Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3hKi5Ys82hcybRZNYyZBgfnHhhkU4s9D8JUxjguATLhd/1/323830343a336239383a3a2f33322d3332203d3e20323636313539.roa
File:                     323830343a336239383a3a2f33322d3332203d3e20323636313539.roa (raw, json)
Hash identifier:          m0zg1fLVOzI5XpZicLwz2X7v7gnOfCbA+z7EMrV7e3s=
Subject key identifier:   9B:29:4D:FA:0B:02:AC:D6:CE:3C:A1:B0:8C:A8:2D:69:56:8C:41:1A
Certificate issuer:       /CN=69B7F5A9658DE6458B100966610F13A42172540B
Certificate serial:       1736ADAAE92D0B19776357E270BC89894CADC50A
Authority key identifier: 69:B7:F5:A9:65:8D:E6:45:8B:10:09:66:61:0F:13:A4:21:72:54:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69B7F5A9658DE6458B100966610F13A42172540B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3hKi5Ys82hcybRZNYyZBgfnHhhkU4s9D8JUxjguATLhd/1/323830343a336239383a3a2f33322d3332203d3e20323636313539.roa
Signing time:             Thu 04 Apr 2024 11:37:51 +0000
ROA not before:           Thu 04 Apr 2024 11:32:51 +0000
ROA not after:            Thu 03 Apr 2025 11:37:51 +0000
asID:                     266159
IP address blocks:        2804:3b98::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3hKi5Ys82hcybRZNYyZBgfnHhhkU4s9D8JUxjguATLhd/1/69B7F5A9658DE6458B100966610F13A42172540B.crl
                          rsync://rpki-repo.registro.br/repo/3hKi5Ys82hcybRZNYyZBgfnHhhkU4s9D8JUxjguATLhd/1/69B7F5A9658DE6458B100966610F13A42172540B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69B7F5A9658DE6458B100966610F13A42172540B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:33:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:36:ad:aa:e9:2d:0b:19:77:63:57:e2:70:bc:89:89:4c:ad:c5:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69B7F5A9658DE6458B100966610F13A42172540B
        Validity
            Not Before: Apr  4 11:32:51 2024 GMT
            Not After : Apr  3 11:37:51 2025 GMT
        Subject: CN=9B294DFA0B02ACD6CE3CA1B08CA82D69568C411A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:25:c2:f5:66:52:e8:75:38:fc:f8:9c:fa:83:
                    2f:78:42:67:2b:64:24:1e:f6:6e:9a:fa:21:89:f0:
                    b1:22:61:3b:9e:12:9c:0b:c7:7c:73:81:d2:f3:18:
                    bb:b5:fb:f6:94:d7:97:20:24:af:86:43:a5:05:54:
                    53:9c:d5:ac:e1:0c:04:07:b5:71:70:ea:6a:78:5e:
                    1d:5c:93:d7:ef:bb:58:e8:8b:72:36:f4:26:40:d1:
                    3e:91:5a:02:e9:f2:84:4b:52:2a:56:1a:b9:0c:ab:
                    c9:03:1a:e8:84:8c:b2:ca:55:0f:66:00:87:29:11:
                    d6:aa:e1:ab:c6:64:07:ca:cd:c6:a1:25:47:da:7b:
                    45:55:4f:5d:b0:70:38:09:08:d2:cc:c8:87:e2:b9:
                    73:f9:54:b8:d8:24:aa:b7:ec:75:a4:f0:d7:aa:b4:
                    21:34:a5:2a:1e:02:21:26:77:64:70:93:11:3a:38:
                    e4:48:dd:fe:d0:0f:6d:b5:11:7b:26:06:c5:36:ed:
                    ce:8d:55:e7:b9:4c:cb:ea:96:f7:c0:9b:a4:0e:f1:
                    f0:7c:94:35:59:32:10:db:36:c9:57:7f:66:91:2f:
                    5d:38:e0:ff:8e:e9:4c:63:a2:21:4a:19:d1:8c:4f:
                    8c:05:21:72:0d:1c:d2:b8:3a:82:59:87:5c:ad:50:
                    e3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:29:4D:FA:0B:02:AC:D6:CE:3C:A1:B0:8C:A8:2D:69:56:8C:41:1A
            X509v3 Authority Key Identifier:
                keyid:69:B7:F5:A9:65:8D:E6:45:8B:10:09:66:61:0F:13:A4:21:72:54:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3hKi5Ys82hcybRZNYyZBgfnHhhkU4s9D8JUxjguATLhd/1/69B7F5A9658DE6458B100966610F13A42172540B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69B7F5A9658DE6458B100966610F13A42172540B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3hKi5Ys82hcybRZNYyZBgfnHhhkU4s9D8JUxjguATLhd/1/323830343a336239383a3a2f33322d3332203d3e20323636313539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b98::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:72:a1:b4:3b:6e:63:89:77:ae:b2:ff:13:da:a8:77:87:d5:
         a5:c8:d2:b3:8f:14:3f:06:a7:89:9b:0e:d2:58:4b:32:1d:c4:
         ea:54:25:29:3c:2b:68:21:aa:66:9e:c7:d3:98:d2:13:c9:17:
         95:42:4a:ee:58:02:8f:68:1a:ef:ab:d4:8c:a1:6e:4e:9e:8f:
         f2:6a:ff:a7:d5:62:d6:e2:77:87:a1:d6:15:7e:ca:d2:c3:1f:
         6f:2e:69:13:b1:0d:de:9f:e4:a7:30:cb:8a:33:bb:f3:27:4c:
         ca:0c:b0:f9:b1:72:76:a7:bf:cd:ea:7a:e5:57:a1:5d:7e:6d:
         e8:69:b2:d9:ec:9b:51:93:f7:c7:48:03:f1:5f:f2:6c:f6:91:
         45:c2:97:dd:7f:f8:62:5b:d7:d1:9a:6e:6e:06:48:22:14:96:
         47:59:ed:c4:74:c0:c0:e4:33:8b:12:4d:8f:c7:14:d1:19:96:
         b5:d9:66:95:90:01:0e:5c:23:a6:64:63:4b:8d:6c:b4:ff:ba:
         60:26:9c:d8:1f:a7:b9:db:40:f4:76:6e:56:71:32:b3:85:5d:
         e3:dd:d5:82:f9:e4:8e:88:82:df:a6:fc:ff:7c:c1:3c:ec:34:
         3a:c7:d1:3d:3c:ef:27:8d:e2:cf:b1:ba:37:03:20:a0:37:a9:
         bb:d8:f7:8b
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUFzatquktCxl3Y1ficLyJiUytxQowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjlCN0Y1QTk2NThERTY0NThCMTAwOTY2NjEwRjEzQTQy
MTcyNTQwQjAeFw0yNDA0MDQxMTMyNTFaFw0yNTA0MDMxMTM3NTFaMDMxMTAvBgNV
BAMTKDlCMjk0REZBMEIwMkFDRDZDRTNDQTFCMDhDQTgyRDY5NTY4QzQxMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpJcL1ZlLodTj8+Jz6gy94Qmcr
ZCQe9m6a+iGJ8LEiYTueEpwLx3xzgdLzGLu1+/aU15cgJK+GQ6UFVFOc1azhDAQH
tXFw6mp4Xh1ck9fvu1joi3I29CZA0T6RWgLp8oRLUipWGrkMq8kDGuiEjLLKVQ9m
AIcpEdaq4avGZAfKzcahJUfae0VVT12wcDgJCNLMyIfiuXP5VLjYJKq37HWk8Neq
tCE0pSoeAiEmd2RwkxE6OORI3f7QD221EXsmBsU27c6NVee5TMvqlvfAm6QO8fB8
lDVZMhDbNslXf2aRL1044P+O6UxjoiFKGdGMT4wFIXINHNK4OoJZh1ytUOMRAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUmylN+gsCrNbOPKGwjKgtaVaMQRowHwYDVR0j
BBgwFoAUabf1qWWN5kWLEAlmYQ8TpCFyVAswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2hLaTVZczgyaGN5YlJaTll5WkJnZm5IaGhrVTRzOUQ4SlV4amd1QVRM
aGQvMS82OUI3RjVBOTY1OERFNjQ1OEIxMDA5NjY2MTBGMTNBNDIxNzI1NDBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY5QjdGNUE5NjU4REU2NDU4
QjEwMDk2NjYxMEYxM0E0MjE3MjU0MEIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNoS2k1WXM4MmhjeWJSWk5ZeVpCZ2ZuSGhoa1U0czlEOEpVeGpndUFUTGhkLzEv
MzIzODMwMzQzYTMzNjIzOTM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM2
MzEzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ7mDANBgkqhkiG9w0BAQsFAAOCAQEAAXKhtDtu
Y4l3rrL/E9qod4fVpcjSs48UPwaniZsO0lhLMh3E6lQlKTwraCGqZp7H05jSE8kX
lUJK7lgCj2ga76vUjKFuTp6P8mr/p9Vi1uJ3h6HWFX7K0sMfby5pE7EN3p/kpzDL
ijO78ydMygyw+bFydqe/zep65VehXX5t6Gmy2eybUZP3x0gD8V/ybPaRRcKX3X/4
YlvX0ZpubgZIIhSWR1ntxHTAwOQzixJNj8cU0RmWtdlmlZABDlwjpmRjS41stP+6
YCac2B+nudtA9HZuVnEys4Vd493VgvnkjoiC36b8/3zBPOw0OsfRPTzvJ43iz7G6
NwMgoDepu9j3iw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:06 2024 by rpki-client on console-fra.rpki-client.org