+mu/O2mc5gvo3Ls/1etlXIio9sSIxVS6ujEIdDAk=
Subject key identifier:   D3:72:C8:F6:C3:4C:96:15:50:97:BF:23:DE:8B:BD:4A:8A:AF:AA:AB
Certificate issuer:       /CN=0B641968F54E16F4A6E72B1F243A760255821D7E
Certificate serial:       722CE2F087606E3B0ED5E28402A2E4C8764E0C9E
Authority key identifier: 0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a3a2f34382d3438203d3e20323632343933.roa
Signing time:             Mon 09 Sep 2024 15:04:53 +0000
ROA not before:           Mon 09 Sep 2024 14:59:53 +0000
ROA not after:            Mon 08 Sep 2025 15:04:53 +0000
asID:                     262493
IP address blocks:        2804:fec::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0B641968F54E16F4A6E72B1F243A760255821D7E.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0B641968F54E16F4A6E72B1F243A760255821D7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Oct 2024 13:22:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:2c:e2:f0:87:60:6e:3b:0e:d5:e2:84:02:a2:e4:c8:76:4e:0c:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B641968F54E16F4A6E72B1F243A760255821D7E
        Validity
            Not Before: Sep  9 14:59:53 2024 GMT
            Not After : Sep  8 15:04:53 2025 GMT
        Subject: CN=D372C8F6C34C96155097BF23DE8BBD4A8AAFAAAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:63:e2:8b:db:cc:51:5e:2c:79:f2:79:cd:a6:
                    97:4e:04:07:2c:3f:ea:9f:a3:a3:ee:11:6d:01:c6:
                    38:48:82:82:26:5b:d2:fe:9d:dc:0d:d9:8c:bd:89:
                    b1:ff:23:d4:79:63:4b:65:3d:38:50:8a:29:e8:6b:
                    11:8a:87:60:c6:c3:3f:82:6a:25:02:53:33:a3:b3:
                    ad:7b:fb:c3:1d:6c:ad:2a:af:af:a2:8e:20:70:d6:
                    b6:b2:6d:76:02:e0:3d:04:00:da:75:89:72:d5:9e:
                    2f:65:0f:09:9b:7b:35:51:86:bd:19:0c:8f:30:90:
                    6e:d5:77:b7:df:f1:0e:26:7d:8d:77:33:8f:c1:5d:
                    18:43:7e:de:fe:a4:7e:20:6c:78:da:cf:d1:ac:05:
                    3a:53:00:46:d2:42:b8:cb:c3:9c:75:1d:a1:bb:7f:
                    92:76:19:39:52:9d:35:5b:7c:8f:4b:34:3f:e8:fc:
                    36:1a:b4:68:6a:a3:6b:8a:dc:e8:ab:ca:21:61:b2:
                    73:d0:a7:2f:22:d4:77:9e:55:27:31:e3:f0:03:36:
                    ff:6b:4c:40:b2:44:2e:87:9f:61:69:e0:28:1c:6a:
                    2b:b6:df:0b:48:33:8b:52:91:d3:ff:df:f4:41:15:
                    d0:0d:09:4f:07:d2:74:45:d5:96:d1:dd:7e:1b:90:
                    34:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:72:C8:F6:C3:4C:96:15:50:97:BF:23:DE:8B:BD:4A:8A:AF:AA:AB
            X509v3 Authority Key Identifier:
                keyid:0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0B641968F54E16F4A6E72B1F243A760255821D7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a3a2f34382d3438203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fec::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:fb:2e:70:08:2b:b5:e7:81:0c:1c:38:16:09:29:4b:8a:eb:
