Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2cjVmpjDJStVtzYBqnUS2R5QNAGUAsKFEYgFy6Mvan8x/0/323830343a383133303a3a2f33332d3333203d3e20323732343338.roa
File:                     323830343a383133303a3a2f33332d3333203d3e20323732343338.roa (raw, json)
Hash identifier:          5rwRwaf4RzuQx+KcMPvQz7TcWrmYl7WADfm4RfymFyA=
Subject key identifier:   1A:E0:ED:EC:B5:D6:B2:B0:65:16:F1:3E:52:34:DC:B5:A5:9F:0B:A2
Certificate issuer:       /CN=5445B268F95C5A86AE66A9F2C23E2E41A58C3D78
Certificate serial:       0DF573FA728799870C61E88F884EAFEE50C993A0
Authority key identifier: 54:45:B2:68:F9:5C:5A:86:AE:66:A9:F2:C2:3E:2E:41:A5:8C:3D:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5445B268F95C5A86AE66A9F2C23E2E41A58C3D78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2cjVmpjDJStVtzYBqnUS2R5QNAGUAsKFEYgFy6Mvan8x/0/323830343a383133303a3a2f33332d3333203d3e20323732343338.roa
Signing time:             Sat 25 May 2024 14:56:40 +0000
ROA not before:           Sat 25 May 2024 14:51:40 +0000
ROA not after:            Sat 24 May 2025 14:56:40 +0000
asID:                     272438
IP address blocks:        2804:8130::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2cjVmpjDJStVtzYBqnUS2R5QNAGUAsKFEYgFy6Mvan8x/0/5445B268F95C5A86AE66A9F2C23E2E41A58C3D78.crl
                          rsync://rpki-repo.registro.br/repo/2cjVmpjDJStVtzYBqnUS2R5QNAGUAsKFEYgFy6Mvan8x/0/5445B268F95C5A86AE66A9F2C23E2E41A58C3D78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5445B268F95C5A86AE66A9F2C23E2E41A58C3D78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:41:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:f5:73:fa:72:87:99:87:0c:61:e8:8f:88:4e:af:ee:50:c9:93:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5445B268F95C5A86AE66A9F2C23E2E41A58C3D78
        Validity
            Not Before: May 25 14:51:40 2024 GMT
            Not After : May 24 14:56:40 2025 GMT
        Subject: CN=1AE0EDECB5D6B2B06516F13E5234DCB5A59F0BA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1c:32:c0:b6:4c:9d:dc:d8:64:5b:5e:6b:d4:
                    ed:4c:32:95:a9:0d:78:3c:89:e5:3c:36:36:1e:57:
                    68:db:ef:04:04:f0:86:81:d3:8f:c5:53:cf:97:e3:
                    e7:73:5e:a6:a4:ee:39:37:3d:b6:72:57:e5:25:4e:
                    ff:39:99:71:2d:3e:75:c6:4b:76:25:91:20:c2:5a:
                    8d:11:fa:e2:90:6e:d9:9c:3a:ea:e7:f7:7f:35:d6:
                    6c:18:88:2f:ae:bc:00:b1:1e:ce:a6:98:3b:59:81:
                    31:3a:94:00:99:0f:11:c9:98:9e:b9:46:11:81:40:
                    16:57:a9:03:f9:8e:e0:4d:ab:ac:9a:30:71:eb:21:
                    4b:03:dc:7a:10:e2:c6:77:3f:87:3e:0f:3f:eb:d0:
                    77:b5:4e:ee:12:47:e4:b0:7e:a6:84:ab:e7:2d:6b:
                    50:4a:74:08:b2:21:c5:36:35:a9:84:02:ba:40:2e:
                    53:1b:99:4b:15:87:fc:de:bd:62:d7:80:53:52:ee:
                    92:39:e0:61:51:82:af:32:21:91:d6:ee:05:c4:7d:
                    1f:da:d3:89:e6:ec:c8:ad:77:61:d4:6f:0b:07:a5:
                    eb:15:85:89:22:d4:53:d0:73:72:bc:e9:09:79:26:
                    39:27:42:1b:10:68:8e:fa:2f:da:32:f9:3c:b2:12:
                    d1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E0:ED:EC:B5:D6:B2:B0:65:16:F1:3E:52:34:DC:B5:A5:9F:0B:A2
            X509v3 Authority Key Identifier:
