Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Vtbkx4KTL9qNX6oFjGE7Fx5XWpgwMbprPr58JBnHRGd/2/323830343a323134343a3a2f33322d3438203d3e203532373935.roa
File:                     323830343a323134343a3a2f33322d3438203d3e203532373935.roa (raw, json)
Hash identifier:          qlDiWy5KR88GkRRNziG9p8oAQxt3Wmh8iJHelB126rU=
Subject key identifier:   F3:A7:B6:80:AC:89:F6:E2:31:E2:ED:A4:C2:74:5C:41:60:09:AA:21
Certificate issuer:       /CN=2EEE5BE5B1D72FB8B9DFF265FC5A82E8D4740AA0
Certificate serial:       057ECE84D7BAA00FE10EE367A89A0C279E1A3867
Authority key identifier: 2E:EE:5B:E5:B1:D7:2F:B8:B9:DF:F2:65:FC:5A:82:E8:D4:74:0A:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EEE5BE5B1D72FB8B9DFF265FC5A82E8D4740AA0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Vtbkx4KTL9qNX6oFjGE7Fx5XWpgwMbprPr58JBnHRGd/2/323830343a323134343a3a2f33322d3438203d3e203532373935.roa
Signing time:             Fri 05 Apr 2024 14:20:12 +0000
ROA not before:           Fri 05 Apr 2024 14:15:12 +0000
ROA not after:            Fri 04 Apr 2025 14:20:12 +0000
asID:                     52795
IP address blocks:        2804:2144::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Vtbkx4KTL9qNX6oFjGE7Fx5XWpgwMbprPr58JBnHRGd/2/2EEE5BE5B1D72FB8B9DFF265FC5A82E8D4740AA0.crl
                          rsync://rpki-repo.registro.br/repo/Vtbkx4KTL9qNX6oFjGE7Fx5XWpgwMbprPr58JBnHRGd/2/2EEE5BE5B1D72FB8B9DFF265FC5A82E8D4740AA0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EEE5BE5B1D72FB8B9DFF265FC5A82E8D4740AA0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:04:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:7e:ce:84:d7:ba:a0:0f:e1:0e:e3:67:a8:9a:0c:27:9e:1a:38:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EEE5BE5B1D72FB8B9DFF265FC5A82E8D4740AA0
        Validity
            Not Before: Apr  5 14:15:12 2024 GMT
            Not After : Apr  4 14:20:12 2025 GMT
        Subject: CN=F3A7B680AC89F6E231E2EDA4C2745C416009AA21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b7:13:2b:8e:a4:d2:2c:d4:be:8e:34:a4:56:
                    09:43:f6:db:8e:7a:16:19:2c:00:33:e7:57:bf:fa:
                    e7:24:a5:68:ab:f2:28:7c:6d:92:a5:6c:54:9d:c8:
                    73:d0:ce:e4:b4:fe:78:f1:bc:41:97:0c:a9:88:f3:
                    0d:29:a0:b5:9e:cb:b9:ca:ce:49:f3:0f:9a:73:7c:
                    98:89:f1:52:72:8a:35:4a:bb:24:33:21:a5:02:39:
                    2c:57:13:cd:8c:ca:74:29:b9:6d:b0:e4:a7:b0:46:
                    20:1c:3d:88:d2:03:f5:38:e3:9a:38:52:d1:f9:9a:
                    ac:9b:d3:68:1a:a0:f1:aa:61:27:d5:76:1f:11:99:
                    f0:6f:98:dc:0c:f0:32:33:32:91:9f:ce:fa:e2:e2:
                    90:2f:64:21:9d:d0:4d:89:48:c4:ee:c2:6b:3c:44:
                    41:cc:95:e6:13:d1:0c:dc:3c:58:51:bd:9f:d3:f7:
                    5e:b7:7b:fe:11:5b:75:ca:e7:f3:8a:89:a8:51:ff:
                    51:f2:84:6b:35:68:96:0b:02:7e:57:b6:7e:7e:10:
                    7f:4b:62:d4:d1:e4:38:3b:de:ab:cb:74:c0:d3:99:
                    e5:87:6e:cb:2c:7c:89:8b:b8:ed:27:5b:32:fb:72:
                    62:c2:e5:c5:6e:3c:d7:20:4b:8c:8e:c6:44:66:14:
                    94:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A7:B6:80:AC:89:F6:E2:31:E2:ED:A4:C2:74:5C:41:60:09:AA:21
            X509v3 Authority Key Identifier:
                keyid:2E:EE:5B:E5:B1:D7:2F:B8:B9:DF:F2:65:FC:5A:82:E8:D4:74:0A:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Vtbkx4KTL9qNX6oFjGE7Fx5XWpgwMbprPr58JBnHRGd/2/2EEE5BE5B1D72FB8B9DFF265FC5A82E8D4740AA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EEE5BE5B1D72FB8B9DFF265FC5A82E8D4740AA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Vtbkx4KTL9qNX6oFjGE7Fx5XWpgwMbprPr58JBnHRGd/2/323830343a323134343a3a2f33322d3438203d3e203532373935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2144::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:f4:e8:37:70:56:9e:bc:5e:e9:39:bc:a7:a0:40:fc:9e:7f:
         04:b4:f3:a9:da:49:7e:f3:e3:48:c3:62:b3:0b:6d:a3:d9:21:
         f0:8c:a5:32:3b:36:00:0e:7b:ec:d6:a0:53:13:1c:81:f3:0b:
         e2:65:34:13:f7:76:f4:25:7b:28:52:a0:58:2a:e1:87:1d:18:
         48:c7:c8:70:df:b1:9a:ca:9e:4c:fe:93:b8:5d:23:ca:ff:f4:
         8a:3f:9f:c5:10:5e:f4:56:ab:9b:3c:46:d2:99:b4:2b:f7:0b:
         33:a1:50:12:72:32:be:1e:03:13:5d:a1:ed:5d:1f:54:a7:7c:
         04:d8:56:ca:1d:08:04:5b:14:8b:4f:42:5f:8c:1d:7e:66:4d:
         41:37:25:07:5d:39:f9:87:19:dd:a9:64:b6:3c:4a:91:de:f5:
         87:9b:e6:81:4b:a6:5d:1f:e2:0b:16:4a:5a:d6:cf:e6:bb:c5:
         b3:67:b4:0f:9d:2d:59:ff:4d:18:dc:e7:6c:44:49:a6:02:79:
         ce:fd:83:94:1a:31:a8:5b:b8:a3:04:b1:6f:c4:c2:7f:59:33:
         c6:f5:47:21:a6:31:c7:61:24:2c:73:04:4f:52:b7:06:db:46:
         9c:fd:88:ab:30:9f:d3:33:97:c5:64:e9:60:b6:fa:93:bc:45:
         63:81:95:1d
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUBX7OhNe6oA/hDuNnqJoMJ54aOGcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkVFRTVCRTVCMUQ3MkZCOEI5REZGMjY1RkM1QTgyRThE
NDc0MEFBMDAeFw0yNDA0MDUxNDE1MTJaFw0yNTA0MDQxNDIwMTJaMDMxMTAvBgNV
BAMTKEYzQTdCNjgwQUM4OUY2RTIzMUUyRURBNEMyNzQ1QzQxNjAwOUFBMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEtxMrjqTSLNS+jjSkVglD9tuO
ehYZLAAz51e/+uckpWir8ih8bZKlbFSdyHPQzuS0/njxvEGXDKmI8w0poLWey7nK
zknzD5pzfJiJ8VJyijVKuyQzIaUCOSxXE82MynQpuW2w5KewRiAcPYjSA/U445o4
UtH5mqyb02gaoPGqYSfVdh8RmfBvmNwM8DIzMpGfzvri4pAvZCGd0E2JSMTuwms8
REHMleYT0QzcPFhRvZ/T9163e/4RW3XK5/OKiahR/1HyhGs1aJYLAn5Xtn5+EH9L
YtTR5Dg73qvLdMDTmeWHbsssfImLuO0nWzL7cmLC5cVuPNcgS4yOxkRmFJSdAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQU86e2gKyJ9uIx4u2kwnRcQWAJqiEwHwYDVR0j
BBgwFoAULu5b5bHXL7i53/Jl/FqC6NR0CqAwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9WdGJreDRLVEw5cU5YNm9GakdFN0Z4NVhXcGd3TWJwclByNThKQm5IUkdk
LzIvMkVFRTVCRTVCMUQ3MkZCOEI5REZGMjY1RkM1QTgyRThENDc0MEFBMC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yRUVFNUJFNUIxRDcyRkI4QjlE
RkYyNjVGQzVBODJFOEQ0NzQwQUEwLmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYG
CCsGAQUFBzALhoGJcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9W
dGJreDRLVEw5cU5YNm9GakdFN0Z4NVhXcGd3TWJwclByNThKQm5IUkdkLzIvMzIz
ODMwMzQzYTMyMzEzNDM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzUzMjM3Mzkz
NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgEIUQwDQYJKoZIhvcNAQELBQADggEBAIf06DdwVp68Xuk5
vKegQPyefwS086naSX7z40jDYrMLbaPZIfCMpTI7NgAOe+zWoFMTHIHzC+JlNBP3
dvQleyhSoFgq4YcdGEjHyHDfsZrKnkz+k7hdI8r/9Io/n8UQXvRWq5s8RtKZtCv3
CzOhUBJyMr4eAxNdoe1dH1SnfATYVsodCARbFItPQl+MHX5mTUE3JQddOfmHGd2p
ZLY8SpHe9Yeb5oFLpl0f4gsWSlrWz+a7xbNntA+dLVn/TRjc52xESaYCec79g5Qa
MahbuKMEsW/Ewn9ZM8b1RyGmMcdhJCxzBE9StwbbRpz9iKswn9Mzl8Vk6WC2+pO8
RWOBlR0=
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:06 2024 by rpki-client on console-fra.rpki-client.org