Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/323830313a38303a313431383a3a2f34382d3438203d3e203131303937.roa
File:                     323830313a38303a313431383a3a2f34382d3438203d3e203131303937.roa (raw, json)
Hash identifier:          iwcd3M9dZBznAj00mfcVMrzIqPZD2xUaB20cVZo3PVU=
Subject key identifier:   AA:82:01:A0:D5:5F:C6:0A:B3:D8:E5:79:48:66:D5:AD:5E:5E:96:04
Certificate issuer:       /CN=BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C
Certificate serial:       2728BDC527C07A08B49C2D2E162534ECC4233741
Authority key identifier: BC:61:E6:D5:F8:50:C8:FF:71:4F:E8:34:B7:A2:E7:1D:62:AB:BC:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/323830313a38303a313431383a3a2f34382d3438203d3e203131303937.roa
Signing time:             Tue 03 Sep 2024 18:32:40 +0000
ROA not before:           Tue 03 Sep 2024 18:27:40 +0000
ROA not after:            Tue 02 Sep 2025 18:32:40 +0000
asID:                     11097
IP address blocks:        2801:80:1418::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C.crl
                          rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:28:bd:c5:27:c0:7a:08:b4:9c:2d:2e:16:25:34:ec:c4:23:37:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C
        Validity
            Not Before: Sep  3 18:27:40 2024 GMT
            Not After : Sep  2 18:32:40 2025 GMT
        Subject: CN=AA8201A0D55FC60AB3D8E5794866D5AD5E5E9604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b0:26:0a:2d:8a:96:d7:f8:ce:27:a0:2d:d6:
                    e1:05:b0:64:c2:2b:85:9b:91:ee:0d:f7:80:62:20:
                    c6:a9:39:c5:5b:c2:c5:26:2f:ec:3f:3c:21:d0:31:
                    e7:04:67:cb:bd:5d:7e:3f:03:32:92:98:52:ee:06:
                    6f:37:13:12:1d:98:ff:15:17:7a:5a:39:87:3f:62:
                    5b:e4:b9:f4:ee:da:13:b3:f6:e9:dd:25:03:ff:ae:
                    93:60:fa:b7:99:bb:4b:97:0a:54:43:bf:1c:5d:b1:
                    d6:2c:be:0b:df:7b:f5:1a:95:4e:90:fd:94:f2:df:
                    e5:ff:dc:8e:b0:7b:41:f1:41:df:ba:d4:7c:ad:dd:
                    b1:ae:55:63:ab:b5:eb:c0:0e:1b:4c:85:b8:7a:ef:
                    a5:35:c6:48:1a:25:47:e8:72:06:5f:d1:bc:e1:21:
                    c2:a0:8f:ab:22:fa:9e:ac:bc:e4:45:50:97:49:aa:
                    b1:17:d2:78:b1:3e:45:62:38:1d:a5:44:3d:4c:e8:
                    cd:e8:cd:54:35:f9:e1:9e:6c:6d:e8:87:21:ed:e5:
                    f0:ae:2d:40:ed:89:b7:9d:b1:98:a3:5a:49:77:be:
                    17:5d:ec:22:8c:cb:8c:56:db:57:b0:30:71:c4:07:
                    18:d7:77:60:db:70:a1:16:a4:47:e4:e8:eb:5a:f0:
                    29:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:82:01:A0:D5:5F:C6:0A:B3:D8:E5:79:48:66:D5:AD:5E:5E:96:04
            X509v3 Authority Key Identifier:
                keyid:BC:61:E6:D5:F8:50:C8:FF:71:4F:E8:34:B7:A2:E7:1D:62:AB:BC:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/323830313a38303a313431383a3a2f34382d3438203d3e203131303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:1418::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:af:47:18:2b:4e:2b:aa:fc:3a:c7:de:64:96:0f:2d:3e:59:
         9f:07:6c:86:10:c7:ec:14:92:e5:37:46:99:6e:f3:72:b6:4f:
         02:59:9c:23:d6:03:ab:f2:bf:0b:18:41:ac:c9:aa:d5:8f:dc:
         5d:70:31:e1:b5:04:7a:27:cf:22:51:8b:38:5a:f5:ef:d1:eb:
         b1:69:ad:fb:bd:f6:16:fc:22:b1:5d:aa:a8:a4:7c:38:2d:f3:
         4f:90:dc:f8:81:f5:56:22:e7:d6:04:c8:13:5e:bc:0d:45:36:
         bd:58:08:6b:16:d0:d2:1c:ec:22:86:3f:26:1e:da:82:f5:5f:
         df:0c:58:57:d1:bc:f8:fd:81:18:6f:c7:3d:ca:36:75:1b:9a:
         25:f2:31:c0:94:8e:8c:72:25:0b:a1:ff:99:2c:6b:6b:e0:49:
         b0:53:a4:cb:ec:55:dd:a8:90:80:33:cc:34:3c:ed:44:a1:a7:
         ec:83:15:a1:8c:82:05:31:59:73:fe:3c:a3:b1:09:03:91:65:
         d2:97:a0:ca:5a:1a:4d:d7:ca:dd:41:34:41:61:16:20:e5:34:
         bc:c1:fc:f6:c0:c2:ff:ad:bb:e3:a7:f8:b3:c8:fa:3e:b6:75:
         3f:23:a8:a5:f9:0e:b8:5c:a8:b2:05:8d:9e:54:81:71:1a:0a:
         8c:7d:18:e4
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUJyi9xSfAegi0nC0uFiU07MQjN0EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkM2MUU2RDVGODUwQzhGRjcxNEZFODM0QjdBMkU3MUQ2
MkFCQkM1QzAeFw0yNDA5MDMxODI3NDBaFw0yNTA5MDIxODMyNDBaMDMxMTAvBgNV
BAMTKEFBODIwMUEwRDU1RkM2MEFCM0Q4RTU3OTQ4NjZENUFENUU1RTk2MDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCosCYKLYqW1/jOJ6At1uEFsGTC
K4Wbke4N94BiIMapOcVbwsUmL+w/PCHQMecEZ8u9XX4/AzKSmFLuBm83ExIdmP8V
F3paOYc/YlvkufTu2hOz9undJQP/rpNg+reZu0uXClRDvxxdsdYsvgvfe/UalU6Q
/ZTy3+X/3I6we0HxQd+61Hyt3bGuVWOrtevADhtMhbh676U1xkgaJUfocgZf0bzh
IcKgj6si+p6svORFUJdJqrEX0nixPkViOB2lRD1M6M3ozVQ1+eGebG3ohyHt5fCu
LUDtibedsZijWkl3vhdd7CKMy4xW21ewMHHEBxjXd2DbcKEWpEfk6Ota8CmbAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUqoIBoNVfxgqz2OV5SGbVrV5elgQwHwYDVR0j
BBgwFoAUvGHm1fhQyP9xT+g0t6LnHWKrvFwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFoybm9zVVFQYnRtQkp4V0d4RkVmMUozM1p4VTZZak5TY3NOZFAxdVBp
ZWUvMC9CQzYxRTZENUY4NTBDOEZGNzE0RkU4MzRCN0EyRTcxRDYyQUJCQzVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JDNjFFNkQ1Rjg1MEM4RkY3
MTRGRTgzNEI3QTJFNzFENjJBQkJDNUMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRaMm5vc1VRUGJ0bUJKeFdHeEZFZjFKMzNaeFU2WWpOU2NzTmRQMXVQaWVlLzAv
MzIzODMwMzEzYTM4MzAzYTMxMzQzMTM4M2EzYTJmMzQzODJkMzQzODIwM2QzZTIw
MzEzMTMwMzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACgBAIAUGDANBgkqhkiG9w0BAQsFAAOCAQEA
Ia9HGCtOK6r8OsfeZJYPLT5ZnwdshhDH7BSS5TdGmW7zcrZPAlmcI9YDq/K/CxhB
rMmq1Y/cXXAx4bUEeifPIlGLOFr179HrsWmt+732FvwisV2qqKR8OC3zT5Dc+IH1
ViLn1gTIE168DUU2vVgIaxbQ0hzsIoY/Jh7agvVf3wxYV9G8+P2BGG/HPco2dRua
JfIxwJSOjHIlC6H/mSxra+BJsFOky+xV3aiQgDPMNDztRKGn7IMVoYyCBTFZc/48
o7EJA5Fl0pegyloaTdfK3UE0QWEWIOU0vMH89sDC/62746f4s8j6PrZ1PyOopfkO
uFyosgWNnlSBcRoKjH0Y5A==
-----END CERTIFICATE-----
Generated at Sat Nov 23 07:29:58 2024 by rpki-client on console-fra.rpki-client.org