Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HKsDRAXYhgW9W7tABJurc8fGrRvnnV67bt9MFYwHRDd/1/323830343a373065303a3a2f33322d3335203d3e20323730373533.roa
File:                     323830343a373065303a3a2f33322d3335203d3e20323730373533.roa (raw, json)
Hash identifier:          gEbtJDRnWq711lWzsqfvMN2AU+eUDn9bvHeQcknjP3E=
Subject key identifier:   B8:97:23:05:98:1A:78:35:75:2E:89:05:34:34:F9:F5:84:16:C9:93
Certificate issuer:       /CN=144D8BA24CABA5C71D99AA708E69E7D4F9612435
Certificate serial:       671AB2ADF369D6BF9DEE8952CA1A2C04806A3F93
Authority key identifier: 14:4D:8B:A2:4C:AB:A5:C7:1D:99:AA:70:8E:69:E7:D4:F9:61:24:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/144D8BA24CABA5C71D99AA708E69E7D4F9612435.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HKsDRAXYhgW9W7tABJurc8fGrRvnnV67bt9MFYwHRDd/1/323830343a373065303a3a2f33322d3335203d3e20323730373533.roa
Signing time:             Wed 03 Apr 2024 18:32:48 +0000
ROA not before:           Wed 03 Apr 2024 18:27:48 +0000
ROA not after:            Wed 02 Apr 2025 18:32:48 +0000
asID:                     270753
IP address blocks:        2804:70e0::/32 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HKsDRAXYhgW9W7tABJurc8fGrRvnnV67bt9MFYwHRDd/1/144D8BA24CABA5C71D99AA708E69E7D4F9612435.crl
                          rsync://rpki-repo.registro.br/repo/HKsDRAXYhgW9W7tABJurc8fGrRvnnV67bt9MFYwHRDd/1/144D8BA24CABA5C71D99AA708E69E7D4F9612435.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/144D8BA24CABA5C71D99AA708E69E7D4F9612435.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:1a:b2:ad:f3:69:d6:bf:9d:ee:89:52:ca:1a:2c:04:80:6a:3f:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=144D8BA24CABA5C71D99AA708E69E7D4F9612435
        Validity
            Not Before: Apr  3 18:27:48 2024 GMT
            Not After : Apr  2 18:32:48 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ad:9e:f5:42:d8:6b:d1:08:c8:cc:dd:e2:5f:
                    50:64:8e:f4:96:34:8b:32:0e:7e:78:e5:8b:b0:c1:
                    f7:52:e4:ed:f4:9d:df:33:fd:32:db:41:6c:d0:84:
                    31:10:b9:8f:07:5e:fa:e6:8d:62:d0:33:88:ee:b8:
                    cf:6a:5f:43:e6:b4:d8:fc:25:04:be:00:ac:c0:82:
                    e1:43:36:48:f3:34:6b:92:44:ae:6f:35:ae:f3:24:
                    fa:90:66:3e:78:a8:9f:c8:87:c0:52:77:07:98:50:
                    3e:eb:c8:2c:71:3a:f3:3e:e9:89:24:45:cc:2d:33:
                    33:d5:b5:b7:6a:8b:c4:00:da:68:73:b2:60:19:ce:
                    4f:5a:3d:ba:76:77:fa:11:74:e8:ff:f8:e1:b8:4d:
                    61:8b:0a:ce:65:d9:a6:3a:f3:ff:43:ea:87:bb:40:
                    79:ff:1b:26:1e:81:b2:43:55:04:2b:10:85:36:ba:
                    cc:e7:e2:4b:09:5b:63:38:cf:bf:34:06:57:f0:c9:
                    b1:bb:8f:dc:0e:f2:75:c3:6f:81:cd:18:a4:ce:36:
                    5d:ba:e3:25:50:f6:04:29:84:a7:46:be:55:7c:8a:
                    94:1a:47:0b:3c:44:ec:58:e8:c0:2f:19:b6:75:47:
                    09:dd:26:1d:b4:9e:48:8b:78:91:13:7d:66:ed:ed:
                    85:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:97:23:05:98:1A:78:35:75:2E:89:05:34:34:F9:F5:84:16:C9:93
            X509v3 Authority Key Identifier:
                keyid:14:4D:8B:A2:4C:AB:A5:C7:1D:99:AA:70:8E:69:E7:D4:F9:61:24:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HKsDRAXYhgW9W7tABJurc8fGrRvnnV67bt9MFYwHRDd/1/144D8BA24CABA5C71D99AA708E69E7D4F9612435.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/144D8BA24CABA5C71D99AA708E69E7D4F9612435.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HKsDRAXYhgW9W7tABJurc8fGrRvnnV67bt9MFYwHRDd/1/323830343a373065303a3a2f33322d3335203d3e20323730373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:70e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:b0:56:47:a8:e0:68:ac:31:a4:9d:45:6a:2d:40:d2:f8:b2:
         36:07:6c:87:63:54:24:b1:da:e8:4f:fa:56:ae:ec:df:7e:2b:
         7f:7b:33:16:ae:cb:df:17:6c:e6:fc:e0:8a:f2:98:cb:5f:26:
         4b:b8:ff:a1:c2:62:18:9a:c0:f5:39:cb:40:7e:d7:af:31:72:
         3d:3f:6a:6c:d2:4a:d3:1a:0b:7f:e4:df:8f:a0:60:07:02:24:
         4b:99:96:69:d6:85:4a:1e:d7:3a:dc:1f:1c:9c:fe:96:71:8d:
         7d:f0:a4:34:df:9f:32:55:ba:30:b9:36:a0:19:f6:8e:b2:68:
         2e:d8:6d:5b:a0:b5:5b:d6:0b:e9:8e:f9:be:67:d1:30:4b:96:
         c2:88:77:11:19:ef:b5:9a:f4:4f:73:64:70:f4:7a:c5:8c:bf:
         a4:eb:fd:12:4d:ad:1a:96:e5:5c:8a:73:b7:18:dd:8c:fc:3b:
         a6:32:9b:39:04:1c:bc:a1:e2:5b:f6:7a:e3:31:98:7a:99:d2:
         97:0a:9f:64:37:ba:76:ab:2f:1a:5a:0c:9f:b8:40:a6:f7:4e:
         b7:fb:5c:0f:2e:07:ce:63:73:a1:22:36:ef:97:b9:9c:f5:a8:
         57:25:fb:3c:1b:39:11:2f:f9:9f:05:fd:6a:52:95:c4:c7:19:
         c7:37:e4:57
-----BEGIN CERTIFICATE-----
MIIHPzCCBiegAwIBAgIUZxqyrfNp1r+d7olSyhosBIBqP5MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ0RDhCQTI0Q0FCQTVDNzFEOTlBQTcwOEU2OUU3RDRG
