Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/323830343a383666343a383030303a3a2f33342d3334203d3e20323732363737.roa
File:                     323830343a383666343a383030303a3a2f33342d3334203d3e20323732363737.roa (raw, json)
Hash identifier:          ipB+StT/m8ozVGrEmxhDyGKrWxLmMvrNNqvYSPL0U8Y=
Subject key identifier:   75:06:0B:F1:66:B9:A1:7C:F1:24:99:86:8A:71:21:92:96:77:C0:BC
Certificate issuer:       /CN=E1C3821086E172D7404AE335C21C2D33F448F991
Certificate serial:       5534ACA3B43B210187E68D60E4A6F0C9AE2B193B
Authority key identifier: E1:C3:82:10:86:E1:72:D7:40:4A:E3:35:C2:1C:2D:33:F4:48:F9:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1C3821086E172D7404AE335C21C2D33F448F991.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/323830343a383666343a383030303a3a2f33342d3334203d3e20323732363737.roa
Signing time:             Fri 10 May 2024 22:18:21 +0000
ROA not before:           Fri 10 May 2024 22:13:21 +0000
ROA not after:            Fri 09 May 2025 22:18:21 +0000
asID:                     272677
IP address blocks:        2804:86f4:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/E1C3821086E172D7404AE335C21C2D33F448F991.crl
                          rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/E1C3821086E172D7404AE335C21C2D33F448F991.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1C3821086E172D7404AE335C21C2D33F448F991.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 08:55:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:34:ac:a3:b4:3b:21:01:87:e6:8d:60:e4:a6:f0:c9:ae:2b:19:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1C3821086E172D7404AE335C21C2D33F448F991
        Validity
            Not Before: May 10 22:13:21 2024 GMT
            Not After : May  9 22:18:21 2025 GMT
        Subject: CN=75060BF166B9A17CF12499868A7121929677C0BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7d:2a:54:44:a4:ea:da:e3:ba:4a:d0:42:ec:
                    50:fd:11:f8:f8:c5:d3:16:20:b2:c9:be:5a:05:8a:
                    e3:2c:0a:5f:74:67:08:dc:92:d5:8d:13:fb:70:f0:
                    9d:e6:69:46:8a:f0:90:c6:d7:09:9f:b4:4d:fa:7b:
                    fd:a5:26:0c:2e:78:77:d7:9c:d5:15:f8:4d:08:8c:
                    75:62:48:9f:c4:22:6d:38:21:50:40:c1:3b:bf:db:
                    97:9a:e2:3e:2e:a2:5b:c5:70:3f:0a:99:87:8e:33:
                    5d:55:fb:38:1c:fe:64:ef:7c:12:91:09:d7:b5:ff:
                    bf:0e:27:53:a0:be:99:d8:94:a3:af:77:f5:3f:a5:
                    94:7b:80:56:46:40:40:78:72:ae:93:84:46:44:cb:
                    22:81:ac:90:be:5d:cc:37:a4:32:63:87:0f:c2:a9:
                    07:64:44:05:32:4a:8c:a6:b6:01:e8:be:dd:61:56:
                    63:0a:89:e9:5c:fd:de:e8:b6:20:30:2f:cc:d8:47:
                    70:ce:8d:30:eb:f0:2e:56:ed:2e:c6:79:be:54:f4:
                    a2:4a:79:cb:00:9d:83:03:e1:51:18:93:ad:28:3b:
                    ef:0a:78:8a:f8:d5:51:c0:e4:67:03:68:cf:f8:d9:
                    7a:25:8a:42:77:56:56:80:ec:8d:1f:f4:bf:a5:dd:
                    41:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:06:0B:F1:66:B9:A1:7C:F1:24:99:86:8A:71:21:92:96:77:C0:BC
            X509v3 Authority Key Identifier:
                keyid:E1:C3:82:10:86:E1:72:D7:40:4A:E3:35:C2:1C:2D:33:F4:48:F9:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/E1C3821086E172D7404AE335C21C2D33F448F991.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1C3821086E172D7404AE335C21C2D33F448F991.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/323830343a383666343a383030303a3a2f33342d3334203d3e20323732363737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:86f4:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         87:7d:4c:b3:d6:fd:b0:52:63:f8:6c:7d:a2:1c:2a:1d:04:61:
         fc:55:be:6a:fc:8f:38:16:c6:2f:de:6e:1a:38:be:9a:61:7b:
         aa:c4:68:0d:70:b7:9b:1a:c7:89:09:6a:17:e9:cb:19:a2:44:
         45:ce:e7:72:22:a7:2d:00:c2:56:8e:7c:c4:98:3e:49:b2:84:
         ce:a8:e4:3a:db:5b:7e:ec:cf:a2:ef:a8:b8:f7:4b:a4:13:43:
         bf:e9:15:dd:1c:f1:dd:22:c4:96:1c:e6:36:94:17:af:9b:0e:
         b1:20:78:8a:9f:89:1d:fc:90:ac:14:db:cb:28:18:26:36:0f:
         dd:89:8d:ab:32:4d:23:af:5f:98:6a:ff:06:3e:28:c0:90:da:
         cd:41:46:0d:8a:29:41:4a:d6:09:cf:f1:50:6d:ed:77:e7:03:
         aa:dd:88:b7:13:21:bc:08:67:7c:d9:da:5f:70:3d:a1:92:19:
         60:15:0f:b0:ee:f6:2f:f2:6f:73:4a:50:32:af:d4:52:44:ae:
         c4:a8:d3:d7:08:72:10:a5:4d:14:51:b8:88:d9:22:14:79:73:
         ae:fa:ab:7b:17:70:b0:92:b1:d0:b6:1d:c4:77:61:d2:41:f7:
         f6:b3:08:bb:db:5b:13:c8:3d:6c:85:44:14:c6:4e:63:b9:50:
         2a:d5:6d:b9
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUVTSso7Q7IQGH5o1g5Kbwya4rGTswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTFDMzgyMTA4NkUxNzJENzQwNEFFMzM1QzIxQzJEMzNG
NDQ4Rjk5MTAeFw0yNDA1MTAyMjEzMjFaFw0yNTA1MDkyMjE4MjFaMDMxMTAvBgNV
BAMTKDc1MDYwQkYxNjZCOUExN0NGMTI0OTk4NjhBNzEyMTkyOTY3N0MwQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdfSpURKTq2uO6StBC7FD9Efj4
xdMWILLJvloFiuMsCl90ZwjcktWNE/tw8J3maUaK8JDG1wmftE36e/2lJgwueHfX
nNUV+E0IjHViSJ/EIm04IVBAwTu/25ea4j4uolvFcD8KmYeOM11V+zgc/mTvfBKR
Cde1/78OJ1OgvpnYlKOvd/U/pZR7gFZGQEB4cq6ThEZEyyKBrJC+Xcw3pDJjhw/C
qQdkRAUySoymtgHovt1hVmMKielc/d7otiAwL8zYR3DOjTDr8C5W7S7Geb5U9KJK
ecsAnYMD4VEYk60oO+8KeIr41VHA5GcDaM/42XolikJ3VlaA7I0f9L+l3UF9AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUdQYL8Wa5oXzxJJmGinEhkpZ3wLwwHwYDVR0j
BBgwFoAU4cOCEIbhctdASuM1whwtM/RI+ZEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM21KVzliM3l3VjJqTXNSTVg1UlYyUjkzQVZmNzI3TENnalVEc2poWnBK
UlQvMS9FMUMzODIxMDg2RTE3MkQ3NDA0QUUzMzVDMjFDMkQzM0Y0NDhGOTkxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UxQzM4MjEwODZFMTcyRDc0
MDRBRTMzNUMyMUMyRDMzRjQ0OEY5OTEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNtSlc5YjN5d1Yyak1zUk1YNVJWMlI5M0FWZjcyN0xDZ2pVRHNqaFpwSlJULzEv
MzIzODMwMzQzYTM4MzY2NjM0M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMjM2MzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEhvSAMA0GCSqGSIb3DQEBCwUA
A4IBAQCHfUyz1v2wUmP4bH2iHCodBGH8Vb5q/I84FsYv3m4aOL6aYXuqxGgNcLeb
GseJCWoX6csZokRFzudyIqctAMJWjnzEmD5JsoTOqOQ621t+7M+i76i490ukE0O/
6RXdHPHdIsSWHOY2lBevmw6xIHiKn4kd/JCsFNvLKBgmNg/diY2rMk0jr1+Yav8G
PijAkNrNQUYNiilBStYJz/FQbe135wOq3Yi3EyG8CGd82dpfcD2hkhlgFQ+w7vYv
8m9zSlAyr9RSRK7EqNPXCHIQpU0UUbiI2SIUeXOu+qt7F3CwkrHQth3Ed2HSQff2
swi721sTyD1shUQUxk5juVAq1W25
-----END CERTIFICATE-----
Generated at Fri Jun 28 12:21:46 2024 by rpki-client on console-fra.rpki-client.org