Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/1/323830343a376434343a3a2f33322d3332203d3e20323731353530.roa
File:                     323830343a376434343a3a2f33322d3332203d3e20323731353530.roa (raw, json)
Hash identifier:          7JTVDKRoxEi+RStWHQlcyJd2uf/Zc4S55cfm81K9sP4=
Subject key identifier:   5A:7A:CF:DE:C5:40:6E:28:55:15:B7:34:A6:D8:DE:B0:C2:A3:3A:A6
Certificate issuer:       /CN=5D88506E9E4CEFFA0495A2DC722396EE08FC529D
Certificate serial:       5EAEE7B8F5FAF908F9927EF1DB4A21C8E35AFF55
Authority key identifier: 5D:88:50:6E:9E:4C:EF:FA:04:95:A2:DC:72:23:96:EE:08:FC:52:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D88506E9E4CEFFA0495A2DC722396EE08FC529D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/1/323830343a376434343a3a2f33322d3332203d3e20323731353530.roa
Signing time:             Wed 03 Apr 2024 18:39:00 +0000
ROA not before:           Wed 03 Apr 2024 18:34:00 +0000
ROA not after:            Wed 02 Apr 2025 18:39:00 +0000
asID:                     271550
IP address blocks:        2804:7d44::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/1/5D88506E9E4CEFFA0495A2DC722396EE08FC529D.crl
                          rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/1/5D88506E9E4CEFFA0495A2DC722396EE08FC529D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D88506E9E4CEFFA0495A2DC722396EE08FC529D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 13:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:ae:e7:b8:f5:fa:f9:08:f9:92:7e:f1:db:4a:21:c8:e3:5a:ff:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D88506E9E4CEFFA0495A2DC722396EE08FC529D
        Validity
            Not Before: Apr  3 18:34:00 2024 GMT
            Not After : Apr  2 18:39:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:76:cd:b1:d9:e8:28:5f:ea:11:8b:2b:91:d4:
                    d9:e9:ec:9a:f9:c3:38:77:c8:5e:b3:6a:26:69:93:
                    a9:30:ad:a1:09:74:14:55:91:15:41:36:17:55:4c:
                    9f:8e:25:2d:f9:ce:53:a5:3b:fb:d4:1b:7d:8c:84:
                    f4:6a:f3:f8:9a:35:7c:76:99:a7:d4:ad:50:28:93:
                    f0:fc:c4:3b:01:5f:b8:6b:ee:3e:e1:cc:ed:16:12:
                    3c:5d:dd:99:7c:39:fd:0b:f5:8e:1a:8e:88:0c:67:
                    37:e9:24:64:b9:ae:2f:96:0c:96:33:8e:36:0b:3e:
                    29:50:dc:9c:be:e5:44:85:ef:5d:13:df:d0:56:18:
                    1c:9a:6a:26:5d:6d:9c:2f:dc:de:f7:b2:a7:5f:23:
                    d1:08:b9:86:ca:36:c1:5a:66:8f:5e:e6:fd:eb:49:
                    66:d9:0d:ab:e5:f0:32:95:31:a1:4a:85:20:e5:fd:
                    96:82:9e:1a:df:ec:3a:fa:88:d7:47:b9:85:82:7a:
                    9d:20:7d:00:84:01:74:e4:e5:40:88:5c:3f:fa:dd:
                    ba:aa:77:90:20:25:b9:72:da:ca:69:7a:a0:8f:8d:
                    c8:c2:ef:cd:56:be:e8:3d:19:1c:ab:b0:d0:f9:18:
                    ec:a7:fd:71:87:49:a1:90:cb:ab:5f:20:fe:62:65:
                    fa:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:7A:CF:DE:C5:40:6E:28:55:15:B7:34:A6:D8:DE:B0:C2:A3:3A:A6
            X509v3 Authority Key Identifier:
                keyid:5D:88:50:6E:9E:4C:EF:FA:04:95:A2:DC:72:23:96:EE:08:FC:52:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/1/5D88506E9E4CEFFA0495A2DC722396EE08FC529D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D88506E9E4CEFFA0495A2DC722396EE08FC529D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/1/323830343a376434343a3a2f33322d3332203d3e20323731353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d44::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:ec:68:f1:b5:fc:82:ff:7e:07:6c:4c:0d:88:6f:2a:40:50:
