Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/323830343a376132343a3a2f33322d313238203d3e20323731333530.roa
File:                     323830343a376132343a3a2f33322d313238203d3e20323731333530.roa (raw, json)
Hash identifier:          3IsdndGP0wyX+q8zA36m4uiKuWtLzScFm1022oxnyVk=
Subject key identifier:   A6:F6:AE:A8:3B:19:64:DE:19:2A:3B:33:C3:BD:A7:73:65:E2:B6:80
Certificate issuer:       /CN=CBB937910FD525E54BBD32F75D1F63AC92EAA54D
Certificate serial:       5ED283F7104BABEA5456834DFFFBE5F183E4B91E
Authority key identifier: CB:B9:37:91:0F:D5:25:E5:4B:BD:32:F7:5D:1F:63:AC:92:EA:A5:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBB937910FD525E54BBD32F75D1F63AC92EAA54D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/323830343a376132343a3a2f33322d313238203d3e20323731333530.roa
Signing time:             Tue 14 May 2024 13:44:32 +0000
ROA not before:           Tue 14 May 2024 13:39:32 +0000
ROA not after:            Tue 13 May 2025 13:44:32 +0000
asID:                     271350
IP address blocks:        2804:7a24::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/CBB937910FD525E54BBD32F75D1F63AC92EAA54D.crl
                          rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/CBB937910FD525E54BBD32F75D1F63AC92EAA54D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBB937910FD525E54BBD32F75D1F63AC92EAA54D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 16 Jun 2024 16:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:d2:83:f7:10:4b:ab:ea:54:56:83:4d:ff:fb:e5:f1:83:e4:b9:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBB937910FD525E54BBD32F75D1F63AC92EAA54D
        Validity
            Not Before: May 14 13:39:32 2024 GMT
            Not After : May 13 13:44:32 2025 GMT
        Subject: CN=A6F6AEA83B1964DE192A3B33C3BDA77365E2B680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cf:6e:f8:e6:a9:88:ac:ed:41:34:5a:c7:03:
                    eb:1b:cd:bf:16:a0:30:06:66:4c:4f:c9:e3:bf:d2:
                    e7:74:1b:06:a6:3b:26:8d:d2:9f:5c:50:54:25:64:
                    ac:91:0f:eb:d4:ef:a3:4d:48:c3:1c:53:93:51:8d:
                    af:f6:c7:47:f4:b7:88:21:80:96:49:ee:79:d7:29:
                    24:81:d8:c9:10:6a:30:12:d3:8c:4b:1c:bd:31:b4:
                    df:5d:19:34:79:99:bc:0d:1b:6c:10:49:4e:1e:be:
                    94:22:fc:b4:78:60:25:1c:0f:ce:4a:fb:af:5e:86:
                    a4:d0:e8:7f:87:f0:35:b6:97:94:12:38:c0:26:90:
                    1a:6a:06:ab:f2:3b:bb:77:86:20:a8:8b:2b:f9:0a:
                    7a:64:c2:e0:28:de:c7:c6:71:03:d8:de:af:31:6e:
                    0b:24:c5:d1:41:b2:8d:45:7a:d1:98:f0:d4:91:fa:
                    ed:47:fa:36:bf:73:d3:34:d1:6a:8d:15:65:e5:16:
                    75:c2:98:1e:2e:4b:95:44:66:d9:f3:13:4e:5d:ef:
                    34:38:28:18:57:a2:3c:aa:25:84:01:40:14:3c:5a:
                    0d:d6:0d:ff:88:71:b5:6c:47:55:7c:02:2f:1c:c7:
                    cc:e7:f6:3c:7a:6d:f6:56:2d:6a:d6:69:0c:6e:72:
                    66:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:F6:AE:A8:3B:19:64:DE:19:2A:3B:33:C3:BD:A7:73:65:E2:B6:80
            X509v3 Authority Key Identifier:
                keyid:CB:B9:37:91:0F:D5:25:E5:4B:BD:32:F7:5D:1F:63:AC:92:EA:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/CBB937910FD525E54BBD32F75D1F63AC92EAA54D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBB937910FD525E54BBD32F75D1F63AC92EAA54D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/323830343a376132343a3a2f33322d313238203d3e20323731333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a24::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:86:1e:e8:70:87:67:23:c1:82:c2:57:6c:90:ad:90:af:24:
         6a:00:be:b1:05:f1:f4:65:51:65:7b:e4:9e:d5:ff:b4:6e:b7:
         ee:e0:2f:70:9f:7f:d1:c9:40:43:d0:6e:00:e4:69:61:d3:43:
         6a:78:d8:59:06:60:fb:49:bd:37:e1:04:01:c0:dd:94:1e:79:
         66:c7:ad:a8:06:ce:a2:fc:57:e0:ea:b3:21:ad:dd:cd:1f:60:
         76:7c:70:45:05:70:7e:35:a6:a2:3a:a4:0f:51:ba:1b:50:69:
         60:de:01:76:c8:cd:9b:03:4d:67:3c:de:dc:b8:a1:70:f2:02:
         4f:34:ea:e5:bc:04:7e:36:c8:01:9e:84:ea:7a:f0:db:a3:c5:
         8b:0b:ba:aa:a9:de:13:2a:c1:dd:cc:a6:99:2c:0d:d9:cd:4a:
         8d:56:c5:cc:19:f8:29:74:2e:e1:c4:d0:be:d5:f3:b0:a2:73:
         0c:cf:d6:12:ee:37:77:00:5b:d4:e2:85:6d:c7:38:a2:42:f4:
         f0:57:9d:b3:af:9a:f6:c8:b4:3c:9d:17:64:6f:05:78:f5:df:
         b6:95:59:49:02:0c:19:a3:f5:cf:0e:28:42:0a:23:e9:8c:35:
         5a:4f:5a:13:3f:3b:8f:15:b1:c2:d6:f6:ba:1a:9e:0f:a8:22:
         0f:b2:80:92
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUXtKD9xBLq+pUVoNN//vl8YPkuR4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JCOTM3OTEwRkQ1MjVFNTRCQkQzMkY3NUQxRjYzQUM5
MkVBQTU0RDAeFw0yNDA1MTQxMzM5MzJaFw0yNTA1MTMxMzQ0MzJaMDMxMTAvBgNV
BAMTKEE2RjZBRUE4M0IxOTY0REUxOTJBM0IzM0MzQkRBNzczNjVFMkI2ODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+z2745qmIrO1BNFrHA+sbzb8W
oDAGZkxPyeO/0ud0GwamOyaN0p9cUFQlZKyRD+vU76NNSMMcU5NRja/2x0f0t4gh
gJZJ7nnXKSSB2MkQajAS04xLHL0xtN9dGTR5mbwNG2wQSU4evpQi/LR4YCUcD85K
+69ehqTQ6H+H8DW2l5QSOMAmkBpqBqvyO7t3hiCoiyv5CnpkwuAo3sfGcQPY3q8x
bgskxdFBso1FetGY8NSR+u1H+ja/c9M00WqNFWXlFnXCmB4uS5VEZtnzE05d7zQ4
KBhXojyqJYQBQBQ8Wg3WDf+IcbVsR1V8Ai8cx8zn9jx6bfZWLWrWaQxucmaBAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUpvauqDsZZN4ZKjszw72nc2XitoAwHwYDVR0j
BBgwFoAUy7k3kQ/VJeVLvTL3XR9jrJLqpU0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHMxazZIMm42Q3lOWlF2QVZRWEpHamU1VWFKSHQxOVhCZFJWM1BEa003
ZW0vMC9DQkI5Mzc5MTBGRDUyNUU1NEJCRDMyRjc1RDFGNjNBQzkyRUFBNTRELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NCQjkzNzkxMEZENTI1RTU0
QkJEMzJGNzVEMUY2M0FDOTJFQUE1NEQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RzMWs2SDJuNkN5TlpRdkFWUVhKR2plNVVhSkh0MTlYQmRSVjNQRGtNN2VtLzAv
MzIzODMwMzQzYTM3NjEzMjM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzEzMzM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBHokMA0GCSqGSIb3DQEBCwUAA4IBAQAuhh7o
cIdnI8GCwldskK2QryRqAL6xBfH0ZVFle+Se1f+0brfu4C9wn3/RyUBD0G4A5Glh
00NqeNhZBmD7Sb034QQBwN2UHnlmx62oBs6i/Ffg6rMhrd3NH2B2fHBFBXB+Naai
OqQPUbobUGlg3gF2yM2bA01nPN7cuKFw8gJPNOrlvAR+NsgBnoTqevDbo8WLC7qq
qd4TKsHdzKaZLA3ZzUqNVsXMGfgpdC7hxNC+1fOwonMMz9YS7jd3AFvU4oVtxzii
QvTwV52zr5r2yLQ8nRdkbwV49d+2lVlJAgwZo/XPDihCCiPpjDVaT1oTPzuPFbHC
1va6Gp4PqCIPsoCS
-----END CERTIFICATE-----
Generated at Sat Jun 15 16:53:05 2024 by rpki-client on console-ams.rpki-client.org