Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/323830343a313132383a3a2f33332d3333203d3e20323633363631.roa
File:                     323830343a313132383a3a2f33332d3333203d3e20323633363631.roa (raw, json)
Hash identifier:          iXOxp0dcnTIh+aEuFfZpuijlO3571OcF7gpc8GJP3yg=
Subject key identifier:   D3:EF:49:A7:52:BE:60:45:B0:56:5B:1B:C4:87:49:D4:2C:1F:73:99
Certificate issuer:       /CN=8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65
Certificate serial:       27D851A601DA616F6DB20F9027BBCD0669617DAE
Authority key identifier: 8E:82:2B:DA:67:B7:20:70:9C:3F:DC:0A:A1:CE:0B:9C:53:7F:2A:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/323830343a313132383a3a2f33332d3333203d3e20323633363631.roa
Signing time:             Thu 04 Apr 2024 01:38:26 +0000
ROA not before:           Thu 04 Apr 2024 01:33:26 +0000
ROA not after:            Thu 03 Apr 2025 01:38:26 +0000
asID:                     263661
IP address blocks:        2804:1128::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.crl
                          rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:20:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:d8:51:a6:01:da:61:6f:6d:b2:0f:90:27:bb:cd:06:69:61:7d:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65
        Validity
            Not Before: Apr  4 01:33:26 2024 GMT
            Not After : Apr  3 01:38:26 2025 GMT
        Subject: CN=D3EF49A752BE6045B0565B1BC48749D42C1F7399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:93:45:ad:1b:c1:b7:bc:bd:8c:89:17:5f:d1:
                    25:55:a4:a1:1e:3f:e9:ca:dd:45:9d:81:07:80:3f:
                    fd:63:52:e7:7f:17:74:5d:95:7e:c1:dd:ea:58:f9:
                    22:e1:59:06:7b:09:d1:2e:3c:73:49:9f:4f:c4:3e:
                    85:bf:6c:8f:6a:59:15:f8:a3:71:ec:83:fd:d1:1c:
                    7a:ed:11:c5:61:83:6f:94:4f:e8:a8:3a:a6:6e:18:
                    9c:b2:de:fb:cc:6b:f2:b9:08:5a:ec:52:7d:16:1d:
                    95:42:25:4f:11:7a:eb:09:be:63:34:c9:47:ed:f2:
                    6e:6d:50:7a:eb:2a:d2:01:38:91:d7:87:b9:43:36:
                    a0:92:e8:aa:39:c6:d6:f4:5e:5f:96:29:b4:5b:1e:
                    ce:97:87:c8:c5:38:2c:26:a5:17:a8:97:37:3f:b6:
                    17:68:6a:69:14:0f:d1:f6:71:46:cb:56:fa:31:08:
                    e6:59:ea:38:ee:ae:65:48:ba:02:58:cf:6a:4f:b6:
                    7f:a2:3f:7b:d7:5a:61:2b:52:8e:7c:6f:f1:e4:68:
                    a3:f6:25:c5:4b:3a:94:3e:59:8e:e6:67:57:c2:c7:
                    43:f2:06:6f:e5:95:d3:27:80:fd:ed:e3:f2:a9:33:
                    d2:6d:f0:2c:82:f0:75:30:d3:fe:6f:a7:54:df:f1:
                    ab:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:EF:49:A7:52:BE:60:45:B0:56:5B:1B:C4:87:49:D4:2C:1F:73:99
            X509v3 Authority Key Identifier:
                keyid:8E:82:2B:DA:67:B7:20:70:9C:3F:DC:0A:A1:CE:0B:9C:53:7F:2A:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/323830343a313132383a3a2f33332d3333203d3e20323633363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1128::/33