                keyid:54:45:B2:68:F9:5C:5A:86:AE:66:A9:F2:C2:3E:2E:41:A5:8C:3D:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2cjVmpjDJStVtzYBqnUS2R5QNAGUAsKFEYgFy6Mvan8x/0/5445B268F95C5A86AE66A9F2C23E2E41A58C3D78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5445B268F95C5A86AE66A9F2C23E2E41A58C3D78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cjVmpjDJStVtzYBqnUS2R5QNAGUAsKFEYgFy6Mvan8x/0/323830343a383133303a3a2f33332d3333203d3e20323732343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8130::/33

    Signature Algorithm: sha256WithRSAEncryption
         0a:c9:b1:8a:36:bb:c5:ab:7d:86:f7:77:ab:ef:e2:d9:3b:e1:
         b7:d8:4e:f1:69:00:fc:af:18:58:38:6c:4b:dd:3c:4b:a6:25:
         3d:8c:35:e9:55:00:3a:a4:b2:a1:a2:78:d9:e8:5a:71:c4:1e:
         68:8f:9c:af:97:36:a8:71:1a:a2:60:3f:32:df:16:62:2b:c9:
         8a:20:52:c7:14:47:30:1f:33:4d:08:bf:65:82:2d:73:08:2f:
         2b:4b:32:c4:86:99:28:26:f5:02:24:26:00:56:e2:13:3f:1a:
         98:b9:35:ca:56:05:ec:eb:ae:fe:93:02:25:46:f8:fd:57:8c:
         c8:51:5a:01:14:f8:9c:5b:7b:c2:97:f3:be:f9:40:cc:db:3c:
         b8:9f:a9:0f:78:af:c5:62:c0:75:e7:f8:a7:73:55:42:a1:ba:
         49:a9:51:82:02:50:2b:ab:8f:88:ea:6a:b9:fc:9e:6e:68:36:
         ed:6b:d7:d1:c1:66:8c:6f:9c:36:0c:34:14:cc:2b:a1:1e:b9:
         f7:41:45:65:71:da:a7:9d:a7:d4:a7:5d:39:b9:e9:14:37:14:
         6c:e0:6d:7e:ad:b7:88:c8:89:41:8d:78:c9:36:1d:72:17:98:
         34:49:10:d6:f6:08:03:c8:0d:c8:95:49:f3:a7:0c:27:f5:5d:
         46:c4:85:a9
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDfVz+nKHmYcMYeiPiE6v7lDJk6AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTQ0NUIyNjhGOTVDNUE4NkFFNjZBOUYyQzIzRTJFNDFB
NThDM0Q3ODAeFw0yNDA1MjUxNDUxNDBaFw0yNTA1MjQxNDU2NDBaMDMxMTAvBgNV
BAMTKDFBRTBFREVDQjVENkIyQjA2NTE2RjEzRTUyMzREQ0I1QTU5RjBCQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFHDLAtkyd3NhkW15r1O1MMpWp
DXg8ieU8NjYeV2jb7wQE8IaB04/FU8+X4+dzXqak7jk3PbZyV+UlTv85mXEtPnXG
S3YlkSDCWo0R+uKQbtmcOurn93811mwYiC+uvACxHs6mmDtZgTE6lACZDxHJmJ65
RhGBQBZXqQP5juBNq6yaMHHrIUsD3HoQ4sZ3P4c+Dz/r0He1Tu4SR+SwfqaEq+ct
a1BKdAiyIcU2NamEArpALlMbmUsVh/zevWLXgFNS7pI54GFRgq8yIZHW7gXEfR/a
04nm7Mitd2HUbwsHpesVhYki1FPQc3K86Ql5JjknQhsQaI76L9oy+TyyEtFZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUGuDt7LXWsrBlFvE+UjTctaWfC6IwHwYDVR0j
BBgwFoAUVEWyaPlcWoauZqnywj4uQaWMPXgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmNqVm1wakRKU3RWdHpZQnFuVVMyUjVRTkFHVUFzS0ZFWWdGeTZNdmFu
OHgvMC81NDQ1QjI2OEY5NUM1QTg2QUU2NkE5RjJDMjNFMkU0MUE1OEMzRDc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU0NDVCMjY4Rjk1QzVBODZB
RTY2QTlGMkMyM0UyRTQxQTU4QzNENzguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJjalZtcGpESlN0VnR6WUJxblVTMlI1UU5BR1VBc0tGRVlnRnk2TXZhbjh4LzAv
MzIzODMwMzQzYTM4MzEzMzMwM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNzMy
MzQzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKASBMAAwDQYJKoZIhvcNAQELBQADggEBAArJsYo2
u8WrfYb3d6vv4tk74bfYTvFpAPyvGFg4bEvdPEumJT2MNelVADqksqGieNnoWnHE
HmiPnK+XNqhxGqJgPzLfFmIryYogUscURzAfM00Iv2WCLXMILytLMsSGmSgm9QIk
JgBW4hM/Gpi5NcpWBezrrv6TAiVG+P1XjMhRWgEU+Jxbe8KX8775QMzbPLifqQ94
r8ViwHXn+KdzVUKhukmpUYICUCurj4jqarn8nm5oNu1r19HBZoxvnDYMNBTMK6Ee
ufdBRWVx2qedp9SnXTm56RQ3FGzgbX6tt4jIiUGNeMk2HXIXmDRJENb2CAPIDciV
SfOnDCf1XUbEhak=
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:35 2024 by rpki-client on console-fra.rpki-client.org