Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a323266383a3a2f34352d3435203d3e20323633333338.roa
File:                     323830343a313439343a323266383a3a2f34352d3435203d3e20323633333338.roa (raw, json)
Hash identifier:          +IqSic5L+DDhWCZAqW7w93pXvkY7oK+hOBNUa17XkAM=
Subject key identifier:   2E:DD:2A:F8:82:CF:CE:D4:25:1B:4A:E3:C9:1E:0D:DA:9E:80:A8:9C
Certificate issuer:       /CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
Certificate serial:       2267DD9B6C17AE38EEFC0147F87FF910ACF14511
Authority key identifier: 7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a323266383a3a2f34352d3435203d3e20323633333338.roa
Signing time:             Thu 16 May 2024 11:38:28 +0000
ROA not before:           Thu 16 May 2024 11:33:28 +0000
ROA not after:            Thu 15 May 2025 11:38:28 +0000
asID:                     263338
IP address blocks:        2804:1494:22f8::/45 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl
                          rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 03:32:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:67:dd:9b:6c:17:ae:38:ee:fc:01:47:f8:7f:f9:10:ac:f1:45:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
        Validity
            Not Before: May 16 11:33:28 2024 GMT
            Not After : May 15 11:38:28 2025 GMT
        Subject: CN=2EDD2AF882CFCED4251B4AE3C91E0DDA9E80A89C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2a:4f:d2:93:d8:16:5e:bb:dc:f4:16:98:7e:
                    e1:06:9c:45:21:7a:45:8e:94:a1:86:67:eb:ac:91:
                    65:ac:4d:8e:75:99:fd:df:33:4d:05:81:d4:02:f0:
                    91:a4:6f:40:89:91:ac:44:86:b0:4d:69:66:83:f2:
                    34:68:eb:ce:03:14:9d:e5:14:bd:3a:b7:5f:00:28:
                    79:fe:86:d6:52:b8:9a:60:c2:fa:5b:2b:7b:ad:b1:
                    e5:d9:11:7a:eb:a0:4f:c4:c2:77:dc:0a:87:a1:b6:
                    78:5a:8b:be:1e:b5:6c:61:34:52:cf:50:91:50:67:
                    c1:bc:3c:9e:8a:41:0d:76:04:4b:81:0b:fb:ed:cc:
                    0b:a3:b8:7f:d9:6e:18:57:fd:8b:bd:f4:88:a2:e4:
                    24:35:65:0d:11:ed:01:06:77:da:27:5c:3c:d1:68:
                    ae:90:c9:5b:78:91:e2:b8:64:b1:2b:95:fb:ef:c7:
                    8a:fd:27:b1:72:fc:10:8e:d5:42:d5:8c:fb:a8:75:
                    4b:f5:64:41:65:fa:35:8a:e0:ba:08:10:8e:b1:f3:
                    b3:34:fb:34:98:f5:e2:e7:d6:9a:47:d7:7a:6d:a0:
                    b9:e2:b2:18:f6:5a:f2:ae:a8:aa:94:4c:d1:b7:73:
                    6c:a9:e0:85:ce:3d:11:de:df:13:d1:71:25:3a:b6:
                    30:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:DD:2A:F8:82:CF:CE:D4:25:1B:4A:E3:C9:1E:0D:DA:9E:80:A8:9C
            X509v3 Authority Key Identifier:
                keyid:7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a323266383a3a2f34352d3435203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1494:22f8::/45