         63:8c:66:af:bc:43:c5:71:64:01:83:3c:dc:3d:bf:9e:d2:a3:
         52:40:05:68:55:b7:94:98:f9:62:67:bc:7b:a8:16:5a:e3:27:
         fe:17:91:ed:83:c2:b5:38:2c:49:68:b5:7e:68:52:75:22:9a:
         00:d7:93:47:87:b5:c8:f0:2b:54:54:b5:21:02:24:97:56:f2:
         0d:f1:1b:81:89:9b:1a:71:58:f5:ea:57:c9:01:78:8b:5a:f4:
         a8:28:54:4b:34:cc:4a:c6:b4:ea:28:9c:76:10:ec:39:a7:a6:
         be:6b:02:09:0b:c4:e1:eb:fa:82:eb:dc:c7:11:3c:e2:a3:b1:
         46:ea:c0:3e:9c:28:d3:34:8f:09:eb:f0:f1:f8:c9:10:ff:dc:
         2e:62:ec:d1:77:6a:b7:e0:f4:d2:04:07:cd:05:bc:cc:9d:07:
         cd:fe:e7:12:46:e3:5e:e3:71:cb:33:2b:51:03:e8:00:b4:44:
         0e:20:1f:69:9b:12:23:88:91:5b:bb:d3:a8:d2:27:32:45:3e:
         42:f2:53:a3:cb:64:06:e2:02:44:4f:51:a6:c7:86:ba:96:ab:
         6d:d2:23:14:0a:b7:6e:c2:c5:99:24:1d:ca:1f:46:13:ea:e9:
         05:0b:c4:57
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUcizi8IdgbjsO1eKEAqLkyHZODJ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEI2NDE5NjhGNTRFMTZGNEE2RTcyQjFGMjQzQTc2MDI1
NTgyMUQ3RTAeFw0yNDA5MDkxNDU5NTNaFw0yNTA5MDgxNTA0NTNaMDMxMTAvBgNV
BAMTKEQzNzJDOEY2QzM0Qzk2MTU1MDk3QkYyM0RFOEJCRDRBOEFBRkFBQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Y+KL28xRXix58nnNppdOBAcs
P+qfo6PuEW0BxjhIgoImW9L+ndwN2Yy9ibH/I9R5Y0tlPThQiinoaxGKh2DGwz+C
aiUCUzOjs617+8MdbK0qr6+ijiBw1raybXYC4D0EANp1iXLVni9lDwmbezVRhr0Z
DI8wkG7Vd7ff8Q4mfY13M4/BXRhDft7+pH4gbHjaz9GsBTpTAEbSQrjLw5x1HaG7
f5J2GTlSnTVbfI9LND/o/DYatGhqo2uK3OiryiFhsnPQpy8i1HeeVScx4/ADNv9r
TECyRC6Hn2Fp4Cgcaiu23wtIM4tSkdP/3/RBFdANCU8H0nRF1ZbR3X4bkDTvAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU03LI9sNMlhVQl78j3ou9SoqvqqswHwYDVR0j
BBgwFoAUC2QZaPVOFvSm5ysfJDp2AlWCHX4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRU1QM3htYjVNU1ZnYW1ySml6c0IzYlBSOXdjTURpOVJuZHJ2cFloaHNR
ZDQvMC8wQjY0MTk2OEY1NEUxNkY0QTZFNzJCMUYyNDNBNzYwMjU1ODIxRDdFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBCNjQxOTY4RjU0RTE2RjRB
NkU3MkIxRjI0M0E3NjAyNTU4MjFEN0UuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VNUDN4bWI1TVNWZ2FtckppenNCM2JQUjl3Y01EaTlSbmRydnBZaGhzUWQ0LzAv
MzIzODMwMzQzYTY2NjU2MzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzYzMjM0
MzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB
/wQTMBEwDwQCAAIwCQMHACgED+wAADANBgkqhkiG9w0BAQsFAAOCAQEAU/sucAgr
teeBDBw4FgkpS4rrY4xmr7xDxXFkAYM83D2/ntKjUkAFaFW3lJj5Yme8e6gWWuMn
/heR7YPCtTgsSWi1fmhSdSKaANeTR4e1yPArVFS1IQIkl1byDfEbgYmbGnFY9epX
yQF4i1r0qChUSzTMSsa06iicdhDsOaemvmsCCQvE4ev6guvcxxE84qOxRurAPpwo
0zSPCevw8fjJEP/cLmLs0Xdqt+D00gQHzQW8zJ0Hzf7nEkbjXuNxyzMrUQPoALRE
DiAfaZsSI4iRW7vTqNInMkU+QvJTo8tkBuICRE9RpseGuparbdIjFAq3bsLFmSQd
yh9GE+rpBQvEVw==
-----END CERTIFICATE-----
Generated at Thu Oct 3 13:55:32 2024 by rpki-client on console-ams.rpki-client.org