OTYxMjQzNTAeFw0yNDA0MDMxODI3NDhaFw0yNTA0MDIxODMyNDhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRENBRDlFRjU0MkQ4NkJEMTA4
QzhDQ0RERTI1RjUwNjQ4RUY0OTYzNDhCMzIwRTdFNzhFNThCQjBDMUY3NTJFNEVE
RjQ5RERGMzNGRDMyREI0MTZDRDA4NDMxMTBCOThGMDc1RUZBRTY4RDYyRDAzMzg4
RUVCOENGNkE1RjQzRTZCNEQ4RkMyNTA0QkUwMEFDQzA4MkUxNDMzNjQ4RjMzNDZC
OTI0NEFFNkYzNUFFRjMyNEZBOTA2NjNFNzhBODlGQzg4N0MwNTI3NzA3OTg1MDNF
RUJDODJDNzEzQUYzM0VFOTg5MjQ0NUNDMkQzMzMzRDVCNUI3NkE4QkM0MDBEQTY4
NzNCMjYwMTlDRTRGNUEzREJBNzY3N0ZBMTE3NEU4RkZGOEUxQjg0RDYxOEIwQUNF
NjVEOUE2M0FGM0ZGNDNFQTg3QkI0MDc5RkYxQjI2MUU4MUIyNDM1NTA0MkIxMDg1
MzZCQUNDRTdFMjRCMDk1QjYzMzhDRkJGMzQwNjU3RjBDOUIxQkI4RkRDMEVGMjc1
QzM2RjgxQ0QxOEE0Q0UzNjVEQkFFMzI1NTBGNjA0Mjk4NEE3NDZCRTU1N0M4QTk0
MUE0NzBCM0M0NEVDNThFOEMwMkYxOUI2NzU0NzA5REQyNjFEQjQ5RTQ4OEI3ODkx
MTM3RDY2RURFRDg1QjMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA3K2e9ULYa9EIyMzd4l9QZI70ljSLMg5+eOWLsMH3UuTt9J3fM/0y
20Fs0IQxELmPB1765o1i0DOI7rjPal9D5rTY/CUEvgCswILhQzZI8zRrkkSubzWu
8yT6kGY+eKifyIfAUncHmFA+68gscTrzPumJJEXMLTMz1bW3aovEANpoc7JgGc5P
Wj26dnf6EXTo//jhuE1hiwrOZdmmOvP/Q+qHu0B5/xsmHoGyQ1UEKxCFNrrM5+JL
CVtjOM+/NAZX8Mmxu4/cDvJ1w2+BzRikzjZduuMlUPYEKYSnRr5VfIqUGkcLPETs
WOjALxm2dUcJ3SYdtJ5Ii3iRE31m7e2FswIDAQABo4ICTTCCAkkwHQYDVR0OBBYE
FLiXIwWYGng1dS6JBTQ0+fWEFsmTMB8GA1UdIwQYMBaAFBRNi6JMq6XHHZmqcI5p
59T5YSQ1MA4GA1UdDwEB/wQEAwIHgDCBkgYDVR0fBIGKMIGHMIGEoIGBoH+GfXJz
eW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSEtzRFJBWFloZ1c5Vzd0
QUJKdXJjOGZHclJ2bm5WNjdidDlNRll3SFJEZC8xLzE0NEQ4QkEyNENBQkE1Qzcx
RDk5QUE3MDhFNjlFN0Q0Rjk2MTI0MzUuY3JsMHgGCCsGAQUFBwEBBGwwajBoBggr
BgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9uaWNi
cl9yZXBvLzEvMTQ0RDhCQTI0Q0FCQTVDNzFEOTlBQTcwOEU2OUU3RDRGOTYxMjQz
NS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5jOi8v
cnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSEtzRFJBWFloZ1c5Vzd0QUJKdXJj
OGZHclJ2bm5WNjdidDlNRll3SFJEZC8xLzMyMzgzMDM0M2EzNzMwNjUzMDNhM2Ey
ZjMzMzIyZDMzMzUyMDNkM2UyMDMyMzczMDM3MzUzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgEcOAw
DQYJKoZIhvcNAQELBQADggEBABiwVkeo4GisMaSdRWotQNL4sjYHbIdjVCSx2uhP
+lau7N9+K397Mxauy98XbOb84IrymMtfJku4/6HCYhiawPU5y0B+168xcj0/amzS
StMaC3/k34+gYAcCJEuZlmnWhUoe1zrcHxyc/pZxjX3wpDTfnzJVujC5NqAZ9o6y
aC7YbVugtVvWC+mO+b5n0TBLlsKIdxEZ77Wa9E9zZHD0esWMv6Tr/RJNrRqW5VyK
c7cY3Yz8O6YymzkEHLyh4lv2euMxmHqZ0pcKn2Q3unarLxpaDJ+4QKb3Trf7XA8u
B85jc6EiNu+XuZz1qFcl+zwbOREv+Z8F/WpSlcTHGcc35Fc=
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:46 2024 by rpki-client on console-fra.rpki-client.org