Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/323830343a356562383a3a2f33322d3332203d3e20323632383636.roa
File:                     323830343a356562383a3a2f33322d3332203d3e20323632383636.roa (raw, json)
Hash identifier:          RF7kNQkQExsncMulI9YZTnwycUSTY5wm4kBc46SWRCU=
Subject key identifier:   8D:82:B7:B9:6C:73:D5:B8:4D:44:34:4C:4E:79:F7:CE:E1:31:5C:8C
Certificate issuer:       /CN=732B1140085142A7D7474788EEF465DEABBE5080
Certificate serial:       4AB151E9BF0BD6ED16E290FA9AF17C29F23C0E27
Authority key identifier: 73:2B:11:40:08:51:42:A7:D7:47:47:88:EE:F4:65:DE:AB:BE:50:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/323830343a356562383a3a2f33322d3332203d3e20323632383636.roa
Signing time:             Thu 04 Apr 2024 00:56:04 +0000
ROA not before:           Thu 04 Apr 2024 00:51:04 +0000
ROA not after:            Thu 03 Apr 2025 00:56:04 +0000
asID:                     262866
IP address blocks:        2804:5eb8::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/732B1140085142A7D7474788EEF465DEABBE5080.crl
                          rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/732B1140085142A7D7474788EEF465DEABBE5080.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 19:27:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:b1:51:e9:bf:0b:d6:ed:16:e2:90:fa:9a:f1:7c:29:f2:3c:0e:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=732B1140085142A7D7474788EEF465DEABBE5080
        Validity
            Not Before: Apr  4 00:51:04 2024 GMT
            Not After : Apr  3 00:56:04 2025 GMT
        Subject: CN=8D82B7B96C73D5B84D44344C4E79F7CEE1315C8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:45:1f:9d:78:b7:73:d2:2f:7e:f5:d1:60:63:
                    2c:73:e2:7c:b4:c9:99:56:ee:0a:f8:9b:72:ce:e0:
                    ab:02:74:d9:99:f7:48:d7:6c:76:98:5a:e3:39:85:
                    34:33:fa:5c:42:4c:88:6e:12:e4:88:21:db:49:0b:
                    08:0d:da:7a:a8:f3:25:60:85:2f:3c:ca:11:5d:4e:
                    88:92:f7:69:d5:a0:c1:64:7c:92:21:9d:ac:82:fa:
                    59:a3:06:13:20:c8:9c:d0:d7:96:eb:26:3d:c0:cf:
                    d3:ec:d0:5d:97:b5:33:fd:8a:f7:7d:3c:74:e4:77:
                    00:68:a3:9a:25:ad:c6:3d:6c:d8:6e:4b:25:21:49:
                    7c:f3:fb:96:61:66:7d:e5:d2:f9:f7:02:c0:78:e3:
                    c1:1d:d9:62:83:e4:e2:84:fc:f0:3b:f1:99:b1:cd:
                    84:ff:26:ea:38:74:6d:8d:56:40:42:36:af:d8:a4:
                    65:50:0a:57:64:cb:a6:82:bc:18:7a:20:10:e5:fb:
                    d9:c9:04:d4:f5:ed:c9:73:34:01:54:fe:4f:55:83:
                    1a:7e:5c:c1:f4:54:a7:eb:f8:0c:cb:cd:c8:2d:65:
                    d9:45:5d:26:44:45:c4:78:33:5e:de:86:d3:ff:68:
                    d1:4d:09:ea:7f:32:72:a5:e6:0c:63:be:03:4b:14:
                    be:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:82:B7:B9:6C:73:D5:B8:4D:44:34:4C:4E:79:F7:CE:E1:31:5C:8C
            X509v3 Authority Key Identifier:
