Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/323830343a373131343a3136353a3a2f3438203d3e20323730373635.roa
File:                     323830343a373131343a3136353a3a2f3438203d3e20323730373635.roa (raw, json)
Hash identifier:          zJcsb+gwJE2DeSBEUZ23NqlT0HT4ACElmg7XK2D/914=
Subject key identifier:   2C:ED:3C:FC:FA:2B:40:84:62:D5:92:2F:98:F7:24:D3:6A:AA:7D:36
Certificate issuer:       /CN=4DA27EB834A2B83F0B2AC8C04DFFAE968381973A
Certificate serial:       0238FEE75C3B6FBA80E9DFA5EAB268641B51EEEA
Authority key identifier: 4D:A2:7E:B8:34:A2:B8:3F:0B:2A:C8:C0:4D:FF:AE:96:83:81:97:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/323830343a373131343a3136353a3a2f3438203d3e20323730373635.roa
Signing time:             Wed 03 Apr 2024 19:00:01 +0000
ROA not before:           Wed 03 Apr 2024 18:55:01 +0000
ROA not after:            Thu 03 Apr 2025 19:00:01 +0000
asID:                     270765
IP address blocks:        2804:7114:165::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.crl
                          rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:38:fe:e7:5c:3b:6f:ba:80:e9:df:a5:ea:b2:68:64:1b:51:ee:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DA27EB834A2B83F0B2AC8C04DFFAE968381973A
        Validity
            Not Before: Apr  3 18:55:01 2024 GMT
            Not After : Apr  3 19:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5c:c6:07:34:6c:56:56:2b:2b:c3:2d:81:28:
                    bc:90:cd:71:a2:3a:27:5c:d4:25:b2:38:b9:79:e6:
                    e6:68:0b:bf:f9:49:1b:b2:16:fb:e9:bf:07:18:04:
                    23:91:35:85:5c:bd:6c:13:e7:d3:03:d0:77:1e:ea:
                    7c:6f:b3:0a:95:72:3e:8b:53:af:d2:56:0c:ad:91:
                    a4:33:e8:14:91:23:17:8a:82:05:c8:5e:c2:5e:9f:
                    7c:37:ef:4f:dc:7e:84:4b:a8:dd:aa:a8:1e:6c:5b:
                    d4:cb:9f:1b:31:e3:b5:45:fc:a0:f9:c7:ee:ad:2a:
                    43:47:c3:b8:42:ad:73:63:30:76:7d:dd:64:ec:7d:
                    68:7a:e7:ed:69:4c:b8:0b:e8:dc:5c:a6:f0:0b:3d:
                    fd:e7:50:11:4a:d2:d9:3b:2e:bc:57:32:9d:b7:ea:
                    e4:8f:69:8f:25:5e:74:06:4b:3a:f6:c7:aa:ed:dc:
                    62:78:87:9f:8c:ea:da:26:9b:4e:70:a5:a4:be:1a:
                    47:7c:9e:6a:7a:85:01:22:04:d7:39:60:ba:11:3c:
                    f4:0c:83:44:4e:c1:6d:cf:e8:da:28:ed:fa:90:76:
                    b1:ef:71:8b:9f:39:0c:52:dc:6e:c8:21:27:df:c4:
                    f6:30:9a:4b:38:c1:b6:79:d1:d6:ed:d2:98:a4:8f:
                    24:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:ED:3C:FC:FA:2B:40:84:62:D5:92:2F:98:F7:24:D3:6A:AA:7D:36
            X509v3 Authority Key Identifier:
                keyid:4D:A2:7E:B8:34:A2:B8:3F:0B:2A:C8:C0:4D:FF:AE:96:83:81:97:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/323830343a373131343a3136353a3a2f3438203d3e20323730373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7114:165::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:84:9a:0d:3c:5d:6b:e9:30:a4:7d:bc:e8:a9:3a:ae:be:af:
         7a:06:de:ae:68:5f:12:78:5f:c9:27:3d:36:ff:e0:3d:bb:db:
         b8:cd:1e:1e:a1:f7:78:48:d7:fc:65:f2:69:38:e7:b3:59:be:
         a1:02:dc:6c:6c:30:6f:70:d4:bc:bd:84:c6:4f:b1:b5:d8:70:
         70:f6:53:6a:a3:7a:a8:37:2e:d1:db:32:14:28:c8:5f:d0:62:
         04:f6:c6:e9:e6:8d:21:10:77:de:cd:8b:7b:74:32:27:41:f6:
         af:94:9c:6a:ce:9b:e2:ee:2e:84:77:a3:36:17:1a:28:19:9c:
         ce:49:36:3b:4e:34:ed:d7:d2:ef:b5:77:cb:d5:1c:5a:30:de:
         27:15:96:a3:c1:09:ae:a3:6c:19:fe:9c:9a:93:f3:d9:80:57:
         a2:e2:38:a9:fc:1c:b2:d6:9c:6a:f1:4c:fe:d0:a9:69:11:42:
         cb:e8:15:9d:09:a2:be:3f:f0:4f:de:69:d4:69:63:b5:c4:89:
         01:e6:9a:0f:58:6c:17:85:96:de:a0:67:13:50:36:17:cc:fb:
         f9:61:2d:6c:f6:47:a5:4b:9d:b8:ac:07:d0:6c:65:d2:1a:23:
         96:64:af:3d:59:72:41:29:a6:3b:39:a7:ef:5a:1d:ba:c5:1b:
         34:b7:63:e2
-----BEGIN CERTIFICATE-----
MIIHRjCCBi6gAwIBAgIUAjj+51w7b7qA6d+l6rJoZBtR7uowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNERBMjdFQjgzNEEyQjgzRjBCMkFDOEMwNERGRkFFOTY4
MzgxOTczQTAeFw0yNDA0MDMxODU1MDFaFw0yNTA0MDMxOTAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDM1Q0M2MDczNDZDNTY1NjJC
MkJDMzJEODEyOEJDOTBDRDcxQTIzQTI3NUNENDI1QjIzOEI5NzlFNkU2NjgwQkJG
Rjk0OTFCQjIxNkZCRTlCRjA3MTgwNDIzOTEzNTg1NUNCRDZDMTNFN0QzMDNEMDc3
MUVFQTdDNkZCMzBBOTU3MjNFOEI1M0FGRDI1NjBDQUQ5MUE0MzNFODE0OTEyMzE3
OEE4MjA1Qzg1RUMyNUU5RjdDMzdFRjRGREM3RTg0NEJBOEREQUFBODFFNkM1QkQ0
Q0I5RjFCMzFFM0I1NDVGQ0EwRjlDN0VFQUQyQTQzNDdDM0I4NDJBRDczNjMzMDc2
N0RERDY0RUM3RDY4N0FFN0VENjk0Q0I4MEJFOERDNUNBNkYwMEIzREZERTc1MDEx
NEFEMkQ5M0IyRUJDNTczMjlEQjdFQUU0OEY2OThGMjU1RTc0MDY0QjNBRjZDN0FB
RUREQzYyNzg4NzlGOENFQURBMjY5QjRFNzBBNUE0QkUxQTQ3N0M5RTZBN0E4NTAx
MjIwNEQ3Mzk2MEJBMTEzQ0Y0MEM4MzQ0NEVDMTZEQ0ZFOERBMjhFREZBOTA3NkIx
RUY3MThCOUYzOTBDNTJEQzZFQzgyMTI3REZDNEY2MzA5QTRCMzhDMUI2NzlEMUQ2
RUREMjk4QTQ4RjI0QjUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA01zGBzRsVlYrK8MtgSi8kM1xojonXNQlsji5eebmaAu/+Ukbshb7
6b8HGAQjkTWFXL1sE+fTA9B3Hup8b7MKlXI+i1Ov0lYMrZGkM+gUkSMXioIFyF7C
Xp98N+9P3H6ES6jdqqgebFvUy58bMeO1Rfyg+cfurSpDR8O4Qq1zYzB2fd1k7H1o
euftaUy4C+jcXKbwCz3951ARStLZOy68VzKdt+rkj2mPJV50Bks69seq7dxieIef
jOraJptOcKWkvhpHfJ5qeoUBIgTXOWC6ETz0DINETsFtz+jaKO36kHax73GLnzkM
UtxuyCEn38T2MJpLOMG2edHW7dKYpI8ktQIDAQABo4ICVDCCAlAwHQYDVR0OBBYE
FCztPPz6K0CEYtWSL5j3JNNqqn02MB8GA1UdIwQYMBaAFE2ifrg0org/CyrIwE3/
rpaDgZc6MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Z4azl2Y2d4MWI0ZERI
dVJWOE1yNWJMN1FOVGo1b2tWZ2VRUVM1UndZa0drLzEvNERBMjdFQjgzNEEyQjgz
RjBCMkFDOEMwNERGRkFFOTY4MzgxOTczQS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS80REEyN0VCODM0QTJCODNGMEIyQUM4QzA0REZGQUU5NjgzODE5
NzNBLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GeGs5dmNneDFiNGRESHVSVjhN
cjViTDdRTlRqNW9rVmdlUVFTNVJ3WWtHay8xLzMyMzgzMDM0M2EzNzMxMzEzNDNh
MzEzNjM1M2EzYTJmMzQzODIwM2QzZTIwMzIzNzMwMzczNjM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcA
KARxFAFlMA0GCSqGSIb3DQEBCwUAA4IBAQBOhJoNPF1r6TCkfbzoqTquvq96Bt6u
aF8SeF/JJz02/+A9u9u4zR4eofd4SNf8ZfJpOOezWb6hAtxsbDBvcNS8vYTGT7G1
2HBw9lNqo3qoNy7R2zIUKMhf0GIE9sbp5o0hEHfezYt7dDInQfavlJxqzpvi7i6E
d6M2FxooGZzOSTY7TjTt19LvtXfL1RxaMN4nFZajwQmuo2wZ/pyak/PZgFei4jip
/Byy1pxq8Uz+0KlpEULL6BWdCaK+P/BP3mnUaWO1xIkB5poPWGwXhZbeoGcTUDYX
zPv5YS1s9kelS524rAfQbGXSGiOWZK89WXJBKaY7OafvWh26xRs0t2Pi
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:22 2024 by rpki-client on console-fra.rpki-client.org