Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6DwXVz19mk5YcwDaiZqQntiUVm9WgMfaZnBoYtP6gCmR/0/323830343a343363303a3a2f33332d3333203d3e20323637353838.roa
File:                     323830343a343363303a3a2f33332d3333203d3e20323637353838.roa (raw, json)
Hash identifier:          c1ro7ZlsaRVAQrpwQKyAlpJnZ/ndEyYi5uX638yq1y8=
Subject key identifier:   98:23:34:47:A0:7F:B7:5C:11:ED:68:34:B8:CC:80:77:63:8D:E6:61
Certificate issuer:       /CN=EB27E991207232DB9C6D847F06224E25D3606469
Certificate serial:       397534A2B2D663E5CBF11B476FAB61195E0B808D
Authority key identifier: EB:27:E9:91:20:72:32:DB:9C:6D:84:7F:06:22:4E:25:D3:60:64:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB27E991207232DB9C6D847F06224E25D3606469.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6DwXVz19mk5YcwDaiZqQntiUVm9WgMfaZnBoYtP6gCmR/0/323830343a343363303a3a2f33332d3333203d3e20323637353838.roa
Signing time:             Fri 12 Jul 2024 15:13:00 +0000
ROA not before:           Fri 12 Jul 2024 15:08:00 +0000
ROA not after:            Fri 11 Jul 2025 15:13:00 +0000
asID:                     267588
IP address blocks:        2804:43c0::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6DwXVz19mk5YcwDaiZqQntiUVm9WgMfaZnBoYtP6gCmR/0/EB27E991207232DB9C6D847F06224E25D3606469.crl
                          rsync://rpki-repo.registro.br/repo/6DwXVz19mk5YcwDaiZqQntiUVm9WgMfaZnBoYtP6gCmR/0/EB27E991207232DB9C6D847F06224E25D3606469.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB27E991207232DB9C6D847F06224E25D3606469.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 02:36:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:75:34:a2:b2:d6:63:e5:cb:f1:1b:47:6f:ab:61:19:5e:0b:80:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB27E991207232DB9C6D847F06224E25D3606469
        Validity
            Not Before: Jul 12 15:08:00 2024 GMT
            Not After : Jul 11 15:13:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:54:09:54:d1:23:11:d1:44:33:b4:4e:2e:1b:
                    4d:38:a1:61:5b:88:22:e7:2e:fc:76:f6:3d:a2:e1:
                    62:ce:fc:7f:29:dc:5e:81:3a:ed:96:de:e6:d1:bf:
                    93:d7:15:a8:d3:50:f2:31:79:c6:b4:99:d5:5d:86:
                    6e:af:cd:8c:ba:f9:b8:9b:a3:b8:64:e5:f3:f7:dd:
                    08:98:46:d4:7a:05:76:cd:f3:48:5b:51:e2:da:08:
                    a3:da:c1:c7:4c:7f:e1:22:e7:b7:15:49:2f:36:43:
                    c5:16:f3:21:97:73:d9:73:fe:eb:df:ce:40:7a:cd:
                    2c:01:a9:21:b8:ff:88:2f:62:cd:06:3b:d4:67:4d:
                    05:02:4c:f4:bf:e0:28:ea:3a:fe:45:6b:a8:c4:3c:
                    2d:e5:28:06:c7:6d:0f:19:c2:dc:7d:9e:47:0d:54:
                    11:37:f9:db:05:a4:2b:5a:c3:fa:c0:a7:17:10:7e:
                    53:73:f7:03:03:5b:4f:ac:58:e5:18:ea:5f:3d:a1:
                    10:e0:25:1e:78:5d:2d:8c:9e:2e:c6:39:79:0f:43:
                    50:a5:39:c0:e6:ed:35:91:96:ef:f3:c1:d8:f0:68:
                    ca:a8:70:40:d2:48:b0:95:60:09:9a:4a:be:38:01:
                    4e:37:02:07:47:71:74:d2:b4:8a:5c:ff:c1:f7:b9:
                    17:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:23:34:47:A0:7F:B7:5C:11:ED:68:34:B8:CC:80:77:63:8D:E6:61
            X509v3 Authority Key Identifier:
                keyid:EB:27:E9:91:20:72:32:DB:9C:6D:84:7F:06:22:4E:25:D3:60:64:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6DwXVz19mk5YcwDaiZqQntiUVm9WgMfaZnBoYtP6gCmR/0/EB27E991207232DB9C6D847F06224E25D3606469.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB27E991207232DB9C6D847F06224E25D3606469.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6DwXVz19mk5YcwDaiZqQntiUVm9WgMfaZnBoYtP6gCmR/0/323830343a343363303a3a2f33332d3333203d3e20323637353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:43c0::/33