                keyid:73:2B:11:40:08:51:42:A7:D7:47:47:88:EE:F4:65:DE:AB:BE:50:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/732B1140085142A7D7474788EEF465DEABBE5080.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/323830343a356562383a3a2f33322d3332203d3e20323632383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5eb8::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:1f:19:84:92:e9:ea:ff:8e:2c:d8:7b:32:2e:f8:7f:10:fe:
         86:17:24:53:a1:49:0f:bb:72:c1:60:7f:e7:d1:f6:55:9e:9e:
         6f:58:09:7d:17:be:cb:66:5c:4d:0c:59:39:ff:a9:22:44:9c:
         39:14:6a:ca:3e:bc:a9:0d:62:8a:c5:8f:79:90:5e:89:d7:7c:
         6f:d0:a7:a6:55:de:f2:38:ee:74:f2:23:c9:8a:dd:5b:83:3f:
         3b:23:90:ce:21:12:11:89:28:9c:de:46:c5:a0:c2:f0:ee:02:
         a3:f0:0a:1e:b0:a7:04:e5:1b:56:e5:7a:63:79:2a:bb:06:7e:
         61:83:fe:43:fa:95:f8:7d:8b:82:a6:16:1c:65:9d:89:8d:19:
         59:cb:e9:11:2c:c5:9c:cb:29:78:77:7c:50:cd:f8:c3:4a:26:
         40:d9:54:e0:24:4f:e6:fa:7a:9b:9d:cf:39:44:39:e7:e5:9d:
         25:af:6d:95:62:bd:c3:5e:75:e7:0f:54:02:63:8e:bb:8a:f9:
         5d:4a:5e:de:e8:22:84:eb:70:e2:64:3d:3a:df:0f:45:9f:9b:
         14:3e:b9:bf:f4:a2:03:96:43:14:b1:6a:c5:13:8a:2d:34:4c:
         de:d4:ba:f3:21:17:d3:3c:e7:51:5b:58:0f:49:77:1e:47:6b:
         ef:9d:fc:b1
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUSrFR6b8L1u0W4pD6mvF8KfI8DicwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzMyQjExNDAwODUxNDJBN0Q3NDc0Nzg4RUVGNDY1REVB
QkJFNTA4MDAeFw0yNDA0MDQwMDUxMDRaFw0yNTA0MDMwMDU2MDRaMDMxMTAvBgNV
BAMTKDhEODJCN0I5NkM3M0Q1Qjg0RDQ0MzQ0QzRFNzlGN0NFRTEzMTVDOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlRR+deLdz0i9+9dFgYyxz4ny0
yZlW7gr4m3LO4KsCdNmZ90jXbHaYWuM5hTQz+lxCTIhuEuSIIdtJCwgN2nqo8yVg
hS88yhFdToiS92nVoMFkfJIhnayC+lmjBhMgyJzQ15brJj3Az9Ps0F2XtTP9ivd9
PHTkdwBoo5olrcY9bNhuSyUhSXzz+5ZhZn3l0vn3AsB448Ed2WKD5OKE/PA78Zmx
zYT/Juo4dG2NVkBCNq/YpGVQCldky6aCvBh6IBDl+9nJBNT17clzNAFU/k9Vgxp+
XMH0VKfr+AzLzcgtZdlFXSZERcR4M17ehtP/aNFNCep/MnKl5gxjvgNLFL6jAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUjYK3uWxz1bhNRDRMTnn3zuExXIwwHwYDVR0j
BBgwFoAUcysRQAhRQqfXR0eI7vRl3qu+UIAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHM1aExpblZVYXNhZXU5ZW9KUVB3NkRVeloyNDJMRUI4WHBaVHVLWk5T
RWMvMS83MzJCMTE0MDA4NTE0MkE3RDc0NzQ3ODhFRUY0NjVERUFCQkU1MDgwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzczMkIxMTQwMDg1MTQyQTdE
NzQ3NDc4OEVFRjQ2NURFQUJCRTUwODAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRzNWhMaW5WVWFzYWV1OWVvSlFQdzZEVXpaMjQyTEVCOFhwWlR1S1pOU0VjLzEv
MzIzODMwMzQzYTM1NjU2MjM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjMy
MzgzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAReuDANBgkqhkiG9w0BAQsFAAOCAQEAdB8ZhJLp
6v+OLNh7Mi74fxD+hhckU6FJD7tywWB/59H2VZ6eb1gJfRe+y2ZcTQxZOf+pIkSc
ORRqyj68qQ1iisWPeZBeidd8b9CnplXe8jjudPIjyYrdW4M/OyOQziESEYkonN5G
xaDC8O4Co/AKHrCnBOUbVuV6Y3kquwZ+YYP+Q/qV+H2LgqYWHGWdiY0ZWcvpESzF
nMspeHd8UM34w0omQNlU4CRP5vp6m53POUQ55+WdJa9tlWK9w1515w9UAmOOu4r5
XUpe3ugihOtw4mQ9Ot8PRZ+bFD65v/SiA5ZDFLFqxROKLTRM3tS68yEX0zznUVtY
D0l3Hkdr7538sQ==
-----END CERTIFICATE-----
Generated at Fri Sep 27 21:11:00 2024 by rpki-client on console-ams.rpki-client.org