Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a343030303a3a2f34382d3438203d3e20323730373634.roa
File:                     323830343a373131303a343030303a3a2f34382d3438203d3e20323730373634.roa (raw, json)
Hash identifier:          lVEEo7fDoGOGkSy3+KzPwChqBkGgmMhoctUIgIvn+H4=
Subject key identifier:   EA:8C:8C:12:EF:44:83:0F:B0:FA:47:92:D3:FA:9B:53:71:6D:46:40
Certificate issuer:       /CN=677267BB5B39E407382A7BBF001BEE00278BE380
Certificate serial:       198CA6F6655940026EBF1E8DD75BC73A6383E6B2
Authority key identifier: 67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a343030303a3a2f34382d3438203d3e20323730373634.roa
Signing time:             Fri 31 May 2024 22:40:36 +0000
ROA not before:           Fri 31 May 2024 22:35:36 +0000
ROA not after:            Fri 30 May 2025 22:40:36 +0000
asID:                     270764
IP address blocks:        2804:7110:4000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl
                          rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 01:45:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:8c:a6:f6:65:59:40:02:6e:bf:1e:8d:d7:5b:c7:3a:63:83:e6:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677267BB5B39E407382A7BBF001BEE00278BE380
        Validity
            Not Before: May 31 22:35:36 2024 GMT
            Not After : May 30 22:40:36 2025 GMT
        Subject: CN=EA8C8C12EF44830FB0FA4792D3FA9B53716D4640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b1:de:ad:2b:8d:17:79:16:50:c4:4a:32:7e:
                    6b:50:18:65:3f:be:ad:19:01:cb:31:6e:9d:a7:da:
                    6d:e6:d5:6b:96:5c:35:fa:35:70:cc:90:f1:cd:78:
                    3c:d0:bb:6d:36:9c:c9:a2:5a:33:55:76:9c:8c:90:
                    7b:30:43:8e:ff:5e:db:60:a4:c4:9d:58:57:d6:dd:
                    01:61:c0:07:2c:75:f5:3e:5e:01:36:81:35:2e:54:
                    4d:c1:8d:e7:ea:e7:29:5e:8e:0e:85:72:3f:24:3a:
                    2a:ab:59:c4:e1:ba:45:8d:e2:57:fa:07:bb:36:0b:
                    d3:d0:26:c6:a8:68:e9:38:c0:60:16:e8:58:36:aa:
                    ca:4f:e1:b4:36:cf:ec:d2:b4:ce:36:a8:cc:59:e3:
                    0a:3b:1e:71:ac:c1:81:0f:16:0b:72:6e:ab:d5:9c:
                    f7:be:e6:e6:3f:b8:42:c1:1d:28:94:4d:1f:43:42:
                    7c:84:a1:37:fd:24:f1:31:27:be:84:b4:b4:80:7a:
                    b9:cd:5a:67:4a:c9:57:bd:26:71:c1:9c:a2:81:4d:
                    97:c5:10:5d:69:01:51:15:a6:f5:60:74:71:21:d2:
                    dd:88:c3:2b:b1:3e:df:07:58:a1:01:80:de:e4:94:
                    1f:a9:dc:a8:bd:2a:21:e4:8d:40:55:bb:82:32:88:
                    7f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:8C:8C:12:EF:44:83:0F:B0:FA:47:92:D3:FA:9B:53:71:6D:46:40
            X509v3 Authority Key Identifier:
                keyid:67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a343030303a3a2f34382d3438203d3e20323730373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7110:4000::/48

    Signature Algorithm: sha256WithRSAEncryption
         44:97:be:b0:6a:71:88:b4:a3:79:ab:36:88:de:65:0e:bc:87:
         a1:98:9f:f6:02:09:42:89:d1:75:14:5d:00:32:f0:c2:b7:dc:
         6e:d8:44:ad:a2:e9:08:36:86:80:f5:6a:1e:45:96:c5:43:ac:
         f7:97:e3:11:88:92:71:28:97:48:04:ec:e4:06:42:07:80:1f:
         0c:49:9c:e0:b4:59:9e:20:5f:29:c6:d6:c2:40:9d:01:8f:a8:
         29:69:13:e7:b4:76:6e:ee:02:c7:3c:50:fc:67:e3:6f:d0:6f:
         f0:46:0c:1e:6f:56:75:29:f6:73:14:37:94:40:54:ba:ff:2c:
         2a:fc:02:51:94:cd:ed:8d:ad:80:29:5f:d9:58:97:09:a1:3d:
         e9:6f:2d:4d:89:30:a1:0f:6e:17:83:6d:97:21:e7:f6:c5:30:
         9d:df:20:46:a8:7d:a2:5f:24:d2:58:92:36:71:fc:8d:78:d5:
         26:90:e3:6b:81:52:dc:e9:9e:91:32:36:cf:e1:ad:d3:c9:93:
         5c:94:ae:c8:93:74:85:17:e7:8f:6a:d8:44:06:81:d5:8b:20:
         78:81:c6:53:bb:a7:41:a2:d1:77:68:eb:fa:1b:07:ca:b4:0c:
         24:1b:f5:98:95:e8:de:20:ee:4b:f9:08:d8:f2:97:26:7d:e9:
         47:6c:4e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 00:59:43 2024 by rpki-client on console-ams.rpki-client.org