Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/323830343a336438303a3a2f33322d3438203d3e20323636353335.roa
File:                     323830343a336438303a3a2f33322d3438203d3e20323636353335.roa (raw, json)
Hash identifier:          4gWboLchS/0js+eo9Ol+5XzKmgHgcotxeEMNM0D14ao=
Subject key identifier:   2D:C4:F7:EA:0D:47:CF:BA:CF:92:DC:30:65:24:A8:03:16:8A:BC:3C
Certificate issuer:       /CN=CA2ED340034D0368230850867C30E245990118A2
Certificate serial:       4FB5D8FC5B3C4511A5F9B1CCE6E17D48083773F4
Authority key identifier: CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/323830343a336438303a3a2f33322d3438203d3e20323636353335.roa
Signing time:             Wed 03 Apr 2024 18:31:15 +0000
ROA not before:           Wed 03 Apr 2024 18:26:15 +0000
ROA not after:            Wed 02 Apr 2025 18:31:15 +0000
asID:                     266535
IP address blocks:        2804:3d80::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl
                          rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:b5:d8:fc:5b:3c:45:11:a5:f9:b1:cc:e6:e1:7d:48:08:37:73:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA2ED340034D0368230850867C30E245990118A2
        Validity
            Not Before: Apr  3 18:26:15 2024 GMT
            Not After : Apr  2 18:31:15 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:bb:87:fd:18:8c:86:64:56:27:c4:13:4b:23:
                    ff:6d:f7:45:63:08:75:2b:fb:7d:ca:e3:0c:ce:e7:
                    59:07:32:db:a5:d7:e3:ed:bb:38:2d:fa:65:17:ff:
                    05:20:4f:8a:50:1c:8d:f4:26:2f:8c:90:a6:4e:3e:
                    c3:6e:d8:1c:4f:ef:52:f9:b9:13:88:94:42:cb:4c:
                    0f:57:e8:ee:8f:4f:04:4c:8c:e6:5a:03:9a:e5:ba:
                    90:55:74:b9:ee:49:29:d4:9a:16:18:4b:10:b1:2c:
                    13:42:51:cd:cc:51:78:9a:a9:35:bc:0a:16:f5:ad:
                    17:8b:b9:16:81:b6:30:9a:33:7d:16:a6:53:f0:1a:
                    52:4d:e2:94:5a:f1:f8:d8:db:c4:1a:ec:ca:19:c4:
                    43:16:09:03:36:ef:5c:5b:e3:0e:22:48:26:5b:3b:
                    96:db:b0:86:61:f5:d6:9d:3e:c6:c8:f8:59:9a:ee:
                    39:87:66:02:7f:7d:01:28:9c:aa:d1:d0:19:5c:cd:
                    99:88:2f:54:29:89:df:c7:0d:f8:8e:0e:58:92:dc:
                    da:c3:cb:fc:7d:b4:1d:49:cf:61:60:72:58:e6:1b:
                    85:83:07:72:27:aa:e2:f5:a8:0a:97:27:84:e6:0e:
                    84:3f:ac:02:ff:6a:a5:5a:4e:d2:00:70:1c:eb:ae:
                    8a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C4:F7:EA:0D:47:CF:BA:CF:92:DC:30:65:24:A8:03:16:8A:BC:3C
            X509v3 Authority Key Identifier:
                keyid:CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/323830343a336438303a3a2f33322d3438203d3e20323636353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d80::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:2e:2b:19:f4:97:37:f6:2e:32:f2:fa:46:f6:a2:8d:ae:ab:
         01:af:ab:f1:98:38:88:c9:ae:97:e5:9d:1f:61:8f:49:48:be:
         b3:de:04:05:4d:1c:78:af:bb:74:75:d4:72:b0:c1:1b:87:dc:
         1f:41:d1:2d:87:e8:65:71:76:9b:7b:b8:f9:58:b0:d0:a5:a1:
         dd:a7:79:bd:5c:90:2b:4c:92:0f:85:2c:34:22:b7:10:7c:2b:
         e5:ac:ef:60:c6:18:eb:45:32:cb:85:2d:2c:aa:f7:11:f8:d2:
         55:58:8d:15:4e:07:3a:20:99:a0:fb:8c:b5:d1:68:1d:6d:ea:
         60:a9:d1:ee:94:16:e8:ee:f7:67:2c:a3:ee:1c:37:ae:53:b4:
         96:91:22:0d:63:5b:91:4f:7f:9b:e3:34:ab:08:0d:f6:a0:8a:
         a5:63:c1:7d:00:c5:cc:dc:42:6d:3b:61:34:e0:2a:b7:12:13:
         be:21:7c:d2:b7:59:ff:ce:00:40:33:68:28:86:f0:81:9a:73:
         26:1e:9f:92:09:ce:dc:46:79:f3:d0:98:aa:94:52:ad:4a:c8:
         f7:34:1b:b0:16:e9:d4:b4:a1:54:4a:6a:cc:15:b3:a6:0f:1d:
         aa:6d:63:69:7b:27:5a:bc:33:57:96:b8:df:bc:af:ca:f8:f0:
         5d:83:49:9c
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUT7XY/Fs8RRGl+bHM5uF9SAg3c/QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0EyRUQzNDAwMzREMDM2ODIzMDg1MDg2N0MzMEUyNDU5
OTAxMThBMjAeFw0yNDA0MDMxODI2MTVaFw0yNTA0MDIxODMxMTVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDZCQjg3RkQxODhDODY2NDU2
MjdDNDEzNEIyM0ZGNkRGNzQ1NjMwODc1MkJGQjdEQ0FFMzBDQ0VFNzU5MDczMkRC
QTVEN0UzRURCQjM4MkRGQTY1MTdGRjA1MjA0RjhBNTAxQzhERjQyNjJGOEM5MEE2
NEUzRUMzNkVEODFDNEZFRjUyRjlCOTEzODg5NDQyQ0I0QzBGNTdFOEVFOEY0RjA0
NEM4Q0U2NUEwMzlBRTVCQTkwNTU3NEI5RUU0OTI5RDQ5QTE2MTg0QjEwQjEyQzEz
NDI1MUNEQ0M1MTc4OUFBOTM1QkMwQTE2RjVBRDE3OEJCOTE2ODFCNjMwOUEzMzdE
MTZBNjUzRjAxQTUyNERFMjk0NUFGMUY4RDhEQkM0MUFFQ0NBMTlDNDQzMTYwOTAz
MzZFRjVDNUJFMzBFMjI0ODI2NUIzQjk2REJCMDg2NjFGNUQ2OUQzRUM2QzhGODU5
OUFFRTM5ODc2NjAyN0Y3RDAxMjg5Q0FBRDFEMDE5NUNDRDk5ODgyRjU0Mjk4OURG
QzcwREY4OEUwRTU4OTJEQ0RBQzNDQkZDN0RCNDFENDlDRjYxNjA3MjU4RTYxQjg1
ODMwNzcyMjdBQUUyRjVBODBBOTcyNzg0RTYwRTg0M0ZBQzAyRkY2QUE1NUE0RUQy
MDA3MDFDRUJBRThBMjEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA1ruH/RiMhmRWJ8QTSyP/bfdFYwh1K/t9yuMMzudZBzLbpdfj7bs4
LfplF/8FIE+KUByN9CYvjJCmTj7DbtgcT+9S+bkTiJRCy0wPV+juj08ETIzmWgOa
5bqQVXS57kkp1JoWGEsQsSwTQlHNzFF4mqk1vAoW9a0Xi7kWgbYwmjN9FqZT8BpS
TeKUWvH42NvEGuzKGcRDFgkDNu9cW+MOIkgmWzuW27CGYfXWnT7GyPhZmu45h2YC
f30BKJyq0dAZXM2ZiC9UKYnfxw34jg5Yktzaw8v8fbQdSc9hYHJY5huFgwdyJ6ri
9agKlyeE5g6EP6wC/2qlWk7SAHAc666KIQIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FC3E9+oNR8+6z5LcMGUkqAMWirw8MB8GA1UdIwQYMBaAFMou00ADTQNoIwhQhnww
4kWZARiiMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VSbXpFdnpidTFlTWk4
RXZIVEhXaWtrQXhQQVQ4SlpBamNvY2MyZExqUkx5LzEvQ0EyRUQzNDAwMzREMDM2
ODIzMDg1MDg2N0MzMEUyNDU5OTAxMThBMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9DQTJFRDM0MDAzNEQwMzY4MjMwODUwODY3QzMwRTI0NTk5MDEx
OEEyLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9FUm16RXZ6YnUxZU1pOEV2SFRI
V2lra0F4UEFUOEpaQWpjb2NjMmRMalJMeS8xLzMyMzgzMDM0M2EzMzY0MzgzMDNh
M2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNjM1MzMzNS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
PYAwDQYJKoZIhvcNAQELBQADggEBAFYuKxn0lzf2LjLy+kb2oo2uqwGvq/GYOIjJ
rpflnR9hj0lIvrPeBAVNHHivu3R11HKwwRuH3B9B0S2H6GVxdpt7uPlYsNClod2n
eb1ckCtMkg+FLDQitxB8K+Ws72DGGOtFMsuFLSyq9xH40lVYjRVOBzogmaD7jLXR
aB1t6mCp0e6UFuju92cso+4cN65TtJaRIg1jW5FPf5vjNKsIDfagiqVjwX0Axczc
Qm07YTTgKrcSE74hfNK3Wf/OAEAzaCiG8IGacyYen5IJztxGefPQmKqUUq1KyPc0
G7AW6dS0oVRKaswVs6YPHaptY2l7J1q8M1eWuN+8r8r48F2DSZw=
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:42 2024 by rpki-client on console-ams.rpki-client.org