Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/323830343a353463343a3a2f33322d313238203d3e20323638363639.roa
File:                     323830343a353463343a3a2f33322d313238203d3e20323638363639.roa (raw, json)
Hash identifier:          bJ3sTpMhBVybnq6EDDhg19+JEPBMjHlvqqCwoIX2OmM=
Subject key identifier:   55:9A:69:D0:3D:A3:6E:84:D4:E7:8A:D0:E5:80:B8:AE:22:97:B1:C1
Certificate issuer:       /CN=8E7FF2325D6F6F6BE8865F82FF4D999C33D31887
Certificate serial:       46B3E7C43DA4A46BE2E41DE75DA3CCD89F202A76
Authority key identifier: 8E:7F:F2:32:5D:6F:6F:6B:E8:86:5F:82:FF:4D:99:9C:33:D3:18:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E7FF2325D6F6F6BE8865F82FF4D999C33D31887.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/323830343a353463343a3a2f33322d313238203d3e20323638363639.roa
Signing time:             Tue 05 Nov 2024 13:59:49 +0000
ROA not before:           Tue 05 Nov 2024 13:54:49 +0000
ROA not after:            Tue 04 Nov 2025 13:59:49 +0000
asID:                     268669
IP address blocks:        2804:54c4::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/8E7FF2325D6F6F6BE8865F82FF4D999C33D31887.crl
                          rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/8E7FF2325D6F6F6BE8865F82FF4D999C33D31887.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E7FF2325D6F6F6BE8865F82FF4D999C33D31887.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 05:45:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:b3:e7:c4:3d:a4:a4:6b:e2:e4:1d:e7:5d:a3:cc:d8:9f:20:2a:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E7FF2325D6F6F6BE8865F82FF4D999C33D31887
        Validity
            Not Before: Nov  5 13:54:49 2024 GMT
            Not After : Nov  4 13:59:49 2025 GMT
        Subject: CN=559A69D03DA36E84D4E78AD0E580B8AE2297B1C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6b:68:56:78:b5:3a:7d:10:f5:21:2d:b9:c2:
                    c3:31:91:6c:1e:39:28:2e:e1:8b:e0:e8:6f:3d:ef:
                    dd:b4:dd:3a:df:0c:58:6a:44:60:9f:e8:a4:ee:d9:
                    71:88:d2:39:44:de:c2:bc:65:12:35:1c:2f:88:3f:
                    20:81:17:63:3a:b5:e2:e8:43:5c:24:2d:b6:6a:d9:
                    1c:3c:0b:52:39:4c:da:be:d2:12:82:1d:94:11:f6:
                    a4:ab:1d:a3:4e:da:1c:59:bf:ec:f1:4b:d5:4c:e8:
                    ce:2d:3c:39:93:bd:6a:bf:b8:5c:12:cd:50:bb:38:
                    76:ab:a3:6e:05:c8:5d:f3:24:5e:df:bf:10:57:2a:
                    ff:7c:01:e0:e2:27:95:7f:3e:d1:1d:6a:69:35:55:
                    79:1a:d6:d1:b2:fd:6d:d4:03:c7:0a:96:42:70:fa:
                    0b:6a:ce:90:5f:c2:bb:b8:59:9c:34:73:0a:44:4a:
                    d6:28:b0:5e:d2:c6:7f:05:0b:a6:a6:3f:11:2f:57:
                    2c:c2:48:69:3d:48:db:b0:e7:12:35:42:21:82:2a:
                    8c:0d:ee:8c:b5:b8:92:08:f2:7c:ee:2b:bb:84:35:
                    f9:4f:56:9d:aa:ad:e3:a5:c4:a2:00:02:63:31:bd:
                    51:b6:57:54:71:94:31:be:5f:91:57:64:4b:27:25:
                    09:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:9A:69:D0:3D:A3:6E:84:D4:E7:8A:D0:E5:80:B8:AE:22:97:B1:C1
            X509v3 Authority Key Identifier:
                keyid:8E:7F:F2:32:5D:6F:6F:6B:E8:86:5F:82:FF:4D:99:9C:33:D3:18:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/8E7FF2325D6F6F6BE8865F82FF4D999C33D31887.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E7FF2325D6F6F6BE8865F82FF4D999C33D31887.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/323830343a353463343a3a2f33322d313238203d3e20323638363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         bf:95:cf:fa:87:cd:9a:97:74:da:12:b3:67:36:6e:34:28:f2:
         fd:45:93:71:82:da:ac:69:80:7c:41:b0:f0:79:95:26:7e:74:
         24:16:59:75:56:e6:e3:d1:74:4f:a2:90:e2:40:33:b8:be:3a:
         a1:32:c7:de:c5:98:3f:e6:d3:6a:b6:3d:ba:14:dd:fc:54:9b:
         d7:6a:58:74:ea:7e:7a:23:9d:f5:b2:c5:0f:0b:f1:28:ca:b6:
         15:98:b0:a2:5f:d7:b5:68:05:a6:fc:bf:0f:05:80:be:b8:a1:
         f5:87:36:da:e6:01:5d:d8:b1:14:17:c1:71:f8:58:87:ed:af:
         f2:a1:81:cb:d6:10:46:54:47:c6:a0:79:ad:b7:d5:f0:e5:9a:
         bb:ca:6f:f8:b1:d9:a1:ac:1c:63:fe:69:f1:0f:b4:2d:8a:a3:
         78:c6:80:78:ee:2b:5b:cb:11:6f:c9:b8:0a:20:8a:c1:81:49:
         33:ce:5d:bb:3d:ea:1d:52:4a:1c:a1:93:4b:27:1e:c0:d5:06:
         e8:97:79:a3:1e:49:29:90:16:8c:b9:01:66:4a:f1:15:1f:63:
         18:07:af:98:c9:f7:87:d0:e2:26:b2:bb:8c:16:6d:ad:4f:44:
         28:3a:26:bd:9b:dd:07:41:44:f7:17:0e:03:97:e5:9c:0f:79:
         9a:1b:8e:19
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIURrPnxD2kpGvi5B3nXaPM2J8gKnYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEU3RkYyMzI1RDZGNkY2QkU4ODY1RjgyRkY0RDk5OUMz
M0QzMTg4NzAeFw0yNDExMDUxMzU0NDlaFw0yNTExMDQxMzU5NDlaMDMxMTAvBgNV
BAMTKDU1OUE2OUQwM0RBMzZFODRENEU3OEFEMEU1ODBCOEFFMjI5N0IxQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCga2hWeLU6fRD1IS25wsMxkWwe
OSgu4Yvg6G8979203TrfDFhqRGCf6KTu2XGI0jlE3sK8ZRI1HC+IPyCBF2M6teLo
Q1wkLbZq2Rw8C1I5TNq+0hKCHZQR9qSrHaNO2hxZv+zxS9VM6M4tPDmTvWq/uFwS
zVC7OHaro24FyF3zJF7fvxBXKv98AeDiJ5V/PtEdamk1VXka1tGy/W3UA8cKlkJw
+gtqzpBfwru4WZw0cwpEStYosF7Sxn8FC6amPxEvVyzCSGk9SNuw5xI1QiGCKowN
7oy1uJII8nzuK7uENflPVp2qreOlxKIAAmMxvVG2V1RxlDG+X5FXZEsnJQlzAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUVZpp0D2jboTU54rQ5YC4riKXscEwHwYDVR0j
BBgwFoAUjn/yMl1vb2vohl+C/02ZnDPTGIcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2g3aFdGcmpZR0w5Ukw3Z3Fra3NaRmgyWkRGUnVocHFaMVU2TVZOeVZz
dUMvMC84RTdGRjIzMjVENkY2RjZCRTg4NjVGODJGRjREOTk5QzMzRDMxODg3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFN0ZGMjMyNUQ2RjZGNkJF
ODg2NUY4MkZGNEQ5OTlDMzNEMzE4ODcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNoN2hXRnJqWUdMOVJMN2dxa2tzWkZoMlpERlJ1aHBxWjFVNk1WTnlWc3VDLzAv
MzIzODMwMzQzYTM1MzQ2MzM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzgzNjM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBFTEMA0GCSqGSIb3DQEBCwUAA4IBAQC/lc/6
h82al3TaErNnNm40KPL9RZNxgtqsaYB8QbDweZUmfnQkFll1Vubj0XRPopDiQDO4
vjqhMsfexZg/5tNqtj26FN38VJvXalh06n56I531ssUPC/EoyrYVmLCiX9e1aAWm
/L8PBYC+uKH1hzba5gFd2LEUF8Fx+FiH7a/yoYHL1hBGVEfGoHmtt9Xw5Zq7ym/4
sdmhrBxj/mnxD7QtiqN4xoB47itbyxFvybgKIIrBgUkzzl27PeodUkocoZNLJx7A
1Qbol3mjHkkpkBaMuQFmSvEVH2MYB6+YyfeH0OImsruMFm2tT0QoOia9m90HQUT3
Fw4Dl+WcD3maG44Z
-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:36 2024 by rpki-client on console-fra.rpki-client.org