Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/323830343a363938633a3a2f33322d3334203d3e20323730323737.roa
File:                     323830343a363938633a3a2f33322d3334203d3e20323730323737.roa (raw, json)
Hash identifier:          3ugj8SJnT6aXQyajzVMkVs+3Sc0dyIhAEw8tcMVhXsQ=
Subject key identifier:   8E:B7:64:C9:AC:FC:E5:46:E3:CB:B1:6F:2A:F4:0E:EA:81:C2:7D:E6
Certificate issuer:       /CN=FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9
Certificate serial:       16819BD7866FE602B6ABBBDF33E1D9B82054A61F
Authority key identifier: FD:3C:84:64:3C:F0:CF:DE:C3:F3:2D:E5:AE:63:E8:8B:CF:A9:F7:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/323830343a363938633a3a2f33322d3334203d3e20323730323737.roa
Signing time:             Thu 04 Apr 2024 13:50:26 +0000
ROA not before:           Thu 04 Apr 2024 13:45:26 +0000
ROA not after:            Thu 03 Apr 2025 13:50:26 +0000
asID:                     270277
IP address blocks:        2804:698c::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.crl
                          rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:38:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:81:9b:d7:86:6f:e6:02:b6:ab:bb:df:33:e1:d9:b8:20:54:a6:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9
        Validity
            Not Before: Apr  4 13:45:26 2024 GMT
            Not After : Apr  3 13:50:26 2025 GMT
        Subject: CN=8EB764C9ACFCE546E3CBB16F2AF40EEA81C27DE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:26:67:94:74:86:a9:0f:75:a0:24:77:9b:fd:
                    45:16:af:b1:b2:9c:50:43:77:76:52:65:13:09:5e:
                    90:99:85:40:34:09:59:3f:86:ec:3a:18:d8:95:22:
                    38:93:85:70:49:d1:bb:a5:d8:ce:07:fc:a9:f2:69:
                    5e:ed:fd:cb:fa:47:70:57:48:7c:d6:59:cb:47:89:
                    4f:37:6d:f9:85:91:a0:3c:a3:fc:ba:69:43:6f:99:
                    8b:3c:d6:1d:c5:c6:43:f7:99:49:98:74:a8:89:ec:
                    bb:d6:de:bd:ee:19:e0:2a:f7:60:98:43:49:3a:86:
                    6b:60:01:18:09:66:46:18:c5:f9:db:bd:4b:0a:a6:
                    ee:bb:8a:1d:9d:8f:1c:dd:43:30:e4:56:ad:d0:b3:
                    8f:82:c0:48:c7:f0:65:3f:59:86:17:ff:99:ab:91:
                    6a:28:3a:d6:f5:3e:2a:fa:5a:96:19:76:89:ab:88:
                    b9:26:3b:7d:ac:0a:d3:e0:ea:df:9e:86:d0:f9:ea:
                    4d:27:df:e0:db:f4:33:1f:bb:64:c6:cb:c4:2b:8d:
                    f7:35:e7:ad:76:ad:ab:8f:2e:06:44:6b:26:f5:93:
                    98:78:71:46:ac:c5:73:f1:cf:85:f2:72:18:fe:12:
                    f1:77:e1:22:c4:71:0b:7b:08:ac:41:dd:fc:62:95:
                    85:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B7:64:C9:AC:FC:E5:46:E3:CB:B1:6F:2A:F4:0E:EA:81:C2:7D:E6
            X509v3 Authority Key Identifier:
                keyid:FD:3C:84:64:3C:F0:CF:DE:C3:F3:2D:E5:AE:63:E8:8B:CF:A9:F7:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/323830343a363938633a3a2f33322d3334203d3e20323730323737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:698c::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:0b:71:f4:e5:e9:2d:8f:84:e8:11:78:07:2f:ae:d7:76:0e:
         4b:61:7c:7f:ed:fb:56:80:32:b2:f2:82:10:27:3c:66:3b:8a:
         8b:54:b1:da:c1:84:3b:14:9f:ff:2a:59:33:5f:9e:fb:fc:23:
         57:85:88:1d:9c:55:55:8b:16:3c:cd:5e:e6:89:57:e2:a6:e1:
         45:10:75:19:2e:34:9c:ba:21:89:fb:b8:7c:b3:81:61:cc:01:
         3e:64:dc:06:b5:af:21:c7:c6:32:e3:ab:f4:b7:7c:96:b8:ab:
         12:27:96:89:f6:2f:d8:56:d7:a0:8a:9a:05:76:f1:35:2e:26:
         f2:f4:b9:1d:06:9f:12:1a:12:be:1e:a5:4a:8b:69:39:23:8a:
         f7:a3:98:cc:36:66:57:89:34:5a:8b:24:ab:9d:04:b3:50:c7:
         ee:c1:39:82:cf:41:1b:8d:b6:03:6c:ab:be:6d:26:41:a7:8d:
         42:77:3d:49:95:1d:67:0c:90:ac:69:99:94:49:07:23:7f:12:
         b2:04:d6:c8:e3:63:4f:bd:58:cc:eb:71:c2:6a:47:1a:26:27:
         bf:59:fd:b6:4b:c3:ba:56:92:3b:32:ea:00:05:00:ad:95:50:
         12:6d:8f:55:db:5b:9f:39:4e:b4:a0:ab:7a:8c:04:80:d1:7c:
         e5:08:90:89
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUFoGb14Zv5gK2q7vfM+HZuCBUph8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkQzQzg0NjQzQ0YwQ0ZERUMzRjMyREU1QUU2M0U4OEJD
RkE5RjdDOTAeFw0yNDA0MDQxMzQ1MjZaFw0yNTA0MDMxMzUwMjZaMDMxMTAvBgNV
BAMTKDhFQjc2NEM5QUNGQ0U1NDZFM0NCQjE2RjJBRjQwRUVBODFDMjdERTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5JmeUdIapD3WgJHeb/UUWr7Gy
nFBDd3ZSZRMJXpCZhUA0CVk/huw6GNiVIjiThXBJ0bul2M4H/KnyaV7t/cv6R3BX
SHzWWctHiU83bfmFkaA8o/y6aUNvmYs81h3FxkP3mUmYdKiJ7LvW3r3uGeAq92CY
Q0k6hmtgARgJZkYYxfnbvUsKpu67ih2djxzdQzDkVq3Qs4+CwEjH8GU/WYYX/5mr
kWooOtb1Pir6WpYZdomriLkmO32sCtPg6t+ehtD56k0n3+Db9DMfu2TGy8Qrjfc1
5612rauPLgZEayb1k5h4cUasxXPxz4Xychj+EvF34SLEcQt7CKxB3fxilYWLAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUjrdkyaz85Ubjy7FvKvQO6oHCfeYwHwYDVR0j
BBgwFoAU/TyEZDzwz97D8y3lrmPoi8+p98kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUFrMzZXaVlNZjg4dHV5N1d0VkpCRXhrNlVvMm1iWUZHZ1lhQllMc1VF
a3ovMS9GRDNDODQ2NDNDRjBDRkRFQzNGMzJERTVBRTYzRTg4QkNGQTlGN0M5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZEM0M4NDY0M0NGMENGREVD
M0YzMkRFNUFFNjNFODhCQ0ZBOUY3QzkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVBazM2V2lZTWY4OHR1eTdXdFZKQkV4azZVbzJtYllGR2dZYUJZTHNVRWt6LzEv
MzIzODMwMzQzYTM2MzkzODYzM2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNzMw
MzIzNzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARpjDANBgkqhkiG9w0BAQsFAAOCAQEANgtx9OXp
LY+E6BF4By+u13YOS2F8f+37VoAysvKCECc8ZjuKi1Sx2sGEOxSf/ypZM1+e+/wj
V4WIHZxVVYsWPM1e5olX4qbhRRB1GS40nLohifu4fLOBYcwBPmTcBrWvIcfGMuOr
9Ld8lrirEieWifYv2FbXoIqaBXbxNS4m8vS5HQafEhoSvh6lSotpOSOK96OYzDZm
V4k0Woskq50Es1DH7sE5gs9BG422A2yrvm0mQaeNQnc9SZUdZwyQrGmZlEkHI38S
sgTWyONjT71YzOtxwmpHGiYnv1n9tkvDulaSOzLqAAUArZVQEm2PVdtbnzlOtKCr
eowEgNF85QiQiQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:58 2024 by rpki-client on console-ams.rpki-client.org