Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/1/323830343a343138633a633030303a3a2f33342d3334203d3e20323637343430.roa
File:                     323830343a343138633a633030303a3a2f33342d3334203d3e20323637343430.roa (raw, json)
Hash identifier:          eLnsStws13wD6HMcC/CIqo1pwpeMigOv4TIN08oeMLg=
Subject key identifier:   9F:31:A3:CD:64:49:E1:D4:59:32:62:FE:17:5F:71:17:BC:02:1E:E8
Certificate issuer:       /CN=33E0AB84CEF869E76435D17DB5E5566182625773
Certificate serial:       6330C1DE4908EA8A3221BC6DD0C2A1ABC0C68AA1
Authority key identifier: 33:E0:AB:84:CE:F8:69:E7:64:35:D1:7D:B5:E5:56:61:82:62:57:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33E0AB84CEF869E76435D17DB5E5566182625773.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/1/323830343a343138633a633030303a3a2f33342d3334203d3e20323637343430.roa
Signing time:             Wed 03 Apr 2024 23:02:55 +0000
ROA not before:           Wed 03 Apr 2024 22:57:55 +0000
ROA not after:            Wed 02 Apr 2025 23:02:55 +0000
asID:                     267440
IP address blocks:        2804:418c:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/1/33E0AB84CEF869E76435D17DB5E5566182625773.crl
                          rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/1/33E0AB84CEF869E76435D17DB5E5566182625773.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33E0AB84CEF869E76435D17DB5E5566182625773.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:30:c1:de:49:08:ea:8a:32:21:bc:6d:d0:c2:a1:ab:c0:c6:8a:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33E0AB84CEF869E76435D17DB5E5566182625773
        Validity
            Not Before: Apr  3 22:57:55 2024 GMT
            Not After : Apr  2 23:02:55 2025 GMT
        Subject: CN=9F31A3CD6449E1D4593262FE175F7117BC021EE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:70:9a:59:a8:53:73:bc:f9:32:8c:d6:b5:50:
                    8a:a4:57:c7:02:95:d2:38:41:0a:f4:7e:5d:d3:42:
                    8d:dc:88:2c:ab:65:f7:04:86:bf:86:b4:51:ee:3e:
                    1b:03:9b:27:c8:5f:58:7b:dd:1b:99:46:96:2f:fa:
                    5a:bb:f4:92:3b:c2:db:28:9f:00:a3:e6:21:94:dc:
                    96:a4:7e:c8:ce:64:ea:05:f9:f3:d5:81:5e:f2:6a:
                    37:d6:a8:56:a6:5f:f4:3a:4b:c4:e9:99:2f:fc:be:
                    19:fc:40:95:98:b1:98:4e:2d:56:a4:9b:c9:e8:e6:
                    2e:79:a1:0f:43:38:b4:e7:8d:4d:45:79:e5:9a:db:
                    b6:eb:8b:e8:2e:d6:b3:42:2a:88:7c:0a:ef:c0:dd:
                    87:f9:e8:b7:7f:62:45:33:46:ce:66:a1:50:f1:e0:
                    c5:be:2a:ba:90:e1:f4:84:4f:57:85:a9:05:11:9f:
                    39:b1:dd:10:e4:91:b3:e7:7c:d1:be:14:b6:d7:73:
                    4f:2b:00:60:59:b6:20:70:5e:38:57:c2:56:4c:e3:
                    2d:78:83:fd:9e:84:bd:07:92:55:6c:07:61:e4:ef:
                    2c:01:33:f0:e7:b6:63:6b:da:54:0a:36:8b:67:55:
                    4b:fc:a1:de:ed:0c:07:2e:09:67:2f:1c:ee:77:d5:
                    2f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:31:A3:CD:64:49:E1:D4:59:32:62:FE:17:5F:71:17:BC:02:1E:E8
            X509v3 Authority Key Identifier:
                keyid:33:E0:AB:84:CE:F8:69:E7:64:35:D1:7D:B5:E5:56:61:82:62:57:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/1/33E0AB84CEF869E76435D17DB5E5566182625773.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33E0AB84CEF869E76435D17DB5E5566182625773.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/1/323830343a343138633a633030303a3a2f33342d3334203d3e20323637343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:418c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         35:12:d0:70:1f:44:6a:6a:b1:9b:66:22:2e:af:67:70:5b:aa:
         6a:2d:90:4c:e0:ac:da:5b:19:0e:d7:f2:e4:ee:54:3d:0f:91:
         8e:df:4b:d9:bc:70:e8:cd:07:68:e8:18:f5:97:93:d2:b0:29:
         24:5e:e2:0a:e5:ea:82:16:ff:96:a7:4a:8e:1f:1c:a8:1d:10:
         df:09:8c:4c:f8:75:b1:ed:65:86:bc:fa:57:b2:17:c6:61:c5:
         6e:d5:bb:e8:a2:a5:85:74:15:cc:21:71:cc:71:a0:27:cd:e1:
         34:44:06:71:4d:56:05:17:79:ed:30:f3:4b:e1:75:bd:af:38:
         16:e2:79:03:df:02:52:dd:90:e8:9a:b9:b2:45:d5:99:0d:e0:
         85:21:d9:2d:04:40:d5:28:d6:d0:0c:2b:4c:0a:b0:20:b6:3a:
         6a:bc:6a:da:0f:10:f4:a3:9f:6a:d0:ca:14:c9:46:b6:6e:f8:
         fe:40:98:8e:d2:32:db:7e:79:a6:a5:2e:ae:10:35:c5:49:c2:
         90:ab:68:22:7a:5d:e2:56:f8:7b:16:23:21:60:e7:79:a0:e8:
         db:1a:ff:b4:a7:a9:5c:d9:ec:e6:bf:47:d3:fd:24:a7:fb:c6:
         48:3b:59:49:24:8b:88:aa:af:7e:47:96:89:8b:c9:35:1e:68:
         23:17:91:97
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUYzDB3kkI6ooyIbxt0MKhq8DGiqEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzNFMEFCODRDRUY4NjlFNzY0MzVEMTdEQjVFNTU2NjE4
MjYyNTc3MzAeFw0yNDA0MDMyMjU3NTVaFw0yNTA0MDIyMzAyNTVaMDMxMTAvBgNV
BAMTKDlGMzFBM0NENjQ0OUUxRDQ1OTMyNjJGRTE3NUY3MTE3QkMwMjFFRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDcJpZqFNzvPkyjNa1UIqkV8cC
ldI4QQr0fl3TQo3ciCyrZfcEhr+GtFHuPhsDmyfIX1h73RuZRpYv+lq79JI7wtso
nwCj5iGU3JakfsjOZOoF+fPVgV7yajfWqFamX/Q6S8TpmS/8vhn8QJWYsZhOLVak
m8no5i55oQ9DOLTnjU1FeeWa27bri+gu1rNCKoh8Cu/A3Yf56Ld/YkUzRs5moVDx
4MW+KrqQ4fSET1eFqQURnzmx3RDkkbPnfNG+FLbXc08rAGBZtiBwXjhXwlZM4y14
g/2ehL0HklVsB2Hk7ywBM/DntmNr2lQKNotnVUv8od7tDAcuCWcvHO531S91AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUnzGjzWRJ4dRZMmL+F19xF7wCHugwHwYDVR0j
BBgwFoAUM+CrhM74aedkNdF9teVWYYJiV3MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzluSGlENGlwenI3M1U4TDVTUUhNYUtSQmtTMUdzNWFoQTRjdDlSQzN3
OEEvMS8zM0UwQUI4NENFRjg2OUU3NjQzNUQxN0RCNUU1NTY2MTgyNjI1NzczLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzRTBBQjg0Q0VGODY5RTc2
NDM1RDE3REI1RTU1NjYxODI2MjU3NzMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzc5bkhpRDRpcHpyNzNVOEw1U1FITWFLUkJrUzFHczVhaEE0Y3Q5UkMzdzhBLzEv
MzIzODMwMzQzYTM0MzEzODYzM2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNzM0MzQzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEQYzAMA0GCSqGSIb3DQEBCwUA
A4IBAQA1EtBwH0RqarGbZiIur2dwW6pqLZBM4KzaWxkO1/Lk7lQ9D5GO30vZvHDo
zQdo6Bj1l5PSsCkkXuIK5eqCFv+Wp0qOHxyoHRDfCYxM+HWx7WWGvPpXshfGYcVu
1bvooqWFdBXMIXHMcaAnzeE0RAZxTVYFF3ntMPNL4XW9rzgW4nkD3wJS3ZDomrmy
RdWZDeCFIdktBEDVKNbQDCtMCrAgtjpqvGraDxD0o59q0MoUyUa2bvj+QJiO0jLb
fnmmpS6uEDXFScKQq2giel3iVvh7FiMhYOd5oOjbGv+0p6lc2ezmv0fT/SSn+8ZI
O1lJJIuIqq9+R5aJi8k1HmgjF5GX
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:58 2024 by rpki-client on console-ams.rpki-client.org