Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/323830343a353431383a3a2f33322d3438203d3e20323638363238.roa
File:                     323830343a353431383a3a2f33322d3438203d3e20323638363238.roa (raw, json)
Hash identifier:          hA7z7gFEAl4e0Vd21ho9YyTZKrpOWO4ubNHsCDtD3CU=
Subject key identifier:   84:36:2A:46:E3:CC:CE:A0:A4:A1:ED:62:5A:E8:2D:17:7F:84:1B:14
Certificate issuer:       /CN=2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB
Certificate serial:       0A11DAE112D393DD8C29B164C69B5873B7FA064C
Authority key identifier: 2C:9C:59:4E:93:6E:1E:28:AD:5A:D7:3A:6B:F2:8A:E3:8C:00:28:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/323830343a353431383a3a2f33322d3438203d3e20323638363238.roa
Signing time:             Fri 31 May 2024 13:48:07 +0000
ROA not before:           Fri 31 May 2024 13:43:07 +0000
ROA not after:            Fri 30 May 2025 13:48:07 +0000
asID:                     268628
IP address blocks:        2804:5418::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl
                          rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:42:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:11:da:e1:12:d3:93:dd:8c:29:b1:64:c6:9b:58:73:b7:fa:06:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB
        Validity
            Not Before: May 31 13:43:07 2024 GMT
            Not After : May 30 13:48:07 2025 GMT
        Subject: CN=84362A46E3CCCEA0A4A1ED625AE82D177F841B14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ff:78:fb:7a:95:11:0e:80:38:cc:96:3b:02:
                    49:6e:0a:bf:44:bf:48:3e:64:44:73:64:6a:7b:17:
                    b0:45:b0:08:c5:5d:69:cf:fa:fb:0b:76:d8:fb:df:
                    a5:36:25:d0:3a:d0:d4:ef:5e:64:91:1a:22:03:08:
                    7c:ca:11:99:12:ce:06:b7:9a:47:4e:06:59:6a:5b:
                    45:25:cc:60:50:0e:48:c8:c9:97:a7:55:1d:a0:26:
                    1e:f9:26:81:88:69:c9:59:d5:5e:19:47:29:eb:7f:
                    11:35:2d:ec:85:3c:9d:93:9d:9d:6b:c3:ff:b2:88:
                    2d:20:31:89:df:24:31:d3:6b:cf:03:ea:69:d6:c5:
                    ff:fd:f7:7b:34:3e:a8:06:7f:96:f2:5f:62:c4:bd:
                    7b:d7:82:c8:d3:a7:0a:02:58:85:3f:05:da:35:e7:
                    c8:a9:c9:0d:36:5f:36:cd:ef:08:74:54:12:50:89:
                    33:cf:5a:60:c9:15:81:ff:2f:9b:6a:68:87:8b:99:
                    b3:b7:69:c0:74:2b:5b:20:79:df:05:ca:8c:27:37:
                    9d:99:9d:0c:98:0c:95:8c:11:2d:39:8e:a5:a4:a4:
                    8f:f6:6e:fb:b0:ce:a8:e8:2b:6a:2b:44:d7:0f:4e:
                    3d:23:fa:ab:6d:7f:6f:77:68:c3:ea:36:1c:16:9b:
                    f1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:36:2A:46:E3:CC:CE:A0:A4:A1:ED:62:5A:E8:2D:17:7F:84:1B:14
            X509v3 Authority Key Identifier:
                keyid:2C:9C:59:4E:93:6E:1E:28:AD:5A:D7:3A:6B:F2:8A:E3:8C:00:28:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/323830343a353431383a3a2f33322d3438203d3e20323638363238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5418::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:0a:8b:9d:22:6c:cf:ec:4b:3a:82:22:09:a9:88:79:a9:87:
         58:e9:e3:b1:61:fb:b5:26:34:35:08:13:c2:64:9a:6a:62:15:
         e3:24:37:fe:7a:10:6c:1d:3c:af:ec:4a:da:78:ec:ff:4f:e4:
         b4:04:9c:d4:a4:ae:6f:48:c2:79:6d:bf:bf:11:3e:92:16:42:
         04:cb:29:68:a2:41:a2:d7:c5:11:5c:65:22:75:fc:ac:69:71:
         10:e6:4a:ea:57:1a:88:ff:c9:58:c9:24:84:e2:08:2c:bb:aa:
         ef:30:78:6e:3c:7a:b6:aa:d0:3d:8d:f1:96:93:dc:5b:8a:56:
         c6:28:3c:ed:21:7b:df:07:87:2a:c8:8d:9d:c1:dc:25:25:a0:
         4a:f6:91:55:0b:4b:ce:8b:5b:3e:67:f4:7e:ab:27:bb:fa:98:
         e2:19:d8:98:6d:86:d8:8b:db:9a:e3:7a:cc:a3:4e:16:c7:f3:
         42:17:4f:85:6b:50:0c:a9:0e:be:d4:da:06:1c:e1:b9:d1:fb:
         82:92:b2:76:5f:90:a3:08:90:7a:08:5b:37:65:48:2b:92:ac:
         c5:32:92:fc:4e:c8:af:3e:7f:00:a0:4d:f8:3b:30:3e:9f:13:
         17:89:95:2f:8d:17:11:86:77:53:79:3b:1a:60:f5:73:26:50:
         b0:51:28:11
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUChHa4RLTk92MKbFkxptYc7f6BkwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkM5QzU5NEU5MzZFMUUyOEFENUFENzNBNkJGMjhBRTM4
QzAwMjhGQjAeFw0yNDA1MzExMzQzMDdaFw0yNTA1MzAxMzQ4MDdaMDMxMTAvBgNV
BAMTKDg0MzYyQTQ2RTNDQ0NFQTBBNEExRUQ2MjVBRTgyRDE3N0Y4NDFCMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU/3j7epURDoA4zJY7AkluCr9E
v0g+ZERzZGp7F7BFsAjFXWnP+vsLdtj736U2JdA60NTvXmSRGiIDCHzKEZkSzga3
mkdOBllqW0UlzGBQDkjIyZenVR2gJh75JoGIaclZ1V4ZRynrfxE1LeyFPJ2TnZ1r
w/+yiC0gMYnfJDHTa88D6mnWxf/993s0PqgGf5byX2LEvXvXgsjTpwoCWIU/Bdo1
58ipyQ02XzbN7wh0VBJQiTPPWmDJFYH/L5tqaIeLmbO3acB0K1sged8FyownN52Z
nQyYDJWMES05jqWkpI/2bvuwzqjoK2orRNcPTj0j+qttf293aMPqNhwWm/H7AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUhDYqRuPMzqCkoe1iWugtF3+EGxQwHwYDVR0j
BBgwFoAULJxZTpNuHiitWtc6a/KK44wAKPswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0JGYkRCRWdadVRnY1k5NmFvQzNNZGlkN0JFOHJqamlwZ3luTDNpbXpy
aEEvMS8yQzlDNTk0RTkzNkUxRTI4QUQ1QUQ3M0E2QkYyOEFFMzhDMDAyOEZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJDOUM1OTRFOTM2RTFFMjhB
RDVBRDczQTZCRjI4QUUzOEMwMDI4RkIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNCRmJEQkVnWnVUZ2NZOTZhb0MzTWRpZDdCRThyamppcGd5bkwzaW16cmhBLzEv
MzIzODMwMzQzYTM1MzQzMTM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM4
MzYzMjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARUGDANBgkqhkiG9w0BAQsFAAOCAQEAIgqLnSJs
z+xLOoIiCamIeamHWOnjsWH7tSY0NQgTwmSaamIV4yQ3/noQbB08r+xK2njs/0/k
tASc1KSub0jCeW2/vxE+khZCBMspaKJBotfFEVxlInX8rGlxEOZK6lcaiP/JWMkk
hOIILLuq7zB4bjx6tqrQPY3xlpPcW4pWxig87SF73weHKsiNncHcJSWgSvaRVQtL
zotbPmf0fqsnu/qY4hnYmG2G2IvbmuN6zKNOFsfzQhdPhWtQDKkOvtTaBhzhudH7
gpKydl+QowiQeghbN2VIK5KsxTKS/E7Irz5/AKBN+DswPp8TF4mVL40XEYZ3U3k7
GmD1cyZQsFEoEQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:52 2024 by rpki-client on console-ams.rpki-client.org