Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/323830343a356638383a633030303a3a2f33342d3334203d3e20323639313037.roa
File:                     323830343a356638383a633030303a3a2f33342d3334203d3e20323639313037.roa (raw, json)
Hash identifier:          4GFtpbmW9y3jNPNBMV8xp31r7OP2WI/5188NQCssavg=
Subject key identifier:   CB:83:16:0D:C4:72:80:F4:06:95:F8:5A:83:20:09:1B:BB:8A:33:8C
Certificate issuer:       /CN=2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB
Certificate serial:       15AE2AB88CC2C12EC7F7A59FBF438961F992675D
Authority key identifier: 2B:4E:D5:7C:FB:A9:25:5B:84:24:7A:7F:FB:F2:FD:92:3A:36:5F:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/323830343a356638383a633030303a3a2f33342d3334203d3e20323639313037.roa
Signing time:             Mon 12 Aug 2024 20:09:36 +0000
ROA not before:           Mon 12 Aug 2024 20:04:36 +0000
ROA not after:            Mon 11 Aug 2025 20:09:36 +0000
asID:                     269107
IP address blocks:        2804:5f88:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.crl
                          rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:ae:2a:b8:8c:c2:c1:2e:c7:f7:a5:9f:bf:43:89:61:f9:92:67:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB
        Validity
            Not Before: Aug 12 20:04:36 2024 GMT
            Not After : Aug 11 20:09:36 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:82:6a:f7:f2:25:c2:47:4f:0d:02:48:be:fe:
                    8e:6f:ee:c7:55:bd:a6:40:cb:16:fa:ae:65:07:d2:
                    2f:4b:8b:b2:94:df:97:12:81:41:81:5a:bc:c1:47:
                    6a:f9:92:56:12:a1:bc:8a:9d:ac:10:82:2d:91:76:
                    90:b0:ae:94:c1:b9:d5:23:67:92:b8:b7:20:9d:3e:
                    15:e9:fe:59:8d:ed:71:f0:3d:42:dd:55:e6:1f:50:
                    2a:43:72:03:0a:b4:ad:de:a8:6a:33:73:9d:cf:a5:
                    d8:61:07:ea:43:c8:a0:6b:b5:f3:ac:26:2c:5d:20:
                    5b:3c:2b:b9:0e:12:12:bf:9a:a8:1c:86:a8:a8:03:
                    82:36:e2:87:ca:a6:b1:16:a9:76:a0:b4:1b:16:67:
                    78:4e:42:97:e9:c9:54:12:4d:58:e3:2a:fa:57:f3:
                    bd:a3:10:f4:06:0f:87:38:f4:d8:65:77:42:07:26:
                    79:58:b5:a8:50:45:86:b8:62:dc:8d:0c:45:c2:e7:
                    f4:ab:75:b7:45:8a:a5:5c:1e:9f:3a:dd:b0:d4:39:
                    a9:61:63:cd:34:df:9d:e6:d9:e8:a0:1a:7d:fb:cb:
                    61:a0:8d:95:be:9a:b1:31:43:3c:f9:50:ac:f1:69:
                    bb:fa:99:ae:79:90:a0:e0:43:90:bc:26:65:b1:c6:
                    ce:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:83:16:0D:C4:72:80:F4:06:95:F8:5A:83:20:09:1B:BB:8A:33:8C
            X509v3 Authority Key Identifier:
                keyid:2B:4E:D5:7C:FB:A9:25:5B:84:24:7A:7F:FB:F2:FD:92:3A:36:5F:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/323830343a356638383a633030303a3a2f33342d3334203d3e20323639313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f88:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         b8:fd:a8:66:ac:0e:7a:d0:17:c6:1b:e2:12:ab:93:ea:20:0d:
         29:9d:bd:5e:04:70:97:63:6c:38:aa:e1:fd:2b:90:bb:29:f4:
         b1:7c:a3:4e:00:37:21:b5:ec:8f:ad:bd:74:4d:a1:c8:4d:e1:
         7c:19:3c:e3:6d:a2:12:1e:40:aa:1c:b5:a4:05:4a:f1:a0:b1:
         2c:4e:41:eb:97:72:77:ed:10:a0:62:b4:85:56:f7:0b:55:10:
         e9:93:59:1e:1d:7f:9a:9d:9c:cb:e1:c4:ae:a4:51:87:4b:92:
         b3:61:d0:c6:2a:0e:fa:a2:36:ef:e6:46:aa:35:7d:9c:c9:77:
         60:44:3d:20:ed:98:d9:ab:18:a8:ac:e5:c4:6e:5d:53:bf:9d:
         ad:63:2f:b5:6e:4a:f3:c5:5e:a4:92:ae:08:ef:6f:57:9c:8d:
         2d:10:a4:64:8c:b5:d9:09:58:e2:77:82:aa:2a:17:25:3f:53:
         d1:0e:9f:be:a1:a2:91:3c:17:37:81:87:7c:65:54:37:ac:68:
         68:d2:89:32:da:2c:e9:69:6c:c9:31:27:59:fe:6f:56:3f:d9:
         56:33:ad:1a:fc:7e:fb:82:4c:35:27:69:99:9f:5f:3e:55:f1:
         80:bc:64:5a:b0:01:03:2a:d8:69:35:c6:aa:9f:82:5d:7f:44:
         97:9f:5f:ec
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUFa4quIzCwS7H96Wfv0OJYfmSZ10wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkI0RUQ1N0NGQkE5MjU1Qjg0MjQ3QTdGRkJGMkZEOTIz
QTM2NUZEQjAeFw0yNDA4MTIyMDA0MzZaFw0yNTA4MTEyMDA5MzZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTM4MjZBRjdGMjI1QzI0NzRG
MEQwMjQ4QkVGRThFNkZFRUM3NTVCREE2NDBDQjE2RkFBRTY1MDdEMjJGNEI4QkIy
OTRERjk3MTI4MTQxODE1QUJDQzE0NzZBRjk5MjU2MTJBMUJDOEE5REFDMTA4MjJE
OTE3NjkwQjBBRTk0QzFCOUQ1MjM2NzkyQjhCNzIwOUQzRTE1RTlGRTU5OERFRDcx
RjAzRDQyREQ1NUU2MUY1MDJBNDM3MjAzMEFCNEFEREVBODZBMzM3MzlEQ0ZBNUQ4
NjEwN0VBNDNDOEEwNkJCNUYzQUMyNjJDNUQyMDVCM0MyQkI5MEUxMjEyQkY5QUE4
MUM4NkE4QTgwMzgyMzZFMjg3Q0FBNkIxMTZBOTc2QTBCNDFCMTY2Nzc4NEU0Mjk3
RTlDOTU0MTI0RDU4RTMyQUZBNTdGM0JEQTMxMEY0MDYwRjg3MzhGNEQ4NjU3NzQy
MDcyNjc5NThCNUE4NTA0NTg2Qjg2MkRDOEQwQzQ1QzJFN0Y0QUI3NUI3NDU4QUE1
NUMxRTlGM0FEREIwRDQzOUE5NjE2M0NEMzRERjlERTZEOUU4QTAxQTdERkJDQjYx
QTA4RDk1QkU5QUIxMzE0MzNDRjk1MEFDRjE2OUJCRkE5OUFFNzk5MEEwRTA0Mzkw
QkMyNjY1QjFDNkNFNzMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA44Jq9/IlwkdPDQJIvv6Ob+7HVb2mQMsW+q5lB9IvS4uylN+XEoFB
gVq8wUdq+ZJWEqG8ip2sEIItkXaQsK6UwbnVI2eSuLcgnT4V6f5Zje1x8D1C3VXm
H1AqQ3IDCrSt3qhqM3Odz6XYYQfqQ8iga7XzrCYsXSBbPCu5DhISv5qoHIaoqAOC
NuKHyqaxFql2oLQbFmd4TkKX6clUEk1Y4yr6V/O9oxD0Bg+HOPTYZXdCByZ5WLWo
UEWGuGLcjQxFwuf0q3W3RYqlXB6fOt2w1DmpYWPNNN+d5tnooBp9+8thoI2Vvpqx
MUM8+VCs8Wm7+pmueZCg4EOQvCZlscbOcwIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FMuDFg3EcoD0BpX4WoMgCRu7ijOMMB8GA1UdIwQYMBaAFCtO1Xz7qSVbhCR6f/vy
/ZI6Nl/bMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VZWUM5aFpabjkzbTI4
elpERk5SYjh6dGE3b1hvNnlFTnZCR0tTTGQyWnM5LzAvMkI0RUQ1N0NGQkE5MjU1
Qjg0MjQ3QTdGRkJGMkZEOTIzQTM2NUZEQi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8yQjRFRDU3Q0ZCQTkyNTVCODQyNDdBN0ZGQkYyRkQ5MjNBMzY1
RkRCLmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9FWVlDOWhaWm45M20yOHpaREZO
UmI4enRhN29YbzZ5RU52QkdLU0xkMlpzOS8wLzMyMzgzMDM0M2EzNTY2MzgzODNh
NjMzMDMwMzAzYTNhMmYzMzM0MmQzMzM0MjAzZDNlMjAzMjM2MzkzMTMwMzcucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgYoBF+IwDANBgkqhkiG9w0BAQsFAAOCAQEAuP2oZqwOetAXxhviEquT
6iANKZ29XgRwl2NsOKrh/SuQuyn0sXyjTgA3IbXsj629dE2hyE3hfBk8422iEh5A
qhy1pAVK8aCxLE5B65dyd+0QoGK0hVb3C1UQ6ZNZHh1/mp2cy+HErqRRh0uSs2HQ
xioO+qI27+ZGqjV9nMl3YEQ9IO2Y2asYqKzlxG5dU7+drWMvtW5K88VepJKuCO9v
V5yNLRCkZIy12QlY4neCqioXJT9T0Q6fvqGikTwXN4GHfGVUN6xoaNKJMtos6Wls
yTEnWf5vVj/ZVjOtGvx++4JMNSdpmZ9fPlXxgLxkWrABAyrYaTXGqp+CXX9El59f
7A==
-----END CERTIFICATE-----
Generated at Sat Nov 23 13:12:22 2024 by rpki-client on console-fra.rpki-client.org