Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/323830343a366165383a3a2f33342d3334203d3e20323730333635.roa
File:                     323830343a366165383a3a2f33342d3334203d3e20323730333635.roa (raw, json)
Hash identifier:          yws0l4WSfsjfYCbNElD/Pwax7lBErOcS2uL/VB9MLrM=
Subject key identifier:   B3:F1:87:F0:89:A1:F7:DF:EF:55:FF:AC:E2:BA:E0:FB:1B:78:51:79
Certificate issuer:       /CN=ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1
Certificate serial:       64853CD649230BD1932D340C5A5D9CAF945532B0
Authority key identifier: EC:BC:B7:D7:11:8D:E9:A8:EF:59:6B:31:7E:05:F1:AB:E3:64:66:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/323830343a366165383a3a2f33342d3334203d3e20323730333635.roa
Signing time:             Thu 04 Apr 2024 06:42:24 +0000
ROA not before:           Thu 04 Apr 2024 06:37:24 +0000
ROA not after:            Thu 03 Apr 2025 06:42:24 +0000
asID:                     270365
IP address blocks:        2804:6ae8::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.crl
                          rsync://rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:85:3c:d6:49:23:0b:d1:93:2d:34:0c:5a:5d:9c:af:94:55:32:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1
        Validity
            Not Before: Apr  4 06:37:24 2024 GMT
            Not After : Apr  3 06:42:24 2025 GMT
        Subject: CN=B3F187F089A1F7DFEF55FFACE2BAE0FB1B785179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f2:89:ee:93:ea:0a:e9:e4:a6:45:b4:66:e7:
                    d5:23:28:3c:b8:43:30:f8:59:8f:c8:8c:19:91:ff:
                    cc:2c:76:09:80:ef:ac:c6:ae:ff:7e:47:e8:10:14:
                    b1:dc:7d:6f:49:7d:c4:50:37:26:5b:3b:e8:ec:ed:
                    7e:38:98:54:bf:fb:bd:87:2b:67:81:f0:0f:e2:f2:
                    c0:5e:11:67:f6:58:03:41:0e:33:81:ac:82:18:da:
                    88:24:79:e3:20:c2:ab:0b:7f:cb:cc:ac:fe:28:df:
                    d0:4e:f4:38:e7:10:34:7d:b4:cb:36:83:5d:ef:ac:
                    25:c1:4f:89:f8:8a:37:e6:4f:1c:ee:0b:92:52:e9:
                    9b:be:07:96:4d:d4:2e:62:3a:d1:75:39:23:24:0c:
                    12:b4:df:2a:fe:66:21:88:2e:9d:96:66:c2:37:24:
                    dc:e2:62:cd:44:27:ba:8c:88:69:f8:a8:e7:d3:ea:
                    5b:a7:b3:de:8b:fa:dc:58:58:ee:ad:37:8c:14:07:
                    e7:8b:5f:b9:a4:68:b6:50:08:77:4c:4f:51:38:23:
                    94:65:e7:aa:93:29:39:e8:73:c9:c8:b1:fa:4f:fc:
                    f1:37:e6:de:4f:6a:e5:90:71:03:60:ef:3a:c0:05:
                    28:cd:1d:52:81:77:8d:e1:46:1f:36:37:6c:82:fc:
                    d6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:F1:87:F0:89:A1:F7:DF:EF:55:FF:AC:E2:BA:E0:FB:1B:78:51:79
            X509v3 Authority Key Identifier:
                keyid:EC:BC:B7:D7:11:8D:E9:A8:EF:59:6B:31:7E:05:F1:AB:E3:64:66:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/323830343a366165383a3a2f33342d3334203d3e20323730333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ae8::/34

    Signature Algorithm: sha256WithRSAEncryption
         a7:ba:4f:ca:0b:20:29:dd:5a:bb:5f:8c:47:51:1d:52:b6:5a:
         bc:e4:ce:d8:5d:1e:0e:80:a5:7e:bd:1a:19:d4:23:99:77:66:
         fc:c2:9f:83:61:9e:ce:a0:b5:e3:1f:b8:c6:e2:c4:28:44:45:
         35:64:b5:f6:3c:d0:b0:f6:86:ab:c5:e6:19:06:2f:19:71:09:
         23:80:5d:f3:e0:4a:7e:46:da:3c:b8:7d:e6:f7:14:29:c8:87:
         f6:d0:72:23:7d:39:67:2a:e3:a6:b3:49:9c:65:9f:28:e8:22:
         ff:8a:7d:70:1b:75:01:97:1e:31:a5:90:ce:37:41:45:58:67:
         95:49:34:5f:51:44:d9:87:c8:fc:63:75:44:57:b3:f2:f1:82:
         5b:98:31:0e:ed:a4:8b:96:30:84:12:c3:df:cd:30:3e:71:86:
         85:8d:47:7c:ce:23:f4:9b:29:d5:18:dd:53:ff:f9:3c:bb:23:
         e4:00:a5:66:32:d9:e1:cf:d6:69:4c:9d:70:da:12:3f:db:6b:
         cd:64:f5:a7:2b:6b:68:a8:23:b0:a0:88:29:a4:2c:b1:99:cb:
         20:35:55:96:3c:af:f1:cf:c5:8c:07:86:60:3a:fb:84:36:ec:
         bd:7c:5d:93:61:a4:cf:02:9b:e0:45:e3:70:a3:8a:9c:e1:34:
         e6:c3:37:76
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZIU81kkjC9GTLTQMWl2cr5RVMrAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUNCQ0I3RDcxMThERTlBOEVGNTk2QjMxN0UwNUYxQUJF
MzY0NjZGMTAeFw0yNDA0MDQwNjM3MjRaFw0yNTA0MDMwNjQyMjRaMDMxMTAvBgNV
BAMTKEIzRjE4N0YwODlBMUY3REZFRjU1RkZBQ0UyQkFFMEZCMUI3ODUxNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ8onuk+oK6eSmRbRm59UjKDy4
QzD4WY/IjBmR/8wsdgmA76zGrv9+R+gQFLHcfW9JfcRQNyZbO+js7X44mFS/+72H
K2eB8A/i8sBeEWf2WANBDjOBrIIY2ogkeeMgwqsLf8vMrP4o39BO9DjnEDR9tMs2
g13vrCXBT4n4ijfmTxzuC5JS6Zu+B5ZN1C5iOtF1OSMkDBK03yr+ZiGILp2WZsI3
JNziYs1EJ7qMiGn4qOfT6luns96L+txYWO6tN4wUB+eLX7mkaLZQCHdMT1E4I5Rl
56qTKTnoc8nIsfpP/PE35t5PauWQcQNg7zrABSjNHVKBd43hRh82N2yC/NZFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUs/GH8Imh99/vVf+s4rrg+xt4UXkwHwYDVR0j
BBgwFoAU7Ly31xGN6ajvWWsxfgXxq+NkZvEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXFydWdwTnZSNEdXdEI3UDlUTEQ5c3M0SG1kM2lXRHZONlg3Q3pHUnA2
U3kvMS9FQ0JDQjdENzExOERFOUE4RUY1OTZCMzE3RTA1RjFBQkUzNjQ2NkYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VDQkNCN0Q3MTE4REU5QThF
RjU5NkIzMTdFMDVGMUFCRTM2NDY2RjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VxcnVncE52UjRHV3RCN1A5VExEOXNzNEhtZDNpV0R2TjZYN0N6R1JwNlN5LzEv
MzIzODMwMzQzYTM2NjE2NTM4M2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNzMw
MzMzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKARq6AAwDQYJKoZIhvcNAQELBQADggEBAKe6T8oL
ICndWrtfjEdRHVK2WrzkzthdHg6ApX69GhnUI5l3ZvzCn4Nhns6gteMfuMbixChE
RTVktfY80LD2hqvF5hkGLxlxCSOAXfPgSn5G2jy4feb3FCnIh/bQciN9OWcq46az
SZxlnyjoIv+KfXAbdQGXHjGlkM43QUVYZ5VJNF9RRNmHyPxjdURXs/LxgluYMQ7t
pIuWMIQSw9/NMD5xhoWNR3zOI/SbKdUY3VP/+Ty7I+QApWYy2eHP1mlMnXDaEj/b
a81k9acra2ioI7CgiCmkLLGZyyA1VZY8r/HPxYwHhmA6+4Q27L18XZNhpM8Cm+BF
43CjipzhNObDN3Y=
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:20 2024 by rpki-client on console-ams.rpki-client.org