Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/323830343a356162343a633030303a3a2f33342d3334203d3e20323638373930.roa
File:                     323830343a356162343a633030303a3a2f33342d3334203d3e20323638373930.roa (raw, json)
Hash identifier:          sPofzSuJ39vfU+SW3RO8LKJT81x7kNnnoHPfB6u4ylA=
Subject key identifier:   6A:F8:CE:C1:B2:D5:A8:AB:64:84:FB:16:AA:B5:14:17:5F:E3:A3:C7
Certificate issuer:       /CN=D2B4C91EBE07D707EE775A157AA582BF4B533C62
Certificate serial:       313BA17E8907C6E8C1EA0F52EAF079DBC23AA0D2
Authority key identifier: D2:B4:C9:1E:BE:07:D7:07:EE:77:5A:15:7A:A5:82:BF:4B:53:3C:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/323830343a356162343a633030303a3a2f33342d3334203d3e20323638373930.roa
Signing time:             Wed 15 May 2024 14:33:20 +0000
ROA not before:           Wed 15 May 2024 14:28:20 +0000
ROA not after:            Wed 14 May 2025 14:33:20 +0000
asID:                     268790
IP address blocks:        2804:5ab4:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.crl
                          rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 02:12:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:3b:a1:7e:89:07:c6:e8:c1:ea:0f:52:ea:f0:79:db:c2:3a:a0:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2B4C91EBE07D707EE775A157AA582BF4B533C62
        Validity
            Not Before: May 15 14:28:20 2024 GMT
            Not After : May 14 14:33:20 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:36:ff:e3:40:4a:4c:c3:47:73:4d:6b:f2:fc:
                    fc:36:0d:18:1d:dc:39:b0:5d:b0:c0:9b:23:c0:14:
                    7b:a1:28:6b:06:b1:19:98:b9:20:8f:0d:97:b1:1e:
                    a9:fa:d7:b7:69:17:1f:b1:be:34:25:c2:5e:63:f6:
                    44:43:ba:4d:2d:c8:9c:45:ef:6c:cb:2e:cf:8f:cb:
                    5c:f8:55:68:8a:6e:0f:4a:e5:67:d9:3f:4f:d6:2a:
                    49:ff:c8:97:5d:ee:19:c3:28:b0:c2:2b:46:6d:95:
                    9a:e1:62:cf:2e:01:6d:a5:1d:cb:fc:8d:63:70:2b:
                    38:7b:1f:06:f4:d8:4d:64:ab:68:53:7b:b6:7f:5f:
                    ac:51:72:a8:f6:64:e4:56:75:de:64:09:75:47:95:
                    7f:f2:db:91:78:46:ee:3f:a7:34:46:1f:a4:97:7e:
                    47:aa:a7:79:bf:69:7e:ac:e8:dc:19:a3:48:42:c6:
                    b0:fb:b9:56:eb:7c:37:0a:f4:31:6e:a7:86:f2:65:
                    30:2c:ab:93:4d:a4:4d:ca:fc:ec:4d:e6:cc:3d:5f:
                    55:29:c2:94:6f:b8:31:1d:91:fc:20:7f:da:a8:a2:
                    cc:c6:cd:5d:9e:c9:7c:ab:b7:79:2a:04:dc:d7:90:
                    1c:4b:46:bd:60:c6:91:a4:70:c0:2f:94:84:9e:cd:
                    4a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F8:CE:C1:B2:D5:A8:AB:64:84:FB:16:AA:B5:14:17:5F:E3:A3:C7
            X509v3 Authority Key Identifier:
                keyid:D2:B4:C9:1E:BE:07:D7:07:EE:77:5A:15:7A:A5:82:BF:4B:53:3C:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/323830343a356162343a633030303a3a2f33342d3334203d3e20323638373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ab4:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         89:4d:6a:8a:63:04:44:a0:a2:30:bb:5d:48:18:0c:16:03:82:
         4a:34:84:36:18:62:6c:62:b3:eb:99:f9:38:f6:e8:b6:4c:55:
         1f:f8:0a:c6:31:7c:75:0d:f2:88:3f:49:b4:bd:70:6d:d6:db:
         34:f9:78:c8:5f:24:86:20:d6:64:0b:55:0a:a9:90:79:ef:0f:
         0a:f0:44:f5:f4:d9:da:48:33:cb:cd:4e:f1:e8:69:6b:99:5d:
         7f:23:12:e4:5d:e3:a4:46:07:a2:73:bc:75:3e:a1:3b:f3:69:
         f4:32:13:19:7b:8e:7c:4b:33:1c:57:6b:b9:11:b7:8e:e7:21:
         81:09:a7:44:5b:72:01:3d:da:3f:50:a4:e0:2f:ad:78:eb:6c:
         98:7e:26:6a:37:b8:07:b8:b1:d4:35:95:cc:98:65:e2:99:d3:
         bc:62:a6:82:10:fa:e3:87:45:25:bd:d9:c9:94:69:ea:37:28:
         3b:b5:ad:a0:70:70:8f:32:c9:cf:8f:5b:d5:01:eb:af:4a:85:
         29:e4:15:bf:7d:26:df:89:4f:e9:cb:19:06:dd:13:bc:13:a8:
         9c:a3:95:b8:1d:af:66:5e:07:8d:85:51:3f:8f:64:fb:56:28:
         57:05:28:a2:e1:87:36:65:ec:dc:fb:19:00:16:42:e3:6e:c1:
         0f:4b:d0:e9
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUMTuhfokHxujB6g9S6vB528I6oNIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDJCNEM5MUVCRTA3RDcwN0VFNzc1QTE1N0FBNTgyQkY0
QjUzM0M2MjAeFw0yNDA1MTUxNDI4MjBaFw0yNTA1MTQxNDMzMjBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjgzNkZGRTM0MDRBNENDMzQ3
NzM0RDZCRjJGQ0ZDMzYwRDE4MUREQzM5QjA1REIwQzA5QjIzQzAxNDdCQTEyODZC
MDZCMTE5OThCOTIwOEYwRDk3QjExRUE5RkFEN0I3NjkxNzFGQjFCRTM0MjVDMjVF
NjNGNjQ0NDNCQTREMkRDODlDNDVFRjZDQ0IyRUNGOEZDQjVDRjg1NTY4OEE2RTBG
NEFFNTY3RDkzRjRGRDYyQTQ5RkZDODk3NURFRTE5QzMyOEIwQzIyQjQ2NkQ5NTlB
RTE2MkNGMkUwMTZEQTUxRENCRkM4RDYzNzAyQjM4N0IxRjA2RjREODRENjRBQjY4
NTM3QkI2N0Y1RkFDNTE3MkE4RjY2NEU0NTY3NURFNjQwOTc1NDc5NTdGRjJEQjkx
Nzg0NkVFM0ZBNzM0NDYxRkE0OTc3RTQ3QUFBNzc5QkY2OTdFQUNFOERDMTlBMzQ4
NDJDNkIwRkJCOTU2RUI3QzM3MEFGNDMxNkVBNzg2RjI2NTMwMkNBQjkzNERBNDRE
Q0FGQ0VDNERFNkNDM0Q1RjU1MjlDMjk0NkZCODMxMUQ5MUZDMjA3RkRBQThBMkND
QzZDRDVEOUVDOTdDQUJCNzc5MkEwNERDRDc5MDFDNEI0NkJENjBDNjkxQTQ3MEMw
MkY5NDg0OUVDRDRBNjMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAuDb/40BKTMNHc01r8vz8Ng0YHdw5sF2wwJsjwBR7oShrBrEZmLkg
jw2XsR6p+te3aRcfsb40JcJeY/ZEQ7pNLcicRe9syy7Pj8tc+FVoim4PSuVn2T9P
1ipJ/8iXXe4ZwyiwwitGbZWa4WLPLgFtpR3L/I1jcCs4ex8G9NhNZKtoU3u2f1+s
UXKo9mTkVnXeZAl1R5V/8tuReEbuP6c0Rh+kl35Hqqd5v2l+rOjcGaNIQsaw+7lW
63w3CvQxbqeG8mUwLKuTTaRNyvzsTebMPV9VKcKUb7gxHZH8IH/aqKLMxs1dnsl8
q7d5KgTc15AcS0a9YMaRpHDAL5SEns1KYwIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FGr4zsGy1airZIT7Fqq1FBdf46PHMB8GA1UdIwQYMBaAFNK0yR6+B9cH7ndaFXql
gr9LUzxiMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRyeW9HU1o0bmNaN01j
OGRoQ1ViczVWaHNBa1RDMm95QzFoNm1OQzhIVlpYLzEvRDJCNEM5MUVCRTA3RDcw
N0VFNzc1QTE1N0FBNTgyQkY0QjUzM0M2Mi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9EMkI0QzkxRUJFMDdENzA3RUU3NzVBMTU3QUE1ODJCRjRCNTMz
QzYyLmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80cnlvR1NaNG5jWjdNYzhkaENV
YnM1VmhzQWtUQzJveUMxaDZtTkM4SFZaWC8xLzMyMzgzMDM0M2EzNTYxNjIzNDNh
NjMzMDMwMzAzYTNhMmYzMzM0MmQzMzM0MjAzZDNlMjAzMjM2MzgzNzM5MzAucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgYoBFq0wDANBgkqhkiG9w0BAQsFAAOCAQEAiU1qimMERKCiMLtdSBgM
FgOCSjSENhhibGKz65n5OPbotkxVH/gKxjF8dQ3yiD9JtL1wbdbbNPl4yF8khiDW
ZAtVCqmQee8PCvBE9fTZ2kgzy81O8ehpa5ldfyMS5F3jpEYHonO8dT6hO/Np9DIT
GXuOfEszHFdruRG3juchgQmnRFtyAT3aP1Ck4C+teOtsmH4maje4B7ix1DWVzJhl
4pnTvGKmghD644dFJb3ZyZRp6jcoO7WtoHBwjzLJz49b1QHrr0qFKeQVv30m34lP
6csZBt0TvBOonKOVuB2vZl4HjYVRP49k+1YoVwUoouGHNmXs3PsZABZC427BD0vQ
6Q==
-----END CERTIFICATE-----
Generated at Sat Sep 28 04:03:54 2024 by rpki-client on console-fra.rpki-client.org