Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/323830343a3237343a3a2f33322d3333203d3e203533323137.roa
File:                     323830343a3237343a3a2f33322d3333203d3e203533323137.roa (raw, json)
Hash identifier:          PadKqnCYf/B41SMlIpNSk15W9Ed42MFacH/2J2sWUxw=
Subject key identifier:   47:76:35:13:34:5C:F6:C6:87:A3:11:60:F2:B4:E3:7F:84:09:FB:73
Certificate issuer:       /CN=520BD06FB2D06F747C5B26FFFB9D7BC82AB87744
Certificate serial:       21A4B1EE9CEBE2652374D36224EE9B76232BC242
Authority key identifier: 52:0B:D0:6F:B2:D0:6F:74:7C:5B:26:FF:FB:9D:7B:C8:2A:B8:77:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/323830343a3237343a3a2f33322d3333203d3e203533323137.roa
Signing time:             Sun 28 Jul 2024 19:51:28 +0000
ROA not before:           Sun 28 Jul 2024 19:46:28 +0000
ROA not after:            Sun 27 Jul 2025 19:51:28 +0000
asID:                     53217
IP address blocks:        2804:274::/32 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.crl
                          rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:a4:b1:ee:9c:eb:e2:65:23:74:d3:62:24:ee:9b:76:23:2b:c2:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=520BD06FB2D06F747C5B26FFFB9D7BC82AB87744
        Validity
            Not Before: Jul 28 19:46:28 2024 GMT
            Not After : Jul 27 19:51:28 2025 GMT
        Subject: CN=47763513345CF6C687A31160F2B4E37F8409FB73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f4:a5:9f:e8:11:3c:33:cf:db:b5:71:8c:6b:
                    8f:64:33:04:6b:f9:86:4f:41:cb:99:52:f3:9e:67:
                    1d:35:ac:82:98:c6:ee:1f:c9:e8:24:e2:ac:2d:3d:
                    ae:23:b2:87:9a:4a:1d:cc:a7:93:26:df:c6:34:a4:
                    7e:b0:9d:27:50:1b:c0:20:0d:67:47:23:87:35:f3:
                    ac:25:dd:90:55:71:97:f2:70:0c:26:24:c4:f4:12:
                    e4:38:77:14:73:a7:61:1c:86:50:db:4f:c0:79:3c:
                    fe:5c:74:eb:23:f6:68:11:b1:3e:ef:b3:2c:99:8c:
                    64:c1:3b:e8:e8:33:84:42:b3:bd:88:62:f8:ad:36:
                    99:da:11:da:83:4e:e0:60:85:a0:90:5f:90:d4:7a:
                    51:3c:cc:09:bd:c4:6b:f5:dc:03:6c:4b:af:25:90:
                    50:79:2b:46:34:1d:0b:be:f8:3b:f6:6f:40:68:50:
                    cd:14:54:b2:f3:1d:6e:38:7c:cf:82:2d:49:25:39:
                    4d:6f:f0:20:5a:fb:59:c6:ad:c4:6e:48:ca:0e:f8:
                    21:db:2a:fd:5a:9f:86:62:2c:42:8c:15:03:fc:12:
                    b2:30:bd:bd:d5:37:f4:60:9a:5f:2a:af:77:97:26:
                    ed:5c:ca:29:bd:c6:56:d8:8e:fa:ee:2e:4b:32:02:
                    c4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:76:35:13:34:5C:F6:C6:87:A3:11:60:F2:B4:E3:7F:84:09:FB:73
            X509v3 Authority Key Identifier:
                keyid:52:0B:D0:6F:B2:D0:6F:74:7C:5B:26:FF:FB:9D:7B:C8:2A:B8:77:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/323830343a3237343a3a2f33322d3333203d3e203533323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:274::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:b8:dd:40:a9:88:f9:60:3c:0b:af:e2:5a:99:2c:55:8a:f8:
         ce:73:fc:ed:40:0c:42:cb:39:b8:19:7d:d7:f7:ad:ce:45:0a:
         71:87:94:f3:60:2d:d7:bb:be:18:9d:0f:66:b5:cc:f3:d2:97:
         91:1d:e1:bc:8c:8f:4a:2d:f4:ac:4f:61:dc:88:99:b5:30:ed:
         25:d0:a8:14:1c:8d:5c:80:9f:c8:11:7b:24:87:5c:7a:7d:08:
         c8:00:71:62:f2:87:0d:86:1d:91:2e:8f:9c:45:20:bb:15:99:
         54:5c:77:92:74:66:9e:d3:1d:48:56:a0:b3:ca:e5:04:4d:f6:
         47:a1:69:4a:6d:d7:65:f0:1f:d5:aa:02:33:51:15:a3:e5:3f:
         a0:cd:f7:38:9c:f4:1c:52:ed:cb:4c:49:a0:15:a1:92:ab:da:
         dd:f1:d2:7d:74:20:37:c7:2a:0b:d5:e1:f9:87:da:64:a5:67:
         4b:cc:31:25:6e:13:64:c7:24:2b:1f:3d:be:95:25:99:fb:46:
         98:7f:b4:7f:f8:48:de:5d:22:f2:92:b0:4e:b4:15:e4:a3:c2:
         56:37:a4:c0:26:e0:f3:17:62:dd:39:1c:b7:a9:ab:37:4e:e8:
         7a:49:b5:b3:fe:ea:54:af:40:75:97:97:13:5d:f3:cf:ff:49:
         91:ad:25:a4
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUIaSx7pzr4mUjdNNiJO6bdiMrwkIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTIwQkQwNkZCMkQwNkY3NDdDNUIyNkZGRkI5RDdCQzgy
QUI4Nzc0NDAeFw0yNDA3MjgxOTQ2MjhaFw0yNTA3MjcxOTUxMjhaMDMxMTAvBgNV
BAMTKDQ3NzYzNTEzMzQ1Q0Y2QzY4N0EzMTE2MEYyQjRFMzdGODQwOUZCNzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY9KWf6BE8M8/btXGMa49kMwRr
+YZPQcuZUvOeZx01rIKYxu4fyegk4qwtPa4jsoeaSh3Mp5Mm38Y0pH6wnSdQG8Ag
DWdHI4c186wl3ZBVcZfycAwmJMT0EuQ4dxRzp2EchlDbT8B5PP5cdOsj9mgRsT7v
syyZjGTBO+joM4RCs72IYvitNpnaEdqDTuBghaCQX5DUelE8zAm9xGv13ANsS68l
kFB5K0Y0HQu++Dv2b0BoUM0UVLLzHW44fM+CLUklOU1v8CBa+1nGrcRuSMoO+CHb
Kv1an4ZiLEKMFQP8ErIwvb3VN/Rgml8qr3eXJu1cyim9xlbYjvruLksyAsQLAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUR3Y1EzRc9saHoxFg8rTjf4QJ+3MwHwYDVR0j
BBgwFoAUUgvQb7LQb3R8Wyb/+517yCq4d0QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEFHY2ZyUXlvWm5iaHJKZ1h1TE1QeGJxQnJ3S3RSOWVNVjRYdWVidmFN
NjUvMC81MjBCRDA2RkIyRDA2Rjc0N0M1QjI2RkZGQjlEN0JDODJBQjg3NzQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUyMEJEMDZGQjJEMDZGNzQ3
QzVCMjZGRkZCOUQ3QkM4MkFCODc3NDQuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hBR2NmclF5b1puYmhySmdYdUxNUHhicUJyd0t0UjllTVY0WHVlYnZhTTY1LzAv
MzIzODMwMzQzYTMyMzczNDNhM2EyZjMzMzIyZDMzMzMyMDNkM2UyMDM1MzMzMjMx
Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBAJ0MA0GCSqGSIb3DQEBCwUAA4IBAQBQuN1AqYj5YDwL
r+JamSxVivjOc/ztQAxCyzm4GX3X963ORQpxh5TzYC3Xu74YnQ9mtczz0peRHeG8
jI9KLfSsT2HciJm1MO0l0KgUHI1cgJ/IEXskh1x6fQjIAHFi8ocNhh2RLo+cRSC7
FZlUXHeSdGae0x1IVqCzyuUETfZHoWlKbddl8B/VqgIzURWj5T+gzfc4nPQcUu3L
TEmgFaGSq9rd8dJ9dCA3xyoL1eH5h9pkpWdLzDElbhNkxyQrHz2+lSWZ+0aYf7R/
+EjeXSLykrBOtBXko8JWN6TAJuDzF2LdORy3qas3Tuh6SbWz/upUr0B1l5cTXfPP
/0mRrSWk
-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:41 2024 by rpki-client on console-ams.rpki-client.org