Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a633234383a3a2f34382d3438203d3e20323632343933.roa
File:                     323830343a6665633a633234383a3a2f34382d3438203d3e20323632343933.roa (raw, json)
Hash identifier:          fwG7KykowAsiO3x1CBYz30R7JcnuwpaPvoujRJkMwtY=
Subject key identifier:   55:19:9A:28:5F:E4:A7:F9:9F:D8:45:34:46:72:30:BE:F2:3C:57:A3
Certificate issuer:       /CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
Certificate serial:       483540FDEABC60230D1FA2D16AA620A31EE1A8E2
Authority key identifier: 2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a633234383a3a2f34382d3438203d3e20323632343933.roa
Signing time:             Thu 07 Nov 2024 20:54:39 +0000
ROA not before:           Thu 07 Nov 2024 20:49:39 +0000
ROA not after:            Thu 06 Nov 2025 20:54:39 +0000
asID:                     262493
IP address blocks:        2804:fec:c248::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:35:40:fd:ea:bc:60:23:0d:1f:a2:d1:6a:a6:20:a3:1e:e1:a8:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
        Validity
            Not Before: Nov  7 20:49:39 2024 GMT
            Not After : Nov  6 20:54:39 2025 GMT
        Subject: CN=55199A285FE4A7F99FD84534467230BEF23C57A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c6:c6:e5:d3:15:a1:66:1b:1c:e2:44:9b:42:
                    48:5c:b4:6a:b7:03:40:3f:5a:36:ec:9b:7e:61:99:
                    31:f3:fe:1f:59:32:4e:33:c3:6a:97:38:07:6f:cb:
                    d8:7c:27:b2:73:0d:bf:56:8e:9d:e3:85:41:7e:49:
                    8c:de:6a:11:ba:c8:79:b7:5f:5f:a4:79:c2:ce:cf:
                    6d:b2:00:28:b5:e3:e9:02:b0:73:a4:9a:ef:de:36:
                    0b:ff:5a:a3:3c:30:51:1b:16:80:51:86:06:08:35:
                    ed:13:3a:2c:c3:00:b5:c4:76:fa:cd:41:1d:ed:42:
                    3a:4b:4c:1f:66:bd:17:a9:f1:b6:68:cb:34:45:d3:
                    39:2c:0b:59:23:66:d4:be:fa:0e:2d:98:91:d2:65:
                    f5:af:72:ee:fc:95:85:c0:3f:8f:9b:39:90:a8:e2:
                    8e:20:73:b1:5f:3f:b1:52:af:36:7e:a6:4e:cc:91:
                    bb:40:76:6e:71:c1:9c:e3:75:d1:7d:d9:67:6c:16:
                    b1:64:58:b4:9b:03:e8:30:0f:5b:3e:2d:55:0a:17:
                    44:ad:7b:85:3a:90:2d:45:f8:4e:0a:ca:0e:84:45:
                    54:ac:c9:2c:b4:ae:5f:d1:85:24:6b:df:1b:60:19:
                    76:d7:dc:41:d0:53:fa:0e:51:2c:b7:99:e1:72:bc:
                    27:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:19:9A:28:5F:E4:A7:F9:9F:D8:45:34:46:72:30:BE:F2:3C:57:A3
            X509v3 Authority Key Identifier:
                keyid:2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a633234383a3a2f34382d3438203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fec:c248::/48

    Signature Algorithm: sha256WithRSAEncryption
