Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a613030303a3a2f33362d3336203d3e20323730373630.roa
File:                     323830343a373066633a613030303a3a2f33362d3336203d3e20323730373630.roa (raw, json)
Hash identifier:          rSCT/1qm8fuq/nzfsB6ICw+5Ounn/TjDxLtdJZU0iCY=
Subject key identifier:   FC:77:07:3D:B6:CE:78:67:4F:C5:5F:69:37:8D:1C:18:96:30:18:D2
Certificate issuer:       /CN=79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4
Certificate serial:       24761CC54A947256C4FA841C09703FF74EA24818
Authority key identifier: 79:C6:B5:C6:95:A0:1C:F7:EB:BB:E7:EC:D0:74:98:36:B7:DA:14:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a613030303a3a2f33362d3336203d3e20323730373630.roa
Signing time:             Thu 16 May 2024 17:05:23 +0000
ROA not before:           Thu 16 May 2024 17:00:23 +0000
ROA not after:            Thu 15 May 2025 17:05:23 +0000
asID:                     270760
IP address blocks:        2804:70fc:a000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4.crl
                          rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:76:1c:c5:4a:94:72:56:c4:fa:84:1c:09:70:3f:f7:4e:a2:48:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4
        Validity
            Not Before: May 16 17:00:23 2024 GMT
            Not After : May 15 17:05:23 2025 GMT
        Subject: CN=FC77073DB6CE78674FC55F69378D1C18963018D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:57:c4:0e:14:7f:3a:70:72:90:26:fe:d9:06:
                    0e:85:e0:74:74:ee:92:9b:49:79:44:de:f3:51:9f:
                    fe:05:56:ac:be:71:56:bf:25:7d:e2:5f:b6:b8:98:
                    87:c3:ee:d1:70:b2:ca:b5:11:c9:05:fe:f6:6d:47:
                    79:89:c2:e8:b4:d7:ad:5e:8c:70:01:44:b3:2d:0f:
                    50:ae:63:de:3a:ab:a1:e2:40:c3:fc:11:09:e0:2f:
                    f1:b7:50:07:e9:bb:ac:42:07:89:64:c6:a7:8f:70:
                    e1:83:5b:82:ae:f1:c7:14:07:15:36:c7:df:17:e2:
                    10:7e:4f:a7:fe:ac:47:06:04:f5:9e:ca:84:5b:df:
                    95:ff:03:56:7f:7c:65:de:86:c7:95:b2:81:65:51:
                    0b:a2:e2:29:d1:e8:cd:6d:89:5e:e7:88:2c:fa:e3:
                    e5:be:66:ec:af:6c:f0:14:8b:ac:9b:66:b8:20:a2:
                    18:66:0c:34:87:06:9e:d1:85:3e:7a:0c:6b:e0:eb:
                    3d:29:86:25:44:c6:9b:4b:6e:11:68:00:b7:4b:87:
                    1e:06:2e:48:fa:e3:53:c5:9d:5e:07:fe:ed:6f:56:
                    f2:a3:a4:e2:0a:33:1d:d2:8c:f1:cc:cf:b1:f5:70:
                    7a:92:69:61:2e:70:c3:ba:ad:e1:9d:1d:f0:81:0d:
                    6a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:77:07:3D:B6:CE:78:67:4F:C5:5F:69:37:8D:1C:18:96:30:18:D2
            X509v3 Authority Key Identifier:
                keyid:79:C6:B5:C6:95:A0:1C:F7:EB:BB:E7:EC:D0:74:98:36:B7:DA:14:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a613030303a3a2f33362d3336203d3e20323730373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:70fc:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b1:3f:40:8c:79:0e:99:24:19:03:65:b4:15:91:f7:8a:63:34:
