Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/323830343a376335343a3a2f33322d3438203d3e20323731343839.roa
File:                     323830343a376335343a3a2f33322d3438203d3e20323731343839.roa (raw, json)
Hash identifier:          BiL8oUgvucHA0y1W6seoe7Un1Nj33ESDTNcJy8kJKu4=
Subject key identifier:   02:27:C2:2C:49:16:20:63:B5:C2:68:3A:31:BA:53:F4:6D:48:81:8C
Certificate issuer:       /CN=DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F
Certificate serial:       0A1E1EBB794EC4E2A9E243E649BF055B3F04EC8E
Authority key identifier: DC:D7:A1:AD:D4:DE:BD:23:B1:C5:FA:D5:E6:0B:C2:69:D2:AD:10:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/323830343a376335343a3a2f33322d3438203d3e20323731343839.roa
Signing time:             Wed 03 Apr 2024 18:30:12 +0000
ROA not before:           Wed 03 Apr 2024 18:25:12 +0000
ROA not after:            Wed 02 Apr 2025 18:30:12 +0000
asID:                     271489
IP address blocks:        2804:7c54::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.crl
                          rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:1e:1e:bb:79:4e:c4:e2:a9:e2:43:e6:49:bf:05:5b:3f:04:ec:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F
        Validity
            Not Before: Apr  3 18:25:12 2024 GMT
            Not After : Apr  2 18:30:12 2025 GMT
        Subject: CN=0227C22C49162063B5C2683A31BA53F46D48818C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:36:56:39:ca:bc:43:2f:2a:50:15:c0:1e:2d:
                    12:01:ae:41:de:0c:8a:fd:68:4c:9b:83:29:94:d1:
                    3e:6d:dd:a0:61:61:d6:2c:1e:47:4f:96:4e:c1:6e:
                    be:07:0b:99:c4:92:35:26:3f:ab:99:53:da:65:0d:
                    b7:46:06:c0:f3:06:a9:d9:5f:a7:19:d5:f1:08:2a:
                    01:fa:92:de:d8:d2:70:4c:e8:46:3b:c6:f2:ed:e9:
                    4e:83:85:7b:67:36:1b:e8:73:81:d8:e4:7f:fe:e1:
                    05:e8:95:22:aa:d8:a1:59:ad:94:e0:13:9a:77:1b:
                    79:c5:0e:ee:bc:57:96:6b:85:9a:5b:a4:02:3b:cb:
                    dd:d1:f7:f4:11:69:70:b2:4d:b7:c2:77:78:2e:6c:
                    a3:c6:f0:47:86:85:90:75:3e:81:10:3c:70:0c:8e:
                    c7:fd:a0:ea:8e:ff:83:fa:7d:e9:9b:75:62:38:00:
                    bd:bf:e0:f6:fa:e9:7a:e2:a6:ab:72:50:df:03:e8:
                    12:9d:3b:47:40:9c:5d:9e:fa:e5:83:64:4e:5c:d3:
                    e9:8d:d9:54:17:55:3d:4e:d3:d3:72:37:40:8f:b2:
                    d1:c1:d7:0b:13:a4:26:0c:3b:18:76:c4:4b:18:0a:
                    25:50:56:18:6e:9f:56:da:fa:ee:aa:13:48:bd:a0:
                    5c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:27:C2:2C:49:16:20:63:B5:C2:68:3A:31:BA:53:F4:6D:48:81:8C
            X509v3 Authority Key Identifier:
                keyid:DC:D7:A1:AD:D4:DE:BD:23:B1:C5:FA:D5:E6:0B:C2:69:D2:AD:10:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/323830343a376335343a3a2f33322d3438203d3e20323731343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c54::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:10:26:e3:6a:86:75:75:8a:56:bd:ec:dc:aa:b3:20:fd:4b:
         4b:5e:6c:75:cb:e8:49:5c:48:99:43:a4:dc:2b:3c:2a:8c:b5:
         23:b0:ef:b5:81:16:e6:a0:27:eb:66:90:9a:06:8f:fd:72:e9:
         a9:f6:f5:7e:3a:3d:de:5a:9c:19:9c:3f:c6:38:5c:b9:50:f6:
         52:62:64:bf:d3:57:1f:b3:9f:8a:a6:d8:c7:b3:77:5b:1c:07:
         09:5f:c9:ca:f3:0e:44:1e:dc:e6:d9:2d:65:5e:42:bd:ed:3a:
         d3:92:b5:93:41:93:8a:41:b0:a0:a4:f5:a4:3a:d9:8c:39:70:
         74:22:ea:f7:57:8c:54:46:19:21:4b:60:ba:49:6e:5c:79:93:
         62:ed:33:f2:e3:ab:c9:1b:08:7e:85:08:b2:6e:70:6b:5a:25:
         ef:a4:a5:95:91:e5:d8:b6:f3:22:74:83:19:d0:82:26:26:f7:
         b3:49:e2:bb:f5:2f:d0:d0:56:54:c0:96:1c:bd:bd:2d:5a:55:
         0c:eb:3a:d0:3d:48:d7:5a:55:01:6a:72:05:99:86:d3:d1:e3:
         33:fb:82:87:7c:47:72:80:5b:87:45:cd:e0:39:00:77:30:e6:
         37:f5:a7:d0:f7:29:f2:41:ce:49:9a:24:de:97:12:ff:a8:80:
         3e:c0:5f:8a
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUCh4eu3lOxOKp4kPmSb8FWz8E7I4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENEN0ExQURENERFQkQyM0IxQzVGQUQ1RTYwQkMyNjlE
MkFEMTAwRjAeFw0yNDA0MDMxODI1MTJaFw0yNTA0MDIxODMwMTJaMDMxMTAvBgNV
BAMTKDAyMjdDMjJDNDkxNjIwNjNCNUMyNjgzQTMxQkE1M0Y0NkQ0ODgxOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUNlY5yrxDLypQFcAeLRIBrkHe
DIr9aEybgymU0T5t3aBhYdYsHkdPlk7Bbr4HC5nEkjUmP6uZU9plDbdGBsDzBqnZ
X6cZ1fEIKgH6kt7Y0nBM6EY7xvLt6U6DhXtnNhvoc4HY5H/+4QXolSKq2KFZrZTg
E5p3G3nFDu68V5ZrhZpbpAI7y93R9/QRaXCyTbfCd3gubKPG8EeGhZB1PoEQPHAM
jsf9oOqO/4P6fembdWI4AL2/4Pb66XripqtyUN8D6BKdO0dAnF2e+uWDZE5c0+mN
2VQXVT1O09NyN0CPstHB1wsTpCYMOxh2xEsYCiVQVhhun1ba+u6qE0i9oFxTAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUAifCLEkWIGO1wmg6MbpT9G1IgYwwHwYDVR0j
BBgwFoAU3NehrdTevSOxxfrV5gvCadKtEA8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3NIa0RnY3JoZnFBNTNON29wSjJyblBGNWNQRnVCeXYyMjNpNlFneHJu
dlovMS9EQ0Q3QTFBREQ0REVCRDIzQjFDNUZBRDVFNjBCQzI2OUQyQUQxMDBGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDRDdBMUFERDRERUJEMjNC
MUM1RkFENUU2MEJDMjY5RDJBRDEwMEYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNzSGtEZ2NyaGZxQTUzTjdvcEoycm5QRjVjUEZ1Qnl2MjIzaTZRZ3hybnZaLzEv
MzIzODMwMzQzYTM3NjMzNTM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMx
MzQzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR8VDANBgkqhkiG9w0BAQsFAAOCAQEAIxAm42qG
dXWKVr3s3KqzIP1LS15sdcvoSVxImUOk3Cs8Koy1I7DvtYEW5qAn62aQmgaP/XLp
qfb1fjo93lqcGZw/xjhcuVD2UmJkv9NXH7OfiqbYx7N3WxwHCV/JyvMORB7c5tkt
ZV5Cve0605K1k0GTikGwoKT1pDrZjDlwdCLq91eMVEYZIUtgukluXHmTYu0z8uOr
yRsIfoUIsm5wa1ol76SllZHl2LbzInSDGdCCJib3s0niu/Uv0NBWVMCWHL29LVpV
DOs60D1I11pVAWpyBZmG09HjM/uCh3xHcoBbh0XN4DkAdzDmN/Wn0Pcp8kHOSZok
3pcS/6iAPsBfig==
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:34 2024 by rpki-client on console-ams.rpki-client.org