Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/323830343a346665343a3a2f33332d3333203d3e203533303836.roa
File:                     323830343a346665343a3a2f33332d3333203d3e203533303836.roa (raw, json)
Hash identifier:          bR6EdFpC9alqpMut0jhTlyYvlpMkf4jUcF/tB2GBC4I=
Subject key identifier:   2A:75:73:A0:A2:E5:C8:07:CA:9D:5D:E0:FD:27:52:8A:33:95:1E:C9
Certificate issuer:       /CN=734B66FA6878EDCF866CF08634B1680301F14295
Certificate serial:       593BC1E4FA8C5F4A0A4E94CCE0AB755E0ABB0488
Authority key identifier: 73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/323830343a346665343a3a2f33332d3333203d3e203533303836.roa
Signing time:             Thu 04 Apr 2024 08:26:52 +0000
ROA not before:           Thu 04 Apr 2024 08:21:52 +0000
ROA not after:            Thu 03 Apr 2025 08:26:52 +0000
asID:                     53086
IP address blocks:        2804:4fe4::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl
                          rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:3b:c1:e4:fa:8c:5f:4a:0a:4e:94:cc:e0:ab:75:5e:0a:bb:04:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734B66FA6878EDCF866CF08634B1680301F14295
        Validity
            Not Before: Apr  4 08:21:52 2024 GMT
            Not After : Apr  3 08:26:52 2025 GMT
        Subject: CN=2A7573A0A2E5C807CA9D5DE0FD27528A33951EC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ca:5c:d2:e3:77:c0:d6:ab:32:ae:ba:fd:bb:
                    e7:6d:ff:be:6d:13:54:fc:98:01:cd:2e:35:98:45:
                    52:21:28:6a:7f:60:fa:ed:8b:66:cf:ca:28:50:25:
                    4d:ba:89:57:4a:ce:3b:b2:00:4b:6e:e2:0d:35:d3:
                    f7:df:c3:d9:49:c1:96:47:6b:a7:f5:ef:07:5c:b2:
                    94:9b:e5:c7:a3:99:66:19:94:ce:9a:92:e9:b6:e2:
                    0c:8c:be:f6:90:fe:48:4e:d8:38:cd:9d:89:29:ba:
                    70:04:df:16:86:05:13:ec:fc:a8:c6:9d:ec:29:b6:
                    36:aa:01:44:89:d2:eb:0f:04:52:a2:2f:85:a3:9c:
                    a0:a0:0a:34:75:48:6c:c2:2f:5e:07:b1:66:39:05:
                    62:c4:b3:b4:65:11:44:fc:db:cc:4c:4b:a9:13:78:
                    ce:47:c7:86:89:1d:63:e0:06:af:01:23:a7:95:71:
                    ea:12:94:9c:db:a8:51:a6:46:59:e8:f0:ba:ed:6f:
                    ee:e2:dc:3a:11:99:a1:c3:4a:95:a0:f1:bf:c5:e8:
                    4f:a6:a8:3b:8c:e3:14:ae:db:1a:30:17:48:86:1a:
                    37:c5:ad:cf:a7:c6:b6:f5:46:12:fe:9c:2e:5b:28:
                    f9:c4:c6:27:5b:76:95:50:fd:fa:6b:10:10:65:43:
                    44:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:75:73:A0:A2:E5:C8:07:CA:9D:5D:E0:FD:27:52:8A:33:95:1E:C9
            X509v3 Authority Key Identifier:
                keyid:73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/323830343a346665343a3a2f33332d3333203d3e203533303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4fe4::/33

