Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/1/323830343a376135383a3a2f33322d3332203d3e20323731333631.roa
File:                     323830343a376135383a3a2f33322d3332203d3e20323731333631.roa (raw, json)
Hash identifier:          p9wg9YoZaqQAnc8WTHMBybcm79FtcbQGz8vtpx+6MI8=
Subject key identifier:   E3:59:E2:AA:8C:34:CC:77:C1:98:1A:0E:3C:7B:9C:12:C3:B4:DD:5A
Certificate issuer:       /CN=EC7379390EBBA183B7D419BEA48ADC613666D0A3
Certificate serial:       6A3D25D4A3D4FC3BD4AB2D6919ED6A6B1BC78536
Authority key identifier: EC:73:79:39:0E:BB:A1:83:B7:D4:19:BE:A4:8A:DC:61:36:66:D0:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC7379390EBBA183B7D419BEA48ADC613666D0A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/1/323830343a376135383a3a2f33322d3332203d3e20323731333631.roa
Signing time:             Wed 03 Apr 2024 18:31:11 +0000
ROA not before:           Wed 03 Apr 2024 18:26:11 +0000
ROA not after:            Wed 02 Apr 2025 18:31:11 +0000
asID:                     271361
IP address blocks:        2804:7a58::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/1/EC7379390EBBA183B7D419BEA48ADC613666D0A3.crl
                          rsync://rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/1/EC7379390EBBA183B7D419BEA48ADC613666D0A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC7379390EBBA183B7D419BEA48ADC613666D0A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 19:57:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:3d:25:d4:a3:d4:fc:3b:d4:ab:2d:69:19:ed:6a:6b:1b:c7:85:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC7379390EBBA183B7D419BEA48ADC613666D0A3
        Validity
            Not Before: Apr  3 18:26:11 2024 GMT
            Not After : Apr  2 18:31:11 2025 GMT
        Subject: CN=E359E2AA8C34CC77C1981A0E3C7B9C12C3B4DD5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:96:60:c8:03:da:49:ca:89:be:66:c0:7b:c1:
                    fc:ff:e8:92:18:6e:00:dd:ee:cf:13:cb:b6:3d:4e:
                    d0:67:7a:a0:e3:98:3c:77:3e:5e:73:d5:46:c5:12:
                    39:91:f6:1f:da:78:6a:22:05:08:94:72:b1:be:6a:
                    f9:c8:17:5e:1c:e5:8e:6e:5d:6e:1e:1f:8e:66:f0:
                    ee:bd:d3:75:73:24:a6:04:42:2b:07:6c:4a:40:bc:
                    4b:db:d8:05:f4:f7:41:3d:ce:e0:00:de:fb:6e:9f:
                    6e:a0:2c:75:45:b2:0f:02:b9:41:69:e6:ca:74:a4:
                    b6:14:65:9f:92:6f:9d:d0:1c:81:90:bf:b2:6a:28:
                    6a:23:3c:c1:32:75:96:98:53:54:7f:e1:93:9e:28:
                    15:cb:df:97:d8:d5:7b:3d:df:80:c5:40:31:9c:c0:
                    e6:7b:68:2a:38:bf:84:68:2d:a0:e5:4f:4c:71:c8:
                    dd:94:85:ef:55:fa:02:19:89:11:4d:1d:34:81:5b:
                    1b:fd:ae:fc:65:c8:38:fa:d3:18:0a:9e:ba:67:87:
                    80:cb:34:f9:7d:f2:69:c7:97:5b:ab:4a:d4:28:60:
                    b7:16:be:79:60:f2:2c:a6:4a:fb:e6:55:88:c9:54:
                    6f:1d:3c:23:4c:51:1b:d3:82:02:e0:7a:d8:4b:6f:
                    cc:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:59:E2:AA:8C:34:CC:77:C1:98:1A:0E:3C:7B:9C:12:C3:B4:DD:5A
            X509v3 Authority Key Identifier:
                keyid:EC:73:79:39:0E:BB:A1:83:B7:D4:19:BE:A4:8A:DC:61:36:66:D0:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/1/EC7379390EBBA183B7D419BEA48ADC613666D0A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC7379390EBBA183B7D419BEA48ADC613666D0A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/1/323830343a376135383a3a2f33322d3332203d3e20323731333631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a58::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:5e:bc:c1:f9:72:1c:35:60:10:76:b0:ed:8e:bc:0d:c7:47:
         77:ee:68:78:38:d4:72:d4:2e:8b:9f:d4:49:bc:69:bf:29:65:
         02:fa:27:17:60:e6:9c:bf:95:2f:fc:7e:14:e6:e4:73:9a:ae:
         5a:4e:55:14:10:98:9c:c7:4f:21:99:ae:49:88:de:bd:94:a9:
         f5:13:b7:33:d0:16:22:2e:8d:40:cd:6c:34:3d:9c:b0:a1:31:
         06:64:e5:e9:1b:f4:5c:cc:0c:da:c3:25:2a:b2:b0:8b:ee:0c:
         e4:6d:9b:d8:93:65:20:61:8d:e9:4a:e4:34:09:1a:6c:c3:15:
         ab:73:ef:89:c6:1c:fa:90:73:99:80:d5:0d:4e:c5:cc:87:06:
         0a:0d:fc:e9:e4:71:33:1b:b9:d6:73:b2:fa:97:04:9f:b5:61:
         f2:98:7f:24:36:1f:ce:22:c1:ed:c8:fc:c1:87:ff:35:4b:a4:
         4a:6c:3e:db:0b:64:cf:dd:34:66:9f:84:64:66:60:df:dc:cc:
         bc:38:31:cb:48:09:6d:11:fd:2f:15:85:0d:79:27:01:74:20:
         14:86:f1:7b:a3:00:1e:2c:4f:7b:92:16:05:ec:67:cb:e7:01:
         b6:39:b5:f5:23:59:1a:cd:1f:39:58:83:7b:04:8e:a6:74:be:
         1b:a3:b4:72
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUaj0l1KPU/DvUqy1pGe1qaxvHhTYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUM3Mzc5MzkwRUJCQTE4M0I3RDQxOUJFQTQ4QURDNjEz
NjY2RDBBMzAeFw0yNDA0MDMxODI2MTFaFw0yNTA0MDIxODMxMTFaMDMxMTAvBgNV
BAMTKEUzNTlFMkFBOEMzNENDNzdDMTk4MUEwRTNDN0I5QzEyQzNCNERENUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUlmDIA9pJyom+ZsB7wfz/6JIY
bgDd7s8Ty7Y9TtBneqDjmDx3Pl5z1UbFEjmR9h/aeGoiBQiUcrG+avnIF14c5Y5u
XW4eH45m8O6903VzJKYEQisHbEpAvEvb2AX090E9zuAA3vtun26gLHVFsg8CuUFp
5sp0pLYUZZ+Sb53QHIGQv7JqKGojPMEydZaYU1R/4ZOeKBXL35fY1Xs934DFQDGc
wOZ7aCo4v4RoLaDlT0xxyN2Uhe9V+gIZiRFNHTSBWxv9rvxlyDj60xgKnrpnh4DL
NPl98mnHl1urStQoYLcWvnlg8iymSvvmVYjJVG8dPCNMURvTggLgethLb8wJAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU41niqow0zHfBmBoOPHucEsO03VowHwYDVR0j
BBgwFoAU7HN5OQ67oYO31Bm+pIrcYTZm0KMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEFNaUF0ZkttZEtweE1uaFhOSzRjcnI4N1kxU2RVOG5yWUxZMlhMWFh3
MnYvMS9FQzczNzkzOTBFQkJBMTgzQjdENDE5QkVBNDhBREM2MTM2NjZEMEEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VDNzM3OTM5MEVCQkExODNC
N0Q0MTlCRUE0OEFEQzYxMzY2NkQwQTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRBTWlBdGZLbWRLcHhNbmhYTks0Y3JyODdZMVNkVThucllMWTJYTFhYdzJ2LzEv
MzIzODMwMzQzYTM3NjEzNTM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMx
MzMzNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR6WDANBgkqhkiG9w0BAQsFAAOCAQEApl68wfly
HDVgEHaw7Y68DcdHd+5oeDjUctQui5/USbxpvyllAvonF2DmnL+VL/x+FObkc5qu
Wk5VFBCYnMdPIZmuSYjevZSp9RO3M9AWIi6NQM1sND2csKExBmTl6Rv0XMwM2sMl
KrKwi+4M5G2b2JNlIGGN6UrkNAkabMMVq3PvicYc+pBzmYDVDU7FzIcGCg386eRx
Mxu51nOy+pcEn7Vh8ph/JDYfziLB7cj8wYf/NUukSmw+2wtkz900Zp+EZGZg39zM
vDgxy0gJbRH9LxWFDXknAXQgFIbxe6MAHixPe5IWBexny+cBtjm19SNZGs0fOViD
ewSOpnS+G6O0cg==
-----END CERTIFICATE-----
Generated at Thu Jun 27 21:50:11 2024 by rpki-client on console-ams.rpki-client.org