         0b:81:bd:ad:df:79:57:57:87:85:8b:30:f4:8a:99:df:bf:19:
         45:ff:d4:c3:67:b2:8c:5e:d3:b5:46:c7:53:9b:38:2b:60:d6:
         de:5f:c1:95:28:5f:9d:6e:ad:c5:12:91:79:13:db:a1:c4:f8:
         ad:66:17:4b:4d:20:53:e2:90:b0:f5:00:fc:83:48:7b:ed:a1:
         f1:c6:38:b2:3e:6c:f6:41:32:24:d9:59:85:04:e8:fc:ba:ba:
         85:ea:a3:c8:88:b7:73:81:29:6d:77:69:2d:3b:c3:d7:b7:09:
         c2:0e:9f:ca:12:d1:fa:a1:58:14:59:96:62:2c:22:ee:d7:24:
         8f:27:03:8d:a1:70:92:d6:d2:fa:e4:77:ca:a2:2a:ae:f3:42:
         22:5c:a2:6b:71:79:99:9c:78:c4:08:02:93:a6:ae:a0:f1:3e:
         60:76:6a:77:e1:27:03:76:5f:21:03:e2:7e:bd:d4:8b:68:17:
         7d:86:02:e6:67:13:e1:38:f5:94:8d:74:05:5a:2d:2e:5a:48:
         40:04:cc:dd:98:fd:34:6f:8d:96:95:4d:dd:20:21:03:74:a4:
         95:d1:c3:db:d1:12:0a:21:8d:5f:b5:f6:3f:c0:31:6f:2c:b9:
         c7:19:e3:81
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUJHYcxUqUclbE+oQcCXA/906iSBgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzlDNkI1QzY5NUEwMUNGN0VCQkJFN0VDRDA3NDk4MzZC
N0RBMTRENDAeFw0yNDA1MTYxNzAwMjNaFw0yNTA1MTUxNzA1MjNaMDMxMTAvBgNV
BAMTKEZDNzcwNzNEQjZDRTc4Njc0RkM1NUY2OTM3OEQxQzE4OTYzMDE4RDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoV8QOFH86cHKQJv7ZBg6F4HR0
7pKbSXlE3vNRn/4FVqy+cVa/JX3iX7a4mIfD7tFwssq1EckF/vZtR3mJwui0161e
jHABRLMtD1CuY946q6HiQMP8EQngL/G3UAfpu6xCB4lkxqePcOGDW4Ku8ccUBxU2
x98X4hB+T6f+rEcGBPWeyoRb35X/A1Z/fGXehseVsoFlUQui4inR6M1tiV7niCz6
4+W+ZuyvbPAUi6ybZrggohhmDDSHBp7RhT56DGvg6z0phiVExptLbhFoALdLhx4G
Lkj641PFnV4H/u1vVvKjpOIKMx3SjPHMz7H1cHqSaWEucMO6reGdHfCBDWqxAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU/HcHPbbOeGdPxV9pN40cGJYwGNIwHwYDVR0j
BBgwFoAUeca1xpWgHPfru+fs0HSYNrfaFNQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXgxREJyNXVpajlyVXVjMzlwSlRpMlBCWXpFaXlCalhtWlBpY0t5NUFl
VU0vMC83OUM2QjVDNjk1QTAxQ0Y3RUJCQkU3RUNEMDc0OTgzNkI3REExNEQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc5QzZCNUM2OTVBMDFDRjdF
QkJCRTdFQ0QwNzQ5ODM2QjdEQTE0RDQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV4MURCcjV1aWo5clV1YzM5cEpUaTJQQll6RWl5QmpYbVpQaWNLeTVBZVVNLzAv
MzIzODMwMzQzYTM3MzA2NjYzM2E2MTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzczMDM3MzYzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEcPygMA0GCSqGSIb3DQEBCwUA
A4IBAQCxP0CMeQ6ZJBkDZbQVkfeKYzQLgb2t33lXV4eFizD0ipnfvxlF/9TDZ7KM
XtO1RsdTmzgrYNbeX8GVKF+dbq3FEpF5E9uhxPitZhdLTSBT4pCw9QD8g0h77aHx
xjiyPmz2QTIk2VmFBOj8urqF6qPIiLdzgSltd2ktO8PXtwnCDp/KEtH6oVgUWZZi
LCLu1ySPJwONoXCS1tL65HfKoiqu80IiXKJrcXmZnHjECAKTpq6g8T5gdmp34ScD
dl8hA+J+vdSLaBd9hgLmZxPhOPWUjXQFWi0uWkhABMzdmP00b42WlU3dICEDdKSV
0cPb0RIKIY1ftfY/wDFvLLnHGeOB
-----END CERTIFICATE-----
Generated at Sat Jun 29 06:48:50 2024 by rpki-client on console-fra.rpki-client.org