Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/323830343a356162343a343030303a3a2f33342d3334203d3e20323638373930.roa
File:                     323830343a356162343a343030303a3a2f33342d3334203d3e20323638373930.roa (raw, json)
Hash identifier:          cWUeP6MPhJ/b0VwXmCT5djuhF00veCb3TWUOtbTdHnk=
Subject key identifier:   F5:43:36:E1:B8:2B:FD:83:17:EE:CB:A1:07:A9:34:AF:5E:E8:C1:C4
Certificate issuer:       /CN=D2B4C91EBE07D707EE775A157AA582BF4B533C62
Certificate serial:       2726F87AEF0FD37E8C956310DA87D3BFA9407819
Authority key identifier: D2:B4:C9:1E:BE:07:D7:07:EE:77:5A:15:7A:A5:82:BF:4B:53:3C:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/323830343a356162343a343030303a3a2f33342d3334203d3e20323638373930.roa
Signing time:             Wed 15 May 2024 14:33:20 +0000
ROA not before:           Wed 15 May 2024 14:28:20 +0000
ROA not after:            Wed 14 May 2025 14:33:20 +0000
asID:                     268790
IP address blocks:        2804:5ab4:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.crl
                          rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:38:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:26:f8:7a:ef:0f:d3:7e:8c:95:63:10:da:87:d3:bf:a9:40:78:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2B4C91EBE07D707EE775A157AA582BF4B533C62
        Validity
            Not Before: May 15 14:28:20 2024 GMT
            Not After : May 14 14:33:20 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9c:77:c1:8e:d7:44:6a:fe:5e:72:fb:79:03:
                    d8:53:b2:c4:06:54:22:a1:f6:c0:fc:87:76:47:0b:
                    4f:90:3e:1c:35:3b:5e:f4:c3:45:56:16:04:02:04:
                    f9:69:9d:85:cc:b6:2b:e7:60:82:81:b7:ca:6d:f5:
                    88:d6:ee:02:17:79:49:20:56:ed:d2:dd:95:cd:43:
                    2f:7f:80:93:ec:dd:c1:d0:13:1a:58:78:64:2a:6c:
                    76:cf:26:b9:04:46:f2:aa:b4:12:21:2c:64:d6:80:
                    73:57:0c:81:02:1e:68:8e:21:cb:e2:d5:4d:85:41:
                    82:d4:67:f0:e5:d4:29:df:c3:64:92:97:df:a6:2d:
                    77:13:0d:28:93:86:f2:a3:db:6a:0d:90:7f:72:34:
                    5e:d2:66:b4:5d:f6:a5:76:6c:6c:36:5a:cd:80:a5:
                    2e:07:e1:09:e4:70:06:f8:8b:91:8d:6e:c6:ed:1e:
                    39:9a:b6:26:17:95:7c:06:aa:bb:54:53:4c:b7:06:
                    bb:ce:62:aa:5f:79:ba:a2:20:d7:54:4a:ff:c8:66:
                    1d:49:94:58:5d:45:5e:7b:31:31:7f:85:39:d9:23:
                    fa:a5:1b:4a:89:ed:14:79:bd:33:67:00:5a:b5:b4:
                    b6:c9:d1:2b:96:3a:ac:de:ab:a4:86:e5:a9:75:61:
                    c0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:43:36:E1:B8:2B:FD:83:17:EE:CB:A1:07:A9:34:AF:5E:E8:C1:C4
            X509v3 Authority Key Identifier:
                keyid:D2:B4:C9:1E:BE:07:D7:07:EE:77:5A:15:7A:A5:82:BF:4B:53:3C:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/323830343a356162343a343030303a3a2f33342d3334203d3e20323638373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ab4:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         19:64:a5:e1:57:17:58:87:72:da:95:92:7b:6b:93:b0:51:d0:
         8e:7c:1f:3c:ca:89:c2:53:20:1d:42:60:87:d1:73:be:68:76:
         66:c8:b6:65:87:ac:79:81:14:29:69:2e:19:31:97:37:31:4c:
         1a:2b:cf:d7:2f:96:8c:12:49:8f:d3:72:63:30:21:74:f1:90:
         a6:cb:e9:e9:ca:d7:2e:78:c3:cf:d6:b8:69:c2:5f:10:ef:b2:
         27:59:15:c7:e7:ec:da:65:eb:30:60:3f:92:27:31:10:f7:41:
         ca:11:4d:82:ec:c2:77:ad:54:37:dd:c9:3e:b6:c8:2b:a7:e8:
         6a:c7:ca:a8:2d:32:74:34:05:0e:57:83:ec:c4:9b:f3:4d:89:
         28:2b:65:dd:aa:38:eb:59:25:5e:aa:af:24:6f:ad:c6:51:27:
         2f:15:cd:95:98:5c:fd:d6:53:45:ef:41:71:d7:58:68:1e:f0:
         d7:97:91:e0:81:f0:a0:fa:06:90:7e:89:34:d5:ce:f5:fb:fb:
         97:79:00:29:d1:28:e5:0e:96:57:81:6a:44:11:3c:79:71:60:
         c7:74:45:c2:e4:cf:85:75:eb:ac:37:e4:f1:78:4e:1c:ad:6e:
         42:05:15:d8:1e:ad:19:7c:0f:da:47:99:f1:40:b7:ce:8e:20:
         4d:a3:90:61
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUJyb4eu8P036MlWMQ2ofTv6lAeBkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDJCNEM5MUVCRTA3RDcwN0VFNzc1QTE1N0FBNTgyQkY0
QjUzM0M2MjAeFw0yNDA1MTUxNDI4MjBaFw0yNTA1MTQxNDMzMjBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREU5Qzc3QzE4RUQ3NDQ2QUZF
NUU3MkZCNzkwM0Q4NTNCMkM0MDY1NDIyQTFGNkMwRkM4Nzc2NDcwQjRGOTAzRTFD
MzUzQjVFRjRDMzQ1NTYxNjA0MDIwNEY5Njk5RDg1Q0NCNjJCRTc2MDgyODFCN0NB
NkRGNTg4RDZFRTAyMTc3OTQ5MjA1NkVERDJERDk1Q0Q0MzJGN0Y4MDkzRUNEREMx
RDAxMzFBNTg3ODY0MkE2Qzc2Q0YyNkI5MDQ0NkYyQUFCNDEyMjEyQzY0RDY4MDcz
NTcwQzgxMDIxRTY4OEUyMUNCRTJENTREODU0MTgyRDQ2N0YwRTVENDI5REZDMzY0
OTI5N0RGQTYyRDc3MTMwRDI4OTM4NkYyQTNEQjZBMEQ5MDdGNzIzNDVFRDI2NkI0
NURGNkE1NzY2QzZDMzY1QUNEODBBNTJFMDdFMTA5RTQ3MDA2Rjg4QjkxOEQ2RUM2
RUQxRTM5OUFCNjI2MTc5NTdDMDZBQUJCNTQ1MzRDQjcwNkJCQ0U2MkFBNUY3OUJB
QTIyMEQ3NTQ0QUZGQzg2NjFENDk5NDU4NUQ0NTVFN0IzMTMxN0Y4NTM5RDkyM0ZB
QTUxQjRBODlFRDE0NzlCRDMzNjcwMDVBQjVCNEI2QzlEMTJCOTYzQUFDREVBQkE0
ODZFNUE5NzU2MUMwNDUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA3px3wY7XRGr+XnL7eQPYU7LEBlQiofbA/Id2RwtPkD4cNTte9MNF
VhYEAgT5aZ2FzLYr52CCgbfKbfWI1u4CF3lJIFbt0t2VzUMvf4CT7N3B0BMaWHhk
Kmx2zya5BEbyqrQSISxk1oBzVwyBAh5ojiHL4tVNhUGC1Gfw5dQp38Nkkpffpi13
Ew0ok4byo9tqDZB/cjRe0ma0XfaldmxsNlrNgKUuB+EJ5HAG+IuRjW7G7R45mrYm
F5V8Bqq7VFNMtwa7zmKqX3m6oiDXVEr/yGYdSZRYXUVeezExf4U52SP6pRtKie0U
eb0zZwBatbS2ydErljqs3qukhuWpdWHARQIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FPVDNuG4K/2DF+7LoQepNK9e6MHEMB8GA1UdIwQYMBaAFNK0yR6+B9cH7ndaFXql
gr9LUzxiMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRyeW9HU1o0bmNaN01j
OGRoQ1ViczVWaHNBa1RDMm95QzFoNm1OQzhIVlpYLzEvRDJCNEM5MUVCRTA3RDcw
N0VFNzc1QTE1N0FBNTgyQkY0QjUzM0M2Mi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9EMkI0QzkxRUJFMDdENzA3RUU3NzVBMTU3QUE1ODJCRjRCNTMz
QzYyLmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80cnlvR1NaNG5jWjdNYzhkaENV
YnM1VmhzQWtUQzJveUMxaDZtTkM4SFZaWC8xLzMyMzgzMDM0M2EzNTYxNjIzNDNh
MzQzMDMwMzAzYTNhMmYzMzM0MmQzMzM0MjAzZDNlMjAzMjM2MzgzNzM5MzAucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgYoBFq0QDANBgkqhkiG9w0BAQsFAAOCAQEAGWSl4VcXWIdy2pWSe2uT
sFHQjnwfPMqJwlMgHUJgh9Fzvmh2Zsi2ZYeseYEUKWkuGTGXNzFMGivP1y+WjBJJ
j9NyYzAhdPGQpsvp6crXLnjDz9a4acJfEO+yJ1kVx+fs2mXrMGA/kicxEPdByhFN
guzCd61UN93JPrbIK6foasfKqC0ydDQFDleD7MSb802JKCtl3ao461klXqqvJG+t
xlEnLxXNlZhc/dZTRe9BcddYaB7w15eR4IHwoPoGkH6JNNXO9fv7l3kAKdEo5Q6W
V4FqRBE8eXFgx3RFwuTPhXXrrDfk8XhOHK1uQgUV2B6tGXwP2keZ8UC3zo4gTaOQ
YQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:51 2024 by rpki-client on console-fra.rpki-client.org