Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a343930303a3a2f34382d3438203d3e20323730373634.roa
File:                     323830343a373131303a343930303a3a2f34382d3438203d3e20323730373634.roa (raw, json)
Hash identifier:          Wsq9ZIG/sx7vy9BWDnu1HAWxFbxbU1FVReC5wUi3DDM=
Subject key identifier:   D0:57:72:C7:47:08:80:A7:65:E9:BC:05:A7:93:44:09:07:C2:DF:33
Certificate issuer:       /CN=677267BB5B39E407382A7BBF001BEE00278BE380
Certificate serial:       13E859902394704A316CC3FCBC6A4F631EE87C68
Authority key identifier: 67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a343930303a3a2f34382d3438203d3e20323730373634.roa
Signing time:             Fri 31 May 2024 22:40:35 +0000
ROA not before:           Fri 31 May 2024 22:35:35 +0000
ROA not after:            Fri 30 May 2025 22:40:35 +0000
asID:                     270764
IP address blocks:        2804:7110:4900::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl
                          rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 23:34:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:e8:59:90:23:94:70:4a:31:6c:c3:fc:bc:6a:4f:63:1e:e8:7c:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677267BB5B39E407382A7BBF001BEE00278BE380
        Validity
            Not Before: May 31 22:35:35 2024 GMT
            Not After : May 30 22:40:35 2025 GMT
        Subject: CN=D05772C7470880A765E9BC05A793440907C2DF33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:08:c8:80:f1:ac:a9:d8:54:10:24:42:c1:75:
                    53:2c:24:5c:65:b7:05:1d:f3:bd:1d:4c:6c:e1:b5:
                    1b:7c:fb:4b:01:ce:b1:f1:72:09:04:e7:79:8e:b7:
                    fc:73:8b:12:f1:9f:c2:3c:ca:31:53:17:b9:f6:bd:
                    ca:02:45:f9:1c:e2:4b:3e:14:23:ee:c3:c0:cf:3c:
                    6b:00:c3:6f:e2:28:d9:46:77:06:5c:e7:4e:7f:f9:
                    c3:29:fa:fc:e3:6f:b4:8f:b2:3d:31:84:1c:d7:f7:
                    f2:e4:f2:e1:4d:06:be:84:f8:eb:62:4b:d4:97:45:
                    80:02:c3:49:ea:1a:e1:3c:ce:2b:40:03:7a:32:71:
                    1f:07:83:e2:fd:a1:7d:1f:43:c0:6a:db:29:0d:7f:
                    76:50:c6:49:7f:e9:d0:99:4a:08:ff:6a:43:f2:b3:
                    21:c2:db:83:7e:7d:19:5e:c5:b0:c0:8a:8d:aa:ab:
                    bd:f5:36:ad:47:3f:7f:98:32:b5:99:6b:f8:79:be:
                    a5:20:5b:13:de:e3:17:ad:c7:3c:d5:bf:18:3a:9f:
                    81:f5:ef:76:18:a5:15:1d:83:44:a4:ed:7d:2c:46:
                    c4:57:90:4a:8d:aa:86:17:d9:fe:01:bd:13:b6:23:
                    21:46:b3:31:7f:40:06:c8:9e:57:0e:b7:91:a7:1d:
                    43:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:57:72:C7:47:08:80:A7:65:E9:BC:05:A7:93:44:09:07:C2:DF:33
            X509v3 Authority Key Identifier:
                keyid:67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a343930303a3a2f34382d3438203d3e20323730373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7110:4900::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:c4:55:b1:a5:f5:7a:2d:7a:04:1d:92:da:39:74:c3:66:55:
         e3:c7:28:59:e4:bd:f4:84:80:98:70:1d:ce:91:83:88:8e:c9:
         7a:51:25:de:cd:17:85:f6:6a:df:a0:f8:6d:64:99:fd:81:45:
         69:e6:e6:79:80:e2:f6:bb:39:28:20:dc:3d:59:b0:e9:3b:41:
         2e:69:7b:d1:2f:1e:65:90:bd:ce:d3:17:71:84:0d:db:da:c7:
         28:4e:50:92:34:b5:31:d0:b8:32:2d:eb:2f:79:16:f0:d5:c2:
         b0:5d:3f:a8:82:80:4d:9c:ad:8d:b5:8f:5b:73:3f:11:78:07:
         e1:50:79:48:24:d5:0f:89:8f:a2:d8:fd:77:60:6a:d3:27:36:
         bf:cf:0d:eb:58:76:99:6f:06:86:69:ed:1a:50:cc:78:3d:34:
         f8:d8:1a:8c:85:e3:cd:08:e9:34:66:e3:fa:46:55:58:9a:5e:
         f7:b2:11:e7:57:80:74:8f:08:89:3e:78:f6:dd:0e:b9:1a:bc:
         6f:eb:87:b1:fc:bb:ec:4c:fe:fe:5a:3c:54:b3:bc:43:38:2e:
         71:74:e7:fa:d0:3c:54:cf:b5:2c:20:ef:15:f6:b0:11:d3:96:
         8b:14:5d:15:99:77:8e:b3:12:3a:47:aa:77:ee:a1:4e:fb:45:
         d2:9d:73:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:14 2024 by rpki-client on console-fra.rpki-client.org