         b6:bd:77:28:69:7f:76:9e:f1:dd:10:83:a7:da:e8:df:28:dc:
         8e:db:11:1f:20:93:d9:4f:80:bc:e8:e4:c8:e6:64:3c:79:d0:
         ab:7d:0b:de:2a:46:c5:7e:f3:4c:da:73:8e:62:d8:f3:48:5f:
         52:f3:82:77:a0:50:e9:57:ac:a2:e5:07:83:79:60:1a:47:7e:
         bf:9c:fb:dd:26:b5:1b:44:d8:1c:bc:9b:2c:ac:66:c6:27:32:
         a9:70:fa:f8:5e:17:68:2d:8e:57:74:9b:7a:a4:48:34:76:4e:
         5b:72:f6:2c:20:60:ae:c3:20:a6:76:5d:46:f8:ef:9e:34:47:
         4c:c8:c1:7f:4a:c1:10:9a:0f:dd:93:a7:d8:9c:14:ad:54:0a:
         93:af:88:f4:98:2c:c6:4b:f7:53:ea:30:d2:37:74:dc:a5:8e:
         1d:68:c6:f1:b4:3d:d4:06:16:c4:89:d8:93:79:53:c2:ad:db:
         f2:4e:eb:5a:68:97:5d:92:cf:ec:0a:1f:b2:54:64:db:fb:f7:
         92:5d:dd:33:30:09:0f:f0:c2:67:d6:a9:75:ce:c8:aa:19:68:
         cb:25:89:a7:dc:f4:ea:11:83:f9:9c:c0:0b:dd:86:ea:1e:22:
         11:ae:e0:de:77:8d:6e:3a:b6:97:d6:32:07:ca:73:4d:86:71:
         bf:4a:f4:6d
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUSDVA/eq8YCMNH6LRaqYgox7hqOIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU0MzYzRTIxRjE5RkIzNTdDM0ZGNkI5NURCRThBOTE2
QTIzRUJDRjAeFw0yNDExMDcyMDQ5MzlaFw0yNTExMDYyMDU0MzlaMDMxMTAvBgNV
BAMTKDU1MTk5QTI4NUZFNEE3Rjk5RkQ4NDUzNDQ2NzIzMEJFRjIzQzU3QTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhxsbl0xWhZhsc4kSbQkhctGq3
A0A/Wjbsm35hmTHz/h9ZMk4zw2qXOAdvy9h8J7JzDb9Wjp3jhUF+SYzeahG6yHm3
X1+kecLOz22yACi14+kCsHOkmu/eNgv/WqM8MFEbFoBRhgYINe0TOizDALXEdvrN
QR3tQjpLTB9mvRep8bZoyzRF0zksC1kjZtS++g4tmJHSZfWvcu78lYXAP4+bOZCo
4o4gc7FfP7FSrzZ+pk7MkbtAdm5xwZzjddF92WdsFrFkWLSbA+gwD1s+LVUKF0St
e4U6kC1F+E4Kyg6ERVSsySy0rl/RhSRr3xtgGXbX3EHQU/oOUSy3meFyvCc9AgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUVRmaKF/kp/mf2EU0RnIwvvI8V6MwHwYDVR0j
BBgwFoAULkNj4h8Z+zV8P/a5Xb6KkWoj688wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRU1QM3htYjVNU1ZnYW1ySml6c0IzYlBSOXdjTURpOVJuZHJ2cFloaHNR
ZDQvMC8yRTQzNjNFMjFGMTlGQjM1N0MzRkY2Qjk1REJFOEE5MTZBMjNFQkNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJFNDM2M0UyMUYxOUZCMzU3
QzNGRjZCOTVEQkU4QTkxNkEyM0VCQ0YuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VNUDN4bWI1TVNWZ2FtckppenNCM2JQUjl3Y01EaTlSbmRydnBZaGhzUWQ0LzAv
MzIzODMwMzQzYTY2NjU2MzNhNjMzMjM0MzgzYTNhMmYzNDM4MmQzNDM4MjAzZDNl
MjAzMjM2MzIzNDM5MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBA/swkgwDQYJKoZIhvcNAQELBQAD
ggEBALa9dyhpf3ae8d0Qg6fa6N8o3I7bER8gk9lPgLzo5MjmZDx50Kt9C94qRsV+
80zac45i2PNIX1LzgnegUOlXrKLlB4N5YBpHfr+c+90mtRtE2By8myysZsYnMqlw
+vheF2gtjld0m3qkSDR2Tlty9iwgYK7DIKZ2XUb47540R0zIwX9KwRCaD92Tp9ic
FK1UCpOviPSYLMZL91PqMNI3dNyljh1oxvG0PdQGFsSJ2JN5U8Kt2/JO61pol12S
z+wKH7JUZNv795Jd3TMwCQ/wwmfWqXXOyKoZaMsliafc9OoRg/mcwAvdhuoeIhGu
4N53jW46tpfWMgfKc02Gcb9K9G0=
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:07 2024 by rpki-client on console-ams.rpki-client.org