Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/1/323830343a373138633a3a2f33322d3438203d3e20323730373936.roa
File:                     323830343a373138633a3a2f33322d3438203d3e20323730373936.roa (raw, json)
Hash identifier:          prFVScTet6kISahpqNUMDG3c97096hZD9wLxgnAJIxo=
Subject key identifier:   58:71:EC:73:26:7B:7B:FB:5A:82:E4:0F:E7:92:B4:A6:BE:C2:81:2A
Certificate issuer:       /CN=E320B3454EEB8E41FD31C773CF83B3C7CEEA3352
Certificate serial:       5133C5AB9E49A963CA8BE9ED3E9E0281C15357B8
Authority key identifier: E3:20:B3:45:4E:EB:8E:41:FD:31:C7:73:CF:83:B3:C7:CE:EA:33:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/1/323830343a373138633a3a2f33322d3438203d3e20323730373936.roa
Signing time:             Thu 04 Apr 2024 05:58:26 +0000
ROA not before:           Thu 04 Apr 2024 05:53:26 +0000
ROA not after:            Thu 03 Apr 2025 05:58:26 +0000
asID:                     270796
IP address blocks:        2804:718c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.crl
                          rsync://rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:33:c5:ab:9e:49:a9:63:ca:8b:e9:ed:3e:9e:02:81:c1:53:57:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E320B3454EEB8E41FD31C773CF83B3C7CEEA3352
        Validity
            Not Before: Apr  4 05:53:26 2024 GMT
            Not After : Apr  3 05:58:26 2025 GMT
        Subject: CN=5871EC73267B7BFB5A82E40FE792B4A6BEC2812A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4a:f0:6f:ea:97:ff:06:80:aa:82:26:58:6e:
                    d4:b6:f9:fb:b4:8d:73:71:39:1c:e9:05:fe:58:36:
                    48:f1:aa:52:33:c9:82:f9:5a:d3:4f:b4:50:e6:73:
                    18:3d:a2:5d:5d:e7:e7:99:8d:8b:a7:1f:31:33:b8:
                    89:a9:6a:f3:71:50:19:ab:a1:c5:f1:32:26:bc:15:
                    42:f4:02:47:29:7f:de:8a:62:ad:55:43:00:d9:47:
                    3f:1b:20:e3:a6:47:b8:52:62:e5:b5:1b:9a:c3:4a:
                    a0:af:99:b6:d7:9a:d6:ca:35:ea:46:91:68:65:d6:
                    58:74:08:30:d3:8b:9a:4d:8d:a5:64:84:2d:53:36:
                    51:1a:36:f2:e4:2d:35:48:25:5e:a6:1e:88:9f:48:
                    08:0e:28:4c:3f:bb:46:06:a1:1b:85:e2:73:5c:96:
                    5b:6b:d4:a3:92:ae:39:92:d4:0c:bc:25:3c:b6:44:
                    6e:46:89:10:16:b2:9a:4f:bd:fb:79:5e:9e:2b:67:
                    6d:d8:07:53:12:89:cc:02:30:62:3f:61:f4:8d:54:
                    15:7a:f0:dc:f7:f6:29:15:43:df:ec:77:08:eb:b4:
                    90:e4:fd:9b:3b:13:19:9b:96:56:7c:57:8b:a0:4a:
                    9c:b9:5a:3d:27:b6:0a:c7:82:2a:30:e4:5a:47:0b:
                    4b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:71:EC:73:26:7B:7B:FB:5A:82:E4:0F:E7:92:B4:A6:BE:C2:81:2A
            X509v3 Authority Key Identifier:
                keyid:E3:20:B3:45:4E:EB:8E:41:FD:31:C7:73:CF:83:B3:C7:CE:EA:33:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/1/323830343a373138633a3a2f33322d3438203d3e20323730373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:718c::/32

