Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/323830343a373232383a3a2f33332d3333203d3e20323730383336.roa
File:                     323830343a373232383a3a2f33332d3333203d3e20323730383336.roa (raw, json)
Hash identifier:          tXjwWLfm8MvYBdb0MF7hhG66t/rksYeN91I4NkEroO4=
Subject key identifier:   15:94:36:94:5E:ED:B4:DE:ED:FF:A0:7C:AE:EF:DF:D3:5E:10:6F:20
Certificate issuer:       /CN=67B531125B42B4898E018F1D5F2837CCA874EB8B
Certificate serial:       4BBACCEE937039E64B2467FC83939EDDB5AC3474
Authority key identifier: 67:B5:31:12:5B:42:B4:89:8E:01:8F:1D:5F:28:37:CC:A8:74:EB:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/323830343a373232383a3a2f33332d3333203d3e20323730383336.roa
Signing time:             Wed 03 Apr 2024 18:32:07 +0000
ROA not before:           Wed 03 Apr 2024 18:27:07 +0000
ROA not after:            Wed 02 Apr 2025 18:32:07 +0000
asID:                     270836
IP address blocks:        2804:7228::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.crl
                          rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 04:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ba:cc:ee:93:70:39:e6:4b:24:67:fc:83:93:9e:dd:b5:ac:34:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67B531125B42B4898E018F1D5F2837CCA874EB8B
        Validity
            Not Before: Apr  3 18:27:07 2024 GMT
            Not After : Apr  2 18:32:07 2025 GMT
        Subject: CN=159436945EEDB4DEEDFFA07CAEEFDFD35E106F20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d7:8b:c3:12:05:22:ec:db:32:59:96:df:55:
                    2f:6b:87:b5:76:f7:c9:54:9e:45:e1:78:1d:50:3d:
                    2f:45:93:95:a8:40:9a:1c:3a:2b:94:94:ea:c5:e0:
                    fa:9d:6a:34:f3:ad:b1:76:7b:6a:74:57:1c:05:28:
                    90:98:3c:6b:f7:e2:20:04:a7:0d:36:b7:12:89:40:
                    ed:c9:df:80:b4:7b:1b:69:d1:99:6b:01:82:f2:da:
                    de:9e:e2:23:0b:48:d2:60:bb:a0:5e:7f:b4:22:e9:
                    d2:d5:d6:c1:33:53:05:53:ab:d0:05:68:20:45:ab:
                    82:73:1a:ad:2a:e7:30:6b:f5:d0:fa:63:ac:58:e5:
                    61:1b:9c:1c:a5:2e:f5:67:cf:90:79:0d:5b:54:15:
                    e7:63:a2:32:1f:1a:b2:07:09:9b:e1:84:4a:af:9e:
                    a4:b5:f0:6c:21:9e:84:30:b9:84:f8:b3:2f:c0:39:
                    72:8d:6c:b6:3b:6c:d5:0a:bb:8d:5c:1d:10:51:7d:
                    df:88:bb:57:93:70:28:f4:61:fe:62:87:c0:69:0f:
                    3e:1c:76:89:6b:01:82:4a:92:2f:86:64:b8:35:03:
                    99:f5:37:e2:a5:d7:31:a6:1f:aa:4e:1f:74:bc:65:
                    6c:b1:06:55:74:ff:09:e3:b4:b4:90:2a:41:9c:ce:
                    ee:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:94:36:94:5E:ED:B4:DE:ED:FF:A0:7C:AE:EF:DF:D3:5E:10:6F:20
            X509v3 Authority Key Identifier:
                keyid:67:B5:31:12:5B:42:B4:89:8E:01:8F:1D:5F:28:37:CC:A8:74:EB:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/323830343a373232383a3a2f33332d3333203d3e20323730383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7228::/33

    Signature Algorithm: sha256WithRSAEncryption
         bf:c8:09:e7:1b:56:52:6b:fb:e2:89:02:ee:7d:44:15:62:cc:
         dc:a2:2b:11:2a:79:7a:00:bf:39:81:13:9e:0c:c2:f0:62:4e:
         e1:58:32:ab:94:21:09:2d:cc:47:7b:5b:69:5b:04:8d:9c:49:
         09:d0:7c:b3:20:86:65:d3:d8:cb:90:c7:ae:58:ec:86:6c:fc:
         9c:3b:3d:24:a8:28:47:4e:ad:50:c2:30:f4:14:83:ab:26:02:
         76:bc:e4:2c:d8:60:33:4f:26:84:8e:8b:cc:df:d2:41:eb:6a:
         54:eb:95:dd:5a:21:86:c3:96:0e:69:7c:a4:b2:7c:cc:72:15:
         f9:8c:fa:8e:9f:89:dd:05:79:4b:49:c5:54:18:62:70:ad:55:
         91:20:b8:86:d4:9d:11:a7:2e:89:44:8e:92:4e:3c:22:2b:0d:
         a0:54:b3:4c:1b:39:38:90:26:e3:b0:7e:76:e8:2f:b5:c9:e4:
         6f:6e:e2:37:75:20:08:b4:6d:9e:6f:23:bf:7d:6f:c2:90:5b:
         a3:ca:c6:21:d5:80:38:cd:5f:d4:44:f6:6a:7e:04:c0:1e:bf:
         6b:29:5c:18:ac:fc:30:da:f7:7a:a6:65:bb:5c:fa:91:b5:43:
         f8:05:c4:e6:51:42:90:17:b8:7a:a1:a8:5f:5e:1f:b0:db:2d:
         5b:ae:08:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:16 2024 by rpki-client on console-ams.rpki-client.org