         76:06:26:fe:52:19:93:bc:df:24:a2:05:20:1c:17:2b:af:ac:
         5d:a1:92:7c:df:b5:bf:a7:b1:9a:8b:a7:6c:3f:12:e7:a9:49:
         62:44:44:c0:19:d3:6d:bd:b9:54:e3:52:23:a3:20:90:57:4f:
         d5:2e:8c:d7:13:b8:ef:82:94:36:a4:ed:6c:bf:ab:9e:fd:e0:
         3d:7f:5e:29:42:3e:fc:97:cc:54:84:21:34:4f:e1:f6:48:ee:
         d0:c5:90:de:09:b1:b4:cc:c6:97:32:9e:cf:62:70:74:a0:90:
         1b:85:4f:da:f1:4b:0c:6f:7b:85:42:ef:31:b5:42:1a:93:31:
         71:f2:40:b7:62:56:e3:53:87:14:bc:1c:36:54:84:6f:79:29:
         1a:33:21:6c:c4:70:10:10:1a:1b:63:b2:dd:0e:02:6d:5f:7c:
         b5:21:37:40:f6:df:3c:0d:0b:31:54:ff:f1:76:1d:ee:9c:6a:
         13:fa:c0:91:94:f0:0c:92:1e:cd:44:25:2c:6e:be:b1:44:65:
         3d:70:b3:33:6b:af:19:f1:95:cf:5c:04:68:03:60:c6:b4:5e:
         f0:d1:f4:34:96:11:81:e7:d6:70:53:aa:90:0b:04:23:30:a3:
         a5:a3:8f:2a
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUXq7nuPX6+Qj5kn7x20ohyONa/1UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQ4ODUwNkU5RTRDRUZGQTA0OTVBMkRDNzIyMzk2RUUw
OEZDNTI5RDAeFw0yNDA0MDMxODM0MDBaFw0yNTA0MDIxODM5MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkE3NkNEQjFEOUU4Mjg1RkVB
MTE4QjJCOTFENEQ5RTlFQzlBRjlDMzM4NzdDODVFQjM2QTI2Njk5M0E5MzBBREEx
MDk3NDE0NTU5MTE1NDEzNjE3NTU0QzlGOEUyNTJERjlDRTUzQTUzQkZCRDQxQjdE
OEM4NEY0NkFGM0Y4OUEzNTdDNzY5OUE3RDRBRDUwMjg5M0YwRkNDNDNCMDE1RkI4
NkJFRTNFRTFDQ0VEMTYxMjNDNURERDk5N0MzOUZEMEJGNThFMUE4RTg4MEM2NzM3
RTkyNDY0QjlBRTJGOTYwQzk2MzM4RTM2MEIzRTI5NTBEQzlDQkVFNTQ0ODVFRjVE
MTNERkQwNTYxODFDOUE2QTI2NUQ2RDlDMkZEQ0RFRjdCMkE3NUYyM0QxMDhCOTg2
Q0EzNkMxNUE2NjhGNUVFNkZERUI0OTY2RDkwREFCRTVGMDMyOTUzMUExNEE4NTIw
RTVGRDk2ODI5RTFBREZFQzNBRkE4OEQ3NDdCOTg1ODI3QTlEMjA3RDAwODQwMTc0
RTRFNTQwODg1QzNGRkFEREJBQUE3NzkwMjAyNUI5NzJEQUNBNjk3QUEwOEY4REM4
QzJFRkNENTZCRUU4M0QxOTFDQUJCMEQwRjkxOEVDQTdGRDcxODc0OUExOTBDQkFC
NUYyMEZFNjI2NUZBMkQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAunbNsdnoKF/qEYsrkdTZ6eya+cM4d8hes2omaZOpMK2hCXQUVZEV
QTYXVUyfjiUt+c5TpTv71Bt9jIT0avP4mjV8dpmn1K1QKJPw/MQ7AV+4a+4+4czt
FhI8Xd2ZfDn9C/WOGo6IDGc36SRkua4vlgyWM442Cz4pUNycvuVEhe9dE9/QVhgc
mmomXW2cL9ze97KnXyPRCLmGyjbBWmaPXub960lm2Q2r5fAylTGhSoUg5f2Wgp4a
3+w6+ojXR7mFgnqdIH0AhAF05OVAiFw/+t26qneQICW5ctrKaXqgj43Iwu/NVr7o
PRkcq7DQ+Rjsp/1xh0mhkMurXyD+YmX6LQIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FFp6z97FQG4oVRW3NKbY3rDCozqmMB8GA1UdIwQYMBaAFF2IUG6eTO/6BJWi3HIj
lu4I/FKdMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJ6Y1h4bTY4OFVkelRu
SENLUGs0OWZTQ1Y2VGM1OFRUSEt1QTVra2Vka1hSLzEvNUQ4ODUwNkU5RTRDRUZG
QTA0OTVBMkRDNzIyMzk2RUUwOEZDNTI5RC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS81RDg4NTA2RTlFNENFRkZBMDQ5NUEyREM3MjIzOTZFRTA4RkM1
MjlELmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8yemNYeG02ODhVZHpUbkhDS1Br
NDlmU0NWNlRjNThUVEhLdUE1a2tlZGtYUi8xLzMyMzgzMDM0M2EzNzY0MzQzNDNh
M2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczMTM1MzUzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
fUQwDQYJKoZIhvcNAQELBQADggEBAKPsaPG1/IL/fgdsTA2IbypAUHYGJv5SGZO8
3ySiBSAcFyuvrF2hknzftb+nsZqLp2w/EuepSWJERMAZ0229uVTjUiOjIJBXT9Uu
jNcTuO+ClDak7Wy/q5794D1/XilCPvyXzFSEITRP4fZI7tDFkN4JsbTMxpcyns9i
cHSgkBuFT9rxSwxve4VC7zG1QhqTMXHyQLdiVuNThxS8HDZUhG95KRozIWzEcBAQ
Ghtjst0OAm1ffLUhN0D23zwNCzFU//F2He6cahP6wJGU8AySHs1EJSxuvrFEZT1w
szNrrxnxlc9cBGgDYMa0XvDR9DSWEYHn1nBTqpALBCMwo6Wjjyo=
-----END CERTIFICATE-----
Generated at Mon Nov 25 15:27:01 2024 by rpki-client on console-fra.rpki-client.org