Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a363130303a3a2f34382d3438203d3e20323730373634.roa
File:                     323830343a373131303a363130303a3a2f34382d3438203d3e20323730373634.roa (raw, json)
Hash identifier:          G0C6smahMScW8t/l5M1zTuACxD6sZpeKFQ/gg/Xs0Kc=
Subject key identifier:   DF:7E:FA:3D:72:EB:EC:34:87:55:F8:CB:35:E8:75:83:1B:2F:88:48
Certificate issuer:       /CN=677267BB5B39E407382A7BBF001BEE00278BE380
Certificate serial:       44A3573F8024C9075CB4081A27B20AF37CE360D7
Authority key identifier: 67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a363130303a3a2f34382d3438203d3e20323730373634.roa
Signing time:             Fri 31 May 2024 22:40:35 +0000
ROA not before:           Fri 31 May 2024 22:35:35 +0000
ROA not after:            Fri 30 May 2025 22:40:35 +0000
asID:                     270764
IP address blocks:        2804:7110:6100::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl
                          rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 00:27:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:a3:57:3f:80:24:c9:07:5c:b4:08:1a:27:b2:0a:f3:7c:e3:60:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677267BB5B39E407382A7BBF001BEE00278BE380
        Validity
            Not Before: May 31 22:35:35 2024 GMT
            Not After : May 30 22:40:35 2025 GMT
        Subject: CN=DF7EFA3D72EBEC348755F8CB35E875831B2F8848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:26:75:87:11:26:b4:08:5a:d6:a9:bf:eb:d2:
                    35:b1:5b:5e:b2:fc:a2:aa:05:a2:ee:8c:2a:58:de:
                    94:2f:f5:e6:e9:ec:85:1f:f1:13:c0:dc:48:e6:35:
                    3a:2d:c3:c1:07:a4:ad:33:36:da:f9:52:dc:7d:73:
                    c1:ec:1f:29:be:a9:b8:04:0e:91:f4:d0:3e:e7:1c:
                    e6:cc:16:ba:ab:38:40:c8:57:3c:0f:2d:a4:24:39:
                    d8:d2:77:88:c0:23:cc:4e:b7:95:a5:34:b8:de:78:
                    db:0e:3a:0c:16:52:a9:07:20:75:df:e3:5f:f1:87:
                    34:99:ea:07:d5:ee:99:23:57:de:f9:80:60:fc:a1:
                    be:30:5a:ec:4d:aa:1a:70:2a:aa:34:09:c9:73:35:
                    2a:8b:54:eb:cf:65:ef:c1:63:ee:42:33:5e:13:77:
                    8f:74:44:88:b9:8d:31:73:4a:3a:d3:ac:8f:fb:d5:
                    e7:15:bd:7b:5b:64:ba:0a:47:3b:52:40:2f:5d:f5:
                    7b:3f:24:16:fe:8c:81:e1:07:e7:33:df:b9:d5:04:
                    1d:57:26:44:70:a9:f9:78:0c:37:9a:c9:a5:f9:d7:
                    62:78:89:6c:4f:99:6c:ea:38:84:72:74:7b:ac:fe:
                    35:bd:1f:7a:05:23:2c:8d:50:82:11:fa:93:7a:0e:
                    9c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:7E:FA:3D:72:EB:EC:34:87:55:F8:CB:35:E8:75:83:1B:2F:88:48
            X509v3 Authority Key Identifier:
                keyid:67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a363130303a3a2f34382d3438203d3e20323730373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7110:6100::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:f8:23:f6:1e:d6:ef:a0:dc:9c:36:04:74:8f:88:fe:4c:a8:
         a8:d1:b2:9d:26:8e:b3:5a:f1:ff:9e:1e:7c:b5:65:88:a2:a2:
         7d:d5:cc:54:82:0b:ff:39:2f:5e:aa:7d:e5:e6:0a:22:af:60:
         d9:be:b2:0f:8e:66:c2:33:68:60:15:a0:41:87:1f:82:ed:1f:
         38:d5:08:b5:61:40:45:32:27:91:63:a0:43:d5:85:9b:b9:a5:
         62:2f:81:08:ee:30:b9:1c:95:aa:6d:3a:e7:f5:95:75:3a:a0:
         a8:b7:5e:9f:6e:bb:a9:9f:06:78:3a:0f:15:24:63:e2:17:41:
         c1:1f:92:a6:cf:bf:40:a9:8f:b9:53:71:1c:d8:4d:e4:f1:42:
         f8:d1:ab:b2:c3:1a:92:44:7d:3e:3f:5f:c3:04:3c:36:f4:3d:
         ea:b3:ea:0d:2b:86:c7:87:4a:e7:0b:12:00:bc:e5:7c:ba:b3:
         cb:ef:e7:d5:27:5c:b6:c7:f3:51:96:dd:5e:4b:c2:08:44:a2:
         91:65:5b:ad:bb:cb:4f:92:84:c1:ad:41:be:bd:21:8b:38:4f:
         f7:43:18:ce:f0:27:51:23:b8:96:c0:50:dd:29:04:2f:2e:71:
         c7:7c:1d:56:30:ea:80:4f:dc:d1:a7:69:f1:e1:f8:ce:fb:7d:
         1e:24:38:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:33:10 2024 by rpki-client on console-ams.rpki-client.org