Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/323830343a373730383a3a2f33342d3334203d3e20323731313530.roa
File:                     323830343a373730383a3a2f33342d3334203d3e20323731313530.roa (raw, json)
Hash identifier:          QUTGwwZITQ+ngp442NQEBXYvg3ssZIXzEPO26FtAGms=
Subject key identifier:   67:B5:40:5D:0E:55:54:95:EB:BF:54:5A:5C:88:FF:B7:66:BA:FE:BA
Certificate issuer:       /CN=B576170C915419B17FE7F1127C766A8859F42C4E
Certificate serial:       2AB894DB3A9CE03810B098DF2973227C23D929CA
Authority key identifier: B5:76:17:0C:91:54:19:B1:7F:E7:F1:12:7C:76:6A:88:59:F4:2C:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B576170C915419B17FE7F1127C766A8859F42C4E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/323830343a373730383a3a2f33342d3334203d3e20323731313530.roa
Signing time:             Sun 18 Aug 2024 14:40:09 +0000
ROA not before:           Sun 18 Aug 2024 14:35:09 +0000
ROA not after:            Sun 17 Aug 2025 14:40:09 +0000
asID:                     271150
IP address blocks:        2804:7708::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/B576170C915419B17FE7F1127C766A8859F42C4E.crl
                          rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/B576170C915419B17FE7F1127C766A8859F42C4E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B576170C915419B17FE7F1127C766A8859F42C4E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 17:46:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:b8:94:db:3a:9c:e0:38:10:b0:98:df:29:73:22:7c:23:d9:29:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B576170C915419B17FE7F1127C766A8859F42C4E
        Validity
            Not Before: Aug 18 14:35:09 2024 GMT
            Not After : Aug 17 14:40:09 2025 GMT
        Subject: CN=67B5405D0E555495EBBF545A5C88FFB766BAFEBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8a:93:54:2c:37:a9:5d:ca:78:0e:0f:fb:92:
                    b0:a0:89:2f:3a:df:22:07:bc:23:34:e9:3c:06:b7:
                    66:99:13:60:23:8e:ea:ec:20:36:b2:9f:75:44:4a:
                    33:9c:c4:10:3d:69:ae:bc:a0:0c:f1:33:fb:8b:8b:
                    71:c5:29:ec:b7:aa:d2:cc:c6:b7:0c:af:88:71:1a:
                    de:33:7b:27:23:24:b6:4b:2c:71:a4:15:3e:2d:13:
                    03:ab:7b:58:ee:d0:25:77:d7:d1:2f:bc:28:1b:10:
                    60:37:9e:66:b0:4a:39:55:f3:36:ab:83:ca:52:6b:
                    ed:3f:c8:0d:19:44:53:f7:a5:08:a1:d1:32:99:36:
                    f1:ac:6f:18:72:a8:52:a4:2b:c3:a9:23:4e:13:84:
                    11:ad:5f:d4:0f:cd:8a:3f:e9:d8:a7:82:88:ba:58:
                    a2:af:01:15:44:5c:cb:50:6e:71:eb:4c:7c:ac:31:
                    1d:15:8e:4a:6c:a4:6c:69:2f:f3:9e:93:3d:57:5b:
                    bd:ba:1d:63:8e:90:6e:80:4d:e2:2f:17:c3:e8:95:
                    81:e3:40:be:0c:ae:29:47:5f:7f:73:28:2b:65:17:
                    47:70:c6:e9:a4:83:73:43:38:ba:13:57:b6:da:fa:
                    e8:fe:e6:21:56:03:59:ae:52:5a:22:1d:b4:e8:7f:
                    c0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B5:40:5D:0E:55:54:95:EB:BF:54:5A:5C:88:FF:B7:66:BA:FE:BA
            X509v3 Authority Key Identifier:
                keyid:B5:76:17:0C:91:54:19:B1:7F:E7:F1:12:7C:76:6A:88:59:F4:2C:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/B576170C915419B17FE7F1127C766A8859F42C4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B576170C915419B17FE7F1127C766A8859F42C4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/323830343a373730383a3a2f33342d3334203d3e20323731313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7708::/34

    Signature Algorithm: sha256WithRSAEncryption
         25:91:fe:28:49:aa:31:9b:4b:28:db:d8:7c:cd:0c:60:5b:b7:
         8e:9a:45:48:4a:49:8c:ce:c6:90:bc:13:e2:e9:dc:80:56:e0:
         57:a6:46:78:b7:1b:7d:1e:ee:c5:88:88:f1:40:e2:05:50:bc:
         33:9b:ef:ef:98:be:1f:8a:22:a6:3c:84:ee:b1:68:46:ea:70:
         eb:0a:35:15:04:01:be:69:24:6b:c4:93:8f:b2:d8:3d:be:20:
         31:b2:f2:00:26:75:b0:c4:bb:b7:76:ee:9c:15:da:83:da:39:
         da:f1:12:85:d3:d4:b8:89:2b:09:55:af:dd:37:2c:4e:54:33:
         d7:19:3f:36:20:4d:5b:84:fa:7a:22:eb:45:e4:4f:12:79:18:
         3f:1e:5e:65:85:05:93:ae:e4:d1:55:24:db:ef:c0:86:95:9b:
         f3:64:52:ec:a2:86:3c:ee:31:c2:a1:d2:68:10:74:36:32:f3:
         e8:c3:07:34:20:aa:b6:45:00:ef:e8:3f:25:8a:d1:29:1b:8f:
         b2:4b:13:cb:50:4e:9e:c9:c6:07:05:81:5f:03:ee:8c:67:22:
         33:72:71:1e:18:09:aa:f4:9a:5f:2b:3e:40:9e:63:88:fd:60:
         8e:47:46:4a:96:bb:12:79:61:f3:5d:79:e4:88:61:06:33:2f:
         8b:8b:4a:af
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKriU2zqc4DgQsJjfKXMifCPZKcowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjU3NjE3MEM5MTU0MTlCMTdGRTdGMTEyN0M3NjZBODg1
OUY0MkM0RTAeFw0yNDA4MTgxNDM1MDlaFw0yNTA4MTcxNDQwMDlaMDMxMTAvBgNV
BAMTKDY3QjU0MDVEMEU1NTU0OTVFQkJGNTQ1QTVDODhGRkI3NjZCQUZFQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNipNULDepXcp4Dg/7krCgiS86
3yIHvCM06TwGt2aZE2AjjursIDayn3VESjOcxBA9aa68oAzxM/uLi3HFKey3qtLM
xrcMr4hxGt4zeycjJLZLLHGkFT4tEwOre1ju0CV319EvvCgbEGA3nmawSjlV8zar
g8pSa+0/yA0ZRFP3pQih0TKZNvGsbxhyqFKkK8OpI04ThBGtX9QPzYo/6dingoi6
WKKvARVEXMtQbnHrTHysMR0VjkpspGxpL/Oekz1XW726HWOOkG6ATeIvF8PolYHj
QL4MrilHX39zKCtlF0dwxumkg3NDOLoTV7ba+uj+5iFWA1muUloiHbTof8ADAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUZ7VAXQ5VVJXrv1RaXIj/t2a6/rowHwYDVR0j
BBgwFoAUtXYXDJFUGbF/5/ESfHZqiFn0LE4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2FMZDZBcG9jREJDZVdqd3dQbnVQdVJua3lYUEtSQzJZVGVEZEdjNGRh
RTQvMC9CNTc2MTcwQzkxNTQxOUIxN0ZFN0YxMTI3Qzc2NkE4ODU5RjQyQzRFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I1NzYxNzBDOTE1NDE5QjE3
RkU3RjExMjdDNzY2QTg4NTlGNDJDNEUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dhTGQ2QXBvY0RCQ2VXand3UG51UHVSbmt5WFBLUkMyWVRlRGRHYzRkYUU0LzAv
MzIzODMwMzQzYTM3MzczMDM4M2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNzMx
MzEzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKAR3CAAwDQYJKoZIhvcNAQELBQADggEBACWR/ihJ
qjGbSyjb2HzNDGBbt46aRUhKSYzOxpC8E+Lp3IBW4FemRni3G30e7sWIiPFA4gVQ
vDOb7++Yvh+KIqY8hO6xaEbqcOsKNRUEAb5pJGvEk4+y2D2+IDGy8gAmdbDEu7d2
7pwV2oPaOdrxEoXT1LiJKwlVr903LE5UM9cZPzYgTVuE+noi60XkTxJ5GD8eXmWF
BZOu5NFVJNvvwIaVm/NkUuyihjzuMcKh0mgQdDYy8+jDBzQgqrZFAO/oPyWK0Skb
j7JLE8tQTp7JxgcFgV8D7oxnIjNycR4YCar0ml8rPkCeY4j9YI5HRkqWuxJ5YfNd
eeSIYQYzL4uLSq8=
-----END CERTIFICATE-----
Generated at Tue Nov 26 16:32:35 2024 by rpki-client on console-ams.rpki-client.org