Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eabb8QM6EKiCcZUqLiMWVdkzP1xafRQVA9TNNYfoZyP4/1/323830343a346235343a3a2f33322d3438203d3e20323637323938.roa
File:                     323830343a346235343a3a2f33322d3438203d3e20323637323938.roa (raw, json)
Hash identifier:          AAgI8dSG8vB+D9ECQmD0n64L1HPoJLMzV2beMIfyaR4=
Subject key identifier:   52:39:F0:22:8F:E7:64:D8:58:5F:53:B5:A5:CE:26:5C:F2:D6:52:CD
Certificate issuer:       /CN=8902905780FDACAD708BC5F4FA8508B26F16146C
Certificate serial:       488254FB8A236B345D6E792FA69D73E50B8A4C34
Authority key identifier: 89:02:90:57:80:FD:AC:AD:70:8B:C5:F4:FA:85:08:B2:6F:16:14:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8902905780FDACAD708BC5F4FA8508B26F16146C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eabb8QM6EKiCcZUqLiMWVdkzP1xafRQVA9TNNYfoZyP4/1/323830343a346235343a3a2f33322d3438203d3e20323637323938.roa
Signing time:             Thu 04 Apr 2024 07:34:23 +0000
ROA not before:           Thu 04 Apr 2024 07:29:23 +0000
ROA not after:            Thu 03 Apr 2025 07:34:23 +0000
asID:                     267298
IP address blocks:        2804:4b54::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eabb8QM6EKiCcZUqLiMWVdkzP1xafRQVA9TNNYfoZyP4/1/8902905780FDACAD708BC5F4FA8508B26F16146C.crl
                          rsync://rpki-repo.registro.br/repo/Eabb8QM6EKiCcZUqLiMWVdkzP1xafRQVA9TNNYfoZyP4/1/8902905780FDACAD708BC5F4FA8508B26F16146C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8902905780FDACAD708BC5F4FA8508B26F16146C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:24:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:82:54:fb:8a:23:6b:34:5d:6e:79:2f:a6:9d:73:e5:0b:8a:4c:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8902905780FDACAD708BC5F4FA8508B26F16146C
        Validity
            Not Before: Apr  4 07:29:23 2024 GMT
            Not After : Apr  3 07:34:23 2025 GMT
        Subject: CN=5239F0228FE764D8585F53B5A5CE265CF2D652CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:93:54:7e:7d:99:11:27:18:d3:22:07:19:b3:
                    d3:bc:e1:ea:49:ee:98:6d:41:71:24:f5:b4:88:d5:
                    a0:b9:79:6a:df:0d:07:b7:20:ea:4a:75:16:fd:83:
                    8f:f2:3e:c6:97:f1:07:f5:92:64:2e:34:56:6e:fa:
                    85:2e:3c:09:31:4e:d5:fb:79:5a:da:d5:17:22:6e:
                    3e:ff:7c:84:12:5e:d1:ba:5a:3a:00:82:e1:0b:ee:
                    e9:95:cd:08:a7:35:82:f0:d3:28:0b:5f:b3:0a:6b:
                    05:63:34:52:77:8c:d7:89:19:0a:c1:38:9f:30:dd:
                    34:85:32:d6:39:c0:82:4f:94:c1:52:ea:b6:2d:ab:
                    b0:51:a2:d4:9d:20:4c:1e:88:d7:37:19:28:21:24:
                    a6:22:04:25:4c:94:af:f4:5c:2b:4c:b5:fa:be:75:
                    13:aa:20:04:db:27:4a:06:70:0e:4c:11:4e:a6:a8:
                    c9:ea:d2:98:91:91:88:de:d9:d4:b9:b7:fb:bd:1a:
                    5d:29:50:1a:fa:67:d3:b4:63:ba:ed:bc:7b:c8:a0:
                    16:9b:50:67:c4:95:34:7d:ea:38:cb:ec:1a:d9:d9:
                    36:6b:4a:43:94:a7:1b:ad:89:d9:9f:af:08:36:1d:
                    75:0c:ea:f8:f9:8d:2a:ba:79:9a:b4:83:aa:45:f2:
                    c9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:39:F0:22:8F:E7:64:D8:58:5F:53:B5:A5:CE:26:5C:F2:D6:52:CD
            X509v3 Authority Key Identifier:
                keyid:89:02:90:57:80:FD:AC:AD:70:8B:C5:F4:FA:85:08:B2:6F:16:14:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eabb8QM6EKiCcZUqLiMWVdkzP1xafRQVA9TNNYfoZyP4/1/8902905780FDACAD708BC5F4FA8508B26F16146C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8902905780FDACAD708BC5F4FA8508B26F16146C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eabb8QM6EKiCcZUqLiMWVdkzP1xafRQVA9TNNYfoZyP4/1/323830343a346235343a3a2f33322d3438203d3e20323637323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b54::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:81:e7:e4:b8:10:02:10:17:e2:a6:4d:dd:3f:ca:10:7a:1f:
         a8:d6:7d:68:ab:02:6a:44:4d:f4:a3:33:11:d1:a4:d9:c9:37:
         63:5d:c9:4b:33:9d:b3:62:9f:6a:8f:49:3d:b5:6b:d2:48:0d:
         06:0e:0b:65:e9:c2:64:0a:d8:65:9b:60:4b:e4:04:22:c7:1d:
         57:72:8b:c9:c2:79:f5:1b:c6:25:93:49:d7:f7:c1:61:59:c6:
         7a:81:a6:3d:4e:15:17:64:64:f7:c4:2a:68:ae:2f:a0:a8:e7:
         8b:c6:76:9f:fd:ab:0b:a9:57:6d:e5:ab:8c:d7:30:e2:97:16:
         f8:f4:b0:60:8b:0d:d6:21:7b:e0:2b:ca:d8:d9:ec:3a:60:c8:
         43:33:0b:78:e3:f4:df:10:cd:11:dd:10:33:29:21:0f:ed:be:
         a8:fc:25:9b:03:11:a4:97:a0:a2:89:7c:f0:cf:54:3e:07:0e:
         15:5c:3e:76:33:e3:3e:58:62:e8:4d:34:6f:6d:42:4a:75:f9:
         b7:ab:0d:9d:e9:f4:93:e1:69:7b:fa:fe:32:13:70:47:7c:6b:
         36:45:f0:19:25:c4:b4:75:27:af:ed:26:c6:bf:99:12:fa:23:
         3d:29:47:7b:0e:6b:4e:80:6f:bc:35:e3:d0:d2:e7:03:90:c3:
         54:37:47:9f
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUSIJU+4ojazRdbnkvpp1z5QuKTDQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODkwMjkwNTc4MEZEQUNBRDcwOEJDNUY0RkE4NTA4QjI2
RjE2MTQ2QzAeFw0yNDA0MDQwNzI5MjNaFw0yNTA0MDMwNzM0MjNaMDMxMTAvBgNV
BAMTKDUyMzlGMDIyOEZFNzY0RDg1ODVGNTNCNUE1Q0UyNjVDRjJENjUyQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/k1R+fZkRJxjTIgcZs9O84epJ
7phtQXEk9bSI1aC5eWrfDQe3IOpKdRb9g4/yPsaX8Qf1kmQuNFZu+oUuPAkxTtX7
eVra1Rcibj7/fIQSXtG6WjoAguEL7umVzQinNYLw0ygLX7MKawVjNFJ3jNeJGQrB
OJ8w3TSFMtY5wIJPlMFS6rYtq7BRotSdIEweiNc3GSghJKYiBCVMlK/0XCtMtfq+
dROqIATbJ0oGcA5MEU6mqMnq0piRkYje2dS5t/u9Gl0pUBr6Z9O0Y7rtvHvIoBab
UGfElTR96jjL7BrZ2TZrSkOUpxutidmfrwg2HXUM6vj5jSq6eZq0g6pF8smLAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUUjnwIo/nZNhYX1O1pc4mXPLWUs0wHwYDVR0j
BBgwFoAUiQKQV4D9rK1wi8X0+oUIsm8WFGwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWFiYjhRTTZFS2lDY1pVcUxpTVdWZGt6UDF4YWZSUVZBOVROTllmb1p5
UDQvMS84OTAyOTA1NzgwRkRBQ0FENzA4QkM1RjRGQTg1MDhCMjZGMTYxNDZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5MDI5MDU3ODBGREFDQUQ3
MDhCQzVGNEZBODUwOEIyNkYxNjE0NkMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VhYmI4UU02RUtpQ2NaVXFMaU1XVmRrelAxeGFmUlFWQTlUTk5ZZm9aeVA0LzEv
MzIzODMwMzQzYTM0NjIzNTM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM3
MzIzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARLVDANBgkqhkiG9w0BAQsFAAOCAQEAC4Hn5LgQ
AhAX4qZN3T/KEHofqNZ9aKsCakRN9KMzEdGk2ck3Y13JSzOds2Kfao9JPbVr0kgN
Bg4LZenCZArYZZtgS+QEIscdV3KLycJ59RvGJZNJ1/fBYVnGeoGmPU4VF2Rk98Qq
aK4voKjni8Z2n/2rC6lXbeWrjNcw4pcW+PSwYIsN1iF74CvK2NnsOmDIQzMLeOP0
3xDNEd0QMykhD+2+qPwlmwMRpJegool88M9UPgcOFVw+djPjPlhi6E00b21CSnX5
t6sNnen0k+Fpe/r+MhNwR3xrNkXwGSXEtHUnr+0mxr+ZEvojPSlHew5rToBvvDXj
0NLnA5DDVDdHnw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:17 2024 by rpki-client on console-ams.rpki-client.org