Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ac1wUWCNqu5pE9Mk5SaYYPDN191jzvpGQ3s792X1MTEV/0/323830343a326665303a3a2f33322d3332203d3e20323634393138.roa
File:                     323830343a326665303a3a2f33322d3332203d3e20323634393138.roa (raw, json)
Hash identifier:          itZ8l0m+GCDLYlXJmHTdYBN83SUwJJwg6RJh7VjVJvU=
Subject key identifier:   87:34:15:D4:D5:A6:5F:85:4F:DF:3C:60:36:73:C5:2A:53:CD:2A:E4
Certificate issuer:       /CN=E5E06AC06C4C0D4B3CAD9851C4783DD155D6B947
Certificate serial:       395ADC3A92050C19A7D3C995A6B151236E5C946C
Authority key identifier: E5:E0:6A:C0:6C:4C:0D:4B:3C:AD:98:51:C4:78:3D:D1:55:D6:B9:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E5E06AC06C4C0D4B3CAD9851C4783DD155D6B947.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ac1wUWCNqu5pE9Mk5SaYYPDN191jzvpGQ3s792X1MTEV/0/323830343a326665303a3a2f33322d3332203d3e20323634393138.roa
Signing time:             Wed 13 Dec 2023 12:17:23 +0000
ROA not before:           Wed 13 Dec 2023 12:12:23 +0000
ROA not after:            Wed 11 Dec 2024 12:17:23 +0000
asID:                     264918
IP address blocks:        2804:2fe0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ac1wUWCNqu5pE9Mk5SaYYPDN191jzvpGQ3s792X1MTEV/0/E5E06AC06C4C0D4B3CAD9851C4783DD155D6B947.crl
                          rsync://rpki-repo.registro.br/repo/Ac1wUWCNqu5pE9Mk5SaYYPDN191jzvpGQ3s792X1MTEV/0/E5E06AC06C4C0D4B3CAD9851C4783DD155D6B947.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E5E06AC06C4C0D4B3CAD9851C4783DD155D6B947.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 04:58:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:5a:dc:3a:92:05:0c:19:a7:d3:c9:95:a6:b1:51:23:6e:5c:94:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5E06AC06C4C0D4B3CAD9851C4783DD155D6B947
        Validity
            Not Before: Dec 13 12:12:23 2023 GMT
            Not After : Dec 11 12:17:23 2024 GMT
        Subject: CN=873415D4D5A65F854FDF3C603673C52A53CD2AE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ac:c2:12:78:64:da:e2:74:35:cc:91:e7:15:
                    51:6d:a2:f4:3f:63:24:f8:01:6e:90:4f:15:29:c2:
                    58:8d:aa:d1:0c:69:8a:72:68:9a:c7:fa:5f:65:93:
                    21:48:24:2f:67:d8:2c:8f:4f:78:96:57:5b:ff:72:
                    28:8f:48:f7:17:ee:6e:82:c9:f0:b9:59:c4:55:e3:
                    c9:5f:ea:55:c2:42:78:fc:bc:d7:77:75:3d:76:12:
                    ae:cd:e1:17:0d:af:8d:62:57:a2:66:6c:57:17:8c:
                    e3:ac:a1:13:e5:b0:d8:fd:3f:c9:b4:d2:14:15:eb:
                    d4:7f:cc:37:d0:a1:74:c8:0b:38:e4:bd:2b:75:78:
                    07:db:b1:7d:6b:01:12:73:f1:0d:26:f3:7e:6d:4e:
                    b9:8a:cf:1f:d6:3a:a3:de:f6:bb:45:af:34:a6:2d:
                    51:34:9d:e4:10:29:bf:c5:fb:86:eb:18:71:5d:4d:
                    09:e5:18:e2:7f:d7:07:53:0f:34:9e:2e:df:53:11:
                    f7:43:a8:b6:aa:1c:ca:42:9f:c9:6f:4e:17:69:89:
                    7b:35:4f:96:3c:be:09:71:e1:84:00:92:67:6f:9d:
                    e6:59:5b:82:00:44:6c:58:a2:96:d4:b7:a8:d0:b0:
                    a2:45:89:3d:0d:d3:3d:f0:56:21:9b:92:c8:a1:40:
                    30:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:34:15:D4:D5:A6:5F:85:4F:DF:3C:60:36:73:C5:2A:53:CD:2A:E4
            X509v3 Authority Key Identifier:
                keyid:E5:E0:6A:C0:6C:4C:0D:4B:3C:AD:98:51:C4:78:3D:D1:55:D6:B9:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ac1wUWCNqu5pE9Mk5SaYYPDN191jzvpGQ3s792X1MTEV/0/E5E06AC06C4C0D4B3CAD9851C4783DD155D6B947.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E5E06AC06C4C0D4B3CAD9851C4783DD155D6B947.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ac1wUWCNqu5pE9Mk5SaYYPDN191jzvpGQ3s792X1MTEV/0/323830343a326665303a3a2f33322d3332203d3e20323634393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2fe0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:d6:d9:1c:45:81:9c:fe:91:15:d5:35:d1:a1:21:f2:d2:39:
         3c:6b:17:1c:52:e5:a4:ea:30:e8:dd:fd:e0:ff:ee:f1:f4:c8:
         38:95:24:23:cb:8b:79:ef:07:a5:b6:29:42:06:32:0a:95:17:
         a8:98:26:4f:f1:a2:cc:7c:c1:6f:5e:83:a0:96:c4:ae:33:c6:
         8e:57:7f:61:17:64:eb:18:1f:49:68:ad:0f:34:da:a5:57:e6:
         bb:37:2f:10:e2:44:d2:4d:fd:dc:ab:ce:ff:57:72:cd:70:c7:
         2a:8e:c9:28:b6:c5:20:b9:b8:9c:74:1d:31:1e:a0:7a:8e:8c:
         ac:59:14:cb:50:49:97:91:68:14:02:0c:4d:6b:99:49:8c:6c:
         4b:3e:aa:a9:99:7b:ef:e0:7a:53:25:46:67:51:4e:97:d9:88:
         b0:eb:e4:a3:20:bc:e9:0b:ce:fe:22:55:8b:53:73:7d:4a:86:
         e5:79:27:bd:4f:6c:8c:40:ba:a4:ec:95:92:a8:94:be:a3:1b:
         63:1a:18:6f:90:a4:36:3c:23:b4:10:80:3a:3e:2b:45:8c:42:
         9a:7b:05:f4:bf:d5:5e:75:3d:90:c9:91:f3:a2:01:04:f7:5b:
         93:79:bb:2c:9c:8a:30:d0:d2:6f:3e:67:d3:f0:e6:b0:09:b6:
         63:ed:a5:5f
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUOVrcOpIFDBmn08mVprFRI25clGwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTVFMDZBQzA2QzRDMEQ0QjNDQUQ5ODUxQzQ3ODNERDE1
NUQ2Qjk0NzAeFw0yMzEyMTMxMjEyMjNaFw0yNDEyMTExMjE3MjNaMDMxMTAvBgNV
BAMTKDg3MzQxNUQ0RDVBNjVGODU0RkRGM0M2MDM2NzNDNTJBNTNDRDJBRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtrMISeGTa4nQ1zJHnFVFtovQ/
YyT4AW6QTxUpwliNqtEMaYpyaJrH+l9lkyFIJC9n2CyPT3iWV1v/ciiPSPcX7m6C
yfC5WcRV48lf6lXCQnj8vNd3dT12Eq7N4RcNr41iV6JmbFcXjOOsoRPlsNj9P8m0
0hQV69R/zDfQoXTICzjkvSt1eAfbsX1rARJz8Q0m835tTrmKzx/WOqPe9rtFrzSm
LVE0neQQKb/F+4brGHFdTQnlGOJ/1wdTDzSeLt9TEfdDqLaqHMpCn8lvThdpiXs1
T5Y8vglx4YQAkmdvneZZW4IARGxYopbUt6jQsKJFiT0N0z3wViGbksihQDC/AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUhzQV1NWmX4VP3zxgNnPFKlPNKuQwHwYDVR0j
BBgwFoAU5eBqwGxMDUs8rZhRxHg90VXWuUcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWMxd1VXQ05xdTVwRTlNazVTYVlZUEROMTkxanp2cEdRM3M3OTJYMU1U
RVYvMC9FNUUwNkFDMDZDNEMwRDRCM0NBRDk4NTFDNDc4M0REMTU1RDZCOTQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0U1RTA2QUMwNkM0QzBENEIz
Q0FEOTg1MUM0NzgzREQxNTVENkI5NDcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FjMXdVV0NOcXU1cEU5TWs1U2FZWVBETjE5MWp6dnBHUTNzNzkyWDFNVEVWLzAv
MzIzODMwMzQzYTMyNjY2NTMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM0
MzkzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQv4DANBgkqhkiG9w0BAQsFAAOCAQEAHNbZHEWB
nP6RFdU10aEh8tI5PGsXHFLlpOow6N394P/u8fTIOJUkI8uLee8HpbYpQgYyCpUX
qJgmT/GizHzBb16DoJbErjPGjld/YRdk6xgfSWitDzTapVfmuzcvEOJE0k393KvO
/1dyzXDHKo7JKLbFILm4nHQdMR6geo6MrFkUy1BJl5FoFAIMTWuZSYxsSz6qqZl7
7+B6UyVGZ1FOl9mIsOvkoyC86QvO/iJVi1NzfUqG5XknvU9sjEC6pOyVkqiUvqMb
YxoYb5CkNjwjtBCAOj4rRYxCmnsF9L/VXnU9kMmR86IBBPdbk3m7LJyKMNDSbz5n
0/DmsAm2Y+2lXw==
-----END CERTIFICATE-----
Generated at Tue Jan 9 03:49:04 2024 by rpki-client on console.sobornost.net