Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/323830343a326231303a313030303a3a2f33372d3337203d3e203532393136.roa
File:                     323830343a326231303a313030303a3a2f33372d3337203d3e203532393136.roa (raw, json)
Hash identifier:          iPpS7jlnL4iv44lJXR4+b9QF7wl2GC+vMks4PSTVWGs=
Subject key identifier:   81:17:26:6F:D7:48:81:2A:C5:7A:E5:93:DB:F5:54:E9:5D:F1:F2:4C
Certificate issuer:       /CN=EF908A177FAF3EDEEAF39EF1BC3B208225302E77
Certificate serial:       1FA57CA687F729CAD75DFB2457CBF85C03A3F8B1
Authority key identifier: EF:90:8A:17:7F:AF:3E:DE:EA:F3:9E:F1:BC:3B:20:82:25:30:2E:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/323830343a326231303a313030303a3a2f33372d3337203d3e203532393136.roa
Signing time:             Wed 03 Apr 2024 20:51:32 +0000
ROA not before:           Wed 03 Apr 2024 20:46:32 +0000
ROA not after:            Wed 02 Apr 2025 20:51:32 +0000
asID:                     52916
IP address blocks:        2804:2b10:1000::/37 maxlen: 37

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.crl
                          rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:a5:7c:a6:87:f7:29:ca:d7:5d:fb:24:57:cb:f8:5c:03:a3:f8:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF908A177FAF3EDEEAF39EF1BC3B208225302E77
        Validity
            Not Before: Apr  3 20:46:32 2024 GMT
            Not After : Apr  2 20:51:32 2025 GMT
        Subject: CN=8117266FD748812AC57AE593DBF554E95DF1F24C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:98:76:02:f4:b8:cf:77:77:ef:7d:7f:f5:d8:
                    1f:a1:4e:d2:19:ec:f3:4a:4f:06:3f:2a:21:5e:39:
                    22:b2:d6:8c:54:78:06:66:7c:ab:0e:0a:df:c1:96:
                    da:3e:22:93:c9:67:bc:9b:7d:50:f9:de:46:fc:0c:
                    b6:a3:56:5f:19:25:42:f4:2d:ea:a8:27:77:01:c8:
                    ea:e5:76:f0:d5:ad:d0:19:08:fb:1a:d2:9c:4d:fe:
                    ff:98:91:b1:0e:75:e4:4b:8f:a1:b4:fc:4d:f3:e3:
                    2d:23:2f:01:44:24:b1:e9:d5:f0:a7:14:82:19:a8:
                    cc:4e:20:78:96:3b:69:bc:64:b2:04:9b:46:fc:17:
                    b4:36:16:b3:13:bb:d6:4a:ce:91:45:ee:f6:cd:46:
                    af:99:a5:a3:67:42:5c:9d:0c:af:9f:41:ad:19:c4:
                    e5:a0:9e:0c:90:a1:40:f3:89:22:9d:2b:26:29:39:
                    6f:70:bb:d8:3e:c1:44:97:e3:10:0d:12:09:4c:89:
                    bd:7e:42:21:53:8e:d5:23:ce:ba:6e:ae:f0:a3:cd:
                    ba:5a:0e:a6:4e:28:73:11:8c:c5:f6:3c:52:5e:c7:
                    ba:0a:ed:6e:a4:68:42:de:23:70:ef:a1:3c:c9:78:
                    b0:aa:25:39:a4:09:a5:85:97:68:a4:c1:26:17:0b:
                    d1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:17:26:6F:D7:48:81:2A:C5:7A:E5:93:DB:F5:54:E9:5D:F1:F2:4C
            X509v3 Authority Key Identifier:
                keyid:EF:90:8A:17:7F:AF:3E:DE:EA:F3:9E:F1:BC:3B:20:82:25:30:2E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/323830343a326231303a313030303a3a2f33372d3337203d3e203532393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b10:1000::/37

