Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a643530303a3a2f34302d3430203d3e20323632343933.roa
File:                     323830343a6665633a643530303a3a2f34302d3430203d3e20323632343933.roa (raw, json)
Hash identifier:          0+eBIUTmQ0z6OR6N291t7PySFskv7yZ4jQLTlHkKKqQ=
Subject key identifier:   2F:B2:8D:48:73:86:EE:DC:18:7C:A7:9A:71:D6:17:2A:C8:2F:BF:58
Certificate issuer:       /CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
Certificate serial:       53ACD7BEDD067581B3544602538A66FA1D5BA2E8
Authority key identifier: 2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a643530303a3a2f34302d3430203d3e20323632343933.roa
Signing time:             Thu 07 Nov 2024 20:54:40 +0000
ROA not before:           Thu 07 Nov 2024 20:49:40 +0000
ROA not after:            Thu 06 Nov 2025 20:54:40 +0000
asID:                     262493
IP address blocks:        2804:fec:d500::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:ac:d7:be:dd:06:75:81:b3:54:46:02:53:8a:66:fa:1d:5b:a2:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
        Validity
            Not Before: Nov  7 20:49:40 2024 GMT
            Not After : Nov  6 20:54:40 2025 GMT
        Subject: CN=2FB28D487386EEDC187CA79A71D6172AC82FBF58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:14:70:f0:8b:00:63:a8:78:5f:68:b5:78:b9:
                    d1:cd:e1:49:18:e7:43:35:48:44:e8:28:34:8d:12:
                    26:58:c8:6d:37:df:2f:f7:a4:eb:fb:d3:88:cd:56:
                    86:cf:22:0c:42:b3:3b:2e:36:62:3a:b7:85:35:4a:
                    d2:e2:8c:6c:a1:f3:6c:b7:22:4c:ba:87:ce:8e:af:
                    87:d4:98:3a:bc:cf:f8:e8:91:4b:36:ed:62:09:32:
                    6b:5a:a8:5e:5c:d8:2f:fc:3a:03:f7:48:15:da:34:
                    32:40:eb:e6:12:1a:d8:b3:de:98:02:91:f4:ec:26:
                    d0:d8:05:f0:53:88:8a:2d:bd:5c:cd:b4:06:08:b1:
                    12:1b:ac:32:b0:dc:b6:34:d3:67:54:03:ef:0b:0f:
                    17:61:d9:fd:21:a0:a3:64:c3:b2:c7:92:90:50:a2:
                    d7:1f:0d:c6:a3:6e:6b:8a:de:6f:e0:ce:34:e9:94:
                    02:d1:98:61:e5:d0:97:1a:63:08:28:df:4d:4e:64:
                    ac:1d:aa:be:b6:12:68:68:62:06:65:b9:37:fc:df:
                    69:2e:13:c4:44:bf:a4:2a:e9:f2:c1:58:a8:85:85:
                    3a:47:f8:45:a7:a4:d3:b8:0e:4f:cc:79:e1:51:d4:
                    f6:ae:b7:c6:d3:54:5c:d8:39:07:28:b8:37:db:dc:
                    5d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B2:8D:48:73:86:EE:DC:18:7C:A7:9A:71:D6:17:2A:C8:2F:BF:58
            X509v3 Authority Key Identifier:
                keyid:2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a643530303a3a2f34302d3430203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fec:d500::/40

    Signature Algorithm: sha256WithRSAEncryption
