Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/323830343a356162343a3a2f33322d3332203d3e20323638373930.roa
File:                     323830343a356162343a3a2f33322d3332203d3e20323638373930.roa (raw, json)
Hash identifier:          iLKOFDYOGIxvJxYtfGZxzEtcz1sg9Mg3VjnVHDDJIls=
Subject key identifier:   B3:6A:F2:15:E0:E8:4D:73:E7:FF:CB:74:75:28:E1:4F:FB:9F:4E:74
Certificate issuer:       /CN=D2B4C91EBE07D707EE775A157AA582BF4B533C62
Certificate serial:       2E95DF4CBB9D8F0FEBA2A8F8BB51A4F80D5D0E67
Authority key identifier: D2:B4:C9:1E:BE:07:D7:07:EE:77:5A:15:7A:A5:82:BF:4B:53:3C:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/323830343a356162343a3a2f33322d3332203d3e20323638373930.roa
Signing time:             Wed 15 May 2024 14:33:20 +0000
ROA not before:           Wed 15 May 2024 14:28:20 +0000
ROA not after:            Wed 14 May 2025 14:33:20 +0000
asID:                     268790
IP address blocks:        2804:5ab4::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.crl
                          rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:38:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:95:df:4c:bb:9d:8f:0f:eb:a2:a8:f8:bb:51:a4:f8:0d:5d:0e:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2B4C91EBE07D707EE775A157AA582BF4B533C62
        Validity
            Not Before: May 15 14:28:20 2024 GMT
            Not After : May 14 14:33:20 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1e:f1:5d:11:45:27:76:a4:66:f4:fd:1c:02:
                    9e:a6:bc:34:b7:b1:05:e5:4c:f8:0d:f3:6b:18:f6:
                    fc:1b:a4:76:6e:f4:51:6b:65:68:4a:77:8c:21:25:
                    e4:bb:d7:cc:b7:29:f0:81:71:00:5d:c6:61:44:a8:
                    e5:69:a7:de:97:99:85:57:ea:27:32:b4:30:34:17:
                    6f:53:23:a8:74:e9:11:f5:a1:a8:70:8c:42:21:d3:
                    43:68:6b:0a:9f:d7:2a:b9:f0:97:91:67:3f:e9:e8:
                    8b:28:57:16:a8:5a:2b:d3:05:7d:49:3a:2c:72:e0:
                    da:f0:97:5a:d3:c2:32:9a:e4:58:fd:3c:ee:6a:9f:
                    4d:d5:25:16:de:82:1d:cf:6a:61:92:ab:43:8d:71:
                    06:7e:a7:4b:15:3f:ab:5f:86:a5:e0:c8:72:30:cc:
                    d3:ed:55:ea:00:6e:86:fa:64:92:bf:b2:cb:bf:5e:
                    17:b4:aa:63:6b:88:99:de:3f:a7:3c:8c:de:e7:df:
                    95:8c:b6:3a:f4:d0:94:b5:ad:40:d1:c8:96:93:4f:
                    eb:44:ca:60:72:40:c1:81:ac:8d:4b:78:c2:5c:dd:
                    1d:38:a1:70:77:10:01:1a:5b:ca:d0:9f:f3:6b:3a:
                    ad:88:c1:6b:33:cc:3c:66:f9:7b:5b:fe:ad:fe:f6:
                    aa:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:6A:F2:15:E0:E8:4D:73:E7:FF:CB:74:75:28:E1:4F:FB:9F:4E:74
            X509v3 Authority Key Identifier:
                keyid:D2:B4:C9:1E:BE:07:D7:07:EE:77:5A:15:7A:A5:82:BF:4B:53:3C:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/323830343a356162343a3a2f33322d3332203d3e20323638373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ab4::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:33:08:00:9d:1f:ed:a2:24:3b:f0:9e:67:1e:2f:f2:e9:b8:
         19:d7:51:47:51:95:d3:59:02:d9:05:3d:c4:85:96:5d:b0:dc:
         9b:19:18:14:3d:07:e9:cc:b5:51:2a:84:c6:18:ce:26:51:a9:
         b9:3c:54:ab:22:b5:c8:05:9f:f0:97:8d:bf:1f:9c:0c:e3:de:
         f9:f7:66:3b:30:f4:bf:e4:d6:32:6e:0d:56:73:a7:e8:98:46:
         bb:be:23:80:a5:24:a1:1d:be:f5:24:54:51:7e:73:33:23:5d:
         c9:f6:e6:d6:0f:ad:62:dc:16:04:eb:fd:3a:7c:2c:36:81:3d:
         7b:81:39:3e:3a:2c:00:de:13:a0:33:4c:48:67:cf:5d:6e:e5:
         76:bc:d4:85:b3:fd:15:ed:23:b0:11:40:6d:5f:53:aa:0f:de:
         99:c5:4e:ce:9a:42:37:38:01:4c:a3:3b:c2:6a:ed:09:e0:27:
         a6:99:5c:4a:ba:da:c6:e8:5d:e4:ab:61:5f:ea:55:9e:90:4d:
         c6:18:52:74:4d:9d:69:c6:68:5d:8f:dd:d0:f1:6b:7f:22:2a:
         a5:eb:cb:fc:f6:bf:1c:e5:8c:75:33:4c:17:3a:7e:be:3e:1f:
         ae:64:1d:7d:ce:c3:40:66:87:af:ba:ad:12:22:ae:4b:49:af:
         96:2e:6e:af
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIULpXfTLudjw/roqj4u1Gk+A1dDmcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDJCNEM5MUVCRTA3RDcwN0VFNzc1QTE1N0FBNTgyQkY0
QjUzM0M2MjAeFw0yNDA1MTUxNDI4MjBaFw0yNTA1MTQxNDMzMjBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkMxRUYxNUQxMTQ1Mjc3NkE0
NjZGNEZEMUMwMjlFQTZCQzM0QjdCMTA1RTU0Q0Y4MERGMzZCMThGNkZDMUJBNDc2
NkVGNDUxNkI2NTY4NEE3NzhDMjEyNUU0QkJEN0NDQjcyOUYwODE3MTAwNURDNjYx
NDRBOEU1NjlBN0RFOTc5OTg1NTdFQTI3MzJCNDMwMzQxNzZGNTMyM0E4NzRFOTEx
RjVBMUE4NzA4QzQyMjFEMzQzNjg2QjBBOUZENzJBQjlGMDk3OTE2NzNGRTlFODhC
Mjg1NzE2QTg1QTJCRDMwNTdENDkzQTJDNzJFMERBRjA5NzVBRDNDMjMyOUFFNDU4
RkQzQ0VFNkE5RjRERDUyNTE2REU4MjFEQ0Y2QTYxOTJBQjQzOEQ3MTA2N0VBNzRC
MTUzRkFCNUY4NkE1RTBDODcyMzBDQ0QzRUQ1NUVBMDA2RTg2RkE2NDkyQkZCMkNC
QkY1RTE3QjRBQTYzNkI4ODk5REUzRkE3M0M4Q0RFRTdERjk1OENCNjNBRjREMDk0
QjVBRDQwRDFDODk2OTM0RkVCNDRDQTYwNzI0MEMxODFBQzhENEI3OEMyNUNERDFE
MzhBMTcwNzcxMDAxMUE1QkNBRDA5RkYzNkIzQUFEODhDMTZCMzNDQzNDNjZGOTdC
NUJGRUFERkVGNkFBMTMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvB7xXRFFJ3akZvT9HAKeprw0t7EF5Uz4DfNrGPb8G6R2bvRRa2Vo
SneMISXku9fMtynwgXEAXcZhRKjlaafel5mFV+onMrQwNBdvUyOodOkR9aGocIxC
IdNDaGsKn9cqufCXkWc/6eiLKFcWqFor0wV9SToscuDa8Jda08IymuRY/Tzuap9N
1SUW3oIdz2phkqtDjXEGfqdLFT+rX4al4MhyMMzT7VXqAG6G+mSSv7LLv14XtKpj
a4iZ3j+nPIze59+VjLY69NCUta1A0ciWk0/rRMpgckDBgayNS3jCXN0dOKFwdxAB
GlvK0J/zazqtiMFrM8w8Zvl7W/6t/vaqEwIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FLNq8hXg6E1z5//LdHUo4U/7n050MB8GA1UdIwQYMBaAFNK0yR6+B9cH7ndaFXql
gr9LUzxiMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRyeW9HU1o0bmNaN01j
OGRoQ1ViczVWaHNBa1RDMm95QzFoNm1OQzhIVlpYLzEvRDJCNEM5MUVCRTA3RDcw
N0VFNzc1QTE1N0FBNTgyQkY0QjUzM0M2Mi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9EMkI0QzkxRUJFMDdENzA3RUU3NzVBMTU3QUE1ODJCRjRCNTMz
QzYyLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80cnlvR1NaNG5jWjdNYzhkaENV
YnM1VmhzQWtUQzJveUMxaDZtTkM4SFZaWC8xLzMyMzgzMDM0M2EzNTYxNjIzNDNh
M2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzODM3MzkzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
WrQwDQYJKoZIhvcNAQELBQADggEBAJ0zCACdH+2iJDvwnmceL/LpuBnXUUdRldNZ
AtkFPcSFll2w3JsZGBQ9B+nMtVEqhMYYziZRqbk8VKsitcgFn/CXjb8fnAzj3vn3
Zjsw9L/k1jJuDVZzp+iYRru+I4ClJKEdvvUkVFF+czMjXcn25tYPrWLcFgTr/Tp8
LDaBPXuBOT46LADeE6AzTEhnz11u5Xa81IWz/RXtI7ARQG1fU6oP3pnFTs6aQjc4
AUyjO8Jq7QngJ6aZXEq62sboXeSrYV/qVZ6QTcYYUnRNnWnGaF2P3dDxa38iKqXr
y/z2vxzljHUzTBc6fr4+H65kHX3Ow0Bmh6+6rRIirktJr5Yubq8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:35 2024 by rpki-client on console-ams.rpki-client.org