Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/323830343a383030633a3a2f33322d3332203d3e20323731373236.roa
File:                     323830343a383030633a3a2f33322d3332203d3e20323731373236.roa (raw, json)
Hash identifier:          wMuci8t48o7BVuKHk6pirnci13D9RPcfFgqXR03mBms=
Subject key identifier:   67:EC:73:A5:7F:95:02:F6:8A:4E:4C:5E:B1:C0:E0:1D:CC:82:EC:A2
Certificate issuer:       /CN=E4A60880B8D4EC0024322D87A27CBCBDC2192A65
Certificate serial:       3B31F39B1C0C6580C2B1E90D5263B920A803317C
Authority key identifier: E4:A6:08:80:B8:D4:EC:00:24:32:2D:87:A2:7C:BC:BD:C2:19:2A:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/323830343a383030633a3a2f33322d3332203d3e20323731373236.roa
Signing time:             Fri 26 Jul 2024 17:51:25 +0000
ROA not before:           Fri 26 Jul 2024 17:46:25 +0000
ROA not after:            Fri 25 Jul 2025 17:51:25 +0000
asID:                     271726
IP address blocks:        2804:800c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.crl
                          rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:31:f3:9b:1c:0c:65:80:c2:b1:e9:0d:52:63:b9:20:a8:03:31:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4A60880B8D4EC0024322D87A27CBCBDC2192A65
        Validity
            Not Before: Jul 26 17:46:25 2024 GMT
            Not After : Jul 25 17:51:25 2025 GMT
        Subject: CN=67EC73A57F9502F68A4E4C5EB1C0E01DCC82ECA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:69:9e:48:eb:60:f5:cb:62:4e:e1:99:54:bc:
                    6e:8b:07:5e:79:a1:3a:97:0f:bd:e3:27:4f:17:30:
                    47:a8:23:03:83:3d:af:11:2e:5c:48:99:4c:10:03:
                    45:42:9f:1f:aa:57:8e:7d:f4:11:7a:57:72:32:38:
                    e9:e8:d6:f2:d8:3f:19:12:cc:82:87:0a:81:31:ff:
                    fe:28:20:0f:8a:75:20:a7:09:74:84:ea:a0:f5:93:
                    42:38:83:c0:c1:b2:1a:dc:dd:6a:7e:98:de:e0:52:
                    36:b5:cb:28:39:14:56:e8:83:49:ae:da:94:60:1e:
                    fa:5a:7b:91:58:ca:f1:a4:cf:80:67:3a:43:e4:b9:
                    53:b8:0e:92:76:34:57:68:42:9b:b9:a3:2d:87:03:
                    65:88:ff:3e:1c:a1:f5:fb:5c:f0:b9:96:8f:0a:a6:
                    95:aa:50:2b:51:96:c1:6f:1c:ec:a5:75:92:14:34:
                    4c:5f:b2:cb:32:a3:b0:a0:ec:c7:b6:bf:1a:4d:c5:
                    c2:42:ba:7b:84:2d:70:be:1e:42:f9:c1:ec:5d:ca:
                    2c:b4:0b:e9:91:ea:6b:d1:a5:28:f2:19:4b:96:bb:
                    69:85:b2:cf:9d:ba:a6:f5:c3:aa:6f:fa:b9:4f:ee:
                    88:0f:20:39:ef:ac:04:35:e5:51:06:a2:e5:c9:4f:
                    4a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:EC:73:A5:7F:95:02:F6:8A:4E:4C:5E:B1:C0:E0:1D:CC:82:EC:A2
            X509v3 Authority Key Identifier:
                keyid:E4:A6:08:80:B8:D4:EC:00:24:32:2D:87:A2:7C:BC:BD:C2:19:2A:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/323830343a383030633a3a2f33322d3332203d3e20323731373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:800c::/32

