Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2rMAZ2FtX8DoBx8mrBo6oTtY1nBZd56ptxqmjy2bucdq/0/323830343a353436303a3a2f33322d3438203d3e20323638363436.roa
File:                     323830343a353436303a3a2f33322d3438203d3e20323638363436.roa (raw, json)
Hash identifier:          LB6t6ZZ+1g1sz9gnRoSVtLIzeO/o9U014F1HuVjNCmg=
Subject key identifier:   FD:BE:E4:D9:E2:0C:E1:02:1B:4F:C9:D8:32:11:B1:D3:A8:49:E2:9E
Certificate issuer:       /CN=0F78626D3BF8B07214C737318E62EE73094347B3
Certificate serial:       05EED92036089F1A4462C8985ACAF49CE54B07C1
Authority key identifier: 0F:78:62:6D:3B:F8:B0:72:14:C7:37:31:8E:62:EE:73:09:43:47:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F78626D3BF8B07214C737318E62EE73094347B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2rMAZ2FtX8DoBx8mrBo6oTtY1nBZd56ptxqmjy2bucdq/0/323830343a353436303a3a2f33322d3438203d3e20323638363436.roa
Signing time:             Fri 16 Aug 2024 00:41:14 +0000
ROA not before:           Fri 16 Aug 2024 00:36:14 +0000
ROA not after:            Fri 15 Aug 2025 00:41:14 +0000
asID:                     268646
IP address blocks:        2804:5460::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2rMAZ2FtX8DoBx8mrBo6oTtY1nBZd56ptxqmjy2bucdq/0/0F78626D3BF8B07214C737318E62EE73094347B3.crl
                          rsync://rpki-repo.registro.br/repo/2rMAZ2FtX8DoBx8mrBo6oTtY1nBZd56ptxqmjy2bucdq/0/0F78626D3BF8B07214C737318E62EE73094347B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F78626D3BF8B07214C737318E62EE73094347B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:ee:d9:20:36:08:9f:1a:44:62:c8:98:5a:ca:f4:9c:e5:4b:07:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F78626D3BF8B07214C737318E62EE73094347B3
        Validity
            Not Before: Aug 16 00:36:14 2024 GMT
            Not After : Aug 15 00:41:14 2025 GMT
        Subject: CN=FDBEE4D9E20CE1021B4FC9D83211B1D3A849E29E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f8:67:34:1d:ec:3a:1b:ed:70:e5:0b:1f:76:
                    e2:0b:3f:35:6b:a6:84:23:84:45:9b:e2:e4:0a:4a:
                    ce:dd:ac:71:e6:1c:24:1b:b9:56:ee:77:e7:52:2a:
                    ff:99:84:e7:2a:a4:ab:e1:dd:c0:c6:74:12:c6:82:
                    07:0b:47:7e:9d:6f:b9:1a:ae:e1:64:47:58:31:b8:
                    76:d7:e7:20:5a:36:b3:e3:13:8b:3b:c2:62:a4:bb:
                    e2:27:af:95:02:ca:59:90:53:5f:27:bc:57:9b:1c:
                    a5:d5:9a:3d:f1:14:d5:ca:63:cb:6e:98:08:26:e6:
                    a7:06:67:63:a3:bc:98:bf:84:84:11:e2:2d:7d:04:
                    cc:09:d8:08:5c:64:cc:96:45:60:0d:6c:5f:a9:c5:
                    0d:d9:dd:78:84:a9:20:49:99:ad:16:96:ff:fd:63:
                    86:d6:c4:f9:20:06:8e:9f:72:5e:fe:a0:6e:8a:0b:
                    3d:8d:38:04:58:f1:cc:4f:d8:67:a8:c4:d0:df:a7:
                    aa:70:0b:d4:c9:08:7e:b7:df:a4:a0:f9:2e:c4:a3:
                    d3:7a:4e:07:06:ab:5d:18:3e:e7:12:a5:20:7d:3e:
                    77:76:d1:af:9b:5b:53:d7:5d:74:74:b7:67:ad:4b:
                    83:73:56:1d:27:38:4b:38:e1:25:51:d5:e3:12:ea:
                    e6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:BE:E4:D9:E2:0C:E1:02:1B:4F:C9:D8:32:11:B1:D3:A8:49:E2:9E
            X509v3 Authority Key Identifier:
                keyid:0F:78:62:6D:3B:F8:B0:72:14:C7:37:31:8E:62:EE:73:09:43:47:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2rMAZ2FtX8DoBx8mrBo6oTtY1nBZd56ptxqmjy2bucdq/0/0F78626D3BF8B07214C737318E62EE73094347B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F78626D3BF8B07214C737318E62EE73094347B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2rMAZ2FtX8DoBx8mrBo6oTtY1nBZd56ptxqmjy2bucdq/0/323830343a353436303a3a2f33322d3438203d3e20323638363436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5460::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:62:a9:58:a8:52:9a:98:68:88:0a:8b:9a:4e:dd:86:f7:64:
         e2:7b:6c:c6:33:68:2a:94:a3:55:9a:71:0e:84:eb:9a:4f:bf:
         08:09:f1:aa:03:d5:cc:b8:8c:af:eb:51:cd:95:e2:f3:09:41:
         22:59:e5:0e:2a:3a:59:29:2f:ea:4b:71:87:fe:b2:87:50:ec:
         06:e3:38:d3:e3:fb:41:df:7b:cf:c5:7f:39:80:f4:2c:e0:ad:
         fe:b2:04:28:24:19:59:14:84:bf:88:44:ed:10:71:dc:40:11:
         a2:77:81:84:74:09:61:55:fe:cf:d2:b5:60:3c:dd:3f:8e:72:
         d7:ed:dc:37:f0:35:7d:ff:50:36:2d:cc:47:03:05:68:4a:2f:
         18:3d:75:7c:e2:f5:04:95:90:48:d6:7f:f3:92:6b:fa:95:42:
         27:ff:37:3a:ea:29:67:1f:20:89:d8:03:6e:5a:b5:b7:c9:ac:
         c0:42:10:08:a0:b5:d8:75:82:10:65:41:1c:2a:0f:ca:52:17:
         fb:22:7b:21:ef:9b:b0:0e:7a:09:6e:cf:42:6b:d9:03:79:1b:
         38:90:23:0d:25:39:88:c4:86:3e:e1:be:ed:c3:47:da:af:5b:
         10:ed:c6:60:fc:54:36:a7:a8:8d:9d:8e:1b:0a:62:9b:e4:49:
         43:87:ea:37
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUBe7ZIDYInxpEYsiYWsr0nOVLB8EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEY3ODYyNkQzQkY4QjA3MjE0QzczNzMxOEU2MkVFNzMw
OTQzNDdCMzAeFw0yNDA4MTYwMDM2MTRaFw0yNTA4MTUwMDQxMTRaMDMxMTAvBgNV
BAMTKEZEQkVFNEQ5RTIwQ0UxMDIxQjRGQzlEODMyMTFCMUQzQTg0OUUyOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7+Gc0Hew6G+1w5QsfduILPzVr
poQjhEWb4uQKSs7drHHmHCQbuVbud+dSKv+ZhOcqpKvh3cDGdBLGggcLR36db7ka
ruFkR1gxuHbX5yBaNrPjE4s7wmKku+Inr5UCylmQU18nvFebHKXVmj3xFNXKY8tu
mAgm5qcGZ2OjvJi/hIQR4i19BMwJ2AhcZMyWRWANbF+pxQ3Z3XiEqSBJma0Wlv/9
Y4bWxPkgBo6fcl7+oG6KCz2NOARY8cxP2GeoxNDfp6pwC9TJCH6336Sg+S7Eo9N6
TgcGq10YPucSpSB9Pnd20a+bW1PXXXR0t2etS4NzVh0nOEs44SVR1eMS6uaZAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU/b7k2eIM4QIbT8nYMhGx06hJ4p4wHwYDVR0j
BBgwFoAUD3hibTv4sHIUxzcxjmLucwlDR7MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnJNQVoyRnRYOERvQng4bXJCbzZvVHRZMW5CWmQ1NnB0eHFtankyYnVj
ZHEvMC8wRjc4NjI2RDNCRjhCMDcyMTRDNzM3MzE4RTYyRUU3MzA5NDM0N0IzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGNzg2MjZEM0JGOEIwNzIx
NEM3MzczMThFNjJFRTczMDk0MzQ3QjMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJyTUFaMkZ0WDhEb0J4OG1yQm82b1R0WTFuQlpkNTZwdHhxbWp5MmJ1Y2RxLzAv
MzIzODMwMzQzYTM1MzQzNjMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM4
MzYzNDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARUYDANBgkqhkiG9w0BAQsFAAOCAQEAA2KpWKhS
mphoiAqLmk7dhvdk4ntsxjNoKpSjVZpxDoTrmk+/CAnxqgPVzLiMr+tRzZXi8wlB
IlnlDio6WSkv6ktxh/6yh1DsBuM40+P7Qd97z8V/OYD0LOCt/rIEKCQZWRSEv4hE
7RBx3EARoneBhHQJYVX+z9K1YDzdP45y1+3cN/A1ff9QNi3MRwMFaEovGD11fOL1
BJWQSNZ/85Jr+pVCJ/83OuopZx8gidgDblq1t8mswEIQCKC12HWCEGVBHCoPylIX
+yJ7Ie+bsA56CW7PQmvZA3kbOJAjDSU5iMSGPuG+7cNH2q9bEO3GYPxUNqeojZ2O
Gwpim+RJQ4fqNw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 07:29:57 2024 by rpki-client on console-fra.rpki-client.org