Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/323830343a366665303a3a2f33322d3336203d3e20323730363930.roa
File:                     323830343a366665303a3a2f33322d3336203d3e20323730363930.roa (raw, json)
Hash identifier:          Xm2omUGPzMRpzIvaEMWinbCpF0ZespD6Dt+XvEcqxbg=
Subject key identifier:   CB:8F:B7:03:E2:3F:51:F3:CB:A8:DF:75:38:59:D0:E1:AF:BC:08:9F
Certificate issuer:       /CN=296B5A42104756A14E2651E7EAC81D02EA0F7531
Certificate serial:       67228F6C50BF9E71BA9F0BAD099D935F63171B15
Authority key identifier: 29:6B:5A:42:10:47:56:A1:4E:26:51:E7:EA:C8:1D:02:EA:0F:75:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/323830343a366665303a3a2f33322d3336203d3e20323730363930.roa
Signing time:             Wed 03 Apr 2024 18:38:14 +0000
ROA not before:           Wed 03 Apr 2024 18:33:14 +0000
ROA not after:            Wed 02 Apr 2025 18:38:14 +0000
asID:                     270690
IP address blocks:        2804:6fe0::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.crl
                          rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:22:8f:6c:50:bf:9e:71:ba:9f:0b:ad:09:9d:93:5f:63:17:1b:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296B5A42104756A14E2651E7EAC81D02EA0F7531
        Validity
            Not Before: Apr  3 18:33:14 2024 GMT
            Not After : Apr  2 18:38:14 2025 GMT
        Subject: CN=CB8FB703E23F51F3CBA8DF753859D0E1AFBC089F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:08:29:a3:6c:09:aa:97:46:d6:9f:8c:82:58:
                    97:6b:05:87:4f:2e:c7:94:d4:3c:85:c9:e8:9e:0f:
                    8c:9d:9a:cd:d7:70:b6:7f:8b:59:78:f1:2d:c4:c5:
                    35:4f:c1:84:54:f9:84:3e:d4:a5:4a:71:e9:d3:b2:
                    86:fa:1e:3f:d5:a4:90:c9:a1:80:75:22:b8:64:c8:
                    98:19:8c:6a:70:c1:ff:ac:c4:41:77:c1:71:16:9d:
                    85:75:40:66:1e:45:80:00:3e:5d:8d:ca:68:32:67:
                    82:37:46:10:eb:27:0f:25:e1:3b:04:b5:02:34:d7:
                    2e:fb:22:bf:47:f4:4b:ef:66:0f:89:08:c5:05:6d:
                    e0:0e:64:0b:36:34:2a:f7:99:d5:f9:a2:3e:24:c4:
                    b2:5d:10:a6:f1:d4:4b:b1:29:3f:30:cb:3b:85:c4:
                    79:1c:2b:b0:90:63:0a:42:9f:ab:5a:4a:9b:ba:70:
                    06:fb:10:12:7a:0c:6b:bc:ea:d4:93:69:33:49:5f:
                    53:1e:35:a5:7a:4a:00:6c:24:d2:a3:1a:db:b3:0e:
                    db:76:9c:12:4a:d6:d0:c3:89:d8:a2:22:ed:70:c8:
                    7f:3e:39:f4:08:e6:09:13:d5:32:cc:80:f9:7f:cd:
                    f4:b4:62:b4:ab:af:42:ca:ce:9b:75:9b:e3:42:08:
                    ce:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:8F:B7:03:E2:3F:51:F3:CB:A8:DF:75:38:59:D0:E1:AF:BC:08:9F
            X509v3 Authority Key Identifier:
                keyid:29:6B:5A:42:10:47:56:A1:4E:26:51:E7:EA:C8:1D:02:EA:0F:75:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/323830343a366665303a3a2f33322d3336203d3e20323730363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6fe0::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:74:d5:36:95:1e:6e:11:9c:35:da:87:d5:b0:f9:7d:01:6c:
         88:37:11:e0:b3:c7:f2:51:b8:98:4e:96:d2:c7:9b:5d:a3:3d:
         f6:c6:55:c5:47:56:ca:99:38:08:74:3c:9d:3e:df:56:66:62:
         7a:9d:43:b0:73:79:ba:26:6d:96:01:b2:c3:c2:53:89:35:6d:
         aa:6b:60:f3:d4:12:65:1e:4c:45:cb:39:cc:07:be:49:71:68:
         97:ff:4f:56:cf:27:34:be:6b:7d:7b:6b:71:58:c2:80:5c:70:
         59:f8:d1:c4:9c:3d:ee:88:ce:67:e8:a4:8d:e8:b6:db:7b:6b:
         80:13:a1:9a:75:dc:e1:d0:08:8c:26:df:9c:81:23:29:cc:9e:
         e8:47:e0:6b:b2:3c:a2:a1:37:3a:f1:c0:e9:31:f7:9c:a9:80:
         c2:0c:c8:e7:9f:d1:1d:5c:70:97:db:0d:73:f1:d2:7a:38:9b:
         18:92:40:0c:01:e4:19:d4:03:7f:6a:bd:a4:83:36:66:c0:85:
         0a:fa:d1:fa:6a:41:da:d2:7e:7b:68:61:c7:8d:24:28:a0:4f:
         7c:27:8d:3f:0e:ab:19:c4:ac:88:c9:e8:67:19:9a:29:1d:ef:
         d2:d5:28:b3:1b:7b:14:e4:cb:9a:f2:b6:c6:c0:9b:f7:b2:28:
         64:15:33:9c
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUZyKPbFC/nnG6nwutCZ2TX2MXGxUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjk2QjVBNDIxMDQ3NTZBMTRFMjY1MUU3RUFDODFEMDJF
QTBGNzUzMTAeFw0yNDA0MDMxODMzMTRaFw0yNTA0MDIxODM4MTRaMDMxMTAvBgNV
BAMTKENCOEZCNzAzRTIzRjUxRjNDQkE4REY3NTM4NTlEMEUxQUZCQzA4OUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdCCmjbAmql0bWn4yCWJdrBYdP
LseU1DyFyeieD4ydms3XcLZ/i1l48S3ExTVPwYRU+YQ+1KVKcenTsob6Hj/VpJDJ
oYB1IrhkyJgZjGpwwf+sxEF3wXEWnYV1QGYeRYAAPl2NymgyZ4I3RhDrJw8l4TsE
tQI01y77Ir9H9EvvZg+JCMUFbeAOZAs2NCr3mdX5oj4kxLJdEKbx1EuxKT8wyzuF
xHkcK7CQYwpCn6taSpu6cAb7EBJ6DGu86tSTaTNJX1MeNaV6SgBsJNKjGtuzDtt2
nBJK1tDDidiiIu1wyH8+OfQI5gkT1TLMgPl/zfS0YrSrr0LKzpt1m+NCCM4NAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUy4+3A+I/UfPLqN91OFnQ4a+8CJ8wHwYDVR0j
BBgwFoAUKWtaQhBHVqFOJlHn6sgdAuoPdTEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWo3YTNObTFSaFNWSlAyc2czdEZhSmhNeEZObldhZ3I3OFQxbXB1dUMy
SGMvMS8yOTZCNUE0MjEwNDc1NkExNEUyNjUxRTdFQUM4MUQwMkVBMEY3NTMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5NkI1QTQyMTA0NzU2QTE0
RTI2NTFFN0VBQzgxRDAyRUEwRjc1MzEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VqN2EzTm0xUmhTVkpQMnNnM3RGYUpoTXhGTm5XYWdyNzhUMW1wdXVDMkhjLzEv
MzIzODMwMzQzYTM2NjY2NTMwM2EzYTJmMzMzMjJkMzMzNjIwM2QzZTIwMzIzNzMw
MzYzOTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARv4DANBgkqhkiG9w0BAQsFAAOCAQEAlHTVNpUe
bhGcNdqH1bD5fQFsiDcR4LPH8lG4mE6W0sebXaM99sZVxUdWypk4CHQ8nT7fVmZi
ep1DsHN5uiZtlgGyw8JTiTVtqmtg89QSZR5MRcs5zAe+SXFol/9PVs8nNL5rfXtr
cVjCgFxwWfjRxJw97ojOZ+ikjei223trgBOhmnXc4dAIjCbfnIEjKcye6Efga7I8
oqE3OvHA6TH3nKmAwgzI55/RHVxwl9sNc/HSejibGJJADAHkGdQDf2q9pIM2ZsCF
CvrR+mpB2tJ+e2hhx40kKKBPfCeNPw6rGcSsiMnoZxmaKR3v0tUosxt7FOTLmvK2
xsCb97IoZBUznA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:50:07 2024 by rpki-client on console-fra.rpki-client.org