Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/323830343a323062343a3a2f33342d3334203d3e20323634353039.roa
File:                     323830343a323062343a3a2f33342d3334203d3e20323634353039.roa (raw, json)
Hash identifier:          qddwPKUGFWWu2SYQxI6lvhvYhWAQrZlyhp8+iygoTOc=
Subject key identifier:   2E:79:AF:36:ED:7F:9C:D0:59:EE:89:5C:FC:CB:09:B1:64:8D:FD:19
Certificate issuer:       /CN=C67FC27679C5C58D1A1904874E35000B74C71E78
Certificate serial:       7902F747BA6E313DD1B0E1CD57087451177BD2D1
Authority key identifier: C6:7F:C2:76:79:C5:C5:8D:1A:19:04:87:4E:35:00:0B:74:C7:1E:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/323830343a323062343a3a2f33342d3334203d3e20323634353039.roa
Signing time:             Wed 03 Apr 2024 18:31:37 +0000
ROA not before:           Wed 03 Apr 2024 18:26:37 +0000
ROA not after:            Wed 02 Apr 2025 18:31:37 +0000
asID:                     264509
IP address blocks:        2804:20b4::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.crl
                          rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:02:f7:47:ba:6e:31:3d:d1:b0:e1:cd:57:08:74:51:17:7b:d2:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C67FC27679C5C58D1A1904874E35000B74C71E78
        Validity
            Not Before: Apr  3 18:26:37 2024 GMT
            Not After : Apr  2 18:31:37 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1e:d4:99:e7:d5:cb:0d:4f:fc:fb:d6:2d:24:
                    30:e2:d3:89:52:f2:77:ce:44:87:28:69:b7:79:49:
                    e5:86:c0:4e:d6:20:83:de:9a:05:90:5a:59:69:09:
                    d3:54:12:14:c4:e1:d1:e6:d3:6c:6e:14:55:4f:8c:
                    c1:81:ab:c3:f6:3e:22:ab:7d:02:f9:da:76:da:f9:
                    35:18:86:15:c3:8d:2a:1b:c5:b4:3f:35:97:f7:2e:
                    93:e2:a3:4d:14:7b:60:97:1c:f5:a8:66:70:b9:00:
                    28:00:42:71:3a:d6:06:b4:b8:aa:08:05:82:b2:08:
                    da:0c:f1:92:ab:69:7f:f0:ff:24:f3:38:80:3c:2a:
                    b0:9f:e5:84:f0:37:15:c7:82:20:07:9e:a8:92:4c:
                    46:1c:0a:94:f6:41:c6:a3:9d:2f:6b:df:16:16:62:
                    b3:26:14:24:e0:e2:e4:b7:d1:2a:5c:99:d7:7d:12:
                    43:82:bd:f9:9c:b9:4b:b8:34:96:2e:17:bb:45:ec:
                    19:23:c0:90:45:a3:b7:29:62:11:e2:d7:18:0b:b7:
                    0e:da:b3:93:2e:51:17:22:32:3e:40:86:c4:12:0b:
                    1a:82:31:01:c1:22:fd:f9:49:be:96:9b:10:ad:e5:
                    5a:34:5a:de:ac:fc:a9:c2:f2:7b:9e:57:12:8f:cb:
                    da:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:79:AF:36:ED:7F:9C:D0:59:EE:89:5C:FC:CB:09:B1:64:8D:FD:19
            X509v3 Authority Key Identifier:
                keyid:C6:7F:C2:76:79:C5:C5:8D:1A:19:04:87:4E:35:00:0B:74:C7:1E:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/323830343a323062343a3a2f33342d3334203d3e20323634353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20b4::/34

    Signature Algorithm: sha256WithRSAEncryption
         15:1f:5e:e8:73:e7:06:5b:41:31:f0:9c:5f:e8:3e:71:7b:90:
         19:2f:8f:88:85:7a:7a:ec:10:8f:61:03:45:a0:b9:b4:5b:ea:
         29:07:a3:38:56:95:5d:a9:6a:79:20:df:a8:fc:76:66:30:1e:
         52:da:e6:7d:ea:42:3a:8c:1f:a5:f5:29:c1:98:5b:2a:52:36:
         87:7f:2d:a1:a7:6c:28:18:e7:74:ad:29:3a:99:c6:13:4b:27:
         d6:4f:2c:3c:58:84:17:24:90:fa:e3:6b:5e:b8:11:64:8b:ca:
         30:4d:6a:aa:10:14:37:cb:10:4c:3e:80:9e:7f:cc:80:f2:24:
         c4:10:f0:c0:eb:fa:e8:25:44:00:81:52:d7:e9:b8:1d:4e:b9:
         5e:40:72:a9:9e:bf:34:1b:e3:c1:f2:17:b8:6d:e1:5e:22:b1:
         b0:1e:f8:eb:29:1e:d1:e3:80:61:c8:a5:e2:7e:4c:5d:fd:9e:
         aa:d8:c2:24:06:7a:64:26:85:83:21:fc:73:52:75:fe:70:48:
         af:57:68:2d:e8:6e:f5:40:ab:a9:d9:31:8a:68:07:33:35:49:
         70:07:d0:71:84:cb:32:02:de:31:a1:a9:b1:e3:cb:41:50:7e:
         c0:53:e6:94:5f:c2:8f:a7:a6:c4:c7:2b:af:35:e5:d0:40:c3:
         9c:95:a2:9d
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUeQL3R7puMT3RsOHNVwh0URd70tEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzY3RkMyNzY3OUM1QzU4RDFBMTkwNDg3NEUzNTAwMEI3
NEM3MUU3ODAeFw0yNDA0MDMxODI2MzdaFw0yNTA0MDIxODMxMzdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzkxRUQ0OTlFN0Q1Q0IwRDRG
RkNGQkQ2MkQyNDMwRTJEMzg5NTJGMjc3Q0U0NDg3Mjg2OUI3Nzk0OUU1ODZDMDRF
RDYyMDgzREU5QTA1OTA1QTU5NjkwOUQzNTQxMjE0QzRFMUQxRTZEMzZDNkUxNDU1
NEY4Q0MxODFBQkMzRjYzRTIyQUI3RDAyRjlEQTc2REFGOTM1MTg4NjE1QzM4RDJB
MUJDNUI0M0YzNTk3RjcyRTkzRTJBMzREMTQ3QjYwOTcxQ0Y1QTg2NjcwQjkwMDI4
MDA0MjcxM0FENjA2QjRCOEFBMDgwNTgyQjIwOERBMENGMTkyQUI2OTdGRjBGRjI0
RjMzODgwM0MyQUIwOUZFNTg0RjAzNzE1Qzc4MjIwMDc5RUE4OTI0QzQ2MUMwQTk0
RjY0MUM2QTM5RDJGNkJERjE2MTY2MkIzMjYxNDI0RTBFMkU0QjdEMTJBNUM5OUQ3
N0QxMjQzODJCREY5OUNCOTRCQjgzNDk2MkUxN0JCNDVFQzE5MjNDMDkwNDVBM0I3
Mjk2MjExRTJENzE4MEJCNzBFREFCMzkzMkU1MTE3MjIzMjNFNDA4NkM0MTIwQjFB
ODIzMTAxQzEyMkZERjk0OUJFOTY5QjEwQURFNTVBMzQ1QURFQUNGQ0E5QzJGMjdC
OUU1NzEyOEZDQkRBQzEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyR7UmefVyw1P/PvWLSQw4tOJUvJ3zkSHKGm3eUnlhsBO1iCD3poF
kFpZaQnTVBIUxOHR5tNsbhRVT4zBgavD9j4iq30C+dp22vk1GIYVw40qG8W0PzWX
9y6T4qNNFHtglxz1qGZwuQAoAEJxOtYGtLiqCAWCsgjaDPGSq2l/8P8k8ziAPCqw
n+WE8DcVx4IgB56okkxGHAqU9kHGo50va98WFmKzJhQk4OLkt9EqXJnXfRJDgr35
nLlLuDSWLhe7RewZI8CQRaO3KWIR4tcYC7cO2rOTLlEXIjI+QIbEEgsagjEBwSL9
+Um+lpsQreVaNFrerPypwvJ7nlcSj8vawQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FC55rzbtf5zQWe6JXPzLCbFkjf0ZMB8GA1UdIwQYMBaAFMZ/wnZ5xcWNGhkEh041
AAt0xx54MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNHNGU1c1VzQnIyQUhT
dzd3Z05TaW5WeHdXeHFuUW9aQmo2Nnh4NGtCWW1DLzEvQzY3RkMyNzY3OUM1QzU4
RDFBMTkwNDg3NEUzNTAwMEI3NEM3MUU3OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9DNjdGQzI3Njc5QzVDNThEMUExOTA0ODc0RTM1MDAwQjc0Qzcx
RTc4LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zRzRlNXNVc0JyMkFIU3c3d2dO
U2luVnh3V3hxblFvWkJqNjZ4eDRrQlltQy8xLzMyMzgzMDM0M2EzMjMwNjIzNDNh
M2EyZjMzMzQyZDMzMzQyMDNkM2UyMDMyMzYzNDM1MzAzOS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigE
ILQAMA0GCSqGSIb3DQEBCwUAA4IBAQAVH17oc+cGW0Ex8Jxf6D5xe5AZL4+IhXp6
7BCPYQNFoLm0W+opB6M4VpVdqWp5IN+o/HZmMB5S2uZ96kI6jB+l9SnBmFsqUjaH
fy2hp2woGOd0rSk6mcYTSyfWTyw8WIQXJJD642teuBFki8owTWqqEBQ3yxBMPoCe
f8yA8iTEEPDA6/roJUQAgVLX6bgdTrleQHKpnr80G+PB8he4beFeIrGwHvjrKR7R
44BhyKXifkxd/Z6q2MIkBnpkJoWDIfxzUnX+cEivV2gt6G71QKup2TGKaAczNUlw
B9BxhMsyAt4xoamx48tBUH7AU+aUX8KPp6bExyuvNeXQQMOclaKd
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:05 2024 by rpki-client on console-ams.rpki-client.org