    Signature Algorithm: sha256WithRSAEncryption
         8d:6f:bc:5b:ea:3d:cb:81:e8:f0:11:49:96:6b:1d:89:96:45:
         e5:f4:37:90:d8:fa:74:5e:de:c6:e0:27:76:ee:b6:89:3d:ad:
         4c:5c:5c:4c:41:39:5a:a1:b5:e2:d5:fa:b1:a0:df:14:9a:8e:
         8c:89:7e:b4:3e:8d:cb:8b:30:72:0a:e2:8a:87:dc:b7:88:ee:
         5a:49:1c:fd:af:4c:6b:f8:c6:cb:17:0c:03:e8:7d:3a:db:e2:
         26:80:a5:76:c3:a1:41:99:04:4c:8f:82:8d:cc:ab:b0:3e:f8:
         68:68:c3:ee:dc:b9:f2:a3:83:6d:a5:14:2d:fb:23:9d:5c:9d:
         96:af:65:ea:d2:59:63:bb:84:95:4f:a0:4f:0b:96:3f:87:9b:
         69:48:16:97:54:58:9a:42:a1:89:e0:a7:1a:73:99:56:90:48:
         f9:d8:3d:02:0b:be:3d:64:17:18:51:4e:1f:05:eb:84:87:f2:
         16:9c:9f:b9:2b:f6:90:84:a9:d4:4a:81:c8:b2:20:ea:d0:5a:
         86:6c:8c:0a:74:13:9d:3a:ba:a2:ea:2d:62:09:43:1d:6b:07:
         74:9e:a1:8d:cf:3f:94:68:a8:28:77:1a:ed:36:11:a5:9f:6f:
         28:5c:9e:c3:1f:a6:0a:21:03:a2:ce:f1:0a:0b:76:1a:8d:41:
         8f:46:eb:40
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUWTvB5PqMX0oKTpTM4Kt1Xgq7BIgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzM0QjY2RkE2ODc4RURDRjg2NkNGMDg2MzRCMTY4MDMw
MUYxNDI5NTAeFw0yNDA0MDQwODIxNTJaFw0yNTA0MDMwODI2NTJaMDMxMTAvBgNV
BAMTKDJBNzU3M0EwQTJFNUM4MDdDQTlENURFMEZEMjc1MjhBMzM5NTFFQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhylzS43fA1qsyrrr9u+dt/75t
E1T8mAHNLjWYRVIhKGp/YPrti2bPyihQJU26iVdKzjuyAEtu4g010/ffw9lJwZZH
a6f17wdcspSb5cejmWYZlM6akum24gyMvvaQ/khO2DjNnYkpunAE3xaGBRPs/KjG
newptjaqAUSJ0usPBFKiL4WjnKCgCjR1SGzCL14HsWY5BWLEs7RlEUT828xMS6kT
eM5Hx4aJHWPgBq8BI6eVceoSlJzbqFGmRlno8Lrtb+7i3DoRmaHDSpWg8b/F6E+m
qDuM4xSu2xowF0iGGjfFrc+nxrb1RhL+nC5bKPnExidbdpVQ/fprEBBlQ0TRAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUKnVzoKLlyAfKnV3g/SdSijOVHskwHwYDVR0j
BBgwFoAUc0tm+mh47c+GbPCGNLFoAwHxQpUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXJkWEVrRGREQW9KQllmUUNXcWVIelRZNW5oYlJjZlZFaXlKa3lqelJC
Y3IvMS83MzRCNjZGQTY4NzhFRENGODY2Q0YwODYzNEIxNjgwMzAxRjE0Mjk1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzczNEI2NkZBNjg3OEVEQ0Y4
NjZDRjA4NjM0QjE2ODAzMDFGMTQyOTUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VyZFhFa0RkREFvSkJZZlFDV3FlSHpUWTVuaGJSY2ZWRWl5Smt5anpSQmNyLzEv
MzIzODMwMzQzYTM0NjY2NTM0M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzUzMzMw
MzgzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwDgQCAAIwCAMGBygET+QAMA0GCSqGSIb3DQEBCwUAA4IBAQCNb7xb6j3L
gejwEUmWax2JlkXl9DeQ2Pp0Xt7G4Cd27raJPa1MXFxMQTlaobXi1fqxoN8Umo6M
iX60Po3LizByCuKKh9y3iO5aSRz9r0xr+MbLFwwD6H062+ImgKV2w6FBmQRMj4KN
zKuwPvhoaMPu3Lnyo4NtpRQt+yOdXJ2Wr2Xq0llju4SVT6BPC5Y/h5tpSBaXVFia
QqGJ4Kcac5lWkEj52D0CC749ZBcYUU4fBeuEh/IWnJ+5K/aQhKnUSoHIsiDq0FqG
bIwKdBOdOrqi6i1iCUMdawd0nqGNzz+UaKgodxrtNhGln28oXJ7DH6YKIQOizvEK
C3YajUGPRutA
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:44 2024 by rpki-client on console-fra.rpki-client.org