Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/323830343a376266383a3a2f33332d3333203d3e20323731343636.roa
File:                     323830343a376266383a3a2f33332d3333203d3e20323731343636.roa (raw, json)
Hash identifier:          ct9nr62cu/hV1/tJWid0KRHT5R1pMfC1fc5HFP6UPAM=
Subject key identifier:   ED:8D:E7:4B:5F:2C:D6:A2:8B:F7:3E:03:84:79:0E:0D:58:26:55:03
Certificate issuer:       /CN=E8C82FC45003FEB00DB928E6AF419E57721933EC
Certificate serial:       39C128DEFEADB1BFB167299FB882F7278CD3B32E
Authority key identifier: E8:C8:2F:C4:50:03:FE:B0:0D:B9:28:E6:AF:41:9E:57:72:19:33:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/323830343a376266383a3a2f33332d3333203d3e20323731343636.roa
Signing time:             Thu 04 Apr 2024 14:22:11 +0000
ROA not before:           Thu 04 Apr 2024 14:17:11 +0000
ROA not after:            Thu 03 Apr 2025 14:22:11 +0000
asID:                     271466
IP address blocks:        2804:7bf8::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.crl
                          rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:44:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:c1:28:de:fe:ad:b1:bf:b1:67:29:9f:b8:82:f7:27:8c:d3:b3:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8C82FC45003FEB00DB928E6AF419E57721933EC
        Validity
            Not Before: Apr  4 14:17:11 2024 GMT
            Not After : Apr  3 14:22:11 2025 GMT
        Subject: CN=ED8DE74B5F2CD6A28BF73E0384790E0D58265503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8c:10:a9:5e:6f:7b:5f:2e:42:a8:61:7c:2d:
                    04:93:a3:e8:0d:22:5e:0b:14:cb:5b:72:d4:3d:3d:
                    c1:00:60:63:73:eb:5a:14:d2:e2:90:b8:27:f6:41:
                    72:a8:60:43:e0:42:e9:33:be:c6:85:35:d9:a7:20:
                    19:f1:e8:d2:b9:e8:9c:98:eb:ea:56:30:1f:cd:5b:
                    d1:f6:c3:3b:22:1f:a0:1d:45:e7:28:46:0e:41:9d:
                    80:cd:4a:78:97:bf:5d:80:fe:6f:fe:d9:88:c5:cf:
                    59:ef:00:20:7b:5a:48:ca:f4:4d:f5:33:df:fd:94:
                    27:48:70:21:72:23:47:45:a1:39:b8:db:a4:ba:f2:
                    15:45:06:fc:55:29:af:ca:5a:0f:76:5b:ff:75:e2:
                    4c:e4:1b:dd:be:e9:12:d9:3a:e9:bc:27:c2:d1:2f:
                    9b:a8:04:fd:43:8d:cd:ec:d1:d2:49:23:8b:a3:c2:
                    15:55:43:4c:c0:13:e2:b7:ba:b6:ae:74:bf:79:a6:
                    bf:b2:ae:e6:7c:88:f1:82:82:bb:28:b1:b9:e7:e1:
                    dc:0d:d5:6b:bb:31:08:9c:ff:5c:34:00:30:ce:c8:
                    6c:9b:f7:6f:8e:ce:99:0a:cf:9e:cb:d6:a2:4d:f8:
                    d3:80:0d:a2:b3:3c:db:bc:9a:e3:89:ce:0c:7f:f0:
                    b9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:8D:E7:4B:5F:2C:D6:A2:8B:F7:3E:03:84:79:0E:0D:58:26:55:03
            X509v3 Authority Key Identifier:
                keyid:E8:C8:2F:C4:50:03:FE:B0:0D:B9:28:E6:AF:41:9E:57:72:19:33:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/323830343a376266383a3a2f33332d3333203d3e20323731343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7bf8::/33

