Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/323830343a366335633a3a2f33322d3438203d3e20323730343633.roa
File:                     323830343a366335633a3a2f33322d3438203d3e20323730343633.roa (raw, json)
Hash identifier:          cW2GC3LwKS4CCt3NthqPtexL8a0yTApqRvDyZsCD9Us=
Subject key identifier:   FE:58:F8:E4:2A:45:C5:A9:15:7E:C5:8C:61:9C:33:9D:BB:B6:7E:2F
Certificate issuer:       /CN=B882C1C7F7853B50794B0D38584713A2C1528F9D
Certificate serial:       24B2581F62285A04C05DA551E97560725ABC6C5B
Authority key identifier: B8:82:C1:C7:F7:85:3B:50:79:4B:0D:38:58:47:13:A2:C1:52:8F:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B882C1C7F7853B50794B0D38584713A2C1528F9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/323830343a366335633a3a2f33322d3438203d3e20323730343633.roa
Signing time:             Wed 22 May 2024 17:14:09 +0000
ROA not before:           Wed 22 May 2024 17:09:09 +0000
ROA not after:            Wed 21 May 2025 17:14:09 +0000
asID:                     270463
IP address blocks:        2804:6c5c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/B882C1C7F7853B50794B0D38584713A2C1528F9D.crl
                          rsync://rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/B882C1C7F7853B50794B0D38584713A2C1528F9D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B882C1C7F7853B50794B0D38584713A2C1528F9D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 00:14:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:b2:58:1f:62:28:5a:04:c0:5d:a5:51:e9:75:60:72:5a:bc:6c:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B882C1C7F7853B50794B0D38584713A2C1528F9D
        Validity
            Not Before: May 22 17:09:09 2024 GMT
            Not After : May 21 17:14:09 2025 GMT
        Subject: CN=FE58F8E42A45C5A9157EC58C619C339DBBB67E2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cf:35:10:21:08:18:2f:f3:76:8f:61:90:10:
                    49:7b:e8:1a:a6:76:bb:c9:75:fb:0e:dd:75:17:40:
                    a7:09:fe:bf:cc:b5:28:07:dc:b0:89:91:4e:a6:31:
                    2c:d9:2e:f8:e3:ba:a4:a0:2d:5b:ac:a1:77:67:ea:
                    5c:2d:a7:59:2a:94:17:5a:aa:8b:9c:b4:eb:68:e0:
                    d2:e4:c2:95:55:00:ca:56:18:d6:fc:84:42:4a:57:
                    16:98:99:d7:51:af:69:25:e5:53:63:46:18:a0:b2:
                    c6:05:57:a3:90:da:d9:20:be:cc:65:93:62:39:f7:
                    80:b6:82:19:27:6d:2a:e9:19:da:79:37:89:cd:df:
                    39:f4:4f:2d:e1:05:21:cd:7d:9d:9a:a1:bd:7e:ee:
                    c2:91:79:49:4b:c4:18:ec:dc:3e:e3:a8:f2:4e:af:
                    76:ed:a0:b1:c3:6d:7e:a3:33:8c:e8:97:eb:4a:38:
                    5d:a6:7d:5f:35:8c:57:6c:de:19:d1:be:74:5c:76:
                    cd:86:e1:c6:ee:d8:bd:d1:32:8a:6a:e6:d1:4d:74:
                    bb:e0:a9:57:2a:f0:69:8d:54:3e:57:48:0e:6c:49:
                    db:02:70:26:37:40:cb:be:27:27:48:05:9f:b1:48:
                    d6:15:09:b0:2f:35:8e:07:10:4a:dc:4f:91:9b:13:
                    41:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:58:F8:E4:2A:45:C5:A9:15:7E:C5:8C:61:9C:33:9D:BB:B6:7E:2F
            X509v3 Authority Key Identifier:
