Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/1/323830343a376537383a3a2f33322d313238203d3e20323731363236.roa
File:                     323830343a376537383a3a2f33322d313238203d3e20323731363236.roa (raw, json)
Hash identifier:          f79NV5LrwhrQJ6H2/+WK0lab9N8gC40e3Bmet7vnZTQ=
Subject key identifier:   86:18:1B:89:37:6A:E7:EB:29:5A:2D:C9:E4:1A:8E:85:57:C0:D2:E5
Certificate issuer:       /CN=96105F190DDE9234922D5C3A990E469D1CB41394
Certificate serial:       59D5A6946AC004FFF446FF0A7F45AD1E9763FCC0
Authority key identifier: 96:10:5F:19:0D:DE:92:34:92:2D:5C:3A:99:0E:46:9D:1C:B4:13:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96105F190DDE9234922D5C3A990E469D1CB41394.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/1/323830343a376537383a3a2f33322d313238203d3e20323731363236.roa
Signing time:             Thu 04 Apr 2024 15:00:44 +0000
ROA not before:           Thu 04 Apr 2024 14:55:44 +0000
ROA not after:            Thu 03 Apr 2025 15:00:44 +0000
asID:                     271626
IP address blocks:        2804:7e78::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/1/96105F190DDE9234922D5C3A990E469D1CB41394.crl
                          rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/1/96105F190DDE9234922D5C3A990E469D1CB41394.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96105F190DDE9234922D5C3A990E469D1CB41394.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 03:17:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:d5:a6:94:6a:c0:04:ff:f4:46:ff:0a:7f:45:ad:1e:97:63:fc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96105F190DDE9234922D5C3A990E469D1CB41394
        Validity
            Not Before: Apr  4 14:55:44 2024 GMT
            Not After : Apr  3 15:00:44 2025 GMT
        Subject: CN=86181B89376AE7EB295A2DC9E41A8E8557C0D2E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:54:4f:7a:e2:b3:b5:83:fe:2a:e6:e4:b5:07:
                    33:bd:c6:3d:52:5e:8a:a0:a1:19:40:c2:0c:6b:99:
                    67:da:0d:88:55:13:1c:22:36:07:1c:47:04:22:47:
                    eb:3b:b2:19:e3:f5:ea:2c:ee:36:5f:76:50:bd:dd:
                    eb:91:16:a0:d5:d6:e1:11:f1:10:03:74:a3:01:43:
                    87:89:06:2d:78:fe:00:b4:8e:ea:ec:ef:f5:73:68:
                    54:f3:6d:8a:4e:7b:86:cf:90:cc:b9:0b:a2:19:26:
                    64:75:f2:20:7c:12:5e:bc:d9:c2:a1:c1:80:3e:d6:
                    0d:f8:29:51:bc:31:45:7a:66:6f:f8:2a:ba:12:e1:
                    aa:bc:e5:20:dc:69:6d:82:ec:fd:86:6f:4e:3a:86:
                    d2:42:e1:e5:ce:bb:b2:50:7e:95:d0:3c:c0:55:a2:
                    fd:a3:17:a9:6e:7c:5b:f7:25:61:4c:92:b9:3c:18:
                    33:07:ff:6d:6b:8a:a8:ba:47:22:1c:e0:8c:bc:da:
                    3d:43:0d:eb:98:8a:0e:8b:9d:86:18:2b:64:12:29:
                    47:14:27:05:d3:a7:c9:93:ec:9e:1a:1a:65:c1:e6:
                    d8:9f:b3:65:8c:fd:cd:c2:38:35:e6:ca:7c:83:d0:
                    c3:55:cd:18:1b:f4:5e:cb:e7:cf:02:f2:c1:b5:c3:
                    32:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:18:1B:89:37:6A:E7:EB:29:5A:2D:C9:E4:1A:8E:85:57:C0:D2:E5
            X509v3 Authority Key Identifier:
                keyid:96:10:5F:19:0D:DE:92:34:92:2D:5C:3A:99:0E:46:9D:1C:B4:13:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/1/96105F190DDE9234922D5C3A990E469D1CB41394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96105F190DDE9234922D5C3A990E469D1CB41394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/1/323830343a376537383a3a2f33322d313238203d3e20323731363236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e78::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:5d:93:f0:a1:58:8d:72:dc:04:59:01:b4:b0:9a:56:49:e0:
         ee:0d:0e:f2:fc:57:28:70:8e:4c:ce:87:a7:7b:9c:b6:bc:b2:
         37:f0:82:fd:5f:16:1a:66:bc:e5:02:5e:3d:1b:08:e0:46:1f:
         ac:cd:ee:b0:68:d0:fa:cd:6a:40:f7:c8:ca:71:10:c1:0d:ce:
         3a:ea:46:6c:aa:24:ed:51:7f:98:6c:1a:c8:62:8b:52:ef:c5:
         ae:89:f1:b8:21:27:97:38:83:1e:9e:50:08:f0:01:97:7f:78:
         b8:26:b9:51:9c:6b:e2:ae:de:ca:