Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/1/323830343a373566343a3a2f33322d3332203d3e20323731303830.roa
File:                     323830343a373566343a3a2f33322d3332203d3e20323731303830.roa (raw, json)
Hash identifier:          TOAOtsQyNDLoQjsLba8sQIHqAQNWNTwFlmIktZaYMWs=
Subject key identifier:   2D:A4:4F:6F:73:87:71:AB:6E:39:EF:6A:F7:85:4D:9D:B7:0D:1E:08
Certificate issuer:       /CN=9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4
Certificate serial:       559D3F85973D4B5FDC7D5C326CEC189867874D12
Authority key identifier: 98:07:BC:62:DD:9B:43:B5:80:5D:89:19:B8:62:6F:3A:8E:D2:F8:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/1/323830343a373566343a3a2f33322d3332203d3e20323731303830.roa
Signing time:             Thu 04 Apr 2024 12:33:16 +0000
ROA not before:           Thu 04 Apr 2024 12:28:16 +0000
ROA not after:            Thu 03 Apr 2025 12:33:16 +0000
asID:                     271080
IP address blocks:        2804:75f4::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/1/9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4.crl
                          rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/1/9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 15:38:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:9d:3f:85:97:3d:4b:5f:dc:7d:5c:32:6c:ec:18:98:67:87:4d:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4
        Validity
            Not Before: Apr  4 12:28:16 2024 GMT
            Not After : Apr  3 12:33:16 2025 GMT
        Subject: CN=2DA44F6F738771AB6E39EF6AF7854D9DB70D1E08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1d:bd:8b:9d:9b:d2:55:81:3a:39:b0:c3:a7:
                    fc:f5:11:f5:1b:70:e2:13:9c:4e:e6:60:ee:3b:25:
                    94:1d:ea:63:66:3e:82:b0:69:cb:4b:32:ed:5e:b4:
                    60:62:e3:97:5f:1c:94:ac:f7:05:66:3d:53:4c:a4:
                    b2:e7:77:cc:d0:b8:b0:4a:48:a1:df:bf:8c:b8:94:
                    6e:30:1c:e4:3d:73:c1:87:f8:04:7c:45:a6:ab:96:
                    36:d7:8e:34:6e:4b:f7:f5:f6:7a:de:53:05:87:48:
                    6c:c6:fe:ac:64:76:21:57:93:2f:f0:7b:6f:d9:2b:
                    c3:21:f4:f7:2d:18:11:f4:6c:d1:25:42:5b:f7:e8:
                    6b:b1:b0:fb:62:1e:4a:1b:c5:b3:26:3a:cf:43:05:
                    4a:27:c4:8e:60:c8:f5:2c:a2:3f:9d:78:5a:4b:78:
                    88:2d:ec:fa:89:b5:70:e9:2e:36:6c:b2:bd:ce:a7:
                    77:4f:85:fe:88:35:03:b7:cd:9f:2e:c5:d2:77:a2:
                    63:f8:94:1b:b3:67:74:93:46:48:34:65:a6:4d:99:
                    77:36:ee:cd:60:33:d0:39:9f:45:ad:a2:0a:c5:84:
                    31:9e:aa:65:d7:42:ef:e6:57:44:e0:f4:ba:33:75:
                    ba:0b:21:41:f3:20:cf:55:b1:ab:c9:f0:fc:1b:3d:
                    89:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A4:4F:6F:73:87:71:AB:6E:39:EF:6A:F7:85:4D:9D:B7:0D:1E:08
            X509v3 Authority Key Identifier:
                keyid:98:07:BC:62:DD:9B:43:B5:80:5D:89:19:B8:62:6F:3A:8E:D2:F8:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/1/9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/1/323830343a373566343a3a2f33322d3332203d3e20323731303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:75f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:b5:3f:35:88:1d:0c:39:f4:41:af:40:9b:a5:85:c1:a2:f5:
         04:5a:45:5e:fe:24:2d:2e:99:ee:97:38:23:95:db:54:45:b1:
         aa:85:ad:fc:7b:4d:81:2c:30:a9:e3:0b:99:dc:df:ef:d5:5e:
         ff:61:f7:86:b8:bb:09:10:23:53:d5:99:20:3f:e3:3f:34:24:
         57:fd:b9:41:56:9e:e5:f8:9f:54:be:50:cb:cc:ef:e7:da:8f:
         39:60:5e:a9:89:0d:29:2a:c7:9d:b9:4a:21:16:d2:12:f2:97:
         a1:fe:e6:99:bd:c4:6d:08:95:8f:aa:87:3e:3b:f0:62:3d:fb:
         09:8e:24:2f:a2:41:74:13:db:05:7a:f4:93:3b:18:6d:2e:b9:
         2e:be:da:f5:cd:e5:5a:ca:8e:f8:c0:64:83:65:9c:40:0f:d4:
         da:0f:f0:b8:91:22:97:a9:8b:42:cf:39:bd:0b:71:71:40:fd:
         d5:25:a8:e4:5e:41:fe:1f:9f:6e:60:65:18:21:ce:98:dd:e7:
         56:a6:ad:f5:b8:2a:dd:3a:84:1b:eb:88:8b:bc:77:95:04:46:
         6a:ba:a1:e5:89:ef:3d:fe:67:d7:82:ef:20:ab:88:dc:21:90:
         ab:6a:99:01:ed:4d:32:1b:e9:72:81:05:fd:42:60:13:43:79:
         1c:5e:85:ff
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUVZ0/hZc9S1/cfVwybOwYmGeHTRIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTgwN0JDNjJERDlCNDNCNTgwNUQ4OTE5Qjg2MjZGM0E4
RUQyRjhENDAeFw0yNDA0MDQxMjI4MTZaFw0yNTA0MDMxMjMzMTZaMDMxMTAvBgNV
BAMTKDJEQTQ0RjZGNzM4NzcxQUI2RTM5RUY2QUY3ODU0RDlEQjcwRDFFMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdHb2LnZvSVYE6ObDDp/z1EfUb
cOITnE7mYO47JZQd6mNmPoKwactLMu1etGBi45dfHJSs9wVmPVNMpLLnd8zQuLBK
SKHfv4y4lG4wHOQ9c8GH+AR8RaarljbXjjRuS/f19nreUwWHSGzG/qxkdiFXky/w
e2/ZK8Mh9PctGBH0bNElQlv36GuxsPtiHkobxbMmOs9DBUonxI5gyPUsoj+deFpL
eIgt7PqJtXDpLjZssr3Op3dPhf6INQO3zZ8uxdJ3omP4lBuzZ3STRkg0ZaZNmXc2
7s1gM9A5n0WtogrFhDGeqmXXQu/mV0Tg9LozdboLIUHzIM9VsavJ8PwbPYkjAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQULaRPb3OHcatuOe9q94VNnbcNHggwHwYDVR0j
BBgwFoAUmAe8Yt2bQ7WAXYkZuGJvOo7S+NQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2tRazJ6NGJzRjVzWUp6YjkxekI2NUU4dFZzSFFBUXVnaFp3TTI0TWI1
Z1EvMS85ODA3QkM2MkREOUI0M0I1ODA1RDg5MTlCODYyNkYzQThFRDJGOEQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk4MDdCQzYyREQ5QjQzQjU4
MDVEODkxOUI4NjI2RjNBOEVEMkY4RDQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0drUWsyejRic0Y1c1lKemI5MXpCNjVFOHRWc0hRQVF1Z2had00yNE1iNWdRLzEv
MzIzODMwMzQzYTM3MzU2NjM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMx
MzAzODMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR19DANBgkqhkiG9w0BAQsFAAOCAQEABrU/NYgd
DDn0Qa9Am6WFwaL1BFpFXv4kLS6Z7pc4I5XbVEWxqoWt/HtNgSwwqeMLmdzf79Ve
/2H3hri7CRAjU9WZID/jPzQkV/25QVae5fifVL5Qy8zv59qPOWBeqYkNKSrHnblK
IRbSEvKXof7mmb3EbQiVj6qHPjvwYj37CY4kL6JBdBPbBXr0kzsYbS65Lr7a9c3l
WsqO+MBkg2WcQA/U2g/wuJEil6mLQs85vQtxcUD91SWo5F5B/h+fbmBlGCHOmN3n
Vqat9bgq3TqEG+uIi7x3lQRGarqh5YnvPf5n14LvIKuI3CGQq2qZAe1NMhvpcoEF
/UJgE0N5HF6F/w==
-----END CERTIFICATE-----
Generated at Thu Jun 27 17:26:27 2024 by rpki-client on console-ams.rpki-client.org