Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7X5xZx7ni4tRYCYPx6TJosipeinh5917BAEGm2D8Pg9B/1/323830343a383735303a3a2f33332d3333203d3e20323732373031.roa
File:                     323830343a383735303a3a2f33332d3333203d3e20323732373031.roa (raw, json)
Hash identifier:          t1Qd1DXFreHPX0c/KWmxoCwevezU3F5spDbY88VXb3c=
Subject key identifier:   59:8E:16:ED:CB:6A:AF:E4:1A:60:07:E9:92:5A:A2:83:BF:EC:FC:66
Certificate issuer:       /CN=E01C509DBE2A66987F85D9F7040DF42AFECFB53B
Certificate serial:       4A87E373A02A56E01A30287E46DE44B459E39B29
Authority key identifier: E0:1C:50:9D:BE:2A:66:98:7F:85:D9:F7:04:0D:F4:2A:FE:CF:B5:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E01C509DBE2A66987F85D9F7040DF42AFECFB53B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7X5xZx7ni4tRYCYPx6TJosipeinh5917BAEGm2D8Pg9B/1/323830343a383735303a3a2f33332d3333203d3e20323732373031.roa
Signing time:             Mon 18 Nov 2024 15:36:46 +0000
ROA not before:           Mon 18 Nov 2024 15:31:46 +0000
ROA not after:            Mon 17 Nov 2025 15:36:46 +0000
asID:                     272701
IP address blocks:        2804:8750::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7X5xZx7ni4tRYCYPx6TJosipeinh5917BAEGm2D8Pg9B/1/E01C509DBE2A66987F85D9F7040DF42AFECFB53B.crl
                          rsync://rpki-repo.registro.br/repo/7X5xZx7ni4tRYCYPx6TJosipeinh5917BAEGm2D8Pg9B/1/E01C509DBE2A66987F85D9F7040DF42AFECFB53B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E01C509DBE2A66987F85D9F7040DF42AFECFB53B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:38:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:87:e3:73:a0:2a:56:e0:1a:30:28:7e:46:de:44:b4:59:e3:9b:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E01C509DBE2A66987F85D9F7040DF42AFECFB53B
        Validity
            Not Before: Nov 18 15:31:46 2024 GMT
            Not After : Nov 17 15:36:46 2025 GMT
        Subject: CN=598E16EDCB6AAFE41A6007E9925AA283BFECFC66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8d:ff:df:4c:94:79:2c:62:9d:74:7b:34:c8:
                    a2:ea:db:36:9e:e3:d0:bb:6f:cc:10:a1:fb:75:48:
                    2c:34:d0:04:57:8c:82:30:9f:4a:a3:c4:26:35:30:
                    24:ac:90:88:45:cd:93:c3:36:45:77:b9:37:53:0a:
                    cb:fd:f3:3e:5e:ff:7d:0e:3d:ac:ef:e1:c5:05:63:
                    77:87:c1:81:96:69:4f:a7:fb:a6:9a:8e:2d:c3:4d:
                    e0:e6:07:44:f7:e2:de:b1:c4:d9:a1:30:19:c6:a7:
                    dc:5d:3b:4b:a3:8c:17:c3:ff:15:e4:99:24:61:54:
                    8d:b9:c2:df:7d:52:b3:74:91:f6:35:1c:ec:16:ff:
                    ac:e4:b3:eb:b4:8d:40:0f:4d:f0:98:90:46:11:dd:
                    3e:42:51:a4:63:45:65:fe:58:e2:82:a4:77:7f:2a:
                    de:bc:27:7c:0b:02:4a:94:df:f1:94:67:9e:99:18:
                    06:3e:d4:53:85:9b:50:a2:4a:2d:d9:21:3f:ae:f4:
                    f2:59:e4:1c:ee:33:0d:75:7b:a3:41:fa:bb:43:06:
                    0d:0b:e3:d4:40:91:80:bb:34:46:f9:44:0a:72:10:
                    27:fb:1f:9d:8e:8f:79:64:a3:78:ec:f3:30:15:68:
                    4d:94:cb:4d:18:d9:67:f6:2a:38:1c:03:ac:dd:1d:
                    2a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:8E:16:ED:CB:6A:AF:E4:1A:60:07:E9:92:5A:A2:83:BF:EC:FC:66
            X509v3 Authority Key Identifier:
                keyid:E0:1C:50:9D:BE:2A:66:98:7F:85:D9:F7:04:0D:F4:2A:FE:CF:B5:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7X5xZx7ni4tRYCYPx6TJosipeinh5917BAEGm2D8Pg9B/1/E01C509DBE2A66987F85D9F7040DF42AFECFB53B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E01C509DBE2A66987F85D9F7040DF42AFECFB53B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7X5xZx7ni4tRYCYPx6TJosipeinh5917BAEGm2D8Pg9B/1/323830343a383735303a3a2f33332d3333203d3e20323732373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8750::/33

    Signature Algorithm: sha256WithRSAEncryption
         45:87:bd:c4:b8:aa:dd:ce:c0:e9:38:0f:82:fe:e7:f8:68:37:
         08:b1:e3:20:25:31:f3:d3:e3:21:78:f6:96:6d:b4:1f:ed:da:
         b7:24:d3:b2:75:d1:f3:94:6f:db:eb:10:39:a1:c6:71:39:21:
         ff:6d:80:7a:97:b3:06:07:88:d3:1d:62:9d:ac:c1:34:86:5e:
         ce:d0:9c:ea:7e:3b:f7:a8:31:63:c9:9e:d8:cc:bf:07:cf:36:
         cb:7f:ca:d2:04:ac:62:bc:f7:05:51:39:94:fa:20:23:fc:43:
         bb:cc:a5:db:9a:66:a8:c7:c9:80:9f:4a:da:e5:5b:c7:35:16:
         57:dc:3d:bd:1d:ec:f1:f7:2c:19:54:3d:3d:72:a3:87:04:1a:
         30:3d:27:c2:6c:c1:b2:bb:16:8b:9f:e3:08:de:83:55:e3:b2:
         f5:98:da:d0:e2:55:a3:00:bd:e6:26:a6:2b:35:45:49:88:cc:
         ec:a6:94:29:62:5c:71:b7:92:d7:b5:b5:9c:84:bc:a1:bf:f6:
         72:6e:86:bb:8d:74:ac:29:4a:96:ba:e9:86:34:2f:7b:80:9f:
         2f:81:b5:17:5c:c1:bd:e3:67:fa:54:15:ae:3c:9e:41:3a:26:
         18:ef:b2:c0:6f:4e:3f:6a:4b:a2:a1:a3:13:94:b7:a1:8a:b3:
         85:0d:53:4f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUSofjc6AqVuAaMCh+Rt5EtFnjmykwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTAxQzUwOURCRTJBNjY5ODdGODVEOUY3MDQwREY0MkFG
RUNGQjUzQjAeFw0yNDExMTgxNTMxNDZaFw0yNTExMTcxNTM2NDZaMDMxMTAvBgNV
BAMTKDU5OEUxNkVEQ0I2QUFGRTQxQTYwMDdFOTkyNUFBMjgzQkZFQ0ZDNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcjf/fTJR5LGKddHs0yKLq2zae
49C7b8wQoft1SCw00ARXjIIwn0qjxCY1MCSskIhFzZPDNkV3uTdTCsv98z5e/30O
Pazv4cUFY3eHwYGWaU+n+6aaji3DTeDmB0T34t6xxNmhMBnGp9xdO0ujjBfD/xXk
mSRhVI25wt99UrN0kfY1HOwW/6zks+u0jUAPTfCYkEYR3T5CUaRjRWX+WOKCpHd/
Kt68J3wLAkqU3/GUZ56ZGAY+1FOFm1CiSi3ZIT+u9PJZ5BzuMw11e6NB+rtDBg0L
49RAkYC7NEb5RApyECf7H52Oj3lko3js8zAVaE2Uy00Y2Wf2KjgcA6zdHSoRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUWY4W7ctqr+QaYAfpklqig7/s/GYwHwYDVR0j
BBgwFoAU4BxQnb4qZph/hdn3BA30Kv7PtTswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1g1eFp4N25pNHRSWUNZUHg2VEpvc2lwZWluaDU5MTdCQUVHbTJEOFBn
OUIvMS9FMDFDNTA5REJFMkE2Njk4N0Y4NUQ5RjcwNDBERjQyQUZFQ0ZCNTNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UwMUM1MDlEQkUyQTY2OTg3
Rjg1RDlGNzA0MERGNDJBRkVDRkI1M0IuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdYNXhaeDduaTR0UllDWVB4NlRKb3NpcGVpbmg1OTE3QkFFR20yRDhQZzlCLzEv
MzIzODMwMzQzYTM4MzczNTMwM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNzMy
MzczMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKASHUAAwDQYJKoZIhvcNAQELBQADggEBAEWHvcS4
qt3OwOk4D4L+5/hoNwix4yAlMfPT4yF49pZttB/t2rck07J10fOUb9vrEDmhxnE5
If9tgHqXswYHiNMdYp2swTSGXs7QnOp+O/eoMWPJntjMvwfPNst/ytIErGK89wVR
OZT6ICP8Q7vMpduaZqjHyYCfStrlW8c1FlfcPb0d7PH3LBlUPT1yo4cEGjA9J8Js
wbK7Fouf4wjeg1XjsvWY2tDiVaMAveYmpis1RUmIzOymlCliXHG3kte1tZyEvKG/
9nJuhruNdKwpSpa66YY0L3uAny+BtRdcwb3jZ/pUFa48nkE6JhjvssBvTj9qS6Kh
oxOUt6GKs4UNU08=
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:53 2024 by rpki-client on console-fra.rpki-client.org