Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/323830343a3863383a3a2f33352d3335203d3e20323632333933.roa
File:                     323830343a3863383a3a2f33352d3335203d3e20323632333933.roa (raw, json)
Hash identifier:          RUnqmBp9RaB2tS7B6WKY0qFsXhrBIJvVZDF7dQoHafk=
Subject key identifier:   51:EF:78:0F:16:FE:06:88:09:2D:1B:89:1B:55:99:EF:A6:42:32:AC
Certificate issuer:       /CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
Certificate serial:       20CD01CA9FAC241690F9446BCA98988025E7899A
Authority key identifier: C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/323830343a3863383a3a2f33352d3335203d3e20323632333933.roa
Signing time:             Sun 05 May 2024 21:40:38 +0000
ROA not before:           Sun 05 May 2024 21:35:38 +0000
ROA not after:            Sun 04 May 2025 21:40:38 +0000
asID:                     262393
IP address blocks:        2804:8c8::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl
                          rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 09:46:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:cd:01:ca:9f:ac:24:16:90:f9:44:6b:ca:98:98:80:25:e7:89:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
        Validity
            Not Before: May  5 21:35:38 2024 GMT
            Not After : May  4 21:40:38 2025 GMT
        Subject: CN=51EF780F16FE0688092D1B891B5599EFA64232AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:4b:e2:28:99:44:6f:f8:cc:02:bf:2a:b4:e1:
                    72:f8:2f:c9:04:ed:01:f6:c0:a0:fe:b4:19:68:a5:
                    70:a9:21:e9:49:97:e1:bb:d8:b1:b6:6c:97:d6:cb:
                    0c:f0:ca:dd:68:4c:4b:91:4d:4d:b3:cb:9e:ea:b4:
                    cd:10:ec:0b:8d:a6:ec:fc:c1:8e:42:df:b3:79:38:
                    3a:67:40:6d:c7:3c:39:a9:1e:fd:9c:f2:26:5a:e4:
                    22:55:f7:be:8b:72:2d:9d:c9:48:6c:4f:08:5f:d5:
                    ea:78:bd:6a:67:8c:00:a8:a6:9f:fa:d2:41:03:f1:
                    9d:78:74:f8:e6:d3:93:0b:7f:ac:7d:59:28:c1:c3:
                    27:a6:87:41:3f:76:b7:05:3b:5d:10:f0:28:aa:1e:
                    9f:eb:97:8e:79:ab:b1:5c:29:07:d5:28:61:ed:d6:
                    e9:f7:c9:02:d9:15:a6:6d:0c:34:67:1d:06:b4:8a:
                    06:e9:a7:2e:f4:0a:e3:b8:32:a9:aa:08:f7:e1:ce:
                    50:88:07:7b:67:14:a0:bd:ec:99:e2:32:3c:fe:ff:
                    82:d9:67:4d:1f:a0:28:8c:66:f8:37:65:fd:fd:15:
                    ec:7b:89:2c:7d:00:77:03:eb:79:30:fa:c8:09:9b:
                    9c:ee:36:13:d1:22:39:73:08:42:62:f8:44:23:9e:
                    0d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:EF:78:0F:16:FE:06:88:09:2D:1B:89:1B:55:99:EF:A6:42:32:AC
            X509v3 Authority Key Identifier:
                keyid:C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/323830343a3863383a3a2f33352d3335203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c8::/35

