Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C5dtmGrGuHeSd3Doj2nctxHPfNarwTqDRjgX8E5Zozra/1/323830343a366133343a383030303a3a2f33332d3333203d3e20323730333139.roa
File:                     323830343a366133343a383030303a3a2f33332d3333203d3e20323730333139.roa (raw, json)
Hash identifier:          eu+vzwdTk9aoTnKqPdOgyugdFpqrXIg788SH9ve800E=
Subject key identifier:   1B:AA:63:0C:90:56:AC:49:56:75:13:84:14:C3:52:DF:CA:CC:41:A1
Certificate issuer:       /CN=478BC91388C024F294F7E5E2E54CFF21D18A626D
Certificate serial:       0EE608D830EA23D584719BE6410192008A786B6A
Authority key identifier: 47:8B:C9:13:88:C0:24:F2:94:F7:E5:E2:E5:4C:FF:21:D1:8A:62:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/478BC91388C024F294F7E5E2E54CFF21D18A626D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5dtmGrGuHeSd3Doj2nctxHPfNarwTqDRjgX8E5Zozra/1/323830343a366133343a383030303a3a2f33332d3333203d3e20323730333139.roa
Signing time:             Wed 03 Apr 2024 20:38:49 +0000
ROA not before:           Wed 03 Apr 2024 20:33:49 +0000
ROA not after:            Wed 02 Apr 2025 20:38:49 +0000
asID:                     270319
IP address blocks:        2804:6a34:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C5dtmGrGuHeSd3Doj2nctxHPfNarwTqDRjgX8E5Zozra/1/478BC91388C024F294F7E5E2E54CFF21D18A626D.crl
                          rsync://rpki-repo.registro.br/repo/C5dtmGrGuHeSd3Doj2nctxHPfNarwTqDRjgX8E5Zozra/1/478BC91388C024F294F7E5E2E54CFF21D18A626D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/478BC91388C024F294F7E5E2E54CFF21D18A626D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:32:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:e6:08:d8:30:ea:23:d5:84:71:9b:e6:41:01:92:00:8a:78:6b:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=478BC91388C024F294F7E5E2E54CFF21D18A626D
        Validity
            Not Before: Apr  3 20:33:49 2024 GMT
            Not After : Apr  2 20:38:49 2025 GMT
        Subject: CN=1BAA630C9056AC495675138414C352DFCACC41A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2b:74:06:d7:21:82:82:26:07:f9:44:8b:43:
                    c3:d9:cf:97:cc:9a:9b:14:05:7d:68:59:c5:ff:29:
                    b9:29:42:e5:50:65:21:5e:11:91:ee:c9:b3:eb:bb:
                    4f:ab:53:a1:b8:a0:9d:8b:ec:e0:ae:47:55:e4:cc:
                    32:f0:6c:33:3a:8f:b3:db:52:14:ed:d7:23:16:7f:
                    5a:ee:4f:86:cc:8c:87:b5:90:b9:95:d6:51:e3:7e:
                    36:71:df:64:c9:a5:ea:30:5c:cf:bd:3d:eb:ef:3e:
                    52:48:9f:18:aa:52:21:21:25:da:c7:67:32:38:59:
                    60:fd:00:59:f3:16:7f:0d:04:ea:cc:10:ae:5e:bb:
                    e1:a9:6c:37:c7:fc:88:33:26:37:6f:4b:3c:42:1d:
                    46:b5:ca:95:f6:43:4a:c2:7e:96:b4:0e:7d:88:39:
                    6f:50:82:97:b1:97:d6:f1:34:09:93:7e:b9:02:85:
                    c6:22:da:d4:82:63:f8:b9:fc:19:b7:37:96:50:e7:
                    b4:f6:c8:39:aa:58:6c:72:8e:e3:91:8a:2e:1b:53:
                    1d:66:6e:3d:22:cf:03:37:2e:f8:47:03:b1:5c:fa:
                    e6:b2:b5:db:11:6e:1d:70:5b:02:37:41:7c:bc:b1:
                    3f:ba:6b:73:1f:a8:56:04:1c:29:d4:55:c1:2c:47:
                    b0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:AA:63:0C:90:56:AC:49:56:75:13:84:14:C3:52:DF:CA:CC:41:A1
            X509v3 Authority Key Identifier:
                keyid:47:8B:C9:13:88:C0:24:F2:94:F7:E5:E2:E5:4C:FF:21:D1:8A:62:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5dtmGrGuHeSd3Doj2nctxHPfNarwTqDRjgX8E5Zozra/1/478BC91388C024F294F7E5E2E54CFF21D18A626D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/478BC91388C024F294F7E5E2E54CFF21D18A626D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5dtmGrGuHeSd3Doj2nctxHPfNarwTqDRjgX8E5Zozra/1/323830343a366133343a383030303a3a2f33332d3333203d3e20323730333139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a34:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         5f:03:49:1d:2e:a0:d6:0c:ae:65:3a:e4:65:4d:d9:08:cd:41:
         c2:5c:97:cc:bb:95:4b:71:a7:96:c0:5c:59:f8:4a:d4:b2:7b:
         1b:a7:de:0b:f2:44:b8:06:36:7c:cd:ce:98:a2:ce:48:58:8a:
         b5:30:d2:fd:36:16:16:ca:1a:3e:41:cd:6b:db:3e:9c:64:82:
         3e:8e:b1:d9:99:5b:bc:0b:8d:31:d6:e5:fe:ad:4a:5f:22:63:
         fa:55:31:d6:f5:25:9c:6b:81:73:bd:73:e2:ea:eb:9f:2c:a3:
         1d:70:d2:90:dc:d6:fe:4c:1b:01:35:cc:85:fb:b5:74:52:32:
         9b:4f:29:18:b9:2a:6b:ec:73:ec:35:1d:1a:bf:7b:e9:9f:7f:
         56:80:39:9e:f7:04:06:65:5d:5a:58:78:b9:f0:50:62:33:58:
         4b:00:60:97:9a:29:6b:67:52:b6:c2:e7:36:b5:88:3e:b1:60:
         35:2e:ef:ae:4d:8d:a4:95:03:90:a9:96:9d:8e:53:81:1c:3f:
         10:23:2b:90:ce:28:ac:87:80:af:a8:4f:fe:9f:1c:53:a7:db:
         92:85:00:30:b0:47:64:e1:b2:93:6c:8c:25:00:86:92:03:d3:
         a4:f0:bd:63:8a:c6:8b:f7:21:8c:26:08:f2:5c:eb:e0:50:fe:
         9c:6c:84:03
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUDuYI2DDqI9WEcZvmQQGSAIp4a2owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDc4QkM5MTM4OEMwMjRGMjk0RjdFNUUyRTU0Q0ZGMjFE
MThBNjI2RDAeFw0yNDA0MDMyMDMzNDlaFw0yNTA0MDIyMDM4NDlaMDMxMTAvBgNV
BAMTKDFCQUE2MzBDOTA1NkFDNDk1Njc1MTM4NDE0QzM1MkRGQ0FDQzQxQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNK3QG1yGCgiYH+USLQ8PZz5fM
mpsUBX1oWcX/KbkpQuVQZSFeEZHuybPru0+rU6G4oJ2L7OCuR1XkzDLwbDM6j7Pb
UhTt1yMWf1ruT4bMjIe1kLmV1lHjfjZx32TJpeowXM+9PevvPlJInxiqUiEhJdrH
ZzI4WWD9AFnzFn8NBOrMEK5eu+GpbDfH/IgzJjdvSzxCHUa1ypX2Q0rCfpa0Dn2I
OW9Qgpexl9bxNAmTfrkChcYi2tSCY/i5/Bm3N5ZQ57T2yDmqWGxyjuORii4bUx1m
bj0izwM3LvhHA7Fc+uaytdsRbh1wWwI3QXy8sT+6a3MfqFYEHCnUVcEsR7A3AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUG6pjDJBWrElWdROEFMNS38rMQaEwHwYDVR0j
BBgwFoAUR4vJE4jAJPKU9+Xi5Uz/IdGKYm0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzVkdG1Hckd1SGVTZDNEb2oybmN0eEhQZk5hcndUcURSamdYOEU1Wm96
cmEvMS80NzhCQzkxMzg4QzAyNEYyOTRGN0U1RTJFNTRDRkYyMUQxOEE2MjZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ3OEJDOTEzODhDMDI0RjI5
NEY3RTVFMkU1NENGRjIxRDE4QTYyNkQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M1ZHRtR3JHdUhlU2QzRG9qMm5jdHhIUGZOYXJ3VHFEUmpnWDhFNVpvenJhLzEv
MzIzODMwMzQzYTM2NjEzMzM0M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzczMDMzMzEzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEajSAMA0GCSqGSIb3DQEBCwUA
A4IBAQBfA0kdLqDWDK5lOuRlTdkIzUHCXJfMu5VLcaeWwFxZ+ErUsnsbp94L8kS4
BjZ8zc6Yos5IWIq1MNL9NhYWyho+Qc1r2z6cZII+jrHZmVu8C40x1uX+rUpfImP6
VTHW9SWca4FzvXPi6uufLKMdcNKQ3Nb+TBsBNcyF+7V0UjKbTykYuSpr7HPsNR0a
v3vpn39WgDme9wQGZV1aWHi58FBiM1hLAGCXmilrZ1K2wuc2tYg+sWA1Lu+uTY2k
lQOQqZadjlOBHD8QIyuQziish4CvqE/+nxxTp9uShQAwsEdk4bKTbIwlAIaSA9Ok
8L1jisaL9yGMJgjyXOvgUP6cbIQD
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:47 2024 by rpki-client on console-ams.rpki-client.org