Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a3a2f33322d3438203d3e203532353237.roa
File:                     323830343a6465633a3a2f33322d3438203d3e203532353237.roa (raw, json)
Hash identifier:          6v3+HIaThvSjC2wBOAesAPIzGmpoz2PesVbkSTGlyNI=
Subject key identifier:   EE:39:EB:32:CB:98:7C:89:72:76:EC:07:3B:AC:31:96:7C:96:04:F0
Certificate issuer:       /CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
Certificate serial:       3EF51E89F1CE8CA8305697FE50A072E70B963815
Authority key identifier: 7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a3a2f33322d3438203d3e203532353237.roa
Signing time:             Wed 05 Jun 2024 19:08:55 +0000
ROA not before:           Wed 05 Jun 2024 19:03:55 +0000
ROA not after:            Wed 04 Jun 2025 19:08:55 +0000
asID:                     52527
IP address blocks:        2804:dec::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.crl
                          rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 16 Jun 2024 19:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:f5:1e:89:f1:ce:8c:a8:30:56:97:fe:50:a0:72:e7:0b:96:38:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
        Validity
            Not Before: Jun  5 19:03:55 2024 GMT
            Not After : Jun  4 19:08:55 2025 GMT
        Subject: CN=EE39EB32CB987C897276EC073BAC31967C9604F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:08:be:c1:bd:b5:48:ed:9a:05:21:e7:51:06:
                    8b:46:fa:4c:f4:82:96:9b:9a:a5:0a:ee:73:ad:c2:
                    5e:fb:f4:fa:8a:34:3e:3d:08:94:c1:d6:91:38:f2:
                    25:87:bb:f7:63:8b:9a:70:56:c7:23:c1:cc:c9:1b:
                    80:ce:82:f1:9a:e0:3c:8a:24:a7:e5:12:f9:54:12:
                    71:6c:e8:45:0c:aa:76:4f:17:cc:7a:3a:60:50:21:
                    4a:7b:29:8c:a9:e7:5a:61:aa:c3:e1:95:5b:7e:ed:
                    bf:2a:16:17:99:2d:e2:ed:fb:8e:65:1f:18:4c:34:
                    98:e7:8d:5f:2e:47:7e:9f:77:3f:b3:77:ab:a1:d2:
                    23:9d:4c:67:31:ec:6c:44:bd:85:88:28:ad:47:f3:
                    79:78:3f:b1:e5:61:b7:85:e8:92:12:7a:3a:d2:95:
                    d9:85:49:da:ae:24:8c:47:e9:5a:d6:d4:d3:91:0e:
                    c0:66:70:7e:36:02:6e:af:09:07:38:49:82:ac:ac:
                    b7:c9:77:9b:3f:b2:65:85:bf:ab:69:62:c4:42:c7:
                    de:cc:ac:51:d1:a7:61:53:79:30:c9:9b:2b:55:a7:
                    6a:44:30:7d:6f:ce:fe:a8:c6:1a:cf:d6:d4:51:0d:
                    7e:d0:64:7b:69:84:85:51:7f:75:d1:3b:dd:25:89:
                    39:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:39:EB:32:CB:98:7C:89:72:76:EC:07:3B:AC:31:96:7C:96:04:F0
            X509v3 Authority Key Identifier:
                keyid:7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a3a2f33322d3438203d3e203532353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:dec::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:24:45:6e:d7:0f:93:c6:49:51:2e:21:c8:82:51:62:13:94:
         c4:ed:68:2c:fa:99:4e:c3:29:f2:03:00:22:c6:44:61:79:d1:
         b5:7b:a7:e6:09:1d:63:9e:04:12:40:4f:b6:8c:82:1d:58:00:
         cf:b8:73:0d:19:cf:8a:8c:fa:ab:30:83:88:4c:8d:59:09:e0:
         83:a9:4a:29:d9:a8:34:2f:ca:19:0f:d0:4f:68:ac:1f:c5:d4:
         dd:32:a5:a6:31:eb:2a:9c:40:cf:45:18:0d:c5:ee:2e:50:23:
         50:14:dd:a0:e0:26:6b:e0:36:59:f6:09:cc:ac:3c:6f:8e:a0:
         bd:b6:ac:ef:34:33:82:9e:a3:96:2f:38:ee:af:e2:3d:44:82:
         20:10:5a:b6:a1:79:96:74:d7:39:e7:64:3b:59:56:78:3d:62:
         84:e7:00:c2:0e:36:dd:dc:65:f8:00:79:de:d3:ac:0f:e7:7c:
         33:45:ee:d5:43:d7:2d:32:1b:c1:22:8d:fa:05:5a:5f:1d:24:
         4e:77:fc:02:a3:6a:d9:80:bf:12:12:c7:f1:18:14:0f:4a:f8:
         c7:60:6d:b6:89:c0:d3:ee:5d:0c:c7:4b:bc:f6:5d:38:61:34:
         97:f4:3d:1c:5d:3f:b7:43:94:ef:70:dd:4d:74:ab:db:b5:bb:
         80:01:89:4a
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUPvUeifHOjKgwVpf+UKBy5wuWOBUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0FFQjk1OTE1MDQ1NkVDMTY3NEU5MUUwODRGMkM0RUY1
QjFBN0VCNDAeFw0yNDA2MDUxOTAzNTVaFw0yNTA2MDQxOTA4NTVaMDMxMTAvBgNV
BAMTKEVFMzlFQjMyQ0I5ODdDODk3Mjc2RUMwNzNCQUMzMTk2N0M5NjA0RjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeCL7BvbVI7ZoFIedRBotG+kz0
gpabmqUK7nOtwl779PqKND49CJTB1pE48iWHu/dji5pwVscjwczJG4DOgvGa4DyK
JKflEvlUEnFs6EUMqnZPF8x6OmBQIUp7KYyp51phqsPhlVt+7b8qFheZLeLt+45l
HxhMNJjnjV8uR36fdz+zd6uh0iOdTGcx7GxEvYWIKK1H83l4P7HlYbeF6JISejrS
ldmFSdquJIxH6VrW1NORDsBmcH42Am6vCQc4SYKsrLfJd5s/smWFv6tpYsRCx97M
rFHRp2FTeTDJmytVp2pEMH1vzv6oxhrP1tRRDX7QZHtphIVRf3XRO90liTnzAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQU7jnrMsuYfIlyduwHO6wxlnyWBPAwHwYDVR0j
BBgwFoAUeuuVkVBFbsFnTpHghPLE71safrQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSExYWEhFaDZSNEJXQUJ3WjZKdGNSUGl1S0RRaU5aZnM3R1k5V2RlZ2da
SkovMC83QUVCOTU5MTUwNDU2RUMxNjc0RTkxRTA4NEYyQzRFRjVCMUE3RUI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdBRUI5NTkxNTA0NTZFQzE2
NzRFOTFFMDg0RjJDNEVGNUIxQTdFQjQuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hMWFhIRWg2UjRCV0FCd1o2SnRjUlBpdUtEUWlOWmZzN0dZOVdkZWdnWkpKLzAv
MzIzODMwMzQzYTY0NjU2MzNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzIzNTMy
Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBA3sMA0GCSqGSIb3DQEBCwUAA4IBAQBiJEVu1w+TxklR
LiHIglFiE5TE7Wgs+plOwynyAwAixkRhedG1e6fmCR1jngQSQE+2jIIdWADPuHMN
Gc+KjPqrMIOITI1ZCeCDqUop2ag0L8oZD9BPaKwfxdTdMqWmMesqnEDPRRgNxe4u
UCNQFN2g4CZr4DZZ9gnMrDxvjqC9tqzvNDOCnqOWLzjur+I9RIIgEFq2oXmWdNc5
52Q7WVZ4PWKE5wDCDjbd3GX4AHne06wP53wzRe7VQ9ctMhvBIo36BVpfHSROd/wC
o2rZgL8SEsfxGBQPSvjHYG22icDT7l0Mx0u89l04YTSX9D0cXT+3Q5TvcN1NdKvb
tbuAAYlK
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:30:50 2024 by rpki-client on console-ams.rpki-client.org