Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/1/323830343a373138303a343030303a3a2f33342d3334203d3e20323730373933.roa
File:                     323830343a373138303a343030303a3a2f33342d3334203d3e20323730373933.roa (raw, json)
Hash identifier:          sySw6LZZvmvATtwKt3rVaY/7h0SsEP+18arJbfvobcY=
Subject key identifier:   7F:1E:2A:B2:61:DB:1B:AD:47:D9:7F:28:C2:02:95:4D:E9:25:D3:C6
Certificate issuer:       /CN=B44441CC8BE361C80B2B79E2EB78406E56E536AD
Certificate serial:       7A8023975CA69E99CFF96D65F89E84ED47703F8D
Authority key identifier: B4:44:41:CC:8B:E3:61:C8:0B:2B:79:E2:EB:78:40:6E:56:E5:36:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B44441CC8BE361C80B2B79E2EB78406E56E536AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/1/323830343a373138303a343030303a3a2f33342d3334203d3e20323730373933.roa
Signing time:             Thu 04 Apr 2024 22:37:33 +0000
ROA not before:           Thu 04 Apr 2024 22:32:33 +0000
ROA not after:            Thu 03 Apr 2025 22:37:33 +0000
asID:                     270793
IP address blocks:        2804:7180:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/1/B44441CC8BE361C80B2B79E2EB78406E56E536AD.crl
                          rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/1/B44441CC8BE361C80B2B79E2EB78406E56E536AD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B44441CC8BE361C80B2B79E2EB78406E56E536AD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:80:23:97:5c:a6:9e:99:cf:f9:6d:65:f8:9e:84:ed:47:70:3f:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B44441CC8BE361C80B2B79E2EB78406E56E536AD
        Validity
            Not Before: Apr  4 22:32:33 2024 GMT
            Not After : Apr  3 22:37:33 2025 GMT
        Subject: CN=7F1E2AB261DB1BAD47D97F28C202954DE925D3C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c1:61:80:da:dc:bf:e5:66:6d:d1:7e:c4:4a:
                    78:12:a1:a3:f9:0a:e9:11:9c:8d:2e:a7:24:81:3f:
                    da:5b:29:7d:1a:aa:d1:33:cb:92:f3:ff:dd:ba:21:
                    07:d8:46:0c:8f:67:92:d9:b7:5f:dd:0b:2a:ba:00:
                    cd:27:bd:09:f1:47:b7:8a:60:b6:c8:cb:f2:8e:13:
                    08:ae:64:c2:e8:5f:c5:d7:bc:64:05:15:f7:9a:51:
                    fe:52:8a:69:74:9d:e8:3e:0d:3b:ea:c7:f3:fe:ff:
                    cb:48:d8:cd:b0:7a:a8:e4:2a:df:3a:23:19:f5:d3:
                    01:44:56:85:e1:fe:70:dd:f2:91:98:07:d5:db:b9:
                    13:47:81:4a:7b:65:c0:2f:2d:ff:9e:a7:0e:c1:00:
                    fd:12:d5:b2:f9:29:41:35:88:7a:8c:21:2a:1f:99:
                    91:24:2c:6f:75:34:2c:9c:49:8b:dd:12:3d:2a:6b:
                    08:0a:d9:22:57:71:bc:9d:c2:76:53:52:e2:9b:2f:
                    2d:90:52:7e:64:d7:5d:69:c7:96:19:67:e9:56:18:
                    e6:df:28:34:ed:58:01:06:68:7f:b7:60:b2:49:a7:
                    4f:3e:e3:87:39:a7:c7:41:88:10:ee:d5:be:cf:30:
                    e7:13:c9:a1:77:8d:f3:4e:10:a5:27:a9:e4:b1:3f:
                    99:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:1E:2A:B2:61:DB:1B:AD:47:D9:7F:28:C2:02:95:4D:E9:25:D3:C6
            X509v3 Authority Key Identifier:
                keyid:B4:44:41:CC:8B:E3:61:C8:0B:2B:79:E2:EB:78:40:6E:56:E5:36:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/1/B44441CC8BE361C80B2B79E2EB78406E56E536AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B44441CC8BE361C80B2B79E2EB78406E56E536AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/1/323830343a373138303a343030303a3a2f33342d3334203d3e20323730373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7180:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         39:a2:a5:41:3e:92:bb:04:97:90:dd:3f:2c:fa:8e:65:84:f3:
         1f:15:0f:01:5b:f8:69:0c:e2:5a:3f:46:ac:44:38:4b:12:b4:
         ce:d1:28:cc:46:4c:b8:ef:17:a9:fc:8a:d2:e1:df:07:a2:3c:
         74:f3:a9:37:e1:7c:01:0a:80:f0:04:21:b7:ee:1f:48:92:2c:
         a0:aa:4c:12:6d:d2:e7:48:59:ac:c7:cc:75:5b:13:3b:bc:17:
         c7:d6:00:e6:66:8d:05:4f:9f:71:85:9f:19:f2:29:ae:b0:68:
         ad:01:7f:9c:91:27:b6:ee:fc:b9:20:03:b1:91:17:fb:cd:79:
         c9:bd:eb:b0:cb:08:29:8a:04:65:f3:2d:2f:c3:42:47:58:d9:
         ae:2b:02:ba:dd:46:e3:1e:a3:4d:c3:5d:9a:13:3a:ca:39:10:
         1f:7f:2b:92:39:00:cc:25:fd:ba:fb:55:81:b1:e8:67:c6:96:
         4b:3e:8f:b7:ba:7b:02:7c:02:53:0c:ca:63:4b:7d:7c:d0:3e:
         b2:0b:a0:6e:5b:90:44:be:15:1c:d5:12:6a:86:b8:82:1c:34:
         0b:5f:9c:bb:a0:c4:49:b7:b6:43:79:bc:af:8e:01:0e:09:f3:
         f3:64:e5:86:10:44:73:83:da:1e:19:38:f9:d9:2f:fc:c3:0e:
         62:cf:b5:ae
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUeoAjl1ymnpnP+W1l+J6E7UdwP40wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQ0NDQxQ0M4QkUzNjFDODBCMkI3OUUyRUI3ODQwNkU1
NkU1MzZBRDAeFw0yNDA0MDQyMjMyMzNaFw0yNTA0MDMyMjM3MzNaMDMxMTAvBgNV
BAMTKDdGMUUyQUIyNjFEQjFCQUQ0N0Q5N0YyOEMyMDI5NTRERTkyNUQzQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+wWGA2ty/5WZt0X7ESngSoaP5
CukRnI0upySBP9pbKX0aqtEzy5Lz/926IQfYRgyPZ5LZt1/dCyq6AM0nvQnxR7eK
YLbIy/KOEwiuZMLoX8XXvGQFFfeaUf5Siml0neg+DTvqx/P+/8tI2M2weqjkKt86
Ixn10wFEVoXh/nDd8pGYB9XbuRNHgUp7ZcAvLf+epw7BAP0S1bL5KUE1iHqMISof
mZEkLG91NCycSYvdEj0qawgK2SJXcbydwnZTUuKbLy2QUn5k111px5YZZ+lWGObf
KDTtWAEGaH+3YLJJp08+44c5p8dBiBDu1b7PMOcTyaF3jfNOEKUnqeSxP5mXAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUfx4qsmHbG61H2X8owgKVTekl08YwHwYDVR0j
BBgwFoAUtERBzIvjYcgLK3ni63hAblblNq0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUF0M29hYmVpUHZUQW42U2dUd3NRS1REcmtMMWJNaDM3dlJQb2pYOEV1
bzMvMS9CNDQ0NDFDQzhCRTM2MUM4MEIyQjc5RTJFQjc4NDA2RTU2RTUzNkFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I0NDQ0MUNDOEJFMzYxQzgw
QjJCNzlFMkVCNzg0MDZFNTZFNTM2QUQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FBdDNvYWJlaVB2VEFuNlNnVHdzUUtURHJrTDFiTWgzN3ZSUG9qWDhFdW8zLzEv
MzIzODMwMzQzYTM3MzEzODMwM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMDM3MzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEcYBAMA0GCSqGSIb3DQEBCwUA
A4IBAQA5oqVBPpK7BJeQ3T8s+o5lhPMfFQ8BW/hpDOJaP0asRDhLErTO0SjMRky4
7xep/IrS4d8Hojx086k34XwBCoDwBCG37h9IkiygqkwSbdLnSFmsx8x1WxM7vBfH
1gDmZo0FT59xhZ8Z8imusGitAX+ckSe27vy5IAOxkRf7zXnJveuwywgpigRl8y0v
w0JHWNmuKwK63UbjHqNNw12aEzrKORAffyuSOQDMJf26+1WBsehnxpZLPo+3unsC
fAJTDMpjS3180D6yC6BuW5BEvhUc1RJqhriCHDQLX5y7oMRJt7ZDebyvjgEOCfPz
ZOWGEERzg9oeGTj52S/8ww5iz7Wu
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:53:07 2024 by rpki-client on console-ams.rpki-client.org