Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3330303a3a2f34322d3432203d3e2032363534313837.roa
File:                     323830343a326330303a3330303a3a2f34322d3432203d3e2032363534313837.roa (raw, json)
Hash identifier:          RZs6is5ueC45VspaUTuSg2ANAHvzeaJYaUeXjgJfjCM=
Subject key identifier:   0B:43:DF:3F:B4:01:C7:FB:74:9C:15:E6:11:5E:A2:58:C0:F8:28:8D
Certificate issuer:       /CN=81175370221E26181F39FB407E63064DEB20E6EE
Certificate serial:       6567D370F7089BE9ACE66897A31AE24C37A1DA44
Authority key identifier: 81:17:53:70:22:1E:26:18:1F:39:FB:40:7E:63:06:4D:EB:20:E6:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81175370221E26181F39FB407E63064DEB20E6EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3330303a3a2f34322d3432203d3e2032363534313837.roa
Signing time:             Thu 01 Sep 2022 19:00:00 +0000
ROA not before:           Thu 01 Sep 2022 18:55:00 +0000
ROA not after:            Thu 31 Aug 2023 19:00:00 +0000
asID:                     2654187
IP address blocks:        2804:2c00:300::/42 maxlen: 42

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/81175370221E26181F39FB407E63064DEB20E6EE.crl
                          rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/81175370221E26181F39FB407E63064DEB20E6EE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81175370221E26181F39FB407E63064DEB20E6EE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 16 May 2023 04:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:67:d3:70:f7:08:9b:e9:ac:e6:68:97:a3:1a:e2:4c:37:a1:da:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81175370221E26181F39FB407E63064DEB20E6EE
        Validity
            Not Before: Sep  1 18:55:00 2022 GMT
            Not After : Aug 31 19:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1c:54:52:ea:64:3d:f4:c2:00:51:70:02:37:
                    d5:21:a7:82:53:70:1e:47:0f:19:71:f9:54:f2:d6:
                    75:e7:87:bc:4a:17:12:f2:50:0e:47:39:d0:0a:11:
                    33:c5:4a:8a:9f:92:72:a4:11:7c:ca:21:03:17:93:
                    17:c1:dd:cb:63:a5:fd:b8:c9:eb:78:32:45:dd:ad:
                    bd:e6:31:c9:f5:9f:70:c2:8c:67:f3:64:ed:99:7e:
                    27:5e:ba:9a:e0:f9:f6:0f:a8:3b:f3:10:90:ab:b0:
                    40:26:65:98:0e:10:1f:dc:21:e1:d8:e2:4f:70:16:
                    85:c9:0a:3f:9d:7c:ca:39:d4:a0:74:0c:3f:97:6b:
                    30:e1:82:20:61:29:76:70:4f:c4:81:4a:9f:e2:88:
                    5f:a1:26:0a:b7:82:7d:fe:51:44:90:d6:95:b1:02:
                    32:18:89:f5:6f:a1:64:84:e8:43:11:d7:9b:e1:9f:
                    9f:21:7b:df:fb:9a:17:cb:95:47:c5:88:5b:15:69:
                    ad:e5:72:82:dc:65:ab:e3:9c:78:33:5f:f5:00:98:
                    19:b0:ab:77:40:18:c6:e9:7c:0e:33:1f:f6:74:e1:
                    4c:46:2e:67:2a:a0:0f:1d:34:00:41:3b:f5:73:26:
                    de:c3:ca:d7:2e:45:89:b3:0c:02:e6:52:6c:68:b5:
                    34:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                0B:43:DF:3F:B4:01:C7:FB:74:9C:15:E6:11:5E:A2:58:C0:F8:28:8D
            X509v3 Authority Key Identifier: 
                keyid:81:17:53:70:22:1E:26:18:1F:39:FB:40:7E:63:06:4D:EB:20:E6:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/81175370221E26181F39FB407E63064DEB20E6EE.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81175370221E26181F39FB407E63064DEB20E6EE.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3330303a3a2f34322d3432203d3e2032363534313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c00:300::/42

    Signature Algorithm: sha256WithRSAEncryption
         c8:78:29:11:07:f5:b1:ae:d1:ae:00:3e:ba:e9:3d:2f:de:ad:
         68:a4:90:4a:11:0f:51:57:14:2c:bd:5f:74:bd:47:c3:2d:01:
         cf:46:5f:8e:57:bd:67:94:3a:b0:50:1b:34:f4:93:02:22:c8:
         33:fb:dc:0e:72:46:38:2c:e2:aa:94:9c:bc:88:3d:78:15:6c:
         40:ac:d6:0a:86:2f:98:65:26:49:ae:cf:7f:88:9e:f7:a0:69:
         d2:19:24:2e:e2:1e:7a:95:89:3d:74:79:46:e4:b0:a4:44:f9:
         f2:61:e5:6c:08:3e:99:1c:5b:0e:e4:59:c1:f6:1e:1c:13:60:
         e5:6e:15:01:06:e1:bf:e7:d2:59:f9:55:01:da:0a:80:9f:ae:
         7f:61:86:04:a6:6c:44:d9:73:7c:58:6e:fe:15:d4:ba:0b:ab:
         ad:ac:a0:ab:75:63:c6:af:25:e2:81:fc:8b:d7:ef:90:b7:7f:
         aa:cf:dc:91:35:aa:ec:9c:de:9b:7b:1a:0b:3d:86:cc:28:72:
         7d:81:e4:7a:fd:e1:25:60:bd:23:be:c6:c8:db:13:47:fe:b2:
         13:05:f3:dd:8a:37:db:f9:4b:a7:12:8f:38:e7:f3:c9:f8:46:
         5c:5a:b5:a1:57:41:ca:81:37:d6:1b:4e:7c:f2:63:cc:19:58:
         cd:2a:1b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----