Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7X5xZx7ni4tRYCYPx6TJosipeinh5917BAEGm2D8Pg9B/1/323830343a383735303a3a2f33322d3332203d3e20323732373031.roa
File:                     323830343a383735303a3a2f33322d3332203d3e20323732373031.roa (raw, json)
Hash identifier:          woCzlUxbLkwo83FDBX2DAW0YRMgd2q2OutOTZNDeNtM=
Subject key identifier:   E9:AC:27:AE:BA:DE:16:A0:48:B1:6A:E4:A0:88:2D:C5:B3:3A:50:61
Certificate issuer:       /CN=E01C509DBE2A66987F85D9F7040DF42AFECFB53B
Certificate serial:       4C359D5973F83FCE6BA77FA3DAF0899B7DCDFEC2
Authority key identifier: E0:1C:50:9D:BE:2A:66:98:7F:85:D9:F7:04:0D:F4:2A:FE:CF:B5:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E01C509DBE2A66987F85D9F7040DF42AFECFB53B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7X5xZx7ni4tRYCYPx6TJosipeinh5917BAEGm2D8Pg9B/1/323830343a383735303a3a2f33322d3332203d3e20323732373031.roa
Signing time:             Thu 04 Apr 2024 05:38:04 +0000
ROA not before:           Thu 04 Apr 2024 05:33:04 +0000
ROA not after:            Thu 03 Apr 2025 05:38:04 +0000
asID:                     272701
IP address blocks:        2804:8750::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7X5xZx7ni4tRYCYPx6TJosipeinh5917BAEGm2D8Pg9B/1/E01C509DBE2A66987F85D9F7040DF42AFECFB53B.crl
                          rsync://rpki-repo.registro.br/repo/7X5xZx7ni4tRYCYPx6TJosipeinh5917BAEGm2D8Pg9B/1/E01C509DBE2A66987F85D9F7040DF42AFECFB53B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E01C509DBE2A66987F85D9F7040DF42AFECFB53B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 20:15:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:35:9d:59:73:f8:3f:ce:6b:a7:7f:a3:da:f0:89:9b:7d:cd:fe:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E01C509DBE2A66987F85D9F7040DF42AFECFB53B
        Validity
            Not Before: Apr  4 05:33:04 2024 GMT
            Not After : Apr  3 05:38:04 2025 GMT
        Subject: CN=E9AC27AEBADE16A048B16AE4A0882DC5B33A5061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:58:52:2a:28:17:44:87:b0:b5:f1:a8:30:98:
                    3b:53:5e:66:c1:5f:85:5d:61:c9:fe:c4:79:88:03:
                    42:8e:f3:5d:1e:f4:e7:42:71:d6:25:1e:35:a4:66:
                    99:d0:67:1c:32:8c:21:54:7b:ac:a4:90:37:a3:1f:
                    a4:fe:03:4e:a7:d3:ae:ab:9e:31:89:2e:17:23:76:
                    d0:82:f8:2f:5d:48:87:59:55:16:88:40:84:13:29:
                    f1:35:2a:67:92:66:e9:cc:f6:ef:46:51:6c:1c:52:
                    83:ed:a8:ec:19:5d:dc:96:f9:8e:26:13:ed:c0:77:
                    bc:c1:18:bf:d2:1e:c0:41:81:70:30:ce:06:5a:3a:
                    f4:53:d7:95:64:4e:f4:86:d2:dd:67:73:e6:f4:b3:
                    65:93:1f:72:2f:ed:b2:72:5b:6d:1b:37:a8:7f:74:
                    ae:17:b4:ed:3e:7a:75:1e:1f:41:ea:2c:3b:d3:62:
                    fc:55:f3:87:6c:0c:bc:11:12:54:27:3d:11:5d:38:
                    83:b2:94:c8:aa:23:37:cb:3f:21:73:9d:03:c6:61:
                    b2:1a:79:ae:61:d8:0a:f1:21:a1:e2:14:2b:e8:d8:
                    cb:d3:1d:ab:f7:cf:70:dd:8c:ed:1b:8b:2a:d0:37:
                    13:ee:17:4c:82:26:67:05:ad:c4:15:39:fc:86:a9:
                    9f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:AC:27:AE:BA:DE:16:A0:48:B1:6A:E4:A0:88:2D:C5:B3:3A:50:61
            X509v3 Authority Key Identifier:
                keyid:E0:1C:50:9D:BE:2A:66:98:7F:85:D9:F7:04:0D:F4:2A:FE:CF:B5:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7X5xZx7ni4tRYCYPx6TJosipeinh5917BAEGm2D8Pg9B/1/E01C509DBE2A66987F85D9F7040DF42AFECFB53B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E01C509DBE2A66987F85D9F7040DF42AFECFB53B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7X5xZx7ni4tRYCYPx6TJosipeinh5917BAEGm2D8Pg9B/1/323830343a383735303a3a2f33322d3332203d3e20323732373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8750::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:b5:3b:63:50:db:c7:6b:21:32:47:e3:02:73:e7:ba:24:53:
         fc:12:da:32:a1:5b:e8:3a:dc:d1:71:5b:04:a3:60:68:f1:69:
         27:0f:f6:f3:8d:3c:9c:e7:3d:23:31:e7:e7:13:f5:b2:52:a1:
         b3:a4:53:7f:c5:fc:21:93:1e:fb:1d:9c:53:f8:e9:7c:76:d1:
         0f:dc:e1:52:1e:9f:a1:ca:c6:9b:82:e0:c2:ae:da:e7:72:35:
         ab:73:ba:a7:63:bf:f0:b3:21:7e:7b:cb:a6:92:52:a7:0b:79:
         71:d2:18:d7:2f:33:35:13:d6:dd:08:22:43:a2:ea:5e:a3:e4:
         2a:7e:a0:7a:97:38:d0:e5:da:9a:c3:ac:5a:e3:bb:53:42:e3:
         33:fb:96:6c:00:39:dc:46:5d:2a:7a:02:88:dd:c5:a1:d2:ac:
         fa:c6:e6:20:ba:51:81:cc:b1:8f:4f:bc:e5:cb:ff:e5:f9:2e:
         6f:97:aa:77:ca:b4:0e:47:29:5f:76:39:d3:f3:8b:ab:e9:34:
         54:e3:2a:dc:fe:80:e1:4a:20:8e:b7:65:d7:63:cc:9e:7e:51:
         89:3c:ad:3e:91:e1:75:56:c9:55:62:c3:51:2b:da:9e:90:bc:
         5e:58:a6:fc:27:33:82:12:92:e1:33:79:e6:e0:8a:69:a5:0e:
         4d:59:fe:d9
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUTDWdWXP4P85rp3+j2vCJm33N/sIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTAxQzUwOURCRTJBNjY5ODdGODVEOUY3MDQwREY0MkFG
RUNGQjUzQjAeFw0yNDA0MDQwNTMzMDRaFw0yNTA0MDMwNTM4MDRaMDMxMTAvBgNV
BAMTKEU5QUMyN0FFQkFERTE2QTA0OEIxNkFFNEEwODgyREM1QjMzQTUwNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHWFIqKBdEh7C18agwmDtTXmbB
X4VdYcn+xHmIA0KO810e9OdCcdYlHjWkZpnQZxwyjCFUe6ykkDejH6T+A06n066r
njGJLhcjdtCC+C9dSIdZVRaIQIQTKfE1KmeSZunM9u9GUWwcUoPtqOwZXdyW+Y4m
E+3Ad7zBGL/SHsBBgXAwzgZaOvRT15VkTvSG0t1nc+b0s2WTH3Iv7bJyW20bN6h/
dK4XtO0+enUeH0HqLDvTYvxV84dsDLwRElQnPRFdOIOylMiqIzfLPyFznQPGYbIa
ea5h2ArxIaHiFCvo2MvTHav3z3DdjO0biyrQNxPuF0yCJmcFrcQVOfyGqZ9PAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU6awnrrreFqBIsWrkoIgtxbM6UGEwHwYDVR0j
BBgwFoAU4BxQnb4qZph/hdn3BA30Kv7PtTswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1g1eFp4N25pNHRSWUNZUHg2VEpvc2lwZWluaDU5MTdCQUVHbTJEOFBn
OUIvMS9FMDFDNTA5REJFMkE2Njk4N0Y4NUQ5RjcwNDBERjQyQUZFQ0ZCNTNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UwMUM1MDlEQkUyQTY2OTg3
Rjg1RDlGNzA0MERGNDJBRkVDRkI1M0IuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdYNXhaeDduaTR0UllDWVB4NlRKb3NpcGVpbmg1OTE3QkFFR20yRDhQZzlCLzEv
MzIzODMwMzQzYTM4MzczNTMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMy
MzczMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASHUDANBgkqhkiG9w0BAQsFAAOCAQEABbU7Y1Db
x2shMkfjAnPnuiRT/BLaMqFb6Drc0XFbBKNgaPFpJw/28408nOc9IzHn5xP1slKh
s6RTf8X8IZMe+x2cU/jpfHbRD9zhUh6focrGm4Lgwq7a53I1q3O6p2O/8LMhfnvL
ppJSpwt5cdIY1y8zNRPW3QgiQ6LqXqPkKn6gepc40OXamsOsWuO7U0LjM/uWbAA5
3EZdKnoCiN3FodKs+sbmILpRgcyxj0+85cv/5fkub5eqd8q0DkcpX3Y50/OLq+k0
VOMq3P6A4Uogjrdl12PMnn5RiTytPpHhdVbJVWLDUSvanpC8Xlim/CczghKS4TN5
5uCKaaUOTVn+2Q==
-----END CERTIFICATE-----
Generated at Fri Jun 28 21:05:12 2024 by rpki-client on console-ams.rpki-client.org