Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FgSG66b3NdBdw1RKrKsRkgHUTkfoXD1V7DNo8WWsE2wm/1/323830343a336630303a3a2f33322d3438203d3e203532363433.roa
File:                     323830343a336630303a3a2f33322d3438203d3e203532363433.roa (raw, json)
Hash identifier:          p4xvoRag6MsfR/YYu6HDYwesh9YUyd61JDza7Jafswo=
Subject key identifier:   77:42:24:A0:C6:F1:F6:5F:62:F8:42:94:07:3E:2E:3F:C0:C2:2E:5D
Certificate issuer:       /CN=E1470F370CA043FEC72078800782F80E03725DD0
Certificate serial:       0A71925BF509A265028E35BCEFF2A2A9788B0393
Authority key identifier: E1:47:0F:37:0C:A0:43:FE:C7:20:78:80:07:82:F8:0E:03:72:5D:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1470F370CA043FEC72078800782F80E03725DD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FgSG66b3NdBdw1RKrKsRkgHUTkfoXD1V7DNo8WWsE2wm/1/323830343a336630303a3a2f33322d3438203d3e203532363433.roa
Signing time:             Thu 04 Apr 2024 03:01:16 +0000
ROA not before:           Thu 04 Apr 2024 02:56:16 +0000
ROA not after:            Thu 03 Apr 2025 03:01:16 +0000
asID:                     52643
IP address blocks:        2804:3f00::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FgSG66b3NdBdw1RKrKsRkgHUTkfoXD1V7DNo8WWsE2wm/1/E1470F370CA043FEC72078800782F80E03725DD0.crl
                          rsync://rpki-repo.registro.br/repo/FgSG66b3NdBdw1RKrKsRkgHUTkfoXD1V7DNo8WWsE2wm/1/E1470F370CA043FEC72078800782F80E03725DD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1470F370CA043FEC72078800782F80E03725DD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:37:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:71:92:5b:f5:09:a2:65:02:8e:35:bc:ef:f2:a2:a9:78:8b:03:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1470F370CA043FEC72078800782F80E03725DD0
        Validity
            Not Before: Apr  4 02:56:16 2024 GMT
            Not After : Apr  3 03:01:16 2025 GMT
        Subject: CN=774224A0C6F1F65F62F84294073E2E3FC0C22E5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bc:97:d0:5a:0c:83:2e:16:2b:66:51:e9:06:
                    25:1b:5e:12:86:c6:32:47:4d:a5:00:5b:66:23:9a:
                    80:42:58:f2:26:31:53:05:00:c6:b4:81:f6:e3:4c:
                    9b:ff:80:b6:39:49:48:c5:a3:7c:e9:3c:08:10:5b:
                    4b:37:51:d3:b3:64:b7:c6:c1:79:6c:78:6d:81:1f:
                    da:48:bf:57:df:41:b7:f9:07:ad:78:78:07:71:98:
                    a4:e3:1f:e6:b2:13:90:aa:1c:ba:48:e5:f5:cb:1a:
                    50:99:b7:30:ee:93:ff:dd:17:04:50:7c:ea:67:21:
                    c5:0d:09:7d:de:66:c0:1e:3e:19:ce:94:68:cb:bc:
                    d6:40:c0:f2:e5:ab:75:75:3e:ba:96:55:3f:4b:6c:
                    9f:c8:09:1b:52:f3:5d:02:bc:a2:2c:b6:d8:89:a2:
                    4d:25:f3:8f:d7:24:14:3d:b8:1e:18:b2:e2:9e:28:
                    56:57:f9:42:ef:f2:5f:01:35:cc:c4:8e:17:1f:d7:
                    47:d8:fb:3c:23:b9:98:0d:60:8d:c0:c9:1a:12:0e:
                    f6:ee:ae:b7:66:ec:ca:75:59:36:83:82:b2:b5:9c:
                    4a:c9:ff:24:04:f1:bc:a0:97:72:fb:ed:e7:14:d0:
                    33:60:2c:23:a8:ce:a3:b4:d8:75:7c:74:45:74:74:
                    f4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:42:24:A0:C6:F1:F6:5F:62:F8:42:94:07:3E:2E:3F:C0:C2:2E:5D
            X509v3 Authority Key Identifier:
                keyid:E1:47:0F:37:0C:A0:43:FE:C7:20:78:80:07:82:F8:0E:03:72:5D:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FgSG66b3NdBdw1RKrKsRkgHUTkfoXD1V7DNo8WWsE2wm/1/E1470F370CA043FEC72078800782F80E03725DD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1470F370CA043FEC72078800782F80E03725DD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FgSG66b3NdBdw1RKrKsRkgHUTkfoXD1V7DNo8WWsE2wm/1/323830343a336630303a3a2f33322d3438203d3e203532363433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f00::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:6c:98:79:11:df:b3:e6:ca:97:ed:c5:e2:22:21:26:5b:99:
         b8:28:9e:ce:d5:13:29:f3:43:89:16:d8:0b:30:87:96:4c:ce:
         8f:31:56:a2:30:00:71:13:72:54:dd:36:7a:77:16:ec:8f:d5:
         5d:66:80:ca:d9:d1:4a:b8:c5:f9:30:ea:c0:08:00:f6:ef:c5:
         dc:8f:93:49:b1:4c:cb:51:f4:2b:40:5c:de:88:52:a6:18:04:
         36:07:c5:55:6b:b4:2a:db:a2:52:a6:fb:a5:a4:1a:d2:b1:85:
         7f:2f:e7:1b:1e:37:d9:a6:9f:49:66:0d:1a:34:5a:49:24:4b:
         7c:b4:20:67:7a:7f:a2:06:26:14:95:75:6a:9f:29:16:ff:2a:
         25:bc:01:f4:cd:61:0b:ab:2d:c1:71:d0:3c:07:c1:6d:a6:ae:
         c7:db:49:de:19:5f:c4:43:11:c9:92:ab:96:ae:79:72:93:1b:
         f8:f9:50:69:6f:d2:37:82:a4:86:dd:49:63:c1:4a:6c:8b:ed:
         0e:1e:12:c7:e1:e6:23:d0:ca:bf:58:7f:56:5f:41:13:55:60:
         d4:aa:d5:32:a5:14:91:e9:03:b1:58:61:8b:57:45:a6:1f:58:
         0f:5f:de:e4:cf:5c:2e:4b:12:0f:2a:0a:b7:0a:6c:a3:fa:32:
         19:0f:3e:3c
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUCnGSW/UJomUCjjW87/KiqXiLA5MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTE0NzBGMzcwQ0EwNDNGRUM3MjA3ODgwMDc4MkY4MEUw
MzcyNUREMDAeFw0yNDA0MDQwMjU2MTZaFw0yNTA0MDMwMzAxMTZaMDMxMTAvBgNV
BAMTKDc3NDIyNEEwQzZGMUY2NUY2MkY4NDI5NDA3M0UyRTNGQzBDMjJFNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuvJfQWgyDLhYrZlHpBiUbXhKG
xjJHTaUAW2YjmoBCWPImMVMFAMa0gfbjTJv/gLY5SUjFo3zpPAgQW0s3UdOzZLfG
wXlseG2BH9pIv1ffQbf5B614eAdxmKTjH+ayE5CqHLpI5fXLGlCZtzDuk//dFwRQ
fOpnIcUNCX3eZsAePhnOlGjLvNZAwPLlq3V1PrqWVT9LbJ/ICRtS810CvKIsttiJ
ok0l84/XJBQ9uB4YsuKeKFZX+ULv8l8BNczEjhcf10fY+zwjuZgNYI3AyRoSDvbu
rrdm7Mp1WTaDgrK1nErJ/yQE8bygl3L77ecU0DNgLCOozqO02HV8dEV0dPTxAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUd0IkoMbx9l9i+EKUBz4uP8DCLl0wHwYDVR0j
BBgwFoAU4UcPNwygQ/7HIHiAB4L4DgNyXdAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmdTRzY2YjNOZEJkdzFSS3JLc1JrZ0hVVGtmb1hEMVY3RE5vOFdXc0Uy
d20vMS9FMTQ3MEYzNzBDQTA0M0ZFQzcyMDc4ODAwNzgyRjgwRTAzNzI1REQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UxNDcwRjM3MENBMDQzRkVD
NzIwNzg4MDA3ODJGODBFMDM3MjVERDAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZnU0c2NmIzTmRCZHcxUktyS3NSa2dIVVRrZm9YRDFWN0RObzhXV3NFMndtLzEv
MzIzODMwMzQzYTMzNjYzMDMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzUzMjM2
MzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEPwAwDQYJKoZIhvcNAQELBQADggEBAI5smHkR37Pm
ypftxeIiISZbmbgons7VEynzQ4kW2Aswh5ZMzo8xVqIwAHETclTdNnp3FuyP1V1m
gMrZ0Uq4xfkw6sAIAPbvxdyPk0mxTMtR9CtAXN6IUqYYBDYHxVVrtCrbolKm+6Wk
GtKxhX8v5xseN9mmn0lmDRo0WkkkS3y0IGd6f6IGJhSVdWqfKRb/KiW8AfTNYQur
LcFx0DwHwW2mrsfbSd4ZX8RDEcmSq5aueXKTG/j5UGlv0jeCpIbdSWPBSmyL7Q4e
Esfh5iPQyr9Yf1ZfQRNVYNSq1TKlFJHpA7FYYYtXRaYfWA9f3uTPXC5LEg8qCrcK
bKP6MhkPPjw=
-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:37 2024 by rpki-client on console-fra.rpki-client.org