    Signature Algorithm: sha256WithRSAEncryption
         a4:5f:64:5d:71:af:ed:cb:ae:91:06:b2:65:2f:2c:40:fd:c8:
         5a:72:fb:36:b5:10:ae:4a:f0:9e:02:a6:90:80:92:a1:13:05:
         4c:b9:ca:b1:ac:b3:5d:1a:59:25:69:f8:c8:49:76:d0:13:80:
         04:67:1c:c8:a5:23:2d:2f:1f:5f:68:a3:af:29:c2:14:e2:76:
         88:9c:7d:47:59:68:de:5d:eb:41:52:9b:43:07:5c:be:59:06:
         a4:61:55:cc:78:d7:87:29:c3:c1:75:ec:88:18:df:7b:81:43:
         21:7a:2d:9a:1d:8f:1d:ec:90:b3:9e:07:29:32:53:35:b2:25:
         fd:4e:ac:48:38:1f:ba:cd:ff:31:29:da:54:0a:9f:3d:b1:2d:
         85:2e:52:4e:30:b5:1c:12:71:61:3b:7f:ac:6c:c7:38:9d:c5:
         cd:ae:71:86:b3:79:39:bb:1f:10:1f:b1:76:b5:df:a1:47:a0:
         8c:ae:3d:90:0f:a0:e5:16:41:95:2a:4f:16:c4:57:07:f6:51:
         30:8a:8a:a2:0a:a8:55:18:78:d6:6f:d8:59:d4:f4:78:09:21:
         19:c7:01:11:14:dc:5c:f1:cc:56:d6:c1:fd:41:5b:36:10:8e:
         ca:af:a8:a8:ab:70:aa:b6:19:99:49:2f:2f:ea:78:51:e0:f4:
         f8:ba:32:eb
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUOXU0orLWY+XL8RtHb6thGV4LgI0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUIyN0U5OTEyMDcyMzJEQjlDNkQ4NDdGMDYyMjRFMjVE
MzYwNjQ2OTAeFw0yNDA3MTIxNTA4MDBaFw0yNTA3MTExNTEzMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjA1NDA5NTREMTIzMTFEMTQ0
MzNCNDRFMkUxQjREMzhBMTYxNUI4ODIyRTcyRUZDNzZGNjNEQTJFMTYyQ0VGQzdG
MjlEQzVFODEzQUVEOTZERUU2RDFCRjkzRDcxNUE4RDM1MEYyMzE3OUM2QjQ5OUQ1
NUQ4NjZFQUZDRDhDQkFGOUI4OUJBM0I4NjRFNUYzRjdERDA4OTg0NkQ0N0EwNTc2
Q0RGMzQ4NUI1MUUyREEwOEEzREFDMUM3NEM3RkUxMjJFN0I3MTU0OTJGMzY0M0M1
MTZGMzIxOTc3M0Q5NzNGRUVCREZDRTQwN0FDRDJDMDFBOTIxQjhGRjg4MkY2MkNE
MDYzQkQ0Njc0RDA1MDI0Q0Y0QkZFMDI4RUEzQUZFNDU2QkE4QzQzQzJERTUyODA2
Qzc2RDBGMTlDMkRDN0Q5RTQ3MEQ1NDExMzdGOURCMDVBNDJCNUFDM0ZBQzBBNzE3
MTA3RTUzNzNGNzAzMDM1QjRGQUM1OEU1MThFQTVGM0RBMTEwRTAyNTFFNzg1RDJE
OEM5RTJFQzYzOTc5MEY0MzUwQTUzOUMwRTZFRDM1OTE5NkVGRjNDMUQ4RjA2OENB
QTg3MDQwRDI0OEIwOTU2MDA5OUE0QUJFMzgwMTRFMzcwMjA3NDc3MTc0RDJCNDhB
NUNGRkMxRjdCOTE3QjcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAsFQJVNEjEdFEM7ROLhtNOKFhW4gi5y78dvY9ouFizvx/KdxegTrt
lt7m0b+T1xWo01DyMXnGtJnVXYZur82Muvm4m6O4ZOXz990ImEbUegV2zfNIW1Hi
2gij2sHHTH/hIue3FUkvNkPFFvMhl3PZc/7r385Aes0sAakhuP+IL2LNBjvUZ00F
Akz0v+Ao6jr+RWuoxDwt5SgGx20PGcLcfZ5HDVQRN/nbBaQrWsP6wKcXEH5Tc/cD
A1tPrFjlGOpfPaEQ4CUeeF0tjJ4uxjl5D0NQpTnA5u01kZbv88HY8GjKqHBA0kiw
lWAJmkq+OAFONwIHR3F00rSKXP/B97kXtwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FJgjNEegf7dcEe1oNLjMgHdjjeZhMB8GA1UdIwQYMBaAFOsn6ZEgcjLbnG2EfwYi
TiXTYGRpMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZEd1hWejE5bWs1WWN3
RGFpWnFRbnRpVVZtOVdnTWZhWm5Cb1l0UDZnQ21SLzAvRUIyN0U5OTEyMDcyMzJE
QjlDNkQ4NDdGMDYyMjRFMjVEMzYwNjQ2OS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9FQjI3RTk5MTIwNzIzMkRCOUM2RDg0N0YwNjIyNEUyNUQzNjA2
NDY5LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby82RHdYVnoxOW1rNVljd0RhaVpx
UW50aVVWbTlXZ01mYVpuQm9ZdFA2Z0NtUi8wLzMyMzgzMDM0M2EzNDMzNjMzMDNh
M2EyZjMzMzMyZDMzMzMyMDNkM2UyMDMyMzYzNzM1MzgzOC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygE
Q8AAMA0GCSqGSIb3DQEBCwUAA4IBAQCkX2Rdca/ty66RBrJlLyxA/chacvs2tRCu
SvCeAqaQgJKhEwVMucqxrLNdGlklafjISXbQE4AEZxzIpSMtLx9faKOvKcIU4naI
nH1HWWjeXetBUptDB1y+WQakYVXMeNeHKcPBdeyIGN97gUMhei2aHY8d7JCzngcp
MlM1siX9TqxIOB+6zf8xKdpUCp89sS2FLlJOMLUcEnFhO3+sbMc4ncXNrnGGs3k5
ux8QH7F2td+hR6CMrj2QD6DlFkGVKk8WxFcH9lEwioqiCqhVGHjWb9hZ1PR4CSEZ
xwERFNxc8cxW1sH9QVs2EI7Kr6ioq3CqthmZSS8v6nhR4PT4ujLr
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:54 2024 by rpki-client on console-fra.rpki-client.org