Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a363030303a3a2f33362d3336203d3e20323730373630.roa
File:                     323830343a373066633a363030303a3a2f33362d3336203d3e20323730373630.roa (raw, json)
Hash identifier:          7g/VD3zEnRfV6Bguej33OA+h0gN2FAbvtwnT4PCkVg8=
Subject key identifier:   A7:FC:A1:AF:C6:59:C5:E7:00:97:07:5D:77:88:08:86:21:9F:FE:2A
Certificate issuer:       /CN=79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4
Certificate serial:       33E765F7267C5E2F038C66ADA2B4D8CA10226ABC
Authority key identifier: 79:C6:B5:C6:95:A0:1C:F7:EB:BB:E7:EC:D0:74:98:36:B7:DA:14:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a363030303a3a2f33362d3336203d3e20323730373630.roa
Signing time:             Thu 16 May 2024 17:05:24 +0000
ROA not before:           Thu 16 May 2024 17:00:24 +0000
ROA not after:            Thu 15 May 2025 17:05:24 +0000
asID:                     270760
IP address blocks:        2804:70fc:6000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4.crl
                          rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:e7:65:f7:26:7c:5e:2f:03:8c:66:ad:a2:b4:d8:ca:10:22:6a:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4
        Validity
            Not Before: May 16 17:00:24 2024 GMT
            Not After : May 15 17:05:24 2025 GMT
        Subject: CN=A7FCA1AFC659C5E70097075D77880886219FFE2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a8:06:dc:72:3d:b9:94:a7:6b:d7:59:02:8e:
                    dc:d5:88:d7:27:39:22:2b:ec:85:74:1a:ac:aa:0b:
                    23:e4:58:e6:33:73:5d:bc:8e:e0:1b:cc:db:0d:19:
                    97:73:5e:aa:46:7a:cc:2b:22:87:b2:c9:da:86:98:
                    ce:91:da:bb:a9:3c:79:7f:33:48:19:5b:d7:f1:61:
                    f9:cf:0b:aa:25:7d:4d:af:38:63:8a:6a:e2:51:0e:
                    0e:e8:36:1c:18:d5:57:1f:9b:80:65:a3:6d:44:81:
                    c9:81:d3:15:5a:41:74:dd:fd:a6:16:3f:37:bb:af:
                    c6:7e:3c:5c:c0:96:30:51:df:11:62:33:f4:b3:57:
                    7b:2c:ae:14:83:ce:0c:e4:d2:a6:42:20:d2:62:5d:
                    6e:7a:a7:e2:6b:5a:29:7a:bf:c1:ec:12:7d:11:c0:
                    f1:6e:cc:d9:9a:82:92:3d:9d:25:98:20:66:b2:72:
                    bf:8e:88:48:ff:a0:65:24:cf:e8:89:72:1b:7b:1e:
                    a7:22:83:15:56:4d:78:e6:cc:60:03:04:28:bc:59:
                    a8:0f:ed:35:3a:ef:b3:21:24:7b:1c:1e:59:24:b4:
                    d3:29:98:6b:a2:41:9b:0c:d3:c9:f9:c6:1f:fa:c2:
                    a3:aa:3f:86:d1:c4:26:14:8b:dd:f2:44:30:de:b3:
                    30:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:FC:A1:AF:C6:59:C5:E7:00:97:07:5D:77:88:08:86:21:9F:FE:2A
            X509v3 Authority Key Identifier:
                keyid:79:C6:B5:C6:95:A0:1C:F7:EB:BB:E7:EC:D0:74:98:36:B7:DA:14:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a363030303a3a2f33362d3336203d3e20323730373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:70fc:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         31:f0:9f:54:eb:76:99:f1:6d:f0:d0:20:50:a9:91:fc:95:4d:
         55:a0:65:b4:c6:3f:a5:ca:92:01:19:4e:10:0b:f5:f3:5f:61:
         95:05:25:0e:d1:8c:7b:6c:aa:96:43:e0:0e:c2:ac:17:c8:90:
         e9:ab:e9:37:2b:fd:19:c1:9c:59:cf:3c:94:9e:46:db:1e:19:
         07:f3:99:4f:32:39:28:f2:d0:3f:09:8a:f2:23:4f:d9:9c:aa:
         eb:0e:25:1f:15:d6:bc:b1:74:2b:ad:80:d4:45:43:7d:54:c6:
         3c:1e:32:d5:a2:98:e1:fb:70:70:3d:04:64:35:31:33:e9:a5:
         44:a3:8d:9d:8f:0d:57:93:5b:91:43:dd:b3:0b:81:e7:93:c8:
         68:05:33:bf:f1:c7:8d:57:3f:23:8c:cc:fb:5d:de:83:04:14:
         98:c0:db:1e:2b:86:56:64:88:b9:f8:08:7b:e7:8f:8c:61:45:
         63:4a:0b:a6:5f:2d:93:f6:9b:24:ff:e8:cd:5c:f9:c4:e7:bd:
         6c:81:59:90:e3:89:61:2b:f1:63:48:be:55:8c:78:0b:32:a0:
         8e:e8:2f:38:44:54:a0:fd:31:83:21:a6:5a:a6:04:67:da:ed:
         b2:a5:e3:67:9e:ff:de:b0:73:5c:c4:4b:6a:77:e7:b7:01:cb:
         01:df:ea:e6
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUM+dl9yZ8Xi8DjGatorTYyhAiarwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzlDNkI1QzY5NUEwMUNGN0VCQkJFN0VDRDA3NDk4MzZC
N0RBMTRENDAeFw0yNDA1MTYxNzAwMjRaFw0yNTA1MTUxNzA1MjRaMDMxMTAvBgNV
BAMTKEE3RkNBMUFGQzY1OUM1RTcwMDk3MDc1RDc3ODgwODg2MjE5RkZFMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiqAbccj25lKdr11kCjtzViNcn
OSIr7IV0GqyqCyPkWOYzc128juAbzNsNGZdzXqpGeswrIoeyydqGmM6R2rupPHl/
M0gZW9fxYfnPC6olfU2vOGOKauJRDg7oNhwY1Vcfm4Blo21EgcmB0xVaQXTd/aYW
Pze7r8Z+PFzAljBR3xFiM/SzV3ssrhSDzgzk0qZCINJiXW56p+JrWil6v8HsEn0R
wPFuzNmagpI9nSWYIGaycr+OiEj/oGUkz+iJcht7HqcigxVWTXjmzGADBCi8WagP
7TU677MhJHscHlkktNMpmGuiQZsM08n5xh/6wqOqP4bRxCYUi93yRDDeszBbAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUp/yhr8ZZxecAlwddd4gIhiGf/iowHwYDVR0j
BBgwFoAUeca1xpWgHPfru+fs0HSYNrfaFNQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXgxREJyNXVpajlyVXVjMzlwSlRpMlBCWXpFaXlCalhtWlBpY0t5NUFl
VU0vMC83OUM2QjVDNjk1QTAxQ0Y3RUJCQkU3RUNEMDc0OTgzNkI3REExNEQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc5QzZCNUM2OTVBMDFDRjdF
QkJCRTdFQ0QwNzQ5ODM2QjdEQTE0RDQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV4MURCcjV1aWo5clV1YzM5cEpUaTJQQll6RWl5QmpYbVpQaWNLeTVBZVVNLzAv
MzIzODMwMzQzYTM3MzA2NjYzM2EzNjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzczMDM3MzYzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEcPxgMA0GCSqGSIb3DQEBCwUA
A4IBAQAx8J9U63aZ8W3w0CBQqZH8lU1VoGW0xj+lypIBGU4QC/XzX2GVBSUO0Yx7
bKqWQ+AOwqwXyJDpq+k3K/0ZwZxZzzyUnkbbHhkH85lPMjko8tA/CYryI0/ZnKrr
DiUfFda8sXQrrYDURUN9VMY8HjLVopjh+3BwPQRkNTEz6aVEo42djw1Xk1uRQ92z
C4Hnk8hoBTO/8ceNVz8jjMz7Xd6DBBSYwNseK4ZWZIi5+Ah754+MYUVjSgumXy2T
9psk/+jNXPnE571sgVmQ44lhK/FjSL5VjHgLMqCO6C84RFSg/TGDIaZapgRn2u2y
peNnnv/esHNcxEtqd+e3AcsB3+rm
-----END CERTIFICATE-----
Generated at Sat Jun 29 07:19:14 2024 by rpki-client on console-ams.rpki-client.org