    Signature Algorithm: sha256WithRSAEncryption
         c4:27:84:0d:c3:62:8c:1e:69:b3:41:74:28:d7:da:e0:a5:c1:
         2f:da:69:d3:76:30:df:ba:49:28:f8:f0:fb:59:b4:ff:09:32:
         79:11:3c:cf:39:df:5a:2d:67:0c:5b:0e:ac:04:d3:58:63:2c:
         a4:39:22:15:eb:83:fe:65:aa:7c:30:87:84:b6:c0:de:e8:d7:
         a9:4b:b2:3e:3b:28:cb:a6:38:39:a3:e3:ba:6e:09:e1:c4:b5:
         75:a8:c7:9f:fb:51:52:2e:8a:47:ca:3e:e0:16:97:0b:56:7e:
         c1:93:9b:fe:d5:b8:c8:ed:1e:0a:c6:a2:7f:d9:1f:30:df:95:
         b5:fe:e6:98:80:c9:44:c7:81:49:cf:8a:89:bc:3c:9a:bd:f0:
         7a:e9:9d:40:6e:1c:a7:29:ae:98:15:e0:1b:de:fe:dc:61:ab:
         bb:d5:4c:1a:3c:da:9c:28:8e:f9:45:36:31:53:21:14:52:d9:
         13:a6:28:85:bd:22:ff:19:3f:5f:1f:53:15:32:37:9f:ca:db:
         b6:40:12:b0:4b:4b:3c:cf:4a:23:f2:08:11:bb:cd:87:a6:10:
         e1:d6:5b:e1:3d:b9:41:69:a1:0c:12:63:08:87:33:7a:77:71:
         77:16:e0:4f:89:a7:38:8e:45:83:e0:7a:37:e1:49:03:3b:85:
         49:f3:6c:ba
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUUTPFq55JqWPKi+ntPp4CgcFTV7gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTMyMEIzNDU0RUVCOEU0MUZEMzFDNzczQ0Y4M0IzQzdD
RUVBMzM1MjAeFw0yNDA0MDQwNTUzMjZaFw0yNTA0MDMwNTU4MjZaMDMxMTAvBgNV
BAMTKDU4NzFFQzczMjY3QjdCRkI1QTgyRTQwRkU3OTJCNEE2QkVDMjgxMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOSvBv6pf/BoCqgiZYbtS2+fu0
jXNxORzpBf5YNkjxqlIzyYL5WtNPtFDmcxg9ol1d5+eZjYunHzEzuImpavNxUBmr
ocXxMia8FUL0Akcpf96KYq1VQwDZRz8bIOOmR7hSYuW1G5rDSqCvmbbXmtbKNepG
kWhl1lh0CDDTi5pNjaVkhC1TNlEaNvLkLTVIJV6mHoifSAgOKEw/u0YGoRuF4nNc
lltr1KOSrjmS1Ay8JTy2RG5GiRAWsppPvft5Xp4rZ23YB1MSicwCMGI/YfSNVBV6
8Nz39ikVQ9/sdwjrtJDk/Zs7ExmbllZ8V4ugSpy5Wj0ntgrHgiow5FpHC0vBAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUWHHscyZ7e/taguQP55K0pr7CgSowHwYDVR0j
BBgwFoAU4yCzRU7rjkH9Mcdzz4Ozx87qM1IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUgydjdtTjVnN0tCTEg4UnZlNVpHbUJtSGc3TXZSQXFtcGF0OHpLanBa
Y0gvMS9FMzIwQjM0NTRFRUI4RTQxRkQzMUM3NzNDRjgzQjNDN0NFRUEzMzUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UzMjBCMzQ1NEVFQjhFNDFG
RDMxQzc3M0NGODNCM0M3Q0VFQTMzNTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVIMnY3bU41ZzdLQkxIOFJ2ZTVaR21CbUhnN012UkFxbXBhdDh6S2pwWmNILzEv
MzIzODMwMzQzYTM3MzEzODYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMw
MzczOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARxjDANBgkqhkiG9w0BAQsFAAOCAQEAxCeEDcNi
jB5ps0F0KNfa4KXBL9pp03Yw37pJKPjw+1m0/wkyeRE8zznfWi1nDFsOrATTWGMs
pDkiFeuD/mWqfDCHhLbA3ujXqUuyPjsoy6Y4OaPjum4J4cS1dajHn/tRUi6KR8o+
4BaXC1Z+wZOb/tW4yO0eCsaif9kfMN+Vtf7mmIDJRMeBSc+Kibw8mr3weumdQG4c
pymumBXgG97+3GGru9VMGjzanCiO+UU2MVMhFFLZE6Yohb0i/xk/Xx9TFTI3n8rb
tkASsEtLPM9KI/IIEbvNh6YQ4dZb4T25QWmhDBJjCIczendxdxbgT4mnOI5Fg+B6
N+FJAzuFSfNsug==
-----END CERTIFICATE-----
Generated at Sat Jun 29 07:19:14 2024 by rpki-client on console-ams.rpki-client.org