Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/323830343a383030633a383030303a3a2f33332d3333203d3e20323731373236.roa
File:                     323830343a383030633a383030303a3a2f33332d3333203d3e20323731373236.roa (raw, json)
Hash identifier:          t4+XxHqLSeQvjOgve8FscK0sj3lU3ntHCsBM2++I9zc=
Subject key identifier:   7E:14:6E:47:F3:15:1C:7E:A0:0B:1C:53:31:6A:21:12:1D:47:FD:AA
Certificate issuer:       /CN=E4A60880B8D4EC0024322D87A27CBCBDC2192A65
Certificate serial:       1281788BC255F1829A96339158393BD5DAF430B7
Authority key identifier: E4:A6:08:80:B8:D4:EC:00:24:32:2D:87:A2:7C:BC:BD:C2:19:2A:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/323830343a383030633a383030303a3a2f33332d3333203d3e20323731373236.roa
Signing time:             Fri 26 Jul 2024 17:51:31 +0000
ROA not before:           Fri 26 Jul 2024 17:46:31 +0000
ROA not after:            Fri 25 Jul 2025 17:51:31 +0000
asID:                     271726
IP address blocks:        2804:800c:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.crl
                          rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:81:78:8b:c2:55:f1:82:9a:96:33:91:58:39:3b:d5:da:f4:30:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4A60880B8D4EC0024322D87A27CBCBDC2192A65
        Validity
            Not Before: Jul 26 17:46:31 2024 GMT
            Not After : Jul 25 17:51:31 2025 GMT
        Subject: CN=7E146E47F3151C7EA00B1C53316A21121D47FDAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:77:ed:00:fa:82:f7:0a:c6:de:8f:5d:3d:be:
                    c8:d0:cd:62:21:8c:b2:52:d2:41:53:8b:04:4e:eb:
                    bc:70:ff:a5:a8:25:04:e6:e9:18:52:de:c2:e2:cc:
                    a1:f3:eb:67:ba:74:53:c4:c4:a8:be:95:3e:cb:e2:
                    be:d1:93:1b:e1:ae:7a:d5:b6:39:4a:02:9d:0b:59:
                    60:c2:80:3d:d8:ea:9f:7d:9f:d3:0c:f0:98:cf:97:
                    15:7e:97:56:e3:f0:9e:0e:f3:3e:24:08:2f:6b:5b:
                    87:c3:60:df:4d:f6:6b:11:0b:2e:ad:f9:bb:d7:f1:
                    37:76:28:8b:75:c3:75:20:76:cc:a2:e8:da:ec:94:
                    b1:3a:9a:3d:89:45:0c:5b:c4:3d:1a:56:5d:f7:6a:
                    86:c9:be:67:d6:25:5d:88:8e:32:d8:3c:61:64:07:
                    ee:f3:e8:ce:62:d0:71:56:94:53:71:12:33:fe:c1:
                    d8:4b:fd:c6:43:cf:43:71:93:9f:bc:5c:90:98:92:
                    ef:a2:b8:83:ec:d4:fc:9a:c5:e2:fe:eb:28:78:9a:
                    63:4a:33:77:ae:ab:62:75:4c:56:65:c0:ec:7d:7e:
                    9c:79:e7:7b:de:f0:4c:63:2e:5f:70:90:8d:68:04:
                    b0:05:a8:72:86:52:7f:c3:6b:13:22:46:e2:ac:30:
                    d8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:14:6E:47:F3:15:1C:7E:A0:0B:1C:53:31:6A:21:12:1D:47:FD:AA
            X509v3 Authority Key Identifier:
                keyid:E4:A6:08:80:B8:D4:EC:00:24:32:2D:87:A2:7C:BC:BD:C2:19:2A:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/323830343a383030633a383030303a3a2f33332d3333203d3e20323731373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:800c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         05:8f:e8:e0:4f:56:6e:7a:85:7c:c9:54:17:86:09:0a:f6:e6:
         6c:76:3f:8e:08:8c:1e:6f:ff:e7:62:be:77:84:3f:8c:df:21:
         9a:7f:34:e4:d9:10:30:27:04:64:57:a3:7d:fc:01:36:4c:7e:
         21:c6:a4:38:ef:38:4d:8b:1a:1b:64:94:60:70:c7:6b:b3:e5:
         57:2d:d9:8c:cb:36:f8:0f:a9:c0:46:cc:27:7c:0f:82:86:ba:
         2a:e1:c7:7b:d6:f1:c4:7f:eb:3e:5e:b7:7c:32:53:e8:bb:e4:
         b4:2b:8a:2b:ce:1f:7e:84:2d:bd:ce:7e:b2:2d:01:a8:5c:9c:
         82:0b:dc:00:33:03:bf:15:f9:3c:a4:77:61:07:75:77:7a:d7:
         51:1c:b4:49:1b:1c:a9:84:66:8f:8b:c3:96:6e:19:2d:3b:cd:
         8f:5e:65:1b:ee:b2:2a:12:cb:c5:b8:ab:a3:69:8c:c8:ee:f1:
         a5:25:14:15:d8:7f:0a:97:3f:82:12:41:c4:29:74:d5:d7:d8:
         89:18:90:6e:6a:f3:b0:87:45:70:4c:9e:f4:b0:c9:2e:78:16:
         18:58:39:8d:08:06:3c:e0:41:fe:a5:3c:09:ed:28:ec:90:be:
         59:1c:7b:7b:bc:bb:11:27:d2:24:8f:14:aa:5b:e0:bc:a5:b5:
         50:43:c9:ab
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUEoF4i8JV8YKaljORWDk71dr0MLcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTRBNjA4ODBCOEQ0RUMwMDI0MzIyRDg3QTI3Q0JDQkRD
MjE5MkE2NTAeFw0yNDA3MjYxNzQ2MzFaFw0yNTA3MjUxNzUxMzFaMDMxMTAvBgNV
BAMTKDdFMTQ2RTQ3RjMxNTFDN0VBMDBCMUM1MzMxNkEyMTEyMUQ0N0ZEQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLd+0A+oL3Csbej109vsjQzWIh
jLJS0kFTiwRO67xw/6WoJQTm6RhS3sLizKHz62e6dFPExKi+lT7L4r7RkxvhrnrV
tjlKAp0LWWDCgD3Y6p99n9MM8JjPlxV+l1bj8J4O8z4kCC9rW4fDYN9N9msRCy6t
+bvX8Td2KIt1w3Ugdsyi6NrslLE6mj2JRQxbxD0aVl33aobJvmfWJV2IjjLYPGFk
B+7z6M5i0HFWlFNxEjP+wdhL/cZDz0Nxk5+8XJCYku+iuIPs1PyaxeL+6yh4mmNK
M3euq2J1TFZlwOx9fpx553ve8ExjLl9wkI1oBLAFqHKGUn/DaxMiRuKsMNh/AgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUfhRuR/MVHH6gCxxTMWohEh1H/aowHwYDVR0j
BBgwFoAU5KYIgLjU7AAkMi2Hony8vcIZKmUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby96bUpSM2NocTVnOExaV1R0U3ZRckJCQzQzRURNRmdZQmY3WFN4OUVXVkhy
LzAvRTRBNjA4ODBCOEQ0RUMwMDI0MzIyRDg3QTI3Q0JDQkRDMjE5MkE2NS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FNEE2MDg4MEI4RDRFQzAwMjQz
MjJEODdBMjdDQkNCREMyMTkyQTY1LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIG
CCsGAQUFBzALhoGVcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby96
bUpSM2NocTVnOExaV1R0U3ZRckJCQzQzRURNRmdZQmY3WFN4OUVXVkhyLzAvMzIz
ODMwMzQzYTM4MzAzMDYzM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNkM2Uy
MDMyMzczMTM3MzIzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEgAyAMA0GCSqGSIb3DQEBCwUAA4IB
AQAFj+jgT1ZueoV8yVQXhgkK9uZsdj+OCIweb//nYr53hD+M3yGafzTk2RAwJwRk
V6N9/AE2TH4hxqQ47zhNixobZJRgcMdrs+VXLdmMyzb4D6nARswnfA+Chroq4cd7
1vHEf+s+Xrd8MlPou+S0K4orzh9+hC29zn6yLQGoXJyCC9wAMwO/Ffk8pHdhB3V3
etdRHLRJGxyphGaPi8OWbhktO82PXmUb7rIqEsvFuKujaYzI7vGlJRQV2H8Klz+C
EkHEKXTV19iJGJBuavOwh0VwTJ70sMkueBYYWDmNCAY84EH+pTwJ7SjskL5ZHHt7
vLsRJ9IkjxSqW+C8pbVQQ8mr
-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:42 2024 by rpki-client on console-ams.rpki-client.org