Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/1/323830343a373963343a383032303a3a2f34342d3434203d3e20323731333236.roa
File:                     323830343a373963343a383032303a3a2f34342d3434203d3e20323731333236.roa (raw, json)
Hash identifier:          gimBtiiiLskEIG9yBsL0xntbh6ygvG1DUUV5vW23JDE=
Subject key identifier:   D8:44:CF:B1:4F:72:F1:81:1B:CB:F5:09:65:C9:FF:7F:DF:2F:67:84
Certificate issuer:       /CN=E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5
Certificate serial:       41E0F34B853CD66F2588527CAFC82635919E5A0A
Authority key identifier: E4:C7:5E:4D:C1:7E:B6:9E:3C:5D:7F:24:77:A6:36:6C:44:76:AC:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/1/323830343a373963343a383032303a3a2f34342d3434203d3e20323731333236.roa
Signing time:             Wed 03 Apr 2024 18:43:10 +0000
ROA not before:           Wed 03 Apr 2024 18:38:10 +0000
ROA not after:            Wed 02 Apr 2025 18:43:10 +0000
asID:                     271326
IP address blocks:        2804:79c4:8020::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/1/E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5.crl
                          rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/1/E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:e0:f3:4b:85:3c:d6:6f:25:88:52:7c:af:c8:26:35:91:9e:5a:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5
        Validity
            Not Before: Apr  3 18:38:10 2024 GMT
            Not After : Apr  2 18:43:10 2025 GMT
        Subject: CN=D844CFB14F72F1811BCBF50965C9FF7FDF2F6784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:37:2d:6e:1d:1c:bd:d7:39:14:51:1b:11:cd:
                    8f:67:48:93:ec:43:54:a1:ba:03:35:4e:91:61:db:
                    1e:92:49:71:c1:6a:bf:fc:11:52:58:ea:92:8b:92:
                    5d:c7:ad:15:bf:4a:6d:e5:a3:b5:03:3d:bc:f6:1e:
                    1a:de:62:d0:10:4b:f4:30:c0:71:b9:a9:67:08:66:
                    63:97:e2:bd:b6:38:9f:dc:17:cb:11:f2:a5:d9:52:
                    d8:7d:2e:7d:ed:47:29:48:05:af:2e:5d:ea:6b:ea:
                    30:34:3d:2a:d2:e1:de:f2:d7:e3:d8:b6:e3:e5:72:
                    45:ae:41:21:b1:75:05:d3:2b:9b:f6:4f:02:80:2d:
                    a5:69:1b:ae:1b:30:0a:36:2a:ec:9f:93:c8:03:e0:
                    3b:68:34:d4:5f:78:32:60:0e:00:32:9c:20:e2:33:
                    ca:cb:dc:3e:a2:d8:eb:b6:d8:82:7f:78:71:c8:c1:
                    90:27:d2:50:b4:a5:df:ce:97:7a:48:4b:6e:72:e1:
                    9f:24:76:58:dd:df:d6:5c:cc:6e:70:5d:c7:dd:42:
                    89:85:73:84:6e:49:74:8c:77:cf:4a:fc:69:a1:cb:
                    f0:b1:e0:2a:91:77:6e:82:eb:58:fe:f9:ba:43:52:
                    e6:83:51:37:e2:7d:ef:23:80:2e:af:0f:73:8d:8c:
                    82:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:44:CF:B1:4F:72:F1:81:1B:CB:F5:09:65:C9:FF:7F:DF:2F:67:84
            X509v3 Authority Key Identifier:
                keyid:E4:C7:5E:4D:C1:7E:B6:9E:3C:5D:7F:24:77:A6:36:6C:44:76:AC:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/1/E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/1/323830343a373963343a383032303a3a2f34342d3434203d3e20323731333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:79c4:8020::/44

    Signature Algorithm: sha256WithRSAEncryption
         2d:39:82:a6:26:be:e3:d4:d1:b3:39:f5:f1:40:17:8b:0e:ca:
         9c:d7:7e:ff:3e:c1:70:20:55:29:6e:5f:15:60:d1:a7:7e:bb:
         c9:d1:14:ff:e9:71:dc:6d:25:d1:1e:f1:2f:ab:d3:4e:fe:02:
         c2:69:dd:ec:f7:18:62:9b:13:c6:ba:df:06:b7:b1:30:6e:03:
         89:b0:0f:99:d1:46:10:43:87:02:0f:4d:e8:f9:5d:0e:ef:e6:
         a6:ac:fa:06:e7:11:df:43:95:28:13:55:94:66:ec:23:5e:63:
         d7:16:bd:a9:8c:ea:30:76:2f:06:79:88:13:8b:c1:57:40:96:
         1c:e3:32:d4:42:b2:34:f5:8b:3e:24:14:4e:e7:01:44:2e:00:
         8b:0f:bf:f5:41:70:dc:66:f2:fe:ac:28:d8:07:3e:bd:5c:95:
         9a:19:bf:7a:dd:64:87:4f:d1:cb:b7:0e:69:5b:de:6a:c9:ed:
         43:41:92:d8:0e:3d:ca:38:0d:05:78:cc:29:93:73:1f:8b:54:
         0e:a7:ed:bc:6c:d2:79:43:45:85:17:1c:5e:d5:59:23:67:bd:
         c7:ff:29:64:34:3f:eb:08:a6:5f:11:86:52:ed:c6:cd:b5:2d:
         e0:8d:72:d4:9d:e6:ad:de:16:1f:7c:ce:aa:17:0f:8f:d3:54:
         f3:bc:07:60
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUQeDzS4U81m8liFJ8r8gmNZGeWgowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTRDNzVFNERDMTdFQjY5RTNDNUQ3RjI0NzdBNjM2NkM0
NDc2QUNENTAeFw0yNDA0MDMxODM4MTBaFw0yNTA0MDIxODQzMTBaMDMxMTAvBgNV
BAMTKEQ4NDRDRkIxNEY3MkYxODExQkNCRjUwOTY1QzlGRjdGREYyRjY3ODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Ny1uHRy91zkUURsRzY9nSJPs
Q1ShugM1TpFh2x6SSXHBar/8EVJY6pKLkl3HrRW/Sm3lo7UDPbz2HhreYtAQS/Qw
wHG5qWcIZmOX4r22OJ/cF8sR8qXZUth9Ln3tRylIBa8uXepr6jA0PSrS4d7y1+PY
tuPlckWuQSGxdQXTK5v2TwKALaVpG64bMAo2Kuyfk8gD4DtoNNRfeDJgDgAynCDi
M8rL3D6i2Ou22IJ/eHHIwZAn0lC0pd/Ol3pIS25y4Z8kdljd39ZczG5wXcfdQomF
c4RuSXSMd89K/Gmhy/Cx4CqRd26C61j++bpDUuaDUTfife8jgC6vD3ONjIKFAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQU2ETPsU9y8YEby/UJZcn/f98vZ4QwHwYDVR0j
BBgwFoAU5MdeTcF+tp48XX8kd6Y2bER2rNUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEhFZnA4R1pXUXFoVHh5Z3JSb3RXQVl6MXhDR2p5MnNmUmV2cTFiOTV4
dm8vMS9FNEM3NUU0REMxN0VCNjlFM0M1RDdGMjQ3N0E2MzY2QzQ0NzZBQ0Q1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U0Qzc1RTREQzE3RUI2OUUz
QzVEN0YyNDc3QTYzNjZDNDQ3NkFDRDUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRIRWZwOEdaV1FxaFR4eWdyUm90V0FZejF4Q0dqeTJzZlJldnExYjk1eHZvLzEv
MzIzODMwMzQzYTM3Mzk2MzM0M2EzODMwMzIzMDNhM2EyZjM0MzQyZDM0MzQyMDNk
M2UyMDMyMzczMTMzMzIzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCgEecSAIDANBgkqhkiG9w0BAQsF
AAOCAQEALTmCpia+49TRszn18UAXiw7KnNd+/z7BcCBVKW5fFWDRp367ydEU/+lx
3G0l0R7xL6vTTv4Cwmnd7PcYYpsTxrrfBrexMG4DibAPmdFGEEOHAg9N6PldDu/m
pqz6BucR30OVKBNVlGbsI15j1xa9qYzqMHYvBnmIE4vBV0CWHOMy1EKyNPWLPiQU
TucBRC4Aiw+/9UFw3Gby/qwo2Ac+vVyVmhm/et1kh0/Ry7cOaVveasntQ0GS2A49
yjgNBXjMKZNzH4tUDqftvGzSeUNFhRccXtVZI2e9x/8pZDQ/6wimXxGGUu3GzbUt
4I1y1J3mrd4WH3zOqhcPj9NU87wHYA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:13 2024 by rpki-client on console-ams.rpki-client.org