Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E6engqPYXVUdABhDwjTT6PbzYZkJU3VQM3Mm9LDJuWHT/1/323830343a3932383a3a2f33322d313238203d3e203533313032.roa
File:                     323830343a3932383a3a2f33322d313238203d3e203533313032.roa (raw, json)
Hash identifier:          XPVxTwtarumNJC4OAG0erKAk/BwVlypAeLcFfxeoR8k=
Subject key identifier:   2D:02:A6:3B:2C:AE:08:7D:D1:13:90:9D:5D:DE:D7:1C:0A:A5:44:27
Certificate issuer:       /CN=47A0BA8B6BFD6528B70033FEAB848C965238B383
Certificate serial:       7DA65874C755F54F0D19CBE1CEFE6121EA172BD5
Authority key identifier: 47:A0:BA:8B:6B:FD:65:28:B7:00:33:FE:AB:84:8C:96:52:38:B3:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47A0BA8B6BFD6528B70033FEAB848C965238B383.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E6engqPYXVUdABhDwjTT6PbzYZkJU3VQM3Mm9LDJuWHT/1/323830343a3932383a3a2f33322d313238203d3e203533313032.roa
Signing time:             Thu 04 Apr 2024 03:56:13 +0000
ROA not before:           Thu 04 Apr 2024 03:51:13 +0000
ROA not after:            Thu 03 Apr 2025 03:56:13 +0000
asID:                     53102
IP address blocks:        2804:928::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E6engqPYXVUdABhDwjTT6PbzYZkJU3VQM3Mm9LDJuWHT/1/47A0BA8B6BFD6528B70033FEAB848C965238B383.crl
                          rsync://rpki-repo.registro.br/repo/E6engqPYXVUdABhDwjTT6PbzYZkJU3VQM3Mm9LDJuWHT/1/47A0BA8B6BFD6528B70033FEAB848C965238B383.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47A0BA8B6BFD6528B70033FEAB848C965238B383.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:19:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:a6:58:74:c7:55:f5:4f:0d:19:cb:e1:ce:fe:61:21:ea:17:2b:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47A0BA8B6BFD6528B70033FEAB848C965238B383
        Validity
            Not Before: Apr  4 03:51:13 2024 GMT
            Not After : Apr  3 03:56:13 2025 GMT
        Subject: CN=2D02A63B2CAE087DD113909D5DDED71C0AA54427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ca:73:ff:cf:43:ae:49:c1:2b:ee:7e:a6:5e:
                    83:23:24:9a:d5:88:cf:c5:d8:80:71:6f:3c:f1:36:
                    6c:e1:82:83:4c:39:31:10:a0:24:ae:ca:3b:f2:61:
                    ae:ab:4e:a8:1a:f1:84:a7:26:59:d1:08:5f:4d:0e:
                    85:a0:4f:4f:97:c4:6a:cd:30:45:bd:25:e4:e2:5b:
                    f1:4d:8d:17:36:13:1e:1a:08:5a:9c:1e:8e:0a:52:
                    11:0b:00:02:0f:98:2c:35:1d:88:9f:38:e0:02:d6:
                    dc:f0:5f:c2:3d:34:7e:77:30:84:ea:ca:c3:c1:1b:
                    e8:6d:42:43:4d:f2:9e:82:72:52:ff:c3:91:56:5e:
                    e6:92:40:4f:4e:85:cf:ed:17:1f:b1:91:84:f8:ea:
                    4a:bc:33:8a:a4:92:e4:11:66:69:2f:45:25:b3:f2:
                    09:fe:ab:9f:db:9a:25:c5:b5:f6:75:f0:a0:14:f8:
                    36:04:22:8b:9d:f9:9f:7b:ef:25:ee:1b:f0:2a:ce:
                    cf:3d:d6:3c:95:e0:4c:cc:c7:63:c3:73:22:90:e8:
                    ee:eb:72:89:13:e7:f6:0f:e5:7d:df:eb:e6:42:40:
                    73:3b:3d:91:d8:3d:00:33:3f:67:8f:f0:68:e0:d0:
                    eb:52:2b:d1:cc:55:79:69:c7:55:a0:d6:09:c4:d3:
                    45:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:02:A6:3B:2C:AE:08:7D:D1:13:90:9D:5D:DE:D7:1C:0A:A5:44:27
            X509v3 Authority Key Identifier:
                keyid:47:A0:BA:8B:6B:FD:65:28:B7:00:33:FE:AB:84:8C:96:52:38:B3:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E6engqPYXVUdABhDwjTT6PbzYZkJU3VQM3Mm9LDJuWHT/1/47A0BA8B6BFD6528B70033FEAB848C965238B383.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47A0BA8B6BFD6528B70033FEAB848C965238B383.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6engqPYXVUdABhDwjTT6PbzYZkJU3VQM3Mm9LDJuWHT/1/323830343a3932383a3a2f33322d313238203d3e203533313032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:928::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:2f:53:ff:4a:94:98:b5:ea:11:ff:ed:29:98:8d:ff:ea:3b:
         47:7f:53:ad:60:69:54:91:3c:fd:71:95:8d:aa:c9:99:22:23:
         85:fb:72:c9:85:c5:50:c2:11:50:34:80:10:62:3d:1a:b5:a6:
         ed:83:95:16:70:1b:5d:99:db:74:88:c6:74:93:cc:c1:ce:60:
         63:9e:d0:85:5b:d6:1c:4f:26:f8:51:a0:56:ed:68:98:12:90:
         11:42:e4:4c:b7:74:2f:ba:0a:cb:93:b9:dc:36:dd:0b:9a:a6:
         44:41:63:97:6a:7f:93:14:16:a6:40:21:eb:b0:ea:7a:56:13:
         98:8e:b5:37:66:8a:40:03:22:0b:e4:05:a0:69:20:0f:bf:27:
         b5:02:24:e4:20:41:ab:2b:8f:4b:b2:81:51:2b:63:d6:5b:74:
         65:c6:80:dc:a8:98:47:ff:c8:e4:eb:4f:4e:71:07:f2:f5:4d:
         a6:ec:7b:66:ca:f6:00:56:24:ff:2e:79:98:36:cf:3f:12:ef:
         e3:57:78:95:46:de:a3:ee:71:85:4a:e2:05:93:9a:9f:fa:8d:
         c2:f7:fa:60:04:42:87:f2:c1:c8:2a:a3:45:05:df:ad:62:92:
         be:ed:e5:c6:1b:21:52:46:a2:5c:08:d9:7e:c1:f0:9f:91:44:
         b0:5e:81:4b
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUfaZYdMdV9U8NGcvhzv5hIeoXK9UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDdBMEJBOEI2QkZENjUyOEI3MDAzM0ZFQUI4NDhDOTY1
MjM4QjM4MzAeFw0yNDA0MDQwMzUxMTNaFw0yNTA0MDMwMzU2MTNaMDMxMTAvBgNV
BAMTKDJEMDJBNjNCMkNBRTA4N0REMTEzOTA5RDVEREVENzFDMEFBNTQ0MjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsynP/z0OuScEr7n6mXoMjJJrV
iM/F2IBxbzzxNmzhgoNMOTEQoCSuyjvyYa6rTqga8YSnJlnRCF9NDoWgT0+XxGrN
MEW9JeTiW/FNjRc2Ex4aCFqcHo4KUhELAAIPmCw1HYifOOAC1tzwX8I9NH53MITq
ysPBG+htQkNN8p6CclL/w5FWXuaSQE9Ohc/tFx+xkYT46kq8M4qkkuQRZmkvRSWz
8gn+q5/bmiXFtfZ18KAU+DYEIoud+Z977yXuG/Aqzs891jyV4EzMx2PDcyKQ6O7r
cokT5/YP5X3f6+ZCQHM7PZHYPQAzP2eP8Gjg0OtSK9HMVXlpx1Wg1gnE00VXAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQULQKmOyyuCH3RE5CdXd7XHAqlRCcwHwYDVR0j
BBgwFoAUR6C6i2v9ZSi3ADP+q4SMllI4s4MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTZlbmdxUFlYVlVkQUJoRHdqVFQ2UGJ6WVprSlUzVlFNM01tOUxESnVX
SFQvMS80N0EwQkE4QjZCRkQ2NTI4QjcwMDMzRkVBQjg0OEM5NjUyMzhCMzgzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ3QTBCQThCNkJGRDY1MjhC
NzAwMzNGRUFCODQ4Qzk2NTIzOEIzODMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0U2ZW5ncVBZWFZVZEFCaER3alRUNlBiellaa0pVM1ZRTTNNbTlMREp1V0hULzEv
MzIzODMwMzQzYTM5MzIzODNhM2EyZjMzMzIyZDMxMzIzODIwM2QzZTIwMzUzMzMx
MzAzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgECSgwDQYJKoZIhvcNAQELBQADggEBAKMvU/9KlJi1
6hH/7SmYjf/qO0d/U61gaVSRPP1xlY2qyZkiI4X7csmFxVDCEVA0gBBiPRq1pu2D
lRZwG12Z23SIxnSTzMHOYGOe0IVb1hxPJvhRoFbtaJgSkBFC5Ey3dC+6CsuTudw2
3QuapkRBY5dqf5MUFqZAIeuw6npWE5iOtTdmikADIgvkBaBpIA+/J7UCJOQgQasr
j0uygVErY9ZbdGXGgNyomEf/yOTrT05xB/L1Tabse2bK9gBWJP8ueZg2zz8S7+NX
eJVG3qPucYVK4gWTmp/6jcL3+mAEQofywcgqo0UF361ikr7t5cYbIVJGolwI2X7B
8J+RRLBegUs=
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:24 2024 by rpki-client on console-ams.rpki-client.org