    Signature Algorithm: sha256WithRSAEncryption
         71:8e:79:0d:4d:cc:0a:74:fb:7f:b4:77:5f:b3:92:f5:d3:db:
         a7:a5:65:82:0b:ff:af:1b:c1:b7:08:65:99:e1:f9:82:eb:36:
         a5:1f:03:24:ac:de:83:e3:3b:88:d0:45:5c:ed:92:5d:8b:d8:
         40:82:84:99:61:27:dd:52:55:70:4b:bb:2f:e8:4c:89:bf:fc:
         36:22:70:18:08:cb:c8:a9:9b:11:52:7d:14:34:e1:29:84:c6:
         4f:c0:58:02:1d:69:58:dd:13:44:fc:b5:65:4c:6c:8b:09:c8:
         bf:40:be:9e:90:1b:99:9b:ec:a4:b9:e4:cd:b7:a3:f0:ec:82:
         e9:20:bc:b1:e5:f7:5a:d6:f4:61:3f:5a:2a:14:4b:52:13:01:
         d9:89:93:00:e1:2b:b7:6d:74:fb:58:c1:74:5b:6d:3d:f2:6e:
         f4:d4:75:51:be:5c:59:54:50:2f:b1:84:0e:d5:70:96:78:be:
         ac:22:a6:39:40:ff:8f:22:2c:86:b8:f0:8e:35:ec:be:26:64:
         e0:f9:d7:56:43:45:03:af:23:e6:42:43:bc:ee:da:66:91:49:
         44:44:c9:e6:60:27:4d:d9:40:f6:04:30:e0:c6:0a:df:23:1d:
         4d:00:0f:49:8f:35:77:29:22:f1:56:23:01:a3:2e:25:f7:b1:
         43:ec:43:9a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJ9hRpgHaYW9tsg+QJ7vNBmlhfa4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEU4MjJCREE2N0I3MjA3MDlDM0ZEQzBBQTFDRTBCOUM1
MzdGMkE2NTAeFw0yNDA0MDQwMTMzMjZaFw0yNTA0MDMwMTM4MjZaMDMxMTAvBgNV
BAMTKEQzRUY0OUE3NTJCRTYwNDVCMDU2NUIxQkM0ODc0OUQ0MkMxRjczOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDak0WtG8G3vL2MiRdf0SVVpKEe
P+nK3UWdgQeAP/1jUud/F3RdlX7B3epY+SLhWQZ7CdEuPHNJn0/EPoW/bI9qWRX4
o3Hsg/3RHHrtEcVhg2+UT+ioOqZuGJyy3vvMa/K5CFrsUn0WHZVCJU8ReusJvmM0
yUft8m5tUHrrKtIBOJHXh7lDNqCS6Ko5xtb0Xl+WKbRbHs6Xh8jFOCwmpReolzc/
thdoamkUD9H2cUbLVvoxCOZZ6jjurmVIugJYz2pPtn+iP3vXWmErUo58b/HkaKP2
JcVLOpQ+WY7mZ1fCx0PyBm/lldMngP3t4/KpM9Jt8CyC8HUw0/5vp1Tf8atvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU0+9Jp1K+YEWwVlsbxIdJ1Cwfc5kwHwYDVR0j
BBgwFoAUjoIr2me3IHCcP9wKoc4LnFN/KmUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVptemhGZms1a0thdzFLcDdMbUpCMUczeTh6WnA4aUo2dzc2Nk15ZWFu
dWovMi84RTgyMkJEQTY3QjcyMDcwOUMzRkRDMEFBMUNFMEI5QzUzN0YyQTY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFODIyQkRBNjdCNzIwNzA5
QzNGREMwQUExQ0UwQjlDNTM3RjJBNjUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VabXpoRmZrNWtLYXcxS3A3TG1KQjFHM3k4elpwOGlKNnc3NjZNeWVhbnVqLzIv
MzIzODMwMzQzYTMxMzEzMjM4M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjMz
MzYzNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAQRKAAwDQYJKoZIhvcNAQELBQADggEBAHGOeQ1N
zAp0+3+0d1+zkvXT26elZYIL/68bwbcIZZnh+YLrNqUfAySs3oPjO4jQRVztkl2L
2ECChJlhJ91SVXBLuy/oTIm//DYicBgIy8ipmxFSfRQ04SmExk/AWAIdaVjdE0T8
tWVMbIsJyL9Avp6QG5mb7KS55M23o/DsgukgvLHl91rW9GE/WioUS1ITAdmJkwDh
K7dtdPtYwXRbbT3ybvTUdVG+XFlUUC+xhA7VcJZ4vqwipjlA/48iLIa48I417L4m
ZOD511ZDRQOvI+ZCQ7zu2maRSUREyeZgJ03ZQPYEMODGCt8jHU0AD0mPNXcpIvFW
IwGjLiX3sUPsQ5o=
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:01 2024 by rpki-client on console-fra.rpki-client.org