Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/323830343a326237383a383030303a3a2f33332d3333203d3e203532343638.roa
File:                     323830343a326237383a383030303a3a2f33332d3333203d3e203532343638.roa (raw, json)
Hash identifier:          GUvYDXbve0Hq4Qxd7YryBo/DPJXew/MTUsArnRZnsTQ=
Subject key identifier:   0D:42:F4:0F:9C:CF:47:98:01:0B:3D:7A:81:C6:80:6F:78:7B:52:28
Certificate issuer:       /CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
Certificate serial:       2DEC671FE5BAE2D87389776CAFB9DDBFDCE46E0E
Authority key identifier: AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/323830343a326237383a383030303a3a2f33332d3333203d3e203532343638.roa
Signing time:             Thu 04 Jan 2024 21:00:00 +0000
ROA not before:           Thu 04 Jan 2024 20:55:00 +0000
ROA not after:            Thu 02 Jan 2025 21:00:00 +0000
asID:                     52468
IP address blocks:        2804:2b78:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Mar 2024 11:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:ec:67:1f:e5:ba:e2:d8:73:89:77:6c:af:b9:dd:bf:dc:e4:6e:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
        Validity
            Not Before: Jan  4 20:55:00 2024 GMT
            Not After : Jan  2 21:00:00 2025 GMT
        Subject: CN=3082010A0282010100C8FCA3F1F6ACFC5CCC8E76B0740BB20831E9D8FCDF96A46A1EACE4131646906AC0B00DD0BBF5284E413D093E29D65B36FA8A1EF74C8B855A7CBBA56E700978B80DFEA5474240268CAABB2AC3934DF8DB0FFAA0E438980C1F139B3C8BBD16C3BDD461B985424456371C1A63AD96A08562AC48CE25BE22303C7070773F3697E60730E449DDC4854BB84A3FDBCEC924FFE941793BFBDAE585EF444873E8E4962601F17B7DC7046273D366B1E72674680B9FCE5D1B64784767D447098AAB99869BF91D6B1CAF2A67E4DB7CEBF9F1940F37C79BE46F896EDB6195D19B0DC05C4C89E9BCBB8C952E5071BBD1C2CDEF6A4FDA8F285112550427765F4E702365D5EEB8DD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fc:a3:f1:f6:ac:fc:5c:cc:8e:76:b0:74:0b:
                    b2:08:31:e9:d8:fc:df:96:a4:6a:1e:ac:e4:13:16:
                    46:90:6a:c0:b0:0d:d0:bb:f5:28:4e:41:3d:09:3e:
                    29:d6:5b:36:fa:8a:1e:f7:4c:8b:85:5a:7c:bb:a5:
                    6e:70:09:78:b8:0d:fe:a5:47:42:40:26:8c:aa:bb:
                    2a:c3:93:4d:f8:db:0f:fa:a0:e4:38:98:0c:1f:13:
                    9b:3c:8b:bd:16:c3:bd:d4:61:b9:85:42:44:56:37:
                    1c:1a:63:ad:96:a0:85:62:ac:48:ce:25:be:22:30:
                    3c:70:70:77:3f:36:97:e6:07:30:e4:49:dd:c4:85:
                    4b:b8:4a:3f:db:ce:c9:24:ff:e9:41:79:3b:fb:da:
                    e5:85:ef:44:48:73:e8:e4:96:26:01:f1:7b:7d:c7:
                    04:62:73:d3:66:b1:e7:26:74:68:0b:9f:ce:5d:1b:
                    64:78:47:67:d4:47:09:8a:ab:99:86:9b:f9:1d:6b:
                    1c:af:2a:67:e4:db:7c:eb:f9:f1:94:0f:37:c7:9b:
                    e4:6f:89:6e:db:61:95:d1:9b:0d:c0:5c:4c:89:e9:
                    bc:bb:8c:95:2e:50:71:bb:d1:c2:cd:ef:6a:4f:da:
                    8f:28:51:12:55:04:27:76:5f:4e:70:23:65:d5:ee:
                    b8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:42:F4:0F:9C:CF:47:98:01:0B:3D:7A:81:C6:80:6F:78:7B:52:28
            X509v3 Authority Key Identifier:
                keyid:AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/323830343a326237383a383030303a3a2f33332d3333203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b78:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         12:60:0d:49:a0:01:db:35:8b:95:c1:6c:6d:35:90:f7:48:20:
         ae:90:b9:07:5a:6f:69:42:fd:19:cc:06:fc:03:3d:e9:f2:1e:
         a3:4a:a7:e3:66:92:3a:15:ea:f6:58:cc:e3:9c:40:6c:c8:24:
         42:51:45:b5:a8:a5:21:ac:41:fc:40:d6:d9:f3:40:a1:86:18:
         09:96:7b:d1:9f:ba:5e:53:f2:70:f5:51:c6:b6:fb:56:99:ad:
         f7:e7:c2:d1:4c:30:ec:9e:49:76:28:32:63:1c:52:cc:c7:de:
         9f:77:54:89:54:19:5e:90:bb:2b:36:9f:07:7a:32:31:f2:e5:
         5d:7c:2e:f5:6b:67:67:6c:6f:f5:6b:d4:c3:a6:da:95:bd:a3:
         45:9b:b7:e0:17:f9:5f:5a:75:5c:ff:83:10:d6:0b:cd:56:9a:
         04:eb:b8:8a:25:53:77:89:e2:ba:ee:ab:b2:51:86:76:ae:ba:
         2b:4e:77:05:d4:67:b9:94:6d:b7:36:07:55:2e:06:0a:80:71:
         c4:df:fd:c4:54:5a:ec:d7:c3:7a:52:0b:80:2b:0b:05:fd:3c:
         5b:11:83:a1:b5:38:54:4d:d3:61:f5:a9:7d:4a:69:b1:2f:9d:
         ca:11:97:be:c5:6f:27:0d:2c:d5:7c:43:3e:e3:1f:d6:88:07:
         7c:3f:b9:3b
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIULexnH+W64thziXdsr7ndv9zkbg4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUFCOUIzOTA1RTkzRkRFNjNBNDFCRjUxOTI5QTNDQURD
Q0EwNjRBQjAeFw0yNDAxMDQyMDU1MDBaFw0yNTAxMDIyMTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzhGQ0EzRjFGNkFDRkM1Q0ND
OEU3NkIwNzQwQkIyMDgzMUU5RDhGQ0RGOTZBNDZBMUVBQ0U0MTMxNjQ2OTA2QUMw
QjAwREQwQkJGNTI4NEU0MTNEMDkzRTI5RDY1QjM2RkE4QTFFRjc0QzhCODU1QTdD
QkJBNTZFNzAwOTc4QjgwREZFQTU0NzQyNDAyNjhDQUFCQjJBQzM5MzRERjhEQjBG
RkFBMEU0Mzg5ODBDMUYxMzlCM0M4QkJEMTZDM0JERDQ2MUI5ODU0MjQ0NTYzNzFD
MUE2M0FEOTZBMDg1NjJBQzQ4Q0UyNUJFMjIzMDNDNzA3MDc3M0YzNjk3RTYwNzMw
RTQ0OUREQzQ4NTRCQjg0QTNGREJDRUM5MjRGRkU5NDE3OTNCRkJEQUU1ODVFRjQ0
NDg3M0U4RTQ5NjI2MDFGMTdCN0RDNzA0NjI3M0QzNjZCMUU3MjY3NDY4MEI5RkNF
NUQxQjY0Nzg0NzY3RDQ0NzA5OEFBQjk5ODY5QkY5MUQ2QjFDQUYyQTY3RTREQjdD
RUJGOUYxOTQwRjM3Qzc5QkU0NkY4OTZFREI2MTk1RDE5QjBEQzA1QzRDODlFOUJD
QkI4Qzk1MkU1MDcxQkJEMUMyQ0RFRjZBNEZEQThGMjg1MTEyNTUwNDI3NzY1RjRF
NzAyMzY1RDVFRUI4REQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyPyj8fas/FzMjnawdAuyCDHp2PzflqRqHqzkExZGkGrAsA3Qu/Uo
TkE9CT4p1ls2+ooe90yLhVp8u6VucAl4uA3+pUdCQCaMqrsqw5NN+NsP+qDkOJgM
HxObPIu9FsO91GG5hUJEVjccGmOtlqCFYqxIziW+IjA8cHB3PzaX5gcw5EndxIVL
uEo/287JJP/pQXk7+9rlhe9ESHPo5JYmAfF7fccEYnPTZrHnJnRoC5/OXRtkeEdn
1EcJiquZhpv5HWscrypn5Nt86/nxlA83x5vkb4lu22GV0ZsNwFxMiem8u4yVLlBx
u9HCze9qT9qPKFESVQQndl9OcCNl1e643QIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FA1C9A+cz0eYAQs9eoHGgG94e1IoMB8GA1UdIwQYMBaAFKq5s5Bek/3mOkG/UZKa
PK3MoGSrMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Z5eTl0N2JBYVkxU1J0
TWpqa1h3VU1uRWN4WXVlcTY1ZFo5TGFWMU5EMnlBLzAvQUFCOUIzOTA1RTkzRkRF
NjNBNDFCRjUxOTI5QTNDQURDQ0EwNjRBQi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9BQUI5QjM5MDVFOTNGREU2M0E0MUJGNTE5MjlBM0NBRENDQTA2
NEFCLmNlcjCBtAYIKwYBBQUHAQsEgacwgaQwgaEGCCsGAQUFBzALhoGUcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GeXk5dDdiQWFZMVNSdE1qamtY
d1VNbkVjeFl1ZXE2NWRaOUxhVjFORDJ5QS8wLzMyMzgzMDM0M2EzMjYyMzczODNh
MzgzMDMwMzAzYTNhMmYzMzMzMmQzMzMzMjAzZDNlMjAzNTMyMzQzNjM4LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIA
AjAIAwYHKAQreIAwDQYJKoZIhvcNAQELBQADggEBABJgDUmgAds1i5XBbG01kPdI
IK6QuQdab2lC/RnMBvwDPenyHqNKp+NmkjoV6vZYzOOcQGzIJEJRRbWopSGsQfxA
1tnzQKGGGAmWe9Gful5T8nD1Uca2+1aZrffnwtFMMOyeSXYoMmMcUszH3p93VIlU
GV6Quys2nwd6MjHy5V18LvVrZ2dsb/Vr1MOm2pW9o0Wbt+AX+V9adVz/gxDWC81W
mgTruIolU3eJ4rruq7JRhnauuitOdwXUZ7mUbbc2B1UuBgqAccTf/cRUWuzXw3pS
C4ArCwX9PFsRg6G1OFRN02H1qX1KabEvncoRl77FbycNLNV8Qz7jH9aIB3w/uTs=
-----END CERTIFICATE-----
Generated at Thu Mar 28 14:03:30 2024 by rpki-client on console-fra.rpki-client.org