         ae:c5:47:3a:05:b2:02:9d:de:6b:76:03:8b:16:de:92:e7:ca:
         ea:f5:b6:dd:69:99:89:e2:2d:8e:2d:84:8c:eb:61:54:df:c1:
         e4:a0:16:8f:f4:16:2e:04:68:8f:86:8b:ba:a1:52:f6:ff:2e:
         ad:bc:2c:54:ad:42:04:23:e1:29:e8:b9:86:f5:ea:25:86:14:
         ef:a7:de:7d:5d:0a:0e:25:ef:fd:85:31:a1:f4:9a:a7:bc:3e:
         24:e3:8c:8f:f1:2d:46:4a:bf:6c:c9:b5:33:97:78:e5:28:01:
         be:f2:a1:f2:22:62:97:21:71:22:95:0a:eb:b2:d7:46:83:d6:
         d9:2d:af:80:e5:59:62:c2:ec:fc:5f:8d:cf:82:fa:a1:da:f4:
         c0:29:8a:89:88:3d:cd:21:62:90:2d:f1:5c:fd:25:a9:c7:a5:
         60:4a:40:e3:7a:ab:4d:22:44:30:48:57:88:e7:70:15:7d:88:
         c1:88:39:97:30:e1:63:14:34:3a:d6:a0:2f:13:71:da:c3:a4:
         cd:f5:db:70:27:59:18:99:03:33:b8:da:c4:e6:10:1c:07:d2:
         06:b2:92:ed:1a:9c:cb:6b:38:10:01:b7:53:a6:d0:00:33:9e:
         0a:e9:cc:7c:4a:5e:7b:f8:51:21:85:d2:44:26:93:0b:42:bd:
         91:24:8f:8a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUU6zXvt0GdYGzVEYCU4pm+h1bougwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU0MzYzRTIxRjE5RkIzNTdDM0ZGNkI5NURCRThBOTE2
QTIzRUJDRjAeFw0yNDExMDcyMDQ5NDBaFw0yNTExMDYyMDU0NDBaMDMxMTAvBgNV
BAMTKDJGQjI4RDQ4NzM4NkVFREMxODdDQTc5QTcxRDYxNzJBQzgyRkJGNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCCFHDwiwBjqHhfaLV4udHN4UkY
50M1SEToKDSNEiZYyG033y/3pOv704jNVobPIgxCszsuNmI6t4U1StLijGyh82y3
Iky6h86Or4fUmDq8z/jokUs27WIJMmtaqF5c2C/8OgP3SBXaNDJA6+YSGtiz3pgC
kfTsJtDYBfBTiIotvVzNtAYIsRIbrDKw3LY002dUA+8LDxdh2f0hoKNkw7LHkpBQ
otcfDcajbmuK3m/gzjTplALRmGHl0JcaYwgo301OZKwdqr62EmhoYgZluTf832ku
E8REv6Qq6fLBWKiFhTpH+EWnpNO4Dk/MeeFR1Paut8bTVFzYOQcouDfb3F0JAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUL7KNSHOG7twYfKeacdYXKsgvv1gwHwYDVR0j
BBgwFoAULkNj4h8Z+zV8P/a5Xb6KkWoj688wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRU1QM3htYjVNU1ZnYW1ySml6c0IzYlBSOXdjTURpOVJuZHJ2cFloaHNR
ZDQvMC8yRTQzNjNFMjFGMTlGQjM1N0MzRkY2Qjk1REJFOEE5MTZBMjNFQkNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJFNDM2M0UyMUYxOUZCMzU3
QzNGRjZCOTVEQkU4QTkxNkEyM0VCQ0YuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VNUDN4bWI1TVNWZ2FtckppenNCM2JQUjl3Y01EaTlSbmRydnBZaGhzUWQ0LzAv
MzIzODMwMzQzYTY2NjU2MzNhNjQzNTMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl
MjAzMjM2MzIzNDM5MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBA/s1TANBgkqhkiG9w0BAQsFAAOC
AQEArsVHOgWyAp3ea3YDixbekufK6vW23WmZieItji2EjOthVN/B5KAWj/QWLgRo
j4aLuqFS9v8urbwsVK1CBCPhKei5hvXqJYYU76fefV0KDiXv/YUxofSap7w+JOOM
j/EtRkq/bMm1M5d45SgBvvKh8iJilyFxIpUK67LXRoPW2S2vgOVZYsLs/F+Nz4L6
odr0wCmKiYg9zSFikC3xXP0lqcelYEpA43qrTSJEMEhXiOdwFX2IwYg5lzDhYxQ0
OtagLxNx2sOkzfXbcCdZGJkDM7jaxOYQHAfSBrKS7Rqcy2s4EAG3U6bQADOeCunM
fEpee/hRIYXSRCaTC0K9kSSPig==
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:07 2024 by rpki-client on console-ams.rpki-client.org