Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/323830343a343333383a3a2f33332d3333203d3e20323637353536.roa
File:                     323830343a343333383a3a2f33332d3333203d3e20323637353536.roa (raw, json)
Hash identifier:          /M/6jipZs6iHvKAZvsKQKXpGqSlONShnY/rAxdXhFKQ=
Subject key identifier:   12:D1:CD:03:28:B1:C6:6E:85:06:AA:B7:23:48:31:F2:37:07:F3:97
Certificate issuer:       /CN=1E776A9F167A3ADD7E422B88C1048DD2C7E32795
Certificate serial:       0E9CC83079BF023D33B65E7C35D7ACA2C29943C5
Authority key identifier: 1E:77:6A:9F:16:7A:3A:DD:7E:42:2B:88:C1:04:8D:D2:C7:E3:27:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E776A9F167A3ADD7E422B88C1048DD2C7E32795.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/323830343a343333383a3a2f33332d3333203d3e20323637353536.roa
Signing time:             Mon 18 Nov 2024 15:11:45 +0000
ROA not before:           Mon 18 Nov 2024 15:06:45 +0000
ROA not after:            Mon 17 Nov 2025 15:11:45 +0000
asID:                     267556
IP address blocks:        2804:4338::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/1E776A9F167A3ADD7E422B88C1048DD2C7E32795.crl
                          rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/1E776A9F167A3ADD7E422B88C1048DD2C7E32795.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E776A9F167A3ADD7E422B88C1048DD2C7E32795.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 02:28:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:9c:c8:30:79:bf:02:3d:33:b6:5e:7c:35:d7:ac:a2:c2:99:43:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E776A9F167A3ADD7E422B88C1048DD2C7E32795
        Validity
            Not Before: Nov 18 15:06:45 2024 GMT
            Not After : Nov 17 15:11:45 2025 GMT
        Subject: CN=12D1CD0328B1C66E8506AAB7234831F23707F397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4a:c6:1c:6d:7a:7a:ac:18:c2:92:a3:d2:70:
                    f0:6f:d2:49:be:7d:ed:5b:4f:30:e2:8e:c5:81:fb:
                    11:ed:97:79:85:81:44:b2:25:af:f8:fe:97:00:e4:
                    78:9e:ad:6d:39:13:56:2f:e8:c2:1d:27:0b:48:c5:
                    cd:6b:67:f2:18:ae:ef:9a:b6:f2:18:e5:88:5e:53:
                    ad:1a:03:59:77:c3:f2:d0:93:97:bc:c7:38:e3:25:
                    96:86:e1:75:b6:6b:06:74:46:26:04:5f:b4:83:05:
                    e7:88:70:47:44:61:88:30:e2:d7:0d:bc:0f:0c:00:
                    21:ab:16:04:b3:e9:1b:d8:65:a3:3a:8a:30:ac:6a:
                    b8:37:d8:44:85:56:bb:76:e7:67:bf:5b:07:36:ee:
                    f2:21:09:1e:09:a9:87:74:e2:6a:e4:f2:95:d8:9b:
                    fd:bc:ea:69:95:80:87:24:a1:23:16:86:0e:df:44:
                    af:34:ca:80:aa:87:5c:d8:b9:4e:76:c0:3f:25:ed:
                    92:2c:74:2a:9d:ec:bf:f3:97:d3:0f:8f:14:1d:30:
                    29:e8:9c:35:ce:03:f2:d6:ed:1a:6d:84:f7:af:da:
                    4a:20:7b:7b:dd:81:14:d3:0f:f8:db:4e:e7:22:90:
                    04:dd:2d:48:99:de:11:79:72:2c:77:50:e1:2a:fa:
                    16:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D1:CD:03:28:B1:C6:6E:85:06:AA:B7:23:48:31:F2:37:07:F3:97
            X509v3 Authority Key Identifier:
                keyid:1E:77:6A:9F:16:7A:3A:DD:7E:42:2B:88:C1:04:8D:D2:C7:E3:27:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/1E776A9F167A3ADD7E422B88C1048DD2C7E32795.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E776A9F167A3ADD7E422B88C1048DD2C7E32795.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/323830343a343333383a3a2f33332d3333203d3e20323637353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4338::/33

    Signature Algorithm: sha256WithRSAEncryption
         89:6b:ea:b8:ff:fe:70:9e:b5:19:0e:67:37:c1:3a:d3:36:58:
         79:bb:51:cb:dd:ca:b8:a3:ed:a4:e9:c3:50:03:c0:49:12:42:
         80:12:e2:1c:56:69:e9:5b:43:0d:ec:a1:b3:19:f4:40:8f:a6:
         63:10:33:a7:fc:fb:40:fd:94:e8:27:c3:7e:d2:3d:73:43:dd:
         a5:95:c7:78:33:29:bd:1f:f2:a2:43:9e:07:74:85:96:58:0f:
         6c:0e:76:9c:91:68:d3:42:49:5f:7e:0d:25:7a:99:49:9e:59:
         44:e1:fa:1b:54:08:c7:45:66:3a:15:0a:69:b8:f9:22:0f:ce:
         19:9d:1a:21:bb:d8:a7:18:27:bb:14:99:43:5c:53:2e:73:80:
         2f:4c:3e:7a:37:ab:a6:af:50:09:16:cb:f5:a8:3d:96:6e:5b:
         0f:c4:cc:87:59:f9:3c:12:96:f6:41:64:de:93:8c:f0:e1:a6:
         3a:82:c7:8e:29:64:e7:22:b1:3e:2d:93:82:97:81:ef:83:0e:
         4b:22:1d:52:68:1e:7f:8e:8c:bf:d3:76:7b:fd:c0:20:0d:d0:
         f7:56:5a:e4:93:e9:ba:63:1b:92:a4:b9:b7:0a:87:25:3e:e6:
         73:fd:61:16:5f:03:d4:58:96:a1:9d:9c:3b:0f:04:99:35:52:
         a8:24:65:7e
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUDpzIMHm/Aj0ztl58NdesosKZQ8UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUU3NzZBOUYxNjdBM0FERDdFNDIyQjg4QzEwNDhERDJD
N0UzMjc5NTAeFw0yNDExMTgxNTA2NDVaFw0yNTExMTcxNTExNDVaMDMxMTAvBgNV
BAMTKDEyRDFDRDAzMjhCMUM2NkU4NTA2QUFCNzIzNDgzMUYyMzcwN0YzOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDSsYcbXp6rBjCkqPScPBv0km+
fe1bTzDijsWB+xHtl3mFgUSyJa/4/pcA5HierW05E1Yv6MIdJwtIxc1rZ/IYru+a
tvIY5YheU60aA1l3w/LQk5e8xzjjJZaG4XW2awZ0RiYEX7SDBeeIcEdEYYgw4tcN
vA8MACGrFgSz6RvYZaM6ijCsarg32ESFVrt252e/Wwc27vIhCR4JqYd04mrk8pXY
m/286mmVgIckoSMWhg7fRK80yoCqh1zYuU52wD8l7ZIsdCqd7L/zl9MPjxQdMCno
nDXOA/LW7RpthPev2koge3vdgRTTD/jbTucikATdLUiZ3hF5cix3UOEq+hb9AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUEtHNAyixxm6FBqq3I0gx8jcH85cwHwYDVR0j
BBgwFoAUHndqnxZ6Ot1+QiuIwQSN0sfjJ5UwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9FeVlkdWRFdGZzRlBIOGJ0V2RXYWNQelMzNTNnb1RrSDR2Rjdkc0dBVTN4
LzAvMUU3NzZBOUYxNjdBM0FERDdFNDIyQjg4QzEwNDhERDJDN0UzMjc5NS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8xRTc3NkE5RjE2N0EzQUREN0U0
MjJCODhDMTA0OEREMkM3RTMyNzk1LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9F
eVlkdWRFdGZzRlBIOGJ0V2RXYWNQelMzNTNnb1RrSDR2Rjdkc0dBVTN4LzAvMzIz
ODMwMzQzYTM0MzMzMzM4M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM3MzUz
NTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/
BBIwEDAOBAIAAjAIAwYHKARDOAAwDQYJKoZIhvcNAQELBQADggEBAIlr6rj//nCe
tRkOZzfBOtM2WHm7Ucvdyrij7aTpw1ADwEkSQoAS4hxWaelbQw3sobMZ9ECPpmMQ
M6f8+0D9lOgnw37SPXND3aWVx3gzKb0f8qJDngd0hZZYD2wOdpyRaNNCSV9+DSV6
mUmeWUTh+htUCMdFZjoVCmm4+SIPzhmdGiG72KcYJ7sUmUNcUy5zgC9MPno3q6av
UAkWy/WoPZZuWw/EzIdZ+TwSlvZBZN6TjPDhpjqCx44pZOcisT4tk4KXge+DDksi
HVJoHn+OjL/Tdnv9wCAN0PdWWuST6bpjG5KkubcKhyU+5nP9YRZfA9RYlqGdnDsP
BJk1UqgkZX4=
-----END CERTIFICATE-----
Generated at Tue Nov 26 02:15:54 2024 by rpki-client on console-fra.rpki-client.org