    Signature Algorithm: sha256WithRSAEncryption
         28:6a:cf:4c:70:dd:32:a5:92:cc:17:45:09:fb:ef:de:ca:a3:
         b0:60:0a:c3:6c:bf:68:04:58:5a:cb:b2:8e:fb:5a:f9:13:47:
         75:26:0a:99:36:51:41:5d:b5:af:d7:85:27:6f:b9:59:15:2b:
         87:3c:0f:42:10:77:79:68:58:cb:0b:d4:b0:a2:2c:3d:ad:fe:
         74:5e:93:ad:d3:93:69:c8:a3:e9:4c:95:20:0d:a6:eb:84:3c:
         77:07:41:d8:46:56:b5:6a:38:38:e9:6b:f9:ce:c3:7a:5f:59:
         a7:87:d0:24:cd:4e:a4:b8:d0:7c:79:d7:00:ca:fb:f8:91:63:
         7a:ef:bc:9e:3c:fc:4d:5d:ed:cf:b7:05:74:1a:f6:86:73:92:
         ce:27:18:5d:bf:d3:45:dd:3b:31:25:49:2a:5d:a8:b4:76:f0:
         5b:3a:4e:6a:47:ab:bd:a0:22:c4:f0:e0:18:16:48:50:31:f1:
         a5:c8:b0:02:d1:42:d2:98:97:10:7f:87:e4:de:07:ef:95:54:
         63:3f:14:2a:72:ab:0a:80:27:19:a2:4d:b6:0c:b9:7b:03:13:
         dd:3f:44:4d:f1:ae:86:73:01:0d:d7:c7:96:b9:02:90:88:3d:
         46:12:36:67:f8:a0:fd:1a:4e:01:7c:38:89:9c:eb:43:24:be:
         7e:9a:aa:12
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOcEo3v6tsb+xZymfuIL3J4zTsy4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRThDODJGQzQ1MDAzRkVCMDBEQjkyOEU2QUY0MTlFNTc3
MjE5MzNFQzAeFw0yNDA0MDQxNDE3MTFaFw0yNTA0MDMxNDIyMTFaMDMxMTAvBgNV
BAMTKEVEOERFNzRCNUYyQ0Q2QTI4QkY3M0UwMzg0NzkwRTBENTgyNjU1MDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8jBCpXm97Xy5CqGF8LQSTo+gN
Il4LFMtbctQ9PcEAYGNz61oU0uKQuCf2QXKoYEPgQukzvsaFNdmnIBnx6NK56JyY
6+pWMB/NW9H2wzsiH6AdRecoRg5BnYDNSniXv12A/m/+2YjFz1nvACB7WkjK9E31
M9/9lCdIcCFyI0dFoTm426S68hVFBvxVKa/KWg92W/914kzkG92+6RLZOum8J8LR
L5uoBP1Djc3s0dJJI4ujwhVVQ0zAE+K3uraudL95pr+yruZ8iPGCgrsosbnn4dwN
1Wu7MQic/1w0ADDOyGyb92+OzpkKz57L1qJN+NOADaKzPNu8muOJzgx/8LnHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU7Y3nS18s1qKL9z4DhHkODVgmVQMwHwYDVR0j
BBgwFoAU6MgvxFAD/rANuSjmr0GeV3IZM+wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdFUnNYOXhrakMzNFRYeWpSekNITFZrS2dGaXhLb0pDQlplVExFSnFU
ZWovMS9FOEM4MkZDNDUwMDNGRUIwMERCOTI4RTZBRjQxOUU1NzcyMTkzM0VDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U4QzgyRkM0NTAwM0ZFQjAw
REI5MjhFNkFGNDE5RTU3NzIxOTMzRUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHRVJzWDl4a2pDMzRUWHlqUnpDSExWa0tnRml4S29KQ0JaZVRMRUpxVGVqLzEv
MzIzODMwMzQzYTM3NjI2NjM4M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNzMx
MzQzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAR7+AAwDQYJKoZIhvcNAQELBQADggEBAChqz0xw
3TKlkswXRQn7797Ko7BgCsNsv2gEWFrLso77WvkTR3UmCpk2UUFdta/XhSdvuVkV
K4c8D0IQd3loWMsL1LCiLD2t/nRek63Tk2nIo+lMlSANpuuEPHcHQdhGVrVqODjp
a/nOw3pfWaeH0CTNTqS40Hx51wDK+/iRY3rvvJ48/E1d7c+3BXQa9oZzks4nGF2/
00XdOzElSSpdqLR28Fs6TmpHq72gIsTw4BgWSFAx8aXIsALRQtKYlxB/h+TeB++V
VGM/FCpyqwqAJxmiTbYMuXsDE90/RE3xroZzAQ3Xx5a5ApCIPUYSNmf4oP0aTgF8
OImc60Mkvn6aqhI=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:40 2024 by rpki-client on console-fra.rpki-client.org