    Signature Algorithm: sha256WithRSAEncryption
         6f:7a:a0:57:b9:fa:6f:f7:81:3e:c5:29:5e:1a:6d:d0:d1:f4:
         1c:1f:d8:a3:46:a7:2e:d5:e7:b4:57:d7:4d:a5:9f:0b:c3:5b:
         ed:39:44:d6:21:ea:df:8c:9f:d5:7a:09:df:3b:0d:eb:22:e8:
         5f:20:4c:1f:93:9b:6e:72:35:06:aa:9d:3d:87:e4:2b:91:ca:
         73:56:ea:04:10:c7:2c:b1:92:b7:66:49:79:3f:45:d2:e4:01:
         45:ba:42:ed:a8:ee:b8:01:6d:26:12:eb:d5:13:7a:69:95:13:
         b0:ef:ad:c4:ed:d4:43:28:e3:6c:72:45:8e:69:a2:5d:ee:e4:
         a3:a9:ae:19:46:fc:e2:61:64:54:2b:2c:4e:3c:c2:1b:ef:c1:
         3f:8d:1f:2e:a2:e0:cb:ea:86:fa:46:44:6a:1a:62:74:23:e7:
         65:ed:b5:8e:80:4c:b5:eb:09:d7:df:5a:18:a5:d5:6c:27:1d:
         72:1d:96:5e:27:8d:9b:1d:a0:de:93:d1:a3:f5:7c:6e:65:49:
         0a:fa:14:2e:06:e7:a8:d6:67:8c:0a:28:b0:b7:94:4b:7e:bf:
         7c:c3:da:12:47:10:f2:7e:15:37:c4:83:db:81:6e:a1:39:fe:
         7d:92:e7:cf:b1:ba:f1:85:4e:b6:d8:98:2e:35:43:a9:fb:21:
         41:60:66:dc
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUImfdm2wXrjju/AFH+H/5EKzxRREwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0I0NjM4NTNFQTRBQzAxMkJEOUYzMTk0Q0ZBMzNBRjMy
NTkxREYwQjAeFw0yNDA1MTYxMTMzMjhaFw0yNTA1MTUxMTM4MjhaMDMxMTAvBgNV
BAMTKDJFREQyQUY4ODJDRkNFRDQyNTFCNEFFM0M5MUUwRERBOUU4MEE4OUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYKk/Sk9gWXrvc9BaYfuEGnEUh
ekWOlKGGZ+uskWWsTY51mf3fM00FgdQC8JGkb0CJkaxEhrBNaWaD8jRo684DFJ3l
FL06t18AKHn+htZSuJpgwvpbK3utseXZEXrroE/EwnfcCoehtnhai74etWxhNFLP
UJFQZ8G8PJ6KQQ12BEuBC/vtzAujuH/ZbhhX/Yu99Iii5CQ1ZQ0R7QEGd9onXDzR
aK6QyVt4keK4ZLErlfvvx4r9J7Fy/BCO1ULVjPuodUv1ZEFl+jWK4LoIEI6x87M0
+zSY9eLn1ppH13ptoLnishj2WvKuqKqUTNG3c2yp4IXOPRHe3xPRcSU6tjAPAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQULt0q+ILPztQlG0rjyR4N2p6AqJwwHwYDVR0j
BBgwFoAUe0Y4U+pKwBK9nzGUz6M68yWR3wswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXZwOXc4Z2hZY2JWZURlZnZNRENDaGJZVEdvZXB1WEVua1lNcWVRWlAx
UEQvMC83QjQ2Mzg1M0VBNEFDMDEyQkQ5RjMxOTRDRkEzM0FGMzI1OTFERjBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdCNDYzODUzRUE0QUMwMTJC
RDlGMzE5NENGQTMzQUYzMjU5MURGMEIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F2cDl3OGdoWWNiVmVEZWZ2TURDQ2hiWVRHb2VwdVhFbmtZTXFlUVpQMVBELzAv
MzIzODMwMzQzYTMxMzQzOTM0M2EzMjMyNjYzODNhM2EyZjM0MzUyZDM0MzUyMDNk
M2UyMDMyMzYzMzMzMzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAygEFJQi+DANBgkqhkiG9w0BAQsF
AAOCAQEAb3qgV7n6b/eBPsUpXhpt0NH0HB/Yo0anLtXntFfXTaWfC8Nb7TlE1iHq
34yf1XoJ3zsN6yLoXyBMH5ObbnI1BqqdPYfkK5HKc1bqBBDHLLGSt2ZJeT9F0uQB
RbpC7ajuuAFtJhLr1RN6aZUTsO+txO3UQyjjbHJFjmmiXe7ko6muGUb84mFkVCss
TjzCG+/BP40fLqLgy+qG+kZEahpidCPnZe21joBMtesJ199aGKXVbCcdch2WXieN
mx2g3pPRo/V8bmVJCvoULgbnqNZnjAoosLeUS36/fMPaEkcQ8n4VN8SD24FuoTn+
fZLnz7G68YVOttiYLjVDqfshQWBm3A==
-----END CERTIFICATE-----
Generated at Sun Jun 2 07:03:16 2024 by rpki-client on console-fra.rpki-client.org