Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuJdaidoqLFp7ozw3tynaHxZvKHeKNecPr17RAN6Ksua/1/323830343a336563633a3a2f33322d3438203d3e20323636363231.roa
File:                     323830343a336563633a3a2f33322d3438203d3e20323636363231.roa (raw, json)
Hash identifier:          Dp9WiDyAtoBszEtTX/D0suwtgvFHv810QxPwYauvb3I=
Subject key identifier:   E9:66:58:EA:DD:85:15:1F:28:FA:FE:0B:6D:E5:E7:21:71:38:53:8B
Certificate issuer:       /CN=7CFFE4F07BF1202AF1654B9754000691AB38F4D2
Certificate serial:       161348663DDB59DEDF8AA6799A8C68DE8434FC98
Authority key identifier: 7C:FF:E4:F0:7B:F1:20:2A:F1:65:4B:97:54:00:06:91:AB:38:F4:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CFFE4F07BF1202AF1654B9754000691AB38F4D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuJdaidoqLFp7ozw3tynaHxZvKHeKNecPr17RAN6Ksua/1/323830343a336563633a3a2f33322d3438203d3e20323636363231.roa
Signing time:             Thu 04 Apr 2024 21:37:40 +0000
ROA not before:           Thu 04 Apr 2024 21:32:40 +0000
ROA not after:            Thu 03 Apr 2025 21:37:40 +0000
asID:                     266621
IP address blocks:        2804:3ecc::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HuJdaidoqLFp7ozw3tynaHxZvKHeKNecPr17RAN6Ksua/1/7CFFE4F07BF1202AF1654B9754000691AB38F4D2.crl
                          rsync://rpki-repo.registro.br/repo/HuJdaidoqLFp7ozw3tynaHxZvKHeKNecPr17RAN6Ksua/1/7CFFE4F07BF1202AF1654B9754000691AB38F4D2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CFFE4F07BF1202AF1654B9754000691AB38F4D2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:54:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:13:48:66:3d:db:59:de:df:8a:a6:79:9a:8c:68:de:84:34:fc:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CFFE4F07BF1202AF1654B9754000691AB38F4D2
        Validity
            Not Before: Apr  4 21:32:40 2024 GMT
            Not After : Apr  3 21:37:40 2025 GMT
        Subject: CN=E96658EADD85151F28FAFE0B6DE5E7217138538B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2b:82:fe:d7:ba:cd:b4:f0:b0:5b:98:7f:16:
                    d4:4b:7c:6b:e7:5a:ef:c2:6e:f3:79:65:05:9a:a7:
                    8d:c4:90:57:35:c2:36:01:e2:9e:5e:36:7e:67:cb:
                    1f:50:84:32:e0:77:49:91:0e:6b:38:2e:4a:72:4b:
                    44:64:6b:ea:54:c4:89:52:59:46:6f:04:78:21:53:
                    51:c5:3e:fe:15:83:10:80:40:ec:09:db:ae:9f:e8:
                    3c:2d:63:57:51:f1:7a:88:0b:25:8f:ab:16:fc:a7:
                    53:f9:ac:39:bd:39:18:83:26:c5:52:c5:a3:ca:00:
                    3c:54:31:db:82:79:c3:c7:bf:69:d2:8d:e6:09:6b:
                    f5:7f:cb:d9:60:d3:b6:ab:6c:5a:8e:bd:96:01:9a:
                    c8:4e:d9:70:6b:ff:3e:2c:34:4e:59:b3:19:f5:48:
                    b7:42:eb:25:d9:68:61:00:9a:8a:35:b2:ad:aa:24:
                    15:32:b2:5a:f7:4e:6d:54:c1:1e:ea:87:51:62:11:
                    08:5a:5c:9e:c1:8a:eb:a4:76:69:d3:1f:33:b7:e7:
                    1f:6b:c2:3c:04:86:96:5e:11:3d:43:e2:6f:a4:80:
                    32:a0:42:2b:2f:43:dd:75:7a:6e:de:19:77:d2:69:
                    5a:bb:16:6e:a6:bc:74:49:a7:78:b0:1e:78:1c:b7:
                    33:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:66:58:EA:DD:85:15:1F:28:FA:FE:0B:6D:E5:E7:21:71:38:53:8B
            X509v3 Authority Key Identifier:
                keyid:7C:FF:E4:F0:7B:F1:20:2A:F1:65:4B:97:54:00:06:91:AB:38:F4:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuJdaidoqLFp7ozw3tynaHxZvKHeKNecPr17RAN6Ksua/1/7CFFE4F07BF1202AF1654B9754000691AB38F4D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CFFE4F07BF1202AF1654B9754000691AB38F4D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuJdaidoqLFp7ozw3tynaHxZvKHeKNecPr17RAN6Ksua/1/323830343a336563633a3a2f33322d3438203d3e20323636363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ecc::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:af:d0:c9:9b:cb:94:b0:29:e8:fb:6d:9c:e6:01:1c:c1:9d:
         2f:09:73:1b:6a:15:a0:95:b9:f9:95:e3:47:56:f9:a6:27:65:
         b1:13:28:2c:8b:a8:80:b6:09:93:75:a9:29:ba:3b:ea:69:76:
         04:ee:cb:4a:58:9d:39:24:f3:79:bd:87:21:9e:9b:bf:a5:46:
         3c:3d:1b:e2:ea:27:01:ea:f8:ed:d0:59:0b:ea:bb:02:9c:b2:
         03:6e:35:c5:22:3d:dc:10:e0:c3:65:38:58:6b:86:05:ae:9b:
         5e:47:ab:03:b9:57:f0:a8:d2:1b:6d:49:63:5a:e0:4b:4d:17:
         8a:23:63:ef:c7:e5:48:4a:f8:7d:63:ef:a4:66:c4:53:e0:81:
         fa:6b:d2:4c:ca:f2:ff:38:23:a8:92:57:9b:b0:7c:9f:ab:f9:
         ba:94:5c:68:60:d3:11:2a:bd:c3:0c:a6:a0:44:e0:ec:83:36:
         b4:67:e1:70:74:dd:bb:5f:09:29:89:75:ff:1b:02:16:56:d0:
         2b:31:1d:fc:0a:f2:45:71:90:84:cd:e9:2d:da:1b:a7:a2:f0:
         23:7a:da:07:46:ff:e0:6f:01:23:0f:00:f7:91:7b:4d:bc:1c:
         f6:91:59:31:51:ba:2b:f5:5d:4a:a2:08:2d:87:58:75:01:4a:
         03:70:d9:2e
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUFhNIZj3bWd7fiqZ5moxo3oQ0/JgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NGRkU0RjA3QkYxMjAyQUYxNjU0Qjk3NTQwMDA2OTFB
QjM4RjREMjAeFw0yNDA0MDQyMTMyNDBaFw0yNTA0MDMyMTM3NDBaMDMxMTAvBgNV
BAMTKEU5NjY1OEVBREQ4NTE1MUYyOEZBRkUwQjZERTVFNzIxNzEzODUzOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7K4L+17rNtPCwW5h/FtRLfGvn
Wu/CbvN5ZQWap43EkFc1wjYB4p5eNn5nyx9QhDLgd0mRDms4LkpyS0Rka+pUxIlS
WUZvBHghU1HFPv4VgxCAQOwJ266f6DwtY1dR8XqICyWPqxb8p1P5rDm9ORiDJsVS
xaPKADxUMduCecPHv2nSjeYJa/V/y9lg07arbFqOvZYBmshO2XBr/z4sNE5Zsxn1
SLdC6yXZaGEAmoo1sq2qJBUyslr3Tm1UwR7qh1FiEQhaXJ7BiuukdmnTHzO35x9r
wjwEhpZeET1D4m+kgDKgQisvQ911em7eGXfSaVq7Fm6mvHRJp3iwHngctzO1AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU6WZY6t2FFR8o+v4LbeXnIXE4U4swHwYDVR0j
BBgwFoAUfP/k8HvxICrxZUuXVAAGkas49NIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHVKZGFpZG9xTEZwN296dzN0eW5hSHhadktIZUtOZWNQcjE3UkFONktz
dWEvMS83Q0ZGRTRGMDdCRjEyMDJBRjE2NTRCOTc1NDAwMDY5MUFCMzhGNEQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdDRkZFNEYwN0JGMTIwMkFG
MTY1NEI5NzU0MDAwNjkxQUIzOEY0RDIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h1SmRhaWRvcUxGcDdvenczdHluYUh4WnZLSGVLTmVjUHIxN1JBTjZLc3VhLzEv
MzIzODMwMzQzYTMzNjU2MzYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM2
MzYzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ+zDANBgkqhkiG9w0BAQsFAAOCAQEARK/QyZvL
lLAp6PttnOYBHMGdLwlzG2oVoJW5+ZXjR1b5pidlsRMoLIuogLYJk3WpKbo76ml2
BO7LSlidOSTzeb2HIZ6bv6VGPD0b4uonAer47dBZC+q7ApyyA241xSI93BDgw2U4
WGuGBa6bXkerA7lX8KjSG21JY1rgS00XiiNj78flSEr4fWPvpGbEU+CB+mvSTMry
/zgjqJJXm7B8n6v5upRcaGDTESq9wwymoETg7IM2tGfhcHTdu18JKYl1/xsCFlbQ
KzEd/AryRXGQhM3pLdobp6LwI3raB0b/4G8BIw8A95F7Tbwc9pFZMVG6K/VdSqII
LYdYdQFKA3DZLg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:57 2024 by rpki-client on console-ams.rpki-client.org