Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4sRS7Q4Meq9bNtq9RNbRGXfYSEKz6myEMPRabdKLoyPt/0/323830343a313332303a3a2f33322d3438203d3e20323633353137.roa
File:                     323830343a313332303a3a2f33322d3438203d3e20323633353137.roa (raw, json)
Hash identifier:          6qgTdnDpeAeGByTUVjAuBfWGxN1LswSGbBGq95oa7Z8=
Subject key identifier:   CD:A0:9E:8B:E1:E6:CE:E2:0F:37:8E:8B:B1:E1:1F:37:43:64:89:D1
Certificate issuer:       /CN=C00FB53F604F018C47E70501EB1D8A1047AE4DB1
Certificate serial:       49900442524851CC33907B7C73B46F5155F4CC4E
Authority key identifier: C0:0F:B5:3F:60:4F:01:8C:47:E7:05:01:EB:1D:8A:10:47:AE:4D:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C00FB53F604F018C47E70501EB1D8A1047AE4DB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4sRS7Q4Meq9bNtq9RNbRGXfYSEKz6myEMPRabdKLoyPt/0/323830343a313332303a3a2f33322d3438203d3e20323633353137.roa
Signing time:             Mon 29 Jul 2024 15:15:28 +0000
ROA not before:           Mon 29 Jul 2024 15:10:28 +0000
ROA not after:            Mon 28 Jul 2025 15:15:28 +0000
asID:                     263517
IP address blocks:        2804:1320::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4sRS7Q4Meq9bNtq9RNbRGXfYSEKz6myEMPRabdKLoyPt/0/C00FB53F604F018C47E70501EB1D8A1047AE4DB1.crl
                          rsync://rpki-repo.registro.br/repo/4sRS7Q4Meq9bNtq9RNbRGXfYSEKz6myEMPRabdKLoyPt/0/C00FB53F604F018C47E70501EB1D8A1047AE4DB1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C00FB53F604F018C47E70501EB1D8A1047AE4DB1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:90:04:42:52:48:51:cc:33:90:7b:7c:73:b4:6f:51:55:f4:cc:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C00FB53F604F018C47E70501EB1D8A1047AE4DB1
        Validity
            Not Before: Jul 29 15:10:28 2024 GMT
            Not After : Jul 28 15:15:28 2025 GMT
        Subject: CN=CDA09E8BE1E6CEE20F378E8BB1E11F37436489D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d1:af:c5:54:90:95:f7:72:1d:f8:3b:04:87:
                    5c:77:4c:ae:fd:2d:df:a2:ae:f6:14:fe:78:e6:9a:
                    89:51:99:06:8a:c0:2e:5b:7f:12:e8:44:40:1e:ac:
                    7c:af:2b:70:af:bd:2d:a0:28:52:78:ab:53:fb:30:
                    e4:38:ec:9a:c2:ed:57:91:cf:bb:23:e3:9a:76:b7:
                    da:f7:14:c6:7c:66:1b:99:71:a1:67:07:5c:03:c4:
                    f2:a2:48:b6:b1:d3:4c:04:3b:3f:30:ab:1b:4f:9c:
                    9e:64:56:af:3e:6a:8c:5d:42:55:82:94:56:52:05:
                    e3:fd:ff:a5:e7:a9:d3:f9:21:90:a1:69:13:75:f7:
                    84:e2:3c:59:54:a6:a2:f0:70:30:b0:1e:d7:0f:6f:
                    11:7d:01:02:6c:14:1a:b3:20:ff:90:ad:1f:50:ea:
                    c5:5a:10:12:8f:8d:e9:df:19:45:dc:76:4e:68:e7:
                    ac:9d:82:7e:61:82:98:25:b8:e0:be:08:e9:60:29:
                    de:d1:94:73:18:17:cf:e9:25:00:fc:17:64:ce:69:
                    fd:83:ef:a6:8a:3e:29:0b:ce:8c:2b:bb:ca:71:c9:
                    b1:e0:13:5a:79:77:c1:6f:73:a6:c1:b2:5c:b9:12:
                    1e:c4:6f:f2:25:72:10:5b:0c:f6:2d:7f:7d:05:3d:
                    0c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A0:9E:8B:E1:E6:CE:E2:0F:37:8E:8B:B1:E1:1F:37:43:64:89:D1
            X509v3 Authority Key Identifier:
                keyid:C0:0F:B5:3F:60:4F:01:8C:47:E7:05:01:EB:1D:8A:10:47:AE:4D:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4sRS7Q4Meq9bNtq9RNbRGXfYSEKz6myEMPRabdKLoyPt/0/C00FB53F604F018C47E70501EB1D8A1047AE4DB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C00FB53F604F018C47E70501EB1D8A1047AE4DB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4sRS7Q4Meq9bNtq9RNbRGXfYSEKz6myEMPRabdKLoyPt/0/323830343a313332303a3a2f33322d3438203d3e20323633353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1320::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:38:ad:bb:0f:e6:84:32:04:08:0b:3d:f8:1e:74:06:de:12:
         2f:1f:00:f6:76:84:dd:8d:a1:6f:12:d1:80:be:fa:66:2a:0f:
         d1:e5:1b:ce:df:b9:bf:65:95:3f:f0:f1:ce:07:bc:4f:26:cc:
         79:55:fb:f7:a1:c1:52:0e:65:db:a8:4f:07:57:54:eb:f5:a4:
         2c:34:5b:f4:dd:6d:39:0d:0d:ce:3e:67:df:b6:ae:2f:98:a9:
         bb:c7:d5:b2:46:55:bc:2d:6e:8f:cf:a3:a7:27:2c:b3:63:ba:
         44:e7:ba:d3:39:62:3a:51:19:55:e7:b4:0f:ce:be:9a:be:5a:
         af:97:ca:58:ae:3d:9d:6d:b9:93:63:14:f8:2f:f6:50:d6:4f:
         86:e8:54:66:a7:d1:56:eb:44:37:72:9b:98:6a:3c:36:b1:dd:
         8d:dd:db:f9:ba:68:72:34:34:dd:a9:55:2b:b9:43:a8:bd:b1:
         1b:af:c6:ba:09:b5:30:59:f1:42:e5:fa:a1:da:e6:f6:7e:c9:
         24:f4:20:74:65:4c:ba:6e:0c:a0:26:53:f0:d5:1c:31:13:9a:
         1c:3a:fe:1e:6a:91:51:18:14:91:be:a9:ac:79:7c:55:16:71:
         b2:6e:0d:a3:e4:4e:1c:ff:fd:13:92:c6:50:df:b8:d6:08:b8:
         0c:77:8e:58
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUSZAEQlJIUcwzkHt8c7RvUVX0zE4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzAwRkI1M0Y2MDRGMDE4QzQ3RTcwNTAxRUIxRDhBMTA0
N0FFNERCMTAeFw0yNDA3MjkxNTEwMjhaFw0yNTA3MjgxNTE1MjhaMDMxMTAvBgNV
BAMTKENEQTA5RThCRTFFNkNFRTIwRjM3OEU4QkIxRTExRjM3NDM2NDg5RDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb0a/FVJCV93Id+DsEh1x3TK79
Ld+irvYU/njmmolRmQaKwC5bfxLoREAerHyvK3CvvS2gKFJ4q1P7MOQ47JrC7VeR
z7sj45p2t9r3FMZ8ZhuZcaFnB1wDxPKiSLax00wEOz8wqxtPnJ5kVq8+aoxdQlWC
lFZSBeP9/6XnqdP5IZChaRN194TiPFlUpqLwcDCwHtcPbxF9AQJsFBqzIP+QrR9Q
6sVaEBKPjenfGUXcdk5o56ydgn5hgpgluOC+COlgKd7RlHMYF8/pJQD8F2TOaf2D
76aKPikLzowru8pxybHgE1p5d8Fvc6bBsly5Eh7Eb/IlchBbDPYtf30FPQxXAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUzaCei+HmzuIPN46LseEfN0NkidEwHwYDVR0j
BBgwFoAUwA+1P2BPAYxH5wUB6x2KEEeuTbEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHNSUzdRNE1lcTliTnRxOVJOYlJHWGZZU0VLejZteUVNUFJhYmRLTG95
UHQvMC9DMDBGQjUzRjYwNEYwMThDNDdFNzA1MDFFQjFEOEExMDQ3QUU0REIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MwMEZCNTNGNjA0RjAxOEM0
N0U3MDUwMUVCMUQ4QTEwNDdBRTREQjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRzUlM3UTRNZXE5Yk50cTlSTmJSR1hmWVNFS3o2bXlFTVBSYWJkS0xveVB0LzAv
MzIzODMwMzQzYTMxMzMzMjMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjMz
MzUzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQTIDANBgkqhkiG9w0BAQsFAAOCAQEAMjituw/m
hDIECAs9+B50Bt4SLx8A9naE3Y2hbxLRgL76ZioP0eUbzt+5v2WVP/Dxzge8TybM
eVX796HBUg5l26hPB1dU6/WkLDRb9N1tOQ0Nzj5n37auL5ipu8fVskZVvC1uj8+j
pycss2O6ROe60zliOlEZVee0D86+mr5ar5fKWK49nW25k2MU+C/2UNZPhuhUZqfR
VutEN3KbmGo8NrHdjd3b+bpocjQ03alVK7lDqL2xG6/Gugm1MFnxQuX6odrm9n7J
JPQgdGVMum4MoCZT8NUcMROaHDr+HmqRURgUkb6prHl8VRZxsm4No+ROHP/9E5LG
UN+41gi4DHeOWA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:31 2024 by rpki-client on console-ams.rpki-client.org