Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a353030303a3a2f34382d3438203d3e20323730373634.roa
File:                     323830343a373131303a353030303a3a2f34382d3438203d3e20323730373634.roa (raw, json)
Hash identifier:          octng+k+YkefOXBVWbCdkR91gflixpJfi9Af7cKAYSU=
Subject key identifier:   4A:5A:49:66:02:A7:B7:78:9C:22:49:67:90:EB:6B:A9:86:52:E0:FA
Certificate issuer:       /CN=677267BB5B39E407382A7BBF001BEE00278BE380
Certificate serial:       446D91A73A66BC35DCD300FDEC070CB23C7AA718
Authority key identifier: 67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a353030303a3a2f34382d3438203d3e20323730373634.roa
Signing time:             Fri 31 May 2024 22:40:36 +0000
ROA not before:           Fri 31 May 2024 22:35:36 +0000
ROA not after:            Fri 30 May 2025 22:40:36 +0000
asID:                     270764
IP address blocks:        2804:7110:5000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl
                          rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 00:27:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:6d:91:a7:3a:66:bc:35:dc:d3:00:fd:ec:07:0c:b2:3c:7a:a7:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677267BB5B39E407382A7BBF001BEE00278BE380
        Validity
            Not Before: May 31 22:35:36 2024 GMT
            Not After : May 30 22:40:36 2025 GMT
        Subject: CN=4A5A496602A7B7789C22496790EB6BA98652E0FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:0a:ed:72:f3:e5:77:6e:86:63:52:27:f7:a0:
                    6d:b1:57:f3:ff:bd:0b:78:79:e3:af:93:c5:b4:22:
                    ca:18:5e:01:75:39:74:09:60:55:43:2e:44:e3:32:
                    18:57:d2:77:9e:fd:45:05:72:15:cf:74:f6:0f:1a:
                    36:ff:2a:13:44:a0:2c:b4:c6:fd:e3:20:97:5e:7a:
                    82:9a:d5:08:32:ac:0a:26:0e:13:3f:c8:d8:cc:e1:
                    ca:2e:1f:3e:23:9b:a8:6a:5e:62:5b:b2:9e:63:4d:
                    14:48:e2:5b:5e:02:ef:76:d4:12:b4:36:ea:0f:db:
                    70:47:2f:7b:31:0b:dc:79:44:c2:71:1c:61:ed:ba:
                    d6:a6:08:e8:6d:da:1c:6e:1f:13:f2:72:c0:84:9d:
                    83:a5:6d:b6:a2:15:19:dd:bb:49:e4:a0:59:de:82:
                    af:2b:75:2a:59:ad:95:8d:d9:1c:85:fa:2b:cd:53:
                    f4:30:b5:15:93:f0:e6:8e:c1:4a:ad:53:ff:9f:8b:
                    78:5f:c3:a9:3c:c6:07:c6:ad:6a:7b:95:b1:a8:bf:
                    3d:32:6d:51:2f:f5:60:65:f1:5f:9f:d4:ea:2d:9b:
                    c7:b6:08:d9:4d:6e:2f:b1:99:3a:93:2e:5b:36:1f:
                    5a:83:f2:a4:72:e8:6b:e7:b9:2a:d6:8d:85:4a:de:
                    33:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:5A:49:66:02:A7:B7:78:9C:22:49:67:90:EB:6B:A9:86:52:E0:FA
            X509v3 Authority Key Identifier:
                keyid:67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a353030303a3a2f34382d3438203d3e20323730373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7110:5000::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:ce:e7:0d:62:e1:8f:16:3e:d7:ed:b5:e4:67:21:98:1f:53:
         aa:46:e0:55:b9:dd:33:2a:93:05:14:27:d7:58:af:37:8b:07:
         26:bc:84:57:3d:c5:b5:55:1e:7f:c5:23:32:fe:21:a9:e1:e4:
         b1:81:17:c1:76:99:a7:c5:0b:b2:10:ea:3a:e9:7a:64:57:d2:
         38:04:22:a8:80:93:ec:3c:c7:01:3b:00:5d:2b:12:60:12:44:
         67:d7:5e:d9:8a:57:6c:28:12:c0:d0:1e:1d:a2:b3:7f:26:8d:
         9e:97:43:32:1f:f2:38:92:ea:8d:33:9d:84:75:d2:4e:29:f3:
         b0:e8:82:58:11:7c:d5:bd:cd:f1:1c:07:32:20:d5:bc:66:00:
         87:93:ea:f5:0f:be:7d:f3:36:08:d4:6c:92:c0:92:b7:db:50:
         8f:dc:1e:18:6d:de:c4:82:f7:f9:64:65:68:a1:9c:28:7f:71:
         b5:b8:e6:bb:b7:db:b5:fa:21:17:dd:65:d6:45:0f:ca:22:70:
         89:de:c1:d0:59:b6:3b:03:c0:bf:29:b0:c4:04:54:cb:03:bd:
         02:ba:ac:d6:92:40:23:cd:96:b3:b3:31:93:cf:7b:54:22:97:
         4c:f9:48:c0:fb:9b:c7:8d:22:c2:9e:c4:60:aa:ec:dc:78:00:
         0b:b3:e0:01
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIURG2RpzpmvDXc0wD97AcMsjx6pxgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjc3MjY3QkI1QjM5RTQwNzM4MkE3QkJGMDAxQkVFMDAy
NzhCRTM4MDAeFw0yNDA1MzEyMjM1MzZaFw0yNTA1MzAyMjQwMzZaMDMxMTAvBgNV
BAMTKDRBNUE0OTY2MDJBN0I3Nzg5QzIyNDk2NzkwRUI2QkE5ODY1MkUwRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqCu1y8+V3boZjUif3oG2xV/P/
vQt4eeOvk8W0IsoYXgF1OXQJYFVDLkTjMhhX0nee/UUFchXPdPYPGjb/KhNEoCy0
xv3jIJdeeoKa1QgyrAomDhM/yNjM4couHz4jm6hqXmJbsp5jTRRI4lteAu921BK0
NuoP23BHL3sxC9x5RMJxHGHtutamCOht2hxuHxPycsCEnYOlbbaiFRndu0nkoFne
gq8rdSpZrZWN2RyF+ivNU/QwtRWT8OaOwUqtU/+fi3hfw6k8xgfGrWp7lbGovz0y
bVEv9WBl8V+f1Ootm8e2CNlNbi+xmTqTLls2H1qD8qRy6GvnuSrWjYVK3jO/AgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUSlpJZgKnt3icIklnkOtrqYZS4PowHwYDVR0j
BBgwFoAUZ3Jnu1s55Ac4Knu/ABvuACeL44AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjMzM3hYTW1tMW85Nmo5anQ0ZUhja0tyU0FTRlJVREh5S1gyRFQ5eTli
amkvMC82NzcyNjdCQjVCMzlFNDA3MzgyQTdCQkYwMDFCRUUwMDI3OEJFMzgwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY3NzI2N0JCNUIzOUU0MDcz
ODJBN0JCRjAwMUJFRTAwMjc4QkUzODAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0IzMzN4WE1tbTFvOTZqOWp0NGVIY2tLclNBU0ZSVURIeUtYMkRUOXk5YmppLzAv
MzIzODMwMzQzYTM3MzEzMTMwM2EzNTMwMzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzczMDM3MzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEcRBQADANBgkqhkiG9w0BAQsF
AAOCAQEAOs7nDWLhjxY+1+215GchmB9TqkbgVbndMyqTBRQn11ivN4sHJryEVz3F
tVUef8UjMv4hqeHksYEXwXaZp8ULshDqOul6ZFfSOAQiqICT7DzHATsAXSsSYBJE
Z9de2YpXbCgSwNAeHaKzfyaNnpdDMh/yOJLqjTOdhHXSTinzsOiCWBF81b3N8RwH
MiDVvGYAh5Pq9Q++ffM2CNRsksCSt9tQj9weGG3exIL3+WRlaKGcKH9xtbjmu7fb
tfohF91l1kUPyiJwid7B0Fm2OwPAvymwxARUywO9Arqs1pJAI82Ws7Mxk897VCKX
TPlIwPubx40iwp7EYKrs3HgAC7PgAQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:33:10 2024 by rpki-client on console-ams.rpki-client.org