    Signature Algorithm: sha256WithRSAEncryption
         5d:29:c8:93:4b:4d:f4:a2:49:db:00:c6:3a:88:a1:04:b5:16:
         fa:c6:75:67:4d:76:12:75:5a:06:bb:18:f8:5b:11:e9:a7:a7:
         05:db:d1:d5:53:cb:a1:96:d9:06:92:4e:6e:8c:d0:04:5d:04:
         53:36:66:77:04:44:88:1f:18:79:60:39:15:81:0d:ef:c6:a0:
         8a:bb:6b:7e:13:4f:79:87:07:29:be:65:64:51:5c:1f:07:01:
         29:8f:3b:77:5b:0d:c3:c4:21:bf:1e:79:ab:0b:72:5d:ef:4a:
         2e:d1:63:bd:ae:2a:37:1d:ca:b2:e1:b7:6e:85:dd:2f:a4:23:
         48:7b:e4:34:c9:4b:36:1b:25:50:e3:63:29:b6:de:1d:49:d4:
         28:d3:41:e7:01:f5:38:ef:9e:32:cb:39:b5:f9:24:11:6d:b5:
         b3:26:85:f8:85:b8:6c:1b:1f:3a:e7:27:56:3b:19:cb:79:7f:
         53:eb:2b:3a:78:00:13:c2:74:d9:e3:0e:72:59:44:f9:88:e5:
         b8:4e:e7:b0:be:a9:6c:49:83:1d:97:e2:2f:79:c5:39:da:8a:
         06:cf:51:a7:9c:3e:5a:1b:e4:1c:b6:f0:1b:2a:0a:69:9a:d7:
         c7:1b:4a:69:4d:d9:5d:19:c3:f9:cf:68:ee:db:bf:8d:3d:f8:
         8b:ba:c7:a6
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUIM0Byp+sJBaQ+URrypiYgCXniZowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzhCQjFGM0M3QjEwNjc3Njk3RDM2NzU4NjFGNThFQzVF
NEM0QjFFNTAeFw0yNDA1MDUyMTM1MzhaFw0yNTA1MDQyMTQwMzhaMDMxMTAvBgNV
BAMTKDUxRUY3ODBGMTZGRTA2ODgwOTJEMUI4OTFCNTU5OUVGQTY0MjMyQUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuS+IomURv+MwCvyq04XL4L8kE
7QH2wKD+tBlopXCpIelJl+G72LG2bJfWywzwyt1oTEuRTU2zy57qtM0Q7AuNpuz8
wY5C37N5ODpnQG3HPDmpHv2c8iZa5CJV976Lci2dyUhsTwhf1ep4vWpnjACopp/6
0kED8Z14dPjm05MLf6x9WSjBwyemh0E/drcFO10Q8CiqHp/rl455q7FcKQfVKGHt
1un3yQLZFaZtDDRnHQa0igbppy70CuO4MqmqCPfhzlCIB3tnFKC97JniMjz+/4LZ
Z00foCiMZvg3Zf39Fex7iSx9AHcD63kw+sgJm5zuNhPRIjlzCEJi+EQjng2DAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUUe94Dxb+BogJLRuJG1WZ76ZCMqwwHwYDVR0j
BBgwFoAUyLsfPHsQZ3aX02dYYfWOxeTEseUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMk1UdTh5aEZMcm9HTkdDcVZrUzJpVDlhOGhONHFTeTlZZHM0NXJhZkFL
VTYvMS9DOEJCMUYzQzdCMTA2Nzc2OTdEMzY3NTg2MUY1OEVDNUU0QzRCMUU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M4QkIxRjNDN0IxMDY3NzY5
N0QzNjc1ODYxRjU4RUM1RTRDNEIxRTUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJNVHU4eWhGTHJvR05HQ3FWa1MyaVQ5YThoTjRxU3k5WWRzNDVyYWZBS1U2LzEv
MzIzODMwMzQzYTM4NjMzODNhM2EyZjMzMzUyZDMzMzUyMDNkM2UyMDMyMzYzMjMz
MzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwDgQCAAIwCAMGBSgECMgAMA0GCSqGSIb3DQEBCwUAA4IBAQBdKciTS030
oknbAMY6iKEEtRb6xnVnTXYSdVoGuxj4WxHpp6cF29HVU8uhltkGkk5ujNAEXQRT
NmZ3BESIHxh5YDkVgQ3vxqCKu2t+E095hwcpvmVkUVwfBwEpjzt3Ww3DxCG/Hnmr
C3Jd70ou0WO9rio3Hcqy4bduhd0vpCNIe+Q0yUs2GyVQ42Mptt4dSdQo00HnAfU4
754yyzm1+SQRbbWzJoX4hbhsGx865ydWOxnLeX9T6ys6eAATwnTZ4w5yWUT5iOW4
TuewvqlsSYMdl+IvecU52ooGz1GnnD5aG+QctvAbKgppmtfHG0ppTdldGcP5z2ju
27+NPfiLusem
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:06 2024 by rpki-client on console-fra.rpki-client.org