Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GXx1wwgH8Q7U25MmEzfBuWnYJ6qd3AWLjnarxrqdNDqi/0/323830343a386565343a3a2f33322d3334203d3e20323733343534.roa
File:                     323830343a386565343a3a2f33322d3334203d3e20323733343534.roa (raw, json)
Hash identifier:          qMVCjyTOanpCXrLUPKeXLwkRkNlG/Ox9p3fKrLeh6o8=
Subject key identifier:   E9:D8:5B:8F:37:B1:22:F4:69:01:9D:BD:6D:E5:34:5F:02:91:6F:3B
Certificate issuer:       /CN=367A395C617DF249BBDEA2B243555E7D0463C336
Certificate serial:       2E14DD872FCDDE2689D8A698AF35C9829176125E
Authority key identifier: 36:7A:39:5C:61:7D:F2:49:BB:DE:A2:B2:43:55:5E:7D:04:63:C3:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/367A395C617DF249BBDEA2B243555E7D0463C336.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GXx1wwgH8Q7U25MmEzfBuWnYJ6qd3AWLjnarxrqdNDqi/0/323830343a386565343a3a2f33322d3334203d3e20323733343534.roa
Signing time:             Tue 21 May 2024 12:37:49 +0000
ROA not before:           Tue 21 May 2024 12:32:49 +0000
ROA not after:            Tue 20 May 2025 12:37:49 +0000
asID:                     273454
IP address blocks:        2804:8ee4::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GXx1wwgH8Q7U25MmEzfBuWnYJ6qd3AWLjnarxrqdNDqi/0/367A395C617DF249BBDEA2B243555E7D0463C336.crl
                          rsync://rpki-repo.registro.br/repo/GXx1wwgH8Q7U25MmEzfBuWnYJ6qd3AWLjnarxrqdNDqi/0/367A395C617DF249BBDEA2B243555E7D0463C336.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/367A395C617DF249BBDEA2B243555E7D0463C336.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:56:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:14:dd:87:2f:cd:de:26:89:d8:a6:98:af:35:c9:82:91:76:12:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=367A395C617DF249BBDEA2B243555E7D0463C336
        Validity
            Not Before: May 21 12:32:49 2024 GMT
            Not After : May 20 12:37:49 2025 GMT
        Subject: CN=E9D85B8F37B122F469019DBD6DE5345F02916F3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:29:41:15:fb:90:42:02:38:e9:59:94:eb:a1:
                    eb:d3:04:a5:50:2a:40:43:95:45:93:da:19:29:6b:
                    23:b0:9b:94:78:cb:8b:b8:6d:e7:39:14:22:c7:27:
                    6a:c2:9e:d9:08:bb:5c:1a:d3:15:c1:b5:d7:cb:28:
                    35:c5:db:68:50:70:f6:88:e9:75:b4:40:fe:fa:55:
                    ce:7c:16:bb:a4:d8:fb:c6:a1:b6:9e:0a:4a:54:43:
                    03:eb:e9:01:bf:98:05:5f:44:d6:a6:70:9a:b3:5b:
                    2b:24:26:8c:b7:c3:11:b3:ab:f0:a7:f1:c9:4c:8a:
                    42:bd:97:fc:54:72:2e:36:5a:0e:c5:33:59:ef:16:
                    86:8d:b8:4c:a8:70:d0:aa:1a:23:c4:dd:e6:59:6a:
                    15:e9:48:de:d0:1c:1d:8e:4f:47:d4:1b:44:d8:eb:
                    66:4a:8a:da:8e:70:2c:5a:b4:fc:bc:13:c4:cc:f1:
                    09:34:9f:7f:7b:c4:fd:a4:ff:5d:4f:e5:08:9d:c4:
                    78:8b:c6:a2:bd:a4:88:c8:df:91:65:35:c5:a3:6e:
                    43:0a:09:57:3c:45:cd:dd:34:02:bb:45:f1:6a:84:
                    6f:4e:c0:24:44:ff:de:fd:2b:0e:21:41:4b:0e:84:
                    50:e5:8c:27:52:34:59:65:a6:a7:fe:f2:a4:80:03:
                    50:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:D8:5B:8F:37:B1:22:F4:69:01:9D:BD:6D:E5:34:5F:02:91:6F:3B
            X509v3 Authority Key Identifier:
                keyid:36:7A:39:5C:61:7D:F2:49:BB:DE:A2:B2:43:55:5E:7D:04:63:C3:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GXx1wwgH8Q7U25MmEzfBuWnYJ6qd3AWLjnarxrqdNDqi/0/367A395C617DF249BBDEA2B243555E7D0463C336.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/367A395C617DF249BBDEA2B243555E7D0463C336.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GXx1wwgH8Q7U25MmEzfBuWnYJ6qd3AWLjnarxrqdNDqi/0/323830343a386565343a3a2f33322d3334203d3e20323733343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ee4::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:22:1f:dd:b6:d2:a7:46:25:de:36:3f:08:87:4d:bd:6c:52:
         22:1b:12:ef:a8:e0:32:7f:c8:4e:ae:93:fd:dc:7f:01:e1:df:
         e8:22:3a:0f:49:fe:29:e4:cf:fd:e6:44:be:b6:f9:5d:31:a9:
         10:73:b4:f5:b4:1f:7a:d2:94:e3:2a:05:4a:8d:6b:66:cc:e7:
         1e:be:82:70:e6:e5:78:d6:70:b3:21:e4:7d:e4:c6:a4:ed:a3:
         4d:d9:5a:41:e3:2a:2b:42:4c:ae:c2:31:c7:e7:8b:54:b1:26:
         80:e3:39:98:1f:af:88:7a:07:02:9e:0a:12:bf:cf:37:a5:b4:
         93:02:8d:59:f0:a9:0c:a1:2d:62:d2:81:16:bd:f2:d9:c6:9e:
         ba:c5:13:e1:8f:5d:e4:12:eb:a0:8e:22:ea:7a:82:50:bb:a9:
         f8:17:cc:ee:b3:ee:41:74:d7:c7:b4:f4:68:38:e5:11:f1:ae:
         88:3e:55:a9:d1:95:15:0e:5f:29:29:09:9b:c7:84:9c:ad:87:
         d6:f2:41:70:e0:6e:3d:bb:ea:19:e3:e3:b8:4d:e9:be:c3:72:
         70:b4:bc:6b:2d:cf:8a:f5:eb:92:06:c7:a0:d0:f6:d1:5a:25:
         6b:6c:43:7c:4b:50:dd:74:b3:aa:9b:87:3c:ef:ec:43:34:d1:
         99:ae:9d:26
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIULhTdhy/N3iaJ2KaYrzXJgpF2El4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzY3QTM5NUM2MTdERjI0OUJCREVBMkIyNDM1NTVFN0Qw
NDYzQzMzNjAeFw0yNDA1MjExMjMyNDlaFw0yNTA1MjAxMjM3NDlaMDMxMTAvBgNV
BAMTKEU5RDg1QjhGMzdCMTIyRjQ2OTAxOURCRDZERTUzNDVGMDI5MTZGM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXKUEV+5BCAjjpWZTroevTBKVQ
KkBDlUWT2hkpayOwm5R4y4u4bec5FCLHJ2rCntkIu1wa0xXBtdfLKDXF22hQcPaI
6XW0QP76Vc58Fruk2PvGobaeCkpUQwPr6QG/mAVfRNamcJqzWyskJoy3wxGzq/Cn
8clMikK9l/xUci42Wg7FM1nvFoaNuEyocNCqGiPE3eZZahXpSN7QHB2OT0fUG0TY
62ZKitqOcCxatPy8E8TM8Qk0n397xP2k/11P5QidxHiLxqK9pIjI35FlNcWjbkMK
CVc8Rc3dNAK7RfFqhG9OwCRE/979Kw4hQUsOhFDljCdSNFllpqf+8qSAA1C/AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU6dhbjzexIvRpAZ29beU0XwKRbzswHwYDVR0j
BBgwFoAUNno5XGF98km73qKyQ1VefQRjwzYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1h4MXd3Z0g4UTdVMjVNbUV6ZkJ1V25ZSjZxZDNBV0xqbmFyeHJxZE5E
cWkvMC8zNjdBMzk1QzYxN0RGMjQ5QkJERUEyQjI0MzU1NUU3RDA0NjNDMzM2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM2N0EzOTVDNjE3REYyNDlC
QkRFQTJCMjQzNTU1RTdEMDQ2M0MzMzYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dYeDF3d2dIOFE3VTI1TW1FemZCdVduWUo2cWQzQVdMam5hcnhycWRORHFpLzAv
MzIzODMwMzQzYTM4NjU2NTM0M2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNzMz
MzQzNTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASO5DANBgkqhkiG9w0BAQsFAAOCAQEAPyIf3bbS
p0Yl3jY/CIdNvWxSIhsS76jgMn/ITq6T/dx/AeHf6CI6D0n+KeTP/eZEvrb5XTGp
EHO09bQfetKU4yoFSo1rZsznHr6CcObleNZwsyHkfeTGpO2jTdlaQeMqK0JMrsIx
x+eLVLEmgOM5mB+viHoHAp4KEr/PN6W0kwKNWfCpDKEtYtKBFr3y2caeusUT4Y9d
5BLroI4i6nqCULup+BfM7rPuQXTXx7T0aDjlEfGuiD5VqdGVFQ5fKSkJm8eEnK2H
1vJBcOBuPbvqGePjuE3pvsNycLS8ay3PivXrkgbHoND20Vola2xDfEtQ3XSzqpuH
PO/sQzTRma6dJg==
-----END CERTIFICATE-----
Generated at Tue Nov 26 07:51:10 2024 by rpki-client on console-fra.rpki-client.org