    Signature Algorithm: sha256WithRSAEncryption
         0d:16:18:27:36:6a:4a:46:c9:ef:2b:68:a1:fb:a7:c5:8f:a9:
         d3:e8:ba:dc:31:bb:ff:ee:83:1a:88:d5:3d:a0:82:21:b5:50:
         d3:fb:54:0b:ec:2b:2f:03:09:f3:d9:fa:c9:9b:1d:2d:1d:63:
         3a:f5:53:2a:bc:66:ed:84:24:ef:9c:16:83:bc:6d:0b:5e:e2:
         80:f7:54:4c:ff:8a:23:bd:a5:86:ae:84:57:ed:b9:a4:1a:2a:
         a5:13:9f:fd:56:8d:26:65:e8:6b:18:4a:fa:02:b7:71:58:22:
         c1:6b:b9:0c:d4:ac:a5:82:b9:20:7e:36:05:1d:47:f5:7b:44:
         66:68:68:3b:85:3e:3e:d5:03:20:13:0e:81:10:8f:f4:f7:6d:
         39:5b:04:6c:25:62:13:3b:af:cd:da:ea:1a:34:4a:59:af:31:
         55:87:18:4f:49:b8:d9:58:80:8e:78:b1:bc:2d:e1:18:9d:cb:
         ac:e7:f6:a8:22:74:cb:0d:36:e0:5b:e0:54:72:77:55:15:fa:
         98:c4:b7:33:20:c5:14:67:7a:cb:5a:73:80:a7:e0:84:9f:54:
         47:60:1a:f4:1e:fa:0c:d1:08:0f:43:ce:59:eb:c7:55:f7:1a:
         b5:8e:4f:21:18:a7:d7:40:2b:b7:ca:00:3d:d4:be:7e:74:f1:
         d1:23:ef:c8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUH6V8pof3KcrXXfskV8v4XAOj+LEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUY5MDhBMTc3RkFGM0VERUVBRjM5RUYxQkMzQjIwODIy
NTMwMkU3NzAeFw0yNDA0MDMyMDQ2MzJaFw0yNTA0MDIyMDUxMzJaMDMxMTAvBgNV
BAMTKDgxMTcyNjZGRDc0ODgxMkFDNTdBRTU5M0RCRjU1NEU5NURGMUYyNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWmHYC9LjPd3fvfX/12B+hTtIZ
7PNKTwY/KiFeOSKy1oxUeAZmfKsOCt/Blto+IpPJZ7ybfVD53kb8DLajVl8ZJUL0
LeqoJ3cByOrldvDVrdAZCPsa0pxN/v+YkbEOdeRLj6G0/E3z4y0jLwFEJLHp1fCn
FIIZqMxOIHiWO2m8ZLIEm0b8F7Q2FrMTu9ZKzpFF7vbNRq+ZpaNnQlydDK+fQa0Z
xOWgngyQoUDziSKdKyYpOW9wu9g+wUSX4xANEglMib1+QiFTjtUjzrpurvCjzbpa
DqZOKHMRjMX2PFJex7oK7W6kaELeI3DvoTzJeLCqJTmkCaWFl2ikwSYXC9F/AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUgRcmb9dIgSrFeuWT2/VU6V3x8kwwHwYDVR0j
BBgwFoAU75CKF3+vPt7q857xvDsggiUwLncwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTFWOWU4UEs4YWNGcGhrdjJyeEpKVm9hVFI0cjNhVnlDZkhWenJxM3Vo
NGovMS9FRjkwOEExNzdGQUYzRURFRUFGMzlFRjFCQzNCMjA4MjI1MzAyRTc3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VGOTA4QTE3N0ZBRjNFREVF
QUYzOUVGMUJDM0IyMDgyMjUzMDJFNzcuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0UxVjllOFBLOGFjRnBoa3YycnhKSlZvYVRSNHIzYVZ5Q2ZIVnpycTN1aDRqLzEv
MzIzODMwMzQzYTMyNjIzMTMwM2EzMTMwMzAzMDNhM2EyZjMzMzcyZDMzMzcyMDNk
M2UyMDM1MzIzOTMxMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgMoBCsQEDANBgkqhkiG9w0BAQsFAAOC
AQEADRYYJzZqSkbJ7ytoofunxY+p0+i63DG7/+6DGojVPaCCIbVQ0/tUC+wrLwMJ
89n6yZsdLR1jOvVTKrxm7YQk75wWg7xtC17igPdUTP+KI72lhq6EV+25pBoqpROf
/VaNJmXoaxhK+gK3cVgiwWu5DNSspYK5IH42BR1H9XtEZmhoO4U+PtUDIBMOgRCP
9PdtOVsEbCViEzuvzdrqGjRKWa8xVYcYT0m42ViAjnixvC3hGJ3LrOf2qCJ0yw02
4FvgVHJ3VRX6mMS3MyDFFGd6y1pzgKfghJ9UR2Aa9B76DNEID0POWevHVfcatY5P
IRin10Art8oAPdS+fnTx0SPvyA==
-----END CERTIFICATE-----
Generated at Fri Jun 28 05:28:06 2024 by rpki-client on console-ams.rpki-client.org