Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/1/323830343a333766383a383030303a3a2f33332d3634203d3e20323632383830.roa
File:                     323830343a333766383a383030303a3a2f33332d3634203d3e20323632383830.roa (raw, json)
Hash identifier:          4EX/06pkZ/Nq5jv78PzQkJwk8lz4+Rm23Sh103b1zSI=
Subject key identifier:   E5:35:26:FF:C5:9A:A2:E4:B7:5C:85:B0:F9:54:F5:27:B1:4C:CB:BE
Certificate issuer:       /CN=7482EB27C326016337DE655F7CB5A3AFC7183F5D
Certificate serial:       77C27C7E102007AE0124F76B67FC58EF60B9DC49
Authority key identifier: 74:82:EB:27:C3:26:01:63:37:DE:65:5F:7C:B5:A3:AF:C7:18:3F:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7482EB27C326016337DE655F7CB5A3AFC7183F5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/1/323830343a333766383a383030303a3a2f33332d3634203d3e20323632383830.roa
Signing time:             Thu 04 Apr 2024 07:29:45 +0000
ROA not before:           Thu 04 Apr 2024 07:24:45 +0000
ROA not after:            Thu 03 Apr 2025 07:29:45 +0000
asID:                     262880
IP address blocks:        2804:37f8:8000::/33 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/1/7482EB27C326016337DE655F7CB5A3AFC7183F5D.crl
                          rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/1/7482EB27C326016337DE655F7CB5A3AFC7183F5D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7482EB27C326016337DE655F7CB5A3AFC7183F5D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 11:33:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:c2:7c:7e:10:20:07:ae:01:24:f7:6b:67:fc:58:ef:60:b9:dc:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7482EB27C326016337DE655F7CB5A3AFC7183F5D
        Validity
            Not Before: Apr  4 07:24:45 2024 GMT
            Not After : Apr  3 07:29:45 2025 GMT
        Subject: CN=E53526FFC59AA2E4B75C85B0F954F527B14CCBBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:24:5a:8d:a4:a6:d6:00:df:41:43:6c:e4:14:
                    8c:c7:db:3f:16:34:59:c1:13:75:c6:8f:35:0a:27:
                    47:85:57:2c:ec:06:d5:6f:fa:07:ea:e4:46:5f:e1:
                    24:a2:ea:8f:e3:f8:19:8f:f7:1b:cd:d5:af:bf:cf:
                    f7:32:da:c1:0d:ed:a2:2b:60:c3:be:1d:01:f8:82:
                    37:49:63:59:bc:20:e5:2c:5d:ec:32:e2:57:18:d4:
                    81:e6:3d:d9:50:57:ac:20:92:f8:ac:51:8a:93:b4:
                    8f:a4:a7:90:81:4c:96:57:fd:14:6d:2b:be:ab:22:
                    d4:a2:b8:4a:9d:7f:3c:24:79:aa:2d:cb:8a:9a:7f:
                    64:75:03:0f:11:d3:18:71:cf:3e:47:32:96:80:68:
                    c5:0f:ae:91:54:61:be:1b:fe:77:39:6a:f9:06:04:
                    c0:d7:04:ae:5b:ae:e8:bb:d2:61:cd:3c:95:b9:80:
                    58:18:4d:96:70:64:b9:63:c7:8d:93:de:15:59:0b:
                    c4:9d:41:51:4a:71:26:42:27:51:2f:2a:44:84:9c:
                    74:d2:be:fe:e7:f0:4a:4b:5f:c6:0b:62:cd:04:c0:
                    67:62:a1:5d:b7:f7:bd:84:fc:c4:ec:39:17:26:b2:
                    09:53:55:b6:20:63:38:15:82:2f:e4:28:14:de:fd:
                    2d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:35:26:FF:C5:9A:A2:E4:B7:5C:85:B0:F9:54:F5:27:B1:4C:CB:BE
            X509v3 Authority Key Identifier:
                keyid:74:82:EB:27:C3:26:01:63:37:DE:65:5F:7C:B5:A3:AF:C7:18:3F:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/1/7482EB27C326016337DE655F7CB5A3AFC7183F5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7482EB27C326016337DE655F7CB5A3AFC7183F5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/1/323830343a333766383a383030303a3a2f33332d3634203d3e20323632383830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37f8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         5e:c6:72:46:cd:f5:66:fb:8b:f8:a6:e3:ac:7d:b7:d3:cc:8b:
         4a:c0:01:02:c1:55:e8:4d:2f:18:7a:9c:0b:90:f3:b1:a2:04:
         07:8d:a5:f4:8a:41:cb:57:e3:b1:05:ff:8f:a0:c0:e0:b8:1b:
         d2:d1:1c:b2:97:f3:17:32:c3:66:6f:2c:e2:87:1d:10:4a:69:
         ab:9e:cd:7e:40:ed:77:5e:56:6e:e1:21:56:18:da:ba:df:fd:
         a8:32:e2:e7:8a:ab:ec:1b:a2:24:58:0d:f1:59:bb:29:27:26:
         08:8c:76:ef:0f:1c:bd:40:61:96:1b:59:ee:00:7e:d3:cd:90:
         00:ab:0a:f7:4f:4a:b3:7c:05:07:5e:65:11:38:5b:00:6c:9f:
         28:83:29:ab:51:2f:cf:35:0c:b6:97:61:4c:4a:db:fc:c8:a3:
         53:2e:bd:0c:3f:53:17:db:45:1f:e1:e9:4d:18:61:6e:4b:14:
         01:07:60:c1:8e:3f:a4:cb:92:d3:ae:7e:38:9c:69:a9:e3:0c:
         81:a8:df:1a:0c:ce:2d:b5:4f:55:e1:e3:ac:06:20:97:8d:3a:
         ac:6d:8d:14:77:25:67:4e:8f:0d:1c:f5:ec:d6:3a:21:3f:e1:
         4b:43:2b:14:72:59:e9:26:41:ef:1c:44:ab:0a:99:2f:ce:aa:
         5d:87:04:fb
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUd8J8fhAgB64BJPdrZ/xY72C53EkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQ4MkVCMjdDMzI2MDE2MzM3REU2NTVGN0NCNUEzQUZD
NzE4M0Y1RDAeFw0yNDA0MDQwNzI0NDVaFw0yNTA0MDMwNzI5NDVaMDMxMTAvBgNV
BAMTKEU1MzUyNkZGQzU5QUEyRTRCNzVDODVCMEY5NTRGNTI3QjE0Q0NCQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkJFqNpKbWAN9BQ2zkFIzH2z8W
NFnBE3XGjzUKJ0eFVyzsBtVv+gfq5EZf4SSi6o/j+BmP9xvN1a+/z/cy2sEN7aIr
YMO+HQH4gjdJY1m8IOUsXewy4lcY1IHmPdlQV6wgkvisUYqTtI+kp5CBTJZX/RRt
K76rItSiuEqdfzwkeaoty4qaf2R1Aw8R0xhxzz5HMpaAaMUPrpFUYb4b/nc5avkG
BMDXBK5brui70mHNPJW5gFgYTZZwZLljx42T3hVZC8SdQVFKcSZCJ1EvKkSEnHTS
vv7n8EpLX8YLYs0EwGdioV23972E/MTsORcmsglTVbYgYzgVgi/kKBTe/S2fAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU5TUm/8WaouS3XIWw+VT1J7FMy74wHwYDVR0j
BBgwFoAUdILrJ8MmAWM33mVffLWjr8cYP10wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHFSeHFmZ1VkN1hFaHpYSEdCVXlNd0FiM0xWem13UVhXVjNQeWtRNkF5
NFgvMS83NDgyRUIyN0MzMjYwMTYzMzdERTY1NUY3Q0I1QTNBRkM3MTgzRjVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc0ODJFQjI3QzMyNjAxNjMz
N0RFNjU1RjdDQjVBM0FGQzcxODNGNUQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hxUnhxZmdVZDdYRWh6WEhHQlV5TXdBYjNMVnptd1FYV1YzUHlrUTZBeTRYLzEv
MzIzODMwMzQzYTMzMzc2NjM4M2EzODMwMzAzMDNhM2EyZjMzMzMyZDM2MzQyMDNk
M2UyMDMyMzYzMjM4MzgzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEN/iAMA0GCSqGSIb3DQEBCwUA
A4IBAQBexnJGzfVm+4v4puOsfbfTzItKwAECwVXoTS8YepwLkPOxogQHjaX0ikHL
V+OxBf+PoMDguBvS0Ryyl/MXMsNmbyzihx0QSmmrns1+QO13XlZu4SFWGNq63/2o
MuLniqvsG6IkWA3xWbspJyYIjHbvDxy9QGGWG1nuAH7TzZAAqwr3T0qzfAUHXmUR
OFsAbJ8ogymrUS/PNQy2l2FMStv8yKNTLr0MP1MX20Uf4elNGGFuSxQBB2DBjj+k
y5LTrn44nGmp4wyBqN8aDM4ttU9V4eOsBiCXjTqsbY0UdyVnTo8NHPXs1johP+FL
QysUclnpJkHvHESrCpkvzqpdhwT7
-----END CERTIFICATE-----
Generated at Fri Jun 28 12:21:58 2024 by rpki-client on console-fra.rpki-client.org