                keyid:B8:82:C1:C7:F7:85:3B:50:79:4B:0D:38:58:47:13:A2:C1:52:8F:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/B882C1C7F7853B50794B0D38584713A2C1528F9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B882C1C7F7853B50794B0D38584713A2C1528F9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/323830343a366335633a3a2f33322d3438203d3e20323730343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c5c::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:64:17:40:83:4d:12:48:51:0d:fd:e6:bf:6b:55:53:ac:d0:
         a1:b4:4e:b2:e3:69:b4:6f:5a:da:65:da:86:ab:f3:3b:36:5a:
         10:f9:ba:aa:19:39:6b:b8:17:ba:b9:24:f5:cb:6d:1f:c9:96:
         5c:85:3c:ef:6f:11:0b:c1:11:75:62:14:c6:33:8d:a2:7b:d9:
         6a:e6:07:9f:2d:45:45:32:e0:d0:93:49:08:8d:78:d9:55:d0:
         26:f1:31:c4:48:f8:15:27:ff:45:bd:db:a0:4f:71:2a:84:b7:
         3f:da:7d:b3:9e:20:02:0e:c0:bd:8c:4f:db:1e:4c:eb:47:70:
         88:67:f4:32:9b:06:58:2c:03:ef:88:69:23:d0:ee:6b:5e:f0:
         ee:1a:ee:85:f9:32:93:1a:1c:33:24:cf:cb:63:be:b3:55:50:
         b4:f2:65:7d:17:81:59:db:2d:f0:8a:e3:31:69:6c:dc:ca:1d:
         67:16:99:30:f0:5d:8c:44:3e:f0:ad:da:bd:c9:48:e4:9d:2f:
         70:b8:8c:5f:50:ad:42:e9:8e:c7:a7:87:76:14:26:0c:f4:18:
         b1:d8:61:29:a0:3b:96:23:92:52:73:de:07:92:ad:0a:9e:c9:
         98:ed:d4:a2:da:d4:58:07:a7:26:55:dc:fb:da:fa:96:25:84:
         2f:8a:11:e6
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUJLJYH2IoWgTAXaVR6XVgclq8bFswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjg4MkMxQzdGNzg1M0I1MDc5NEIwRDM4NTg0NzEzQTJD
MTUyOEY5RDAeFw0yNDA1MjIxNzA5MDlaFw0yNTA1MjExNzE0MDlaMDMxMTAvBgNV
BAMTKEZFNThGOEU0MkE0NUM1QTkxNTdFQzU4QzYxOUMzMzlEQkJCNjdFMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDzzUQIQgYL/N2j2GQEEl76Bqm
drvJdfsO3XUXQKcJ/r/MtSgH3LCJkU6mMSzZLvjjuqSgLVusoXdn6lwtp1kqlBda
qouctOto4NLkwpVVAMpWGNb8hEJKVxaYmddRr2kl5VNjRhigssYFV6OQ2tkgvsxl
k2I594C2ghknbSrpGdp5N4nN3zn0Ty3hBSHNfZ2aob1+7sKReUlLxBjs3D7jqPJO
r3btoLHDbX6jM4zol+tKOF2mfV81jFds3hnRvnRcds2G4cbu2L3RMopq5tFNdLvg
qVcq8GmNVD5XSA5sSdsCcCY3QMu+JydIBZ+xSNYVCbAvNY4HEErcT5GbE0EPAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU/lj45CpFxakVfsWMYZwznbu2fi8wHwYDVR0j
BBgwFoAUuILBx/eFO1B5Sw04WEcTosFSj50wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWk0am1OWnJjV2ZUanVMakJYR1FVVjZiQzVHZFV3cWRxNWo3clpzMWN5
S3ovMC9CODgyQzFDN0Y3ODUzQjUwNzk0QjBEMzg1ODQ3MTNBMkMxNTI4RjlELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4ODJDMUM3Rjc4NTNCNTA3
OTRCMEQzODU4NDcxM0EyQzE1MjhGOUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VpNGptTlpyY1dmVGp1TGpCWEdRVVY2YkM1R2RVd3FkcTVqN3JaczFjeUt6LzAv
MzIzODMwMzQzYTM2NjMzNTYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMw
MzQzNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARsXDANBgkqhkiG9w0BAQsFAAOCAQEAO2QXQINN
EkhRDf3mv2tVU6zQobROsuNptG9a2mXahqvzOzZaEPm6qhk5a7gXurkk9cttH8mW
XIU8728RC8ERdWIUxjONonvZauYHny1FRTLg0JNJCI142VXQJvExxEj4FSf/Rb3b
oE9xKoS3P9p9s54gAg7AvYxP2x5M60dwiGf0MpsGWCwD74hpI9Dua17w7hruhfky
kxocMyTPy2O+s1VQtPJlfReBWdst8IrjMWls3ModZxaZMPBdjEQ+8K3avclI5J0v
cLiMX1CtQumOx6eHdhQmDPQYsdhhKaA7liOSUnPeB5KtCp7JmO3UotrUWAenJlXc
+9r6liWEL4oR5g==
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:33:13 2024 by rpki-client on console-ams.rpki-client.org