Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/323830343a323062343a383061303a3a2f34342d3434203d3e20323634353039.roa
File:                     323830343a323062343a383061303a3a2f34342d3434203d3e20323634353039.roa (raw, json)
Hash identifier:          fGTfFKxGsWMHgTsEodZJ+UA3dAkWcleBBcBpRvuOlcI=
Subject key identifier:   27:B5:CF:AA:08:F0:65:71:C5:71:97:7B:6F:5D:92:D2:A0:AE:15:8C
Certificate issuer:       /CN=C67FC27679C5C58D1A1904874E35000B74C71E78
Certificate serial:       072926EF31F029D384A329EC0A48C56063EFE194
Authority key identifier: C6:7F:C2:76:79:C5:C5:8D:1A:19:04:87:4E:35:00:0B:74:C7:1E:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/323830343a323062343a383061303a3a2f34342d3434203d3e20323634353039.roa
Signing time:             Sat 28 Sep 2024 22:29:43 +0000
ROA not before:           Sat 28 Sep 2024 22:24:43 +0000
ROA not after:            Sat 27 Sep 2025 22:29:43 +0000
asID:                     264509
IP address blocks:        2804:20b4:80a0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.crl
                          rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:29:26:ef:31:f0:29:d3:84:a3:29:ec:0a:48:c5:60:63:ef:e1:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C67FC27679C5C58D1A1904874E35000B74C71E78
        Validity
            Not Before: Sep 28 22:24:43 2024 GMT
            Not After : Sep 27 22:29:43 2025 GMT
        Subject: CN=3082010A0282010100E4631588C4EFA5B68B63124C458E14ED8298F8694157970F77961650C8078D992EA074DC07F73DB56622BCC774D977279B262F2836D71A89EF287DBFE040E85EF3CC1FE7EDA519259E80F6B2CA698FEEFD61CE293D72FCD8E63356AD9298AA860AC3FB383F4531FAF7005718C09ABE677755731E001CBE1DFB32783B87D42CB4DF77EFCA6CA0B606F5FDE79D6415BCC95AD840338B5550FBBF9DBF98A3F0FA4E1B476A6C207BAD0F45CB35D02B7C62ED7742B4451AACB1769E11FF14B4C3EF80994CED1C3D19BE2D8711B3C8839437B7E0B05D9BD1A573D23D7282CF057A00005046A5D4666FD065D547C6FD421A70D22FECB72A163A16F6C6BEACC64BB429510203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:63:15:88:c4:ef:a5:b6:8b:63:12:4c:45:8e:
                    14:ed:82:98:f8:69:41:57:97:0f:77:96:16:50:c8:
                    07:8d:99:2e:a0:74:dc:07:f7:3d:b5:66:22:bc:c7:
                    74:d9:77:27:9b:26:2f:28:36:d7:1a:89:ef:28:7d:
                    bf:e0:40:e8:5e:f3:cc:1f:e7:ed:a5:19:25:9e:80:
                    f6:b2:ca:69:8f:ee:fd:61:ce:29:3d:72:fc:d8:e6:
                    33:56:ad:92:98:aa:86:0a:c3:fb:38:3f:45:31:fa:
                    f7:00:57:18:c0:9a:be:67:77:55:73:1e:00:1c:be:
                    1d:fb:32:78:3b:87:d4:2c:b4:df:77:ef:ca:6c:a0:
                    b6:06:f5:fd:e7:9d:64:15:bc:c9:5a:d8:40:33:8b:
                    55:50:fb:bf:9d:bf:98:a3:f0:fa:4e:1b:47:6a:6c:
                    20:7b:ad:0f:45:cb:35:d0:2b:7c:62:ed:77:42:b4:
                    45:1a:ac:b1:76:9e:11:ff:14:b4:c3:ef:80:99:4c:
                    ed:1c:3d:19:be:2d:87:11:b3:c8:83:94:37:b7:e0:
                    b0:5d:9b:d1:a5:73:d2:3d:72:82:cf:05:7a:00:00:
                    50:46:a5:d4:66:6f:d0:65:d5:47:c6:fd:42:1a:70:
                    d2:2f:ec:b7:2a:16:3a:16:f6:c6:be:ac:c6:4b:b4:
                    29:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:B5:CF:AA:08:F0:65:71:C5:71:97:7B:6F:5D:92:D2:A0:AE:15:8C
            X509v3 Authority Key Identifier:
                keyid:C6:7F:C2:76:79:C5:C5:8D:1A:19:04:87:4E:35:00:0B:74:C7:1E:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/323830343a323062343a383061303a3a2f34342d3434203d3e20323634353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20b4:80a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         0b:5d:ed:0c:90:4d:9b:e7:47:b8:26:d6:9d:99:27:71:35:80:
         01:0e:9d:95:7e:28:7e:26:3c:07:c8:72:e2:9a:30:04:b3:9d:
         bf:5f:df:37:a8:0d:bf:a5:78:ea:43:aa:c1:83:4f:6f:63:5f:
         29:d8:b9:40:25:bd:e5:7d:f1:2b:a7:11:5c:17:91:f3:4d:51:
         6d:d5:c3:e3:df:07:d9:8b:7b:e4:de:dc:3d:77:c8:b1:66:e7:
         7d:fc:7b:f0:89:b8:9f:7e:5d:ca:66:31:9a:fb:7e:a9:4d:b3:
         c1:e4:f3:2e:b4:11:42:09:14:05:71:77:c1:0b:97:59:36:70:
         ba:91:ec:9c:86:99:a5:eb:c1:d1:5f:67:4e:6a:d0:49:30:ad:
         96:7c:bc:5a:45:b1:12:d3:44:0d:bd:c8:63:3c:e6:e3:52:48:
         65:73:c6:3f:36:f5:1f:28:8d:84:c6:ea:c6:36:ae:9f:02:3e:
         6a:53:2e:b1:f2:9f:55:e3:b6:77:a1:58:01:55:5e:19:58:c2:
         44:b8:cb:c7:1d:3f:1a:d4:12:19:e5:83:d1:5b:fd:ca:57:e4:
         d5:d9:f2:da:e5:c1:f0:65:99:7d:0d:48:af:7f:40:a3:dd:53:
         dc:f9:60:7b:a7:ca:0a:fa:53:c8:33:3e:26:03:69:d2:07:0f:
         74:fe:81:d2
-----BEGIN CERTIFICATE-----
MIIHTjCCBjagAwIBAgIUBykm7zHwKdOEoynsCkjFYGPv4ZQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzY3RkMyNzY3OUM1QzU4RDFBMTkwNDg3NEUzNTAwMEI3
NEM3MUU3ODAeFw0yNDA5MjgyMjI0NDNaFw0yNTA5MjcyMjI5NDNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTQ2MzE1ODhDNEVGQTVCNjhC
NjMxMjRDNDU4RTE0RUQ4Mjk4Rjg2OTQxNTc5NzBGNzc5NjE2NTBDODA3OEQ5OTJF
QTA3NERDMDdGNzNEQjU2NjIyQkNDNzc0RDk3NzI3OUIyNjJGMjgzNkQ3MUE4OUVG
Mjg3REJGRTA0MEU4NUVGM0NDMUZFN0VEQTUxOTI1OUU4MEY2QjJDQTY5OEZFRUZE
NjFDRTI5M0Q3MkZDRDhFNjMzNTZBRDkyOThBQTg2MEFDM0ZCMzgzRjQ1MzFGQUY3
MDA1NzE4QzA5QUJFNjc3NzU1NzMxRTAwMUNCRTFERkIzMjc4M0I4N0Q0MkNCNERG
NzdFRkNBNkNBMEI2MDZGNUZERTc5RDY0MTVCQ0M5NUFEODQwMzM4QjU1NTBGQkJG
OURCRjk4QTNGMEZBNEUxQjQ3NkE2QzIwN0JBRDBGNDVDQjM1RDAyQjdDNjJFRDc3
NDJCNDQ1MUFBQ0IxNzY5RTExRkYxNEI0QzNFRjgwOTk0Q0VEMUMzRDE5QkUyRDg3
MTFCM0M4ODM5NDM3QjdFMEIwNUQ5QkQxQTU3M0QyM0Q3MjgyQ0YwNTdBMDAwMDUw
NDZBNUQ0NjY2RkQwNjVENTQ3QzZGRDQyMUE3MEQyMkZFQ0I3MkExNjNBMTZGNkM2
QkVBQ0M2NEJCNDI5NTEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA5GMViMTvpbaLYxJMRY4U7YKY+GlBV5cPd5YWUMgHjZkuoHTcB/c9
tWYivMd02XcnmyYvKDbXGonvKH2/4EDoXvPMH+ftpRklnoD2ssppj+79Yc4pPXL8
2OYzVq2SmKqGCsP7OD9FMfr3AFcYwJq+Z3dVcx4AHL4d+zJ4O4fULLTfd+/KbKC2
BvX9551kFbzJWthAM4tVUPu/nb+Yo/D6ThtHamwge60PRcs10Ct8Yu13QrRFGqyx
dp4R/xS0w++AmUztHD0Zvi2HEbPIg5Q3t+CwXZvRpXPSPXKCzwV6AABQRqXUZm/Q
ZdVHxv1CGnDSL+y3KhY6FvbGvqzGS7QpUQIDAQABo4ICXDCCAlgwHQYDVR0OBBYE
FCe1z6oI8GVxxXGXe29dktKgrhWMMB8GA1UdIwQYMBaAFMZ/wnZ5xcWNGhkEh041
AAt0xx54MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNHNGU1c1VzQnIyQUhT
dzd3Z05TaW5WeHdXeHFuUW9aQmo2Nnh4NGtCWW1DLzEvQzY3RkMyNzY3OUM1QzU4
RDFBMTkwNDg3NEUzNTAwMEI3NEM3MUU3OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9DNjdGQzI3Njc5QzVDNThEMUExOTA0ODc0RTM1MDAwQjc0Qzcx
RTc4LmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zRzRlNXNVc0JyMkFIU3c3d2dO
U2luVnh3V3hxblFvWkJqNjZ4eDRrQlltQy8xLzMyMzgzMDM0M2EzMjMwNjIzNDNh
MzgzMDYxMzAzYTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMjM2MzQzNTMwMzkucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwQoBCC0gKAwDQYJKoZIhvcNAQELBQADggEBAAtd7QyQTZvnR7gm1p2Z
J3E1gAEOnZV+KH4mPAfIcuKaMASznb9f3zeoDb+leOpDqsGDT29jXynYuUAlveV9
8SunEVwXkfNNUW3Vw+PfB9mLe+Te3D13yLFm5338e/CJuJ9+XcpmMZr7fqlNs8Hk
8y60EUIJFAVxd8ELl1k2cLqR7JyGmaXrwdFfZ05q0EkwrZZ8vFpFsRLTRA29yGM8
5uNSSGVzxj829R8ojYTG6sY2rp8CPmpTLrHyn1XjtnehWAFVXhlYwkS4y8cdPxrU
Ehnlg9Fb/cpX5NXZ8trlwfBlmX0NSK9/QKPdU9z5YHunygr6U8gzPiYDadIHD3T+
gdI=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:05 2024 by rpki-client on console-ams.rpki-client.org