    Signature Algorithm: sha256WithRSAEncryption
         d7:1c:64:38:96:1d:2e:51:ff:0a:18:ca:03:41:80:8a:a0:6b:
         7c:c1:b8:45:87:ef:57:95:40:e6:9f:ca:b6:30:9e:70:ff:0e:
         41:62:ff:5d:a7:b3:66:73:92:b5:16:69:41:49:fc:fa:43:95:
         17:32:b3:d6:4e:6a:cb:ad:8e:b1:d0:0b:4c:70:8c:ff:f8:b8:
         1b:15:78:9e:f9:3e:20:65:47:04:23:9b:6b:0a:6a:e0:69:89:
         9a:7f:45:f6:5d:a9:8b:3f:5e:e5:38:9c:50:dd:dd:0e:32:43:
         f5:11:64:81:70:9e:ad:0e:18:d9:84:eb:e9:5a:74:3b:7a:ff:
         51:ce:4d:fd:bd:29:60:d3:f4:0c:38:b1:7a:7e:c9:48:b9:72:
         9f:6e:8c:86:78:57:6a:cd:93:7e:b1:a1:1f:b5:1d:54:70:f7:
         85:e4:94:0f:a3:b1:0e:ff:ad:b5:6c:fe:b5:09:bc:5a:56:a9:
         a7:06:47:98:ff:37:26:de:6c:29:7e:47:72:fd:d3:94:e9:d1:
         bc:18:7e:90:12:bc:39:62:c8:34:74:7e:f5:44:4a:dd:e2:50:
         83:32:48:60:26:f3:29:a2:f9:26:0b:31:6a:6e:62:5d:ac:80:
         af:45:61:6c:22:a0:89:33:88:6b:37:48:88:6e:4e:d8:a7:2c:
         54:dd:03:9e
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUOzHzmxwMZYDCsekNUmO5IKgDMXwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTRBNjA4ODBCOEQ0RUMwMDI0MzIyRDg3QTI3Q0JDQkRD
MjE5MkE2NTAeFw0yNDA3MjYxNzQ2MjVaFw0yNTA3MjUxNzUxMjVaMDMxMTAvBgNV
BAMTKDY3RUM3M0E1N0Y5NTAyRjY4QTRFNEM1RUIxQzBFMDFEQ0M4MkVDQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbaZ5I62D1y2JO4ZlUvG6LB155
oTqXD73jJ08XMEeoIwODPa8RLlxImUwQA0VCnx+qV4599BF6V3IyOOno1vLYPxkS
zIKHCoEx//4oIA+KdSCnCXSE6qD1k0I4g8DBshrc3Wp+mN7gUja1yyg5FFbog0mu
2pRgHvpae5FYyvGkz4BnOkPkuVO4DpJ2NFdoQpu5oy2HA2WI/z4cofX7XPC5lo8K
ppWqUCtRlsFvHOyldZIUNExfsssyo7Cg7Me2vxpNxcJCunuELXC+HkL5wexdyiy0
C+mR6mvRpSjyGUuWu2mFss+duqb1w6pv+rlP7ogPIDnvrAQ15VEGouXJT0q/AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUZ+xzpX+VAvaKTkxescDgHcyC7KIwHwYDVR0j
BBgwFoAU5KYIgLjU7AAkMi2Hony8vcIZKmUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby96bUpSM2NocTVnOExaV1R0U3ZRckJCQzQzRURNRmdZQmY3WFN4OUVXVkhy
LzAvRTRBNjA4ODBCOEQ0RUMwMDI0MzIyRDg3QTI3Q0JDQkRDMjE5MkE2NS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FNEE2MDg4MEI4RDRFQzAwMjQz
MjJEODdBMjdDQkNCREMyMTkyQTY1LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby96
bUpSM2NocTVnOExaV1R0U3ZRckJCQzQzRURNRmdZQmY3WFN4OUVXVkhyLzAvMzIz
ODMwMzQzYTM4MzAzMDYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMxMzcz
MjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKASADDANBgkqhkiG9w0BAQsFAAOCAQEA1xxkOJYdLlH/
ChjKA0GAiqBrfMG4RYfvV5VA5p/KtjCecP8OQWL/XaezZnOStRZpQUn8+kOVFzKz
1k5qy62OsdALTHCM//i4GxV4nvk+IGVHBCObawpq4GmJmn9F9l2piz9e5TicUN3d
DjJD9RFkgXCerQ4Y2YTr6Vp0O3r/Uc5N/b0pYNP0DDixen7JSLlyn26MhnhXas2T
frGhH7UdVHD3heSUD6OxDv+ttWz+tQm8WlappwZHmP83Jt5sKX5Hcv3TlOnRvBh+
kBK8OWLINHR+9URK3eJQgzJIYCbzKaL5Jgsxam5iXayAr0VhbCKgiTOIazdIiG5O
2KcsVN0Dng==
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:13 2024 by rpki-client on console-fra.rpki-client.org