Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/51YpTTTZpCYYCrCtjLVpK5vsXTAazDDsNxibGSdRxBgK/1/323830343a343761633a3a2f33322d3438203d3e20323637303730.roa
File:                     323830343a343761633a3a2f33322d3438203d3e20323637303730.roa (raw, json)
Hash identifier:          Cvic1it1YbIYNFNPWBMdeVqTzklVIKoKWfqn2D5LnWc=
Subject key identifier:   52:06:4F:38:FC:BD:FB:9C:93:51:28:61:29:E8:54:AE:24:A0:AD:07
Certificate issuer:       /CN=C9DB61F52BF7A3A78D0E8FECC1CC922B477AF43E
Certificate serial:       7C2EB996B71D96274C609B5609C8556D24E5BB58
Authority key identifier: C9:DB:61:F5:2B:F7:A3:A7:8D:0E:8F:EC:C1:CC:92:2B:47:7A:F4:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DB61F52BF7A3A78D0E8FECC1CC922B477AF43E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/51YpTTTZpCYYCrCtjLVpK5vsXTAazDDsNxibGSdRxBgK/1/323830343a343761633a3a2f33322d3438203d3e20323637303730.roa
Signing time:             Wed 03 Apr 2024 20:19:04 +0000
ROA not before:           Wed 03 Apr 2024 20:14:04 +0000
ROA not after:            Wed 02 Apr 2025 20:19:04 +0000
asID:                     267070
IP address blocks:        2804:47ac::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/51YpTTTZpCYYCrCtjLVpK5vsXTAazDDsNxibGSdRxBgK/1/C9DB61F52BF7A3A78D0E8FECC1CC922B477AF43E.crl
                          rsync://rpki-repo.registro.br/repo/51YpTTTZpCYYCrCtjLVpK5vsXTAazDDsNxibGSdRxBgK/1/C9DB61F52BF7A3A78D0E8FECC1CC922B477AF43E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DB61F52BF7A3A78D0E8FECC1CC922B477AF43E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:2e:b9:96:b7:1d:96:27:4c:60:9b:56:09:c8:55:6d:24:e5:bb:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9DB61F52BF7A3A78D0E8FECC1CC922B477AF43E
        Validity
            Not Before: Apr  3 20:14:04 2024 GMT
            Not After : Apr  2 20:19:04 2025 GMT
        Subject: CN=52064F38FCBDFB9C9351286129E854AE24A0AD07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0a:6c:0e:36:e0:ae:8b:7d:47:16:c2:84:b5:
                    89:56:73:33:42:08:11:c1:71:88:b3:fe:c8:00:36:
                    3e:f1:ce:88:9f:f5:cb:ad:40:0a:9d:c8:c8:4f:ab:
                    f6:5b:54:e7:e4:b0:8a:c6:8c:43:80:47:7a:b6:d5:
                    26:7a:ad:1f:15:c4:56:2f:0d:98:d9:04:7f:26:dd:
                    bc:a4:6e:e8:88:3b:f6:06:fe:88:66:24:31:82:36:
                    62:fb:2d:fb:fe:98:24:3a:99:46:37:4e:f9:ef:20:
                    20:5c:ef:86:27:48:6a:c8:cc:ec:16:78:1a:b5:b4:
                    ac:f6:3f:c5:21:e5:5f:e9:b5:f3:51:1a:4a:e2:9b:
                    e2:09:1e:b2:ce:b5:1e:ac:82:4d:26:16:18:cb:d6:
                    61:93:2d:a9:fd:d1:4d:b0:47:b2:9a:cd:ae:1f:f4:
                    48:a3:25:2d:3a:ac:13:eb:e2:e2:39:17:15:32:f0:
                    24:8c:8b:d5:be:6e:87:58:36:ef:8d:87:d5:57:ee:
                    f1:3a:c4:17:23:b2:26:eb:25:7d:47:0b:97:5a:0a:
                    77:e4:ab:b4:62:16:0d:22:04:56:8d:75:e1:85:30:
                    2f:f0:49:e7:d2:47:a5:7c:d8:4a:42:c9:50:04:ed:
                    9a:b3:47:fa:72:99:46:a2:73:fb:a2:5e:0c:6e:e2:
                    31:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:06:4F:38:FC:BD:FB:9C:93:51:28:61:29:E8:54:AE:24:A0:AD:07
            X509v3 Authority Key Identifier:
                keyid:C9:DB:61:F5:2B:F7:A3:A7:8D:0E:8F:EC:C1:CC:92:2B:47:7A:F4:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/51YpTTTZpCYYCrCtjLVpK5vsXTAazDDsNxibGSdRxBgK/1/C9DB61F52BF7A3A78D0E8FECC1CC922B477AF43E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DB61F52BF7A3A78D0E8FECC1CC922B477AF43E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/51YpTTTZpCYYCrCtjLVpK5vsXTAazDDsNxibGSdRxBgK/1/323830343a343761633a3a2f33322d3438203d3e20323637303730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:47ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:55:e1:57:6a:a8:55:bc:fb:03:28:0c:0a:97:eb:08:bd:77:
         ef:96:74:5c:de:3b:6a:7f:57:7c:9e:5a:5d:a3:92:a0:05:2d:
         6e:73:be:0e:45:70:a5:65:1d:51:44:a6:22:19:0a:94:34:93:
         97:0e:74:89:e0:bb:be:cf:9b:b7:10:24:a9:0e:8d:a5:b0:26:
         1f:ca:97:f3:13:f2:3f:74:5d:57:ee:39:0a:1e:1c:ee:d3:16:
         82:bd:91:97:aa:f0:be:c1:ee:5b:f0:76:26:0d:8a:2e:22:23:
         5a:79:e4:fa:79:c6:69:59:9c:9a:af:74:2c:a2:e0:e1:bc:e9:
         36:45:6a:1a:5e:88:cc:e5:71:3b:9f:85:12:41:94:ec:7a:e8:
         0b:38:63:b4:8d:e0:c5:9f:93:b3:8c:d6:22:31:9e:78:b9:e8:
         b5:99:94:be:de:d0:a1:2c:fb:94:52:05:23:5c:87:4b:16:37:
         d3:ed:09:02:d1:ee:fe:e3:c9:44:ef:73:bb:5b:2a:4c:43:b2:
         92:37:10:b6:d6:92:d9:b1:8a:80:ce:2c:5b:71:c7:52:fa:30:
         01:e3:af:9a:17:12:95:ed:8e:e2:77:59:b3:20:d4:05:61:92:
         d0:37:44:e7:fd:35:ff:35:6d:cc:3f:5a:af:00:f8:4f:8e:1b:
         55:74:29:ec
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUfC65lrcdlidMYJtWCchVbSTlu1gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzlEQjYxRjUyQkY3QTNBNzhEMEU4RkVDQzFDQzkyMkI0
NzdBRjQzRTAeFw0yNDA0MDMyMDE0MDRaFw0yNTA0MDIyMDE5MDRaMDMxMTAvBgNV
BAMTKDUyMDY0RjM4RkNCREZCOUM5MzUxMjg2MTI5RTg1NEFFMjRBMEFEMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8CmwONuCui31HFsKEtYlWczNC
CBHBcYiz/sgANj7xzoif9cutQAqdyMhPq/ZbVOfksIrGjEOAR3q21SZ6rR8VxFYv
DZjZBH8m3bykbuiIO/YG/ohmJDGCNmL7Lfv+mCQ6mUY3TvnvICBc74YnSGrIzOwW
eBq1tKz2P8Uh5V/ptfNRGkrim+IJHrLOtR6sgk0mFhjL1mGTLan90U2wR7Kaza4f
9EijJS06rBPr4uI5FxUy8CSMi9W+bodYNu+Nh9VX7vE6xBcjsibrJX1HC5daCnfk
q7RiFg0iBFaNdeGFMC/wSefSR6V82EpCyVAE7ZqzR/pymUaic/uiXgxu4jFFAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUUgZPOPy9+5yTUShhKehUriSgrQcwHwYDVR0j
BBgwFoAUydth9Sv3o6eNDo/swcySK0d69D4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTFZcFRUVFpwQ1lZQ3JDdGpMVnBLNXZzWFRBYXpERHNOeGliR1NkUnhC
Z0svMS9DOURCNjFGNTJCRjdBM0E3OEQwRThGRUNDMUNDOTIyQjQ3N0FGNDNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5REI2MUY1MkJGN0EzQTc4
RDBFOEZFQ0MxQ0M5MjJCNDc3QUY0M0UuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzUxWXBUVFRacENZWUNyQ3RqTFZwSzV2c1hUQWF6RERzTnhpYkdTZFJ4QmdLLzEv
MzIzODMwMzQzYTM0Mzc2MTYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM3
MzAzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARHrDANBgkqhkiG9w0BAQsFAAOCAQEAWVXhV2qo
Vbz7AygMCpfrCL1375Z0XN47an9XfJ5aXaOSoAUtbnO+DkVwpWUdUUSmIhkKlDST
lw50ieC7vs+btxAkqQ6NpbAmH8qX8xPyP3RdV+45Ch4c7tMWgr2Rl6rwvsHuW/B2
Jg2KLiIjWnnk+nnGaVmcmq90LKLg4bzpNkVqGl6IzOVxO5+FEkGU7HroCzhjtI3g
xZ+Ts4zWIjGeeLnotZmUvt7QoSz7lFIFI1yHSxY30+0JAtHu/uPJRO9zu1sqTEOy
kjcQttaS2bGKgM4sW3HHUvowAeOvmhcSle2O4ndZsyDUBWGS0DdE5/01/zVtzD9a
rwD4T44bVXQp7A==
-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:32 2024 by rpki-client on console-ams.rpki-client.org