Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a363030303a3a2f34382d3438203d3e20323730373634.roa
File:                     323830343a373131303a363030303a3a2f34382d3438203d3e20323730373634.roa (raw, json)
Hash identifier:          4sZfZFa5Uz0RfJhNivSB7qwEBAnzonoe7R4o7Y+4ioM=
Subject key identifier:   9F:99:FA:5E:06:F8:4C:44:33:77:20:B9:AC:EB:59:B4:52:44:BA:D1
Certificate issuer:       /CN=677267BB5B39E407382A7BBF001BEE00278BE380
Certificate serial:       5CCB760A982FD24A742A9E0275D5B57CCD9C1D60
Authority key identifier: 67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a363030303a3a2f34382d3438203d3e20323730373634.roa
Signing time:             Fri 31 May 2024 22:40:34 +0000
ROA not before:           Fri 31 May 2024 22:35:34 +0000
ROA not after:            Fri 30 May 2025 22:40:34 +0000
asID:                     270764
IP address blocks:        2804:7110:6000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl
                          rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 23:34:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:cb:76:0a:98:2f:d2:4a:74:2a:9e:02:75:d5:b5:7c:cd:9c:1d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677267BB5B39E407382A7BBF001BEE00278BE380
        Validity
            Not Before: May 31 22:35:34 2024 GMT
            Not After : May 30 22:40:34 2025 GMT
        Subject: CN=9F99FA5E06F84C44337720B9ACEB59B45244BAD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:93:99:74:32:4e:65:99:eb:01:85:ad:a7:e0:
                    82:39:ac:c5:3a:ac:63:4e:f5:a9:83:7d:61:de:55:
                    57:b2:8f:1c:5c:e4:71:bb:0c:56:37:56:42:34:03:
                    fc:7b:a2:05:06:3e:28:c9:6f:e3:98:ed:af:5c:89:
                    2c:7a:f6:5c:32:8c:f6:1f:cb:50:36:8d:c1:27:57:
                    8b:b7:d1:d9:34:9d:c4:5f:9f:f9:b0:6a:7d:9a:aa:
                    67:18:ce:2f:65:84:6f:21:6d:b3:cc:f6:55:5a:82:
                    a4:bf:05:7f:5c:37:f8:da:97:83:42:ba:b1:62:0f:
                    b7:73:3e:68:94:9d:52:f2:6c:4a:8d:5f:1f:a1:d6:
                    aa:7c:05:81:4b:a7:f1:e5:18:a3:87:79:8e:6b:c0:
                    79:89:37:2f:eb:7f:87:ae:15:72:82:80:1b:02:55:
                    e0:59:af:24:bd:41:37:12:7b:19:62:50:0f:aa:05:
                    44:3b:99:bc:71:43:5a:3c:45:84:17:f8:09:8f:2f:
                    00:e7:3c:c8:db:e7:46:ed:35:c9:ee:8d:90:50:5b:
                    9c:df:18:85:9e:8e:aa:0a:ea:c7:19:dc:d0:35:a2:
                    b5:75:1e:17:a6:a7:77:ad:db:2e:ee:62:48:3e:e0:
                    ef:02:d6:b3:b2:a2:a6:65:61:48:9e:ea:e5:b4:e1:
                    02:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:99:FA:5E:06:F8:4C:44:33:77:20:B9:AC:EB:59:B4:52:44:BA:D1
            X509v3 Authority Key Identifier:
                keyid:67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a363030303a3a2f34382d3438203d3e20323730373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7110:6000::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:d4:db:cf:cb:e1:cf:0d:ee:67:0c:3b:9b:dc:e9:60:08:a9:
         85:45:73:73:b5:65:60:98:e7:c1:3f:06:76:02:97:ff:a8:83:
         f8:69:55:cc:f0:48:15:23:94:b6:b7:52:98:a3:cd:49:7b:b4:
         20:02:0d:ee:f9:1d:60:52:b8:af:df:cd:c6:2c:bb:90:2c:e4:
         c4:e3:2d:cc:6f:50:d4:e4:bd:00:58:7d:91:8b:d5:3e:c2:87:
         82:8b:8d:50:5e:43:61:f0:4a:10:60:44:f4:c9:af:0c:1f:13:
         6e:66:02:f8:a9:95:e8:22:e1:b7:f1:94:39:63:a0:58:2f:ff:
         0f:0f:da:83:3b:6a:7d:ff:78:88:91:2a:5c:0c:cc:6e:da:18:
         0a:67:b3:79:eb:dc:26:ad:f2:0e:a4:e3:fb:72:12:1e:d4:80:
         dc:68:f5:71:d2:2f:77:b3:a4:3e:5c:d3:e2:d1:d4:16:46:1d:
         b1:b5:bf:5d:1f:4d:cd:28:b0:b5:eb:3c:a7:d0:dd:96:4d:28:
         2a:c4:10:d3:99:5a:40:3b:a2:d6:9d:a2:de:97:41:94:92:b1:
         88:e7:b4:01:9f:65:f6:02:cb:25:f1:6d:80:ea:a2:8f:31:35:
         5f:b3:d7:38:10:6d:59:f5:e4:ae:b4:3a:f3:0f:db:99:f2:14:
         1e:2b:36:a3
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUXMt2Cpgv0kp0Kp4CddW1fM2cHWAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjc3MjY3QkI1QjM5RTQwNzM4MkE3QkJGMDAxQkVFMDAy
NzhCRTM4MDAeFw0yNDA1MzEyMjM1MzRaFw0yNTA1MzAyMjQwMzRaMDMxMTAvBgNV
BAMTKDlGOTlGQTVFMDZGODRDNDQzMzc3MjBCOUFDRUI1OUI0NTI0NEJBRDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzk5l0Mk5lmesBha2n4II5rMU6
rGNO9amDfWHeVVeyjxxc5HG7DFY3VkI0A/x7ogUGPijJb+OY7a9ciSx69lwyjPYf
y1A2jcEnV4u30dk0ncRfn/mwan2aqmcYzi9lhG8hbbPM9lVagqS/BX9cN/jal4NC
urFiD7dzPmiUnVLybEqNXx+h1qp8BYFLp/HlGKOHeY5rwHmJNy/rf4euFXKCgBsC
VeBZryS9QTcSexliUA+qBUQ7mbxxQ1o8RYQX+AmPLwDnPMjb50btNcnujZBQW5zf
GIWejqoK6scZ3NA1orV1Hhemp3et2y7uYkg+4O8C1rOyoqZlYUie6uW04QLHAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUn5n6Xgb4TEQzdyC5rOtZtFJEutEwHwYDVR0j
BBgwFoAUZ3Jnu1s55Ac4Knu/ABvuACeL44AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjMzM3hYTW1tMW85Nmo5anQ0ZUhja0tyU0FTRlJVREh5S1gyRFQ5eTli
amkvMC82NzcyNjdCQjVCMzlFNDA3MzgyQTdCQkYwMDFCRUUwMDI3OEJFMzgwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY3NzI2N0JCNUIzOUU0MDcz
ODJBN0JCRjAwMUJFRTAwMjc4QkUzODAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0IzMzN4WE1tbTFvOTZqOWp0NGVIY2tLclNBU0ZSVURIeUtYMkRUOXk5YmppLzAv
MzIzODMwMzQzYTM3MzEzMTMwM2EzNjMwMzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzczMDM3MzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEcRBgADANBgkqhkiG9w0BAQsF
AAOCAQEAhNTbz8vhzw3uZww7m9zpYAiphUVzc7VlYJjnwT8GdgKX/6iD+GlVzPBI
FSOUtrdSmKPNSXu0IAIN7vkdYFK4r9/Nxiy7kCzkxOMtzG9Q1OS9AFh9kYvVPsKH
gouNUF5DYfBKEGBE9MmvDB8TbmYC+KmV6CLht/GUOWOgWC//Dw/agztqff94iJEq
XAzMbtoYCmezeevcJq3yDqTj+3ISHtSA3Gj1cdIvd7OkPlzT4tHUFkYdsbW/XR9N
zSiwtes8p9Ddlk0oKsQQ05laQDui1p2i3pdBlJKxiOe0AZ9l9gLLJfFtgOqijzE1
X7PXOBBtWfXkrrQ68w/bmfIUHis2ow==
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:14 2024 by rpki-client on console-fra.rpki-client.org