Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a333030303a3a2f34382d3438203d3e20323730373634.roa
File:                     323830343a373131303a333030303a3a2f34382d3438203d3e20323730373634.roa (raw, json)
Hash identifier:          cC/HUnePB3G2AI5Ephr+Udi16R+Adcg7b4eVdHJI4wc=
Subject key identifier:   DC:3E:EE:16:CA:98:5C:0A:C7:33:0B:3A:E0:70:BF:0C:DC:59:85:CE
Certificate issuer:       /CN=677267BB5B39E407382A7BBF001BEE00278BE380
Certificate serial:       17D295A7D1EF8A21EF2F25FFA8A3EAC0E344CD0B
Authority key identifier: 67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a333030303a3a2f34382d3438203d3e20323730373634.roa
Signing time:             Fri 31 May 2024 22:40:35 +0000
ROA not before:           Fri 31 May 2024 22:35:35 +0000
ROA not after:            Fri 30 May 2025 22:40:35 +0000
asID:                     270764
IP address blocks:        2804:7110:3000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl
                          rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 00:27:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:d2:95:a7:d1:ef:8a:21:ef:2f:25:ff:a8:a3:ea:c0:e3:44:cd:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677267BB5B39E407382A7BBF001BEE00278BE380
        Validity
            Not Before: May 31 22:35:35 2024 GMT
            Not After : May 30 22:40:35 2025 GMT
        Subject: CN=DC3EEE16CA985C0AC7330B3AE070BF0CDC5985CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a0:45:6d:a4:28:dc:34:d7:ce:f9:d7:bd:e7:
                    05:7e:a0:87:dc:64:97:52:bf:b2:e7:54:63:51:09:
                    d0:13:e7:a2:cc:ec:9e:5d:61:d7:61:1e:0f:aa:95:
                    74:9a:4d:7e:18:fa:19:cc:f0:f4:d9:59:cb:b9:b8:
                    57:91:44:67:b5:9c:be:bf:b8:76:c9:d4:cd:57:3f:
                    a8:ef:cf:63:fa:7b:96:51:d0:c7:45:54:31:8b:1a:
                    53:2a:e9:b5:3f:5e:86:1c:22:16:f1:70:0c:e7:fc:
                    fc:4c:f6:8d:d3:f6:bf:10:bb:8a:53:d5:cb:9e:56:
                    ef:6e:21:c5:b2:74:79:00:82:43:52:5c:cc:b8:2d:
                    5c:a7:b0:04:be:10:a4:67:45:87:f5:eb:db:0b:8f:
                    6b:28:4e:da:e7:08:3d:8b:99:f5:36:25:3e:3f:f0:
                    47:9b:8a:8c:03:8b:f8:e6:77:12:4c:3e:3e:91:a6:
                    96:75:c6:d5:72:af:44:c4:be:58:78:f9:25:e0:ab:
                    71:a1:f4:66:18:3e:52:dd:fb:a4:5b:62:3e:38:3d:
                    9e:08:ac:6f:2c:c2:8a:ab:eb:56:51:cd:c6:1f:1c:
                    4f:d4:02:d9:62:ac:90:b5:82:ee:98:73:5a:74:f2:
                    59:20:72:17:85:28:ba:d1:85:95:c8:a9:6a:cb:74:
                    8f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:3E:EE:16:CA:98:5C:0A:C7:33:0B:3A:E0:70:BF:0C:DC:59:85:CE
            X509v3 Authority Key Identifier:
                keyid:67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a333030303a3a2f34382d3438203d3e20323730373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7110:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         cb:32:7f:89:a8:9b:60:fb:fc:9b:8e:5a:8f:42:9e:80:ef:e1:
         93:92:cc:6e:8b:32:55:62:dd:14:d3:e6:5c:97:97:58:38:9d:
         32:fc:eb:40:f5:46:6d:93:4d:99:3b:67:1f:9b:2f:58:d7:83:
         55:7b:08:89:69:4f:1f:20:f5:c2:65:cc:ac:2a:1f:c7:dc:d8:
         c4:ae:6b:f4:2f:a7:e6:8d:16:5b:94:ad:82:b7:a0:a1:be:2d:
         8d:f5:2d:d5:91:c3:26:4c:41:fb:9b:66:09:a6:4e:6c:4f:af:
         3d:f7:46:ea:01:cb:20:2c:4a:54:0d:53:60:b0:0e:23:ba:86:
         f0:48:df:01:c9:59:3f:d9:16:36:70:0b:5f:c2:6a:00:b7:1b:
         04:8f:93:32:b6:b9:1d:59:e8:83:5b:8c:ba:95:72:7b:a0:1c:
         99:b1:02:53:3d:cd:21:bf:4e:78:4c:6f:81:91:3c:14:23:64:
         b6:d0:e1:d1:b2:0f:2d:4c:3b:c8:0b:f0:4d:6d:bb:79:c8:42:
         36:91:15:34:49:a2:0d:c1:51:73:17:a8:7c:21:32:d4:1e:02:
         d7:67:75:a2:68:e2:9d:59:3a:12:31:c3:85:6b:b5:40:4d:b6:
         04:99:41:6d:bd:e7:6c:b4:f5:1b:59:39:74:39:63:be:ba:be:
         a1:30:81:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:33:10 2024 by rpki-client on console-ams.rpki-client.org