Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/323830343a34633a3a2f33322d3438203d3e2038303535.roa
File:                     323830343a34633a3a2f33322d3438203d3e2038303535.roa (raw, json)
Hash identifier:          B7j07HRMf7NuXgWpQLQh9mQmnJVMqVcd8zGb/zwkFFg=
Subject key identifier:   B7:4E:CE:02:CC:02:80:4E:1E:AD:55:8B:13:89:21:EF:01:AB:79:8C
Certificate issuer:       /CN=E3A05660BB6F81841BB49DE532F64F592B23928E
Certificate serial:       65208CBD3FE42C7B38094912D953DF059364ABEF
Authority key identifier: E3:A0:56:60:BB:6F:81:84:1B:B4:9D:E5:32:F6:4F:59:2B:23:92:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3A05660BB6F81841BB49DE532F64F592B23928E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/323830343a34633a3a2f33322d3438203d3e2038303535.roa
Signing time:             Fri 17 May 2024 13:49:34 +0000
ROA not before:           Fri 17 May 2024 13:44:34 +0000
ROA not after:            Fri 16 May 2025 13:49:34 +0000
asID:                     8055
IP address blocks:        2804:4c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/E3A05660BB6F81841BB49DE532F64F592B23928E.crl
                          rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/E3A05660BB6F81841BB49DE532F64F592B23928E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3A05660BB6F81841BB49DE532F64F592B23928E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 16 Jun 2024 19:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:20:8c:bd:3f:e4:2c:7b:38:09:49:12:d9:53:df:05:93:64:ab:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3A05660BB6F81841BB49DE532F64F592B23928E
        Validity
            Not Before: May 17 13:44:34 2024 GMT
            Not After : May 16 13:49:34 2025 GMT
        Subject: CN=B74ECE02CC02804E1EAD558B138921EF01AB798C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:79:d3:64:51:ac:69:11:3f:95:b6:a1:cd:be:
                    2b:68:d4:e2:dc:28:bf:9c:7e:a5:37:2f:1a:30:e7:
                    5f:d8:59:82:22:05:90:c3:1c:6c:56:5f:4b:fa:37:
                    52:9a:4b:e5:47:9c:83:d6:16:37:fd:58:f1:e0:59:
                    f0:5b:aa:96:90:38:7d:72:f0:74:44:23:ae:c0:b6:
                    a6:46:dd:d8:85:a0:61:a5:db:0b:a3:98:63:e4:10:
                    ae:b9:0a:e7:07:ae:dc:66:e9:7c:82:af:d6:a6:f8:
                    24:76:85:d0:04:42:9f:cb:3f:4a:ec:1a:85:b4:54:
                    de:ff:d8:6a:e9:da:b6:ef:9a:7d:80:e2:9d:e3:8b:
                    c0:e7:dd:69:6a:68:78:5d:6f:a9:55:8f:e8:05:f2:
                    f6:26:be:d0:00:05:cc:e2:7f:71:1b:d2:4e:c5:30:
                    87:16:3a:e6:9b:d9:90:5e:95:fa:e9:ec:7f:6c:d3:
                    f5:00:3e:92:56:90:4b:d6:34:70:5b:7d:82:f1:e8:
                    f3:76:73:f2:43:48:fd:c9:63:73:88:19:ea:7e:53:
                    13:25:0a:4d:82:06:be:ed:5b:4c:60:29:a9:52:8b:
                    80:7d:1d:f3:29:a9:ff:b1:2f:2f:19:df:8d:8b:a8:
                    38:e1:86:e0:9a:fa:72:e2:eb:ce:e1:93:3c:b7:96:
                    8b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:4E:CE:02:CC:02:80:4E:1E:AD:55:8B:13:89:21:EF:01:AB:79:8C
            X509v3 Authority Key Identifier:
                keyid:E3:A0:56:60:BB:6F:81:84:1B:B4:9D:E5:32:F6:4F:59:2B:23:92:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/E3A05660BB6F81841BB49DE532F64F592B23928E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3A05660BB6F81841BB49DE532F64F592B23928E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/323830343a34633a3a2f33322d3438203d3e2038303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c::/32

    Signature Algorithm: sha256WithRSAEncryption
         ac:8f:b3:49:f7:76:36:79:ae:ca:40:48:32:b2:a2:3e:25:90:
         20:51:3e:44:1c:fc:dd:b9:cd:47:ba:e8:b4:c9:e3:ce:c6:f0:
         0a:12:3c:f8:e0:6c:08:d1:07:69:5b:67:75:b5:4c:47:9d:24:
         cf:42:0b:f7:b5:9c:91:5d:2b:61:63:47:04:b0:ce:ef:9b:53:
         90:31:9c:df:50:2b:e6:1e:b0:eb:b5:6e:b4:6b:c7:7c:0f:f3:
         bc:0e:4d:75:01:c6:e5:88:da:39:ce:18:0b:12:af:ab:9a:fb:
         48:6a:b1:4b:1b:cc:c9:58:a9:5b:c1:8b:d2:06:7b:08:2e:af:
         9f:7b:3e:2f:95:77:4a:50:b0:41:33:09:82:be:0e:e0:54:c5:
         33:43:89:24:dd:63:29:3f:3c:cb:66:b3:6b:99:43:af:47:32:
         c2:f4:d9:53:a0:b6:bf:bb:b1:4d:81:36:69:59:b1:f2:65:db:
         c5:9e:20:80:b7:ba:19:db:dc:62:ff:a9:f6:1c:29:f4:4c:fa:
         6d:9b:6f:69:a4:c2:dc:7e:71:e4:1e:f4:34:3d:3b:6e:21:68:
         88:dd:31:11:aa:56:00:ef:81:74:8d:4f:43:18:12:f8:c0:09:
         b6:df:6a:a4:db:55:53:7d:34:b0:bb:1a:cb:9b:7b:4c:00:b1:
         33:5c:d8:f9
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUZSCMvT/kLHs4CUkS2VPfBZNkq+8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTNBMDU2NjBCQjZGODE4NDFCQjQ5REU1MzJGNjRGNTky
QjIzOTI4RTAeFw0yNDA1MTcxMzQ0MzRaFw0yNTA1MTYxMzQ5MzRaMDMxMTAvBgNV
BAMTKEI3NEVDRTAyQ0MwMjgwNEUxRUFENTU4QjEzODkyMUVGMDFBQjc5OEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2edNkUaxpET+VtqHNvito1OLc
KL+cfqU3Lxow51/YWYIiBZDDHGxWX0v6N1KaS+VHnIPWFjf9WPHgWfBbqpaQOH1y
8HREI67AtqZG3diFoGGl2wujmGPkEK65CucHrtxm6XyCr9am+CR2hdAEQp/LP0rs
GoW0VN7/2Grp2rbvmn2A4p3ji8Dn3WlqaHhdb6lVj+gF8vYmvtAABczif3Eb0k7F
MIcWOuab2ZBelfrp7H9s0/UAPpJWkEvWNHBbfYLx6PN2c/JDSP3JY3OIGep+UxMl
Ck2CBr7tW0xgKalSi4B9HfMpqf+xLy8Z342LqDjhhuCa+nLi687hkzy3louPAgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQUt07OAswCgE4erVWLE4kh7wGreYwwHwYDVR0j
BBgwFoAU46BWYLtvgYQbtJ3lMvZPWSsjko4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjdYS1paQVV2UjluUFBFbjhOZ1cxNVRiYll6Vm85Nnl3cnh1YUx0MnU2
ZGYvMC9FM0EwNTY2MEJCNkY4MTg0MUJCNDlERTUzMkY2NEY1OTJCMjM5MjhFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UzQTA1NjYwQkI2RjgxODQx
QkI0OURFNTMyRjY0RjU5MkIyMzkyOEUuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCB
kQYIKwYBBQUHMAuGgYRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y3WEtaWkFVdlI5blBQRW44TmdXMTVUYmJZelZvOTZ5d3J4dWFMdDJ1NmRmLzAv
MzIzODMwMzQzYTM0NjMzYTNhMmYzMzMyMmQzNDM4MjAzZDNlMjAzODMwMzUzNS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8w
DQQCAAIwBwMFACgEAEwwDQYJKoZIhvcNAQELBQADggEBAKyPs0n3djZ5rspASDKy
oj4lkCBRPkQc/N25zUe66LTJ487G8AoSPPjgbAjRB2lbZ3W1TEedJM9CC/e1nJFd
K2FjRwSwzu+bU5AxnN9QK+YesOu1brRrx3wP87wOTXUBxuWI2jnOGAsSr6ua+0hq
sUsbzMlYqVvBi9IGewgur597Pi+Vd0pQsEEzCYK+DuBUxTNDiSTdYyk/PMtms2uZ
Q69HMsL02VOgtr+7sU2BNmlZsfJl28WeIIC3uhnb3GL/qfYcKfRM+m2bb2mkwtx+
ceQe9DQ9O24haIjdMRGqVgDvgXSNT0MYEvjACbbfaqTbVVN9NLC7Gsube0wAsTNc
2Pk=
-----END CERTIFICATE-----
Generated at Sun Jun 16 02:45:01 2024 by rpki-client on console-fra.rpki-client.org