Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/1/323830343a346132303a383036303a3a2f34332d3433203d3e20323637323230.roa
File:                     323830343a346132303a383036303a3a2f34332d3433203d3e20323637323230.roa (raw, json)
Hash identifier:          LFmraem8VJ9lfPlgWqA5jfuc/tLdL6zmH5X9HYyYEhk=
Subject key identifier:   CA:D3:08:4C:9B:C4:BB:CE:53:51:5D:31:0F:C9:6E:AE:64:93:F4:0E
Certificate issuer:       /CN=4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B
Certificate serial:       766888794CE20A5041665E21FF73849AA5BEF88E
Authority key identifier: 4D:9B:A8:D9:03:F5:A0:A3:D6:92:C9:F2:DC:D1:EE:5C:C0:8A:21:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/1/323830343a346132303a383036303a3a2f34332d3433203d3e20323637323230.roa
Signing time:             Wed 03 Apr 2024 18:39:17 +0000
ROA not before:           Wed 03 Apr 2024 18:34:17 +0000
ROA not after:            Wed 02 Apr 2025 18:39:17 +0000
asID:                     267220
IP address blocks:        2804:4a20:8060::/43 maxlen: 43

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.crl
                          rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 10:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:68:88:79:4c:e2:0a:50:41:66:5e:21:ff:73:84:9a:a5:be:f8:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B
        Validity
            Not Before: Apr  3 18:34:17 2024 GMT
            Not After : Apr  2 18:39:17 2025 GMT
        Subject: CN=3082010A0282010100C8EE9D378FDC157D18755EA30C45B8794BAA7C40FB3D19C52073D9E03C5A97B5D0E74E772177788B59E6714EBD8DFF7207EF1458D2AEE31BD32C33A687E1AD1A1F76A0DCAC2826484C1EE963CD5A44408B4851B8BC58F2DBBBB76B8016AF0E8EACA2973625B489BCC5E673F220291E6FF8475C3959A0698DD14704A058AAD2FCE49CA4AD712DE5A767C618F36BE84096DF6AD6A594030FE4068C48F1A50E5C1BCB238C99B446DD505323D268F85F7351ED37E57997CBC723EE57CE87AF513D1F19EF821D4AA175866CE5D83DC9E62F20634ADC86C53D221E080A44104F4FEFF604C30AE10AE5F56385B837CCAA9BBD3870BADD041D38F15291A8C3D0D196A0C90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ee:9d:37:8f:dc:15:7d:18:75:5e:a3:0c:45:
                    b8:79:4b:aa:7c:40:fb:3d:19:c5:20:73:d9:e0:3c:
                    5a:97:b5:d0:e7:4e:77:21:77:78:8b:59:e6:71:4e:
                    bd:8d:ff:72:07:ef:14:58:d2:ae:e3:1b:d3:2c:33:
                    a6:87:e1:ad:1a:1f:76:a0:dc:ac:28:26:48:4c:1e:
                    e9:63:cd:5a:44:40:8b:48:51:b8:bc:58:f2:db:bb:
                    b7:6b:80:16:af:0e:8e:ac:a2:97:36:25:b4:89:bc:
                    c5:e6:73:f2:20:29:1e:6f:f8:47:5c:39:59:a0:69:
                    8d:d1:47:04:a0:58:aa:d2:fc:e4:9c:a4:ad:71:2d:
                    e5:a7:67:c6:18:f3:6b:e8:40:96:df:6a:d6:a5:94:
                    03:0f:e4:06:8c:48:f1:a5:0e:5c:1b:cb:23:8c:99:
                    b4:46:dd:50:53:23:d2:68:f8:5f:73:51:ed:37:e5:
                    79:97:cb:c7:23:ee:57:ce:87:af:51:3d:1f:19:ef:
                    82:1d:4a:a1:75:86:6c:e5:d8:3d:c9:e6:2f:20:63:
                    4a:dc:86:c5:3d:22:1e:08:0a:44:10:4f:4f:ef:f6:
                    04:c3:0a:e1:0a:e5:f5:63:85:b8:37:cc:aa:9b:bd:
                    38:70:ba:dd:04:1d:38:f1:52:91:a8:c3:d0:d1:96:
                    a0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D3:08:4C:9B:C4:BB:CE:53:51:5D:31:0F:C9:6E:AE:64:93:F4:0E
            X509v3 Authority Key Identifier:
                keyid:4D:9B:A8:D9:03:F5:A0:A3:D6:92:C9:F2:DC:D1:EE:5C:C0:8A:21:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/1/323830343a346132303a383036303a3a2f34332d3433203d3e20323637323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a20:8060::/43

    Signature Algorithm: sha256WithRSAEncryption
         12:bc:2f:db:33:b7:b7:d3:d0:c0:a1:a0:cb:d6:5b:4a:3d:41:
         f9:58:ba:37:6a:eb:67:c7:47:f3:ab:bd:2a:6c:34:e1:41:f7:
         01:11:68:04:6d:42:9b:49:52:aa:f7:4a:36:33:af:25:16:eb:
         56:71:cd:68:00:d5:2e:32:e5:e3:37:99:e7:dd:7f:69:9f:5c:
         9f:e3:30:24:de:36:c1:af:91:51:80:5a:cd:f3:f9:b3:cc:be:
         d5:8f:65:54:03:71:d4:26:63:f5:2f:3d:a2:09:fa:95:ee:6c:
         c5:01:b1:7d:6c:71:56:d9:c5:b4:45:7b:60:5d:7f:c7:d4:91:
         a4:c5:1c:88:e2:ef:c6:e2:47:6e:1a:85:6d:32:1a:90:d9:4d:
         ac:d7:6a:93:ae:81:f9:c2:d0:19:93:73:59:b5:fe:9b:4b:10:
         32:34:02:5f:63:b7:dd:c6:75:a8:c0:c5:ce:99:5d:8d:51:b8:
         f5:a2:14:b7:17:d1:11:82:26:78:29:da:5d:65:0a:35:0d:8d:
         69:34:ac:0e:7f:cc:5a:3f:93:43:64:12:30:c8:2c:b0:7f:08:
         70:e9:0d:0d:93:c5:63:5b:cb:8a:17:d3:12:19:86:75:ce:e6:
         d2:c6:75:0f:5b:7f:b4:01:b7:ac:c7:d6:9c:48:a7:9a:59:8f:
         ac:45:f6:01
-----BEGIN CERTIFICATE-----
MIIHTjCCBjagAwIBAgIUdmiIeUziClBBZl4h/3OEmqW++I4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQ5QkE4RDkwM0Y1QTBBM0Q2OTJDOUYyRENEMUVFNUND
MDhBMjEzQjAeFw0yNDA0MDMxODM0MTdaFw0yNTA0MDIxODM5MTdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzhFRTlEMzc4RkRDMTU3RDE4
NzU1RUEzMEM0NUI4Nzk0QkFBN0M0MEZCM0QxOUM1MjA3M0Q5RTAzQzVBOTdCNUQw
RTc0RTc3MjE3Nzc4OEI1OUU2NzE0RUJEOERGRjcyMDdFRjE0NThEMkFFRTMxQkQz
MkMzM0E2ODdFMUFEMUExRjc2QTBEQ0FDMjgyNjQ4NEMxRUU5NjNDRDVBNDQ0MDhC
NDg1MUI4QkM1OEYyREJCQkI3NkI4MDE2QUYwRThFQUNBMjk3MzYyNUI0ODlCQ0M1
RTY3M0YyMjAyOTFFNkZGODQ3NUMzOTU5QTA2OThERDE0NzA0QTA1OEFBRDJGQ0U0
OUNBNEFENzEyREU1QTc2N0M2MThGMzZCRTg0MDk2REY2QUQ2QTU5NDAzMEZFNDA2
OEM0OEYxQTUwRTVDMUJDQjIzOEM5OUI0NDZERDUwNTMyM0QyNjhGODVGNzM1MUVE
MzdFNTc5OTdDQkM3MjNFRTU3Q0U4N0FGNTEzRDFGMTlFRjgyMUQ0QUExNzU4NjZD
RTVEODNEQzlFNjJGMjA2MzRBREM4NkM1M0QyMjFFMDgwQTQ0MTA0RjRGRUZGNjA0
QzMwQUUxMEFFNUY1NjM4NUI4MzdDQ0FBOUJCRDM4NzBCQUREMDQxRDM4RjE1Mjkx
QThDM0QwRDE5NkEwQzkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyO6dN4/cFX0YdV6jDEW4eUuqfED7PRnFIHPZ4Dxal7XQ5053IXd4
i1nmcU69jf9yB+8UWNKu4xvTLDOmh+GtGh92oNysKCZITB7pY81aRECLSFG4vFjy
27u3a4AWrw6OrKKXNiW0ibzF5nPyICkeb/hHXDlZoGmN0UcEoFiq0vzknKStcS3l
p2fGGPNr6ECW32rWpZQDD+QGjEjxpQ5cG8sjjJm0Rt1QUyPSaPhfc1HtN+V5l8vH
I+5XzoevUT0fGe+CHUqhdYZs5dg9yeYvIGNK3IbFPSIeCApEEE9P7/YEwwrhCuX1
Y4W4N8yqm704cLrdBB048VKRqMPQ0ZagyQIDAQABo4ICXDCCAlgwHQYDVR0OBBYE
FMrTCEybxLvOU1FdMQ/Jbq5kk/QOMB8GA1UdIwQYMBaAFE2bqNkD9aCj1pLJ8tzR
7lzAiiE7MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dETWpiUGlCQjNtc1Zx
MkNKVm02MW54WEdVV2RKYTJvclAzRldXblZzR1JvLzEvNEQ5QkE4RDkwM0Y1QTBB
M0Q2OTJDOUYyRENEMUVFNUNDMDhBMjEzQi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS80RDlCQThEOTAzRjVBMEEzRDY5MkM5RjJEQ0QxRUU1Q0MwOEEy
MTNCLmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HRE1qYlBpQkIzbXNWcTJDSlZt
NjFueFhHVVdkSmEyb3JQM0ZXV25Wc0dSby8xLzMyMzgzMDM0M2EzNDYxMzIzMDNh
MzgzMDM2MzAzYTNhMmYzNDMzMmQzNDMzMjAzZDNlMjAzMjM2MzczMjMyMzAucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwUoBEoggGAwDQYJKoZIhvcNAQELBQADggEBABK8L9szt7fT0MChoMvW
W0o9QflYujdq62fHR/OrvSpsNOFB9wERaARtQptJUqr3SjYzryUW61ZxzWgA1S4y
5eM3mefdf2mfXJ/jMCTeNsGvkVGAWs3z+bPMvtWPZVQDcdQmY/UvPaIJ+pXubMUB
sX1scVbZxbRFe2Bdf8fUkaTFHIji78biR24ahW0yGpDZTazXapOugfnC0BmTc1m1
/ptLEDI0Al9jt93GdajAxc6ZXY1RuPWiFLcX0RGCJngp2l1lCjUNjWk0rA5/zFo/
k0NkEjDILLB/CHDpDQ2TxWNby4oX0xIZhnXO5tLGdQ9bf7QBt6zH1pxIp5pZj6xF
9gE=
-----END CERTIFICATE-----
Generated at Fri Sep 27 12:53:13 2024 by rpki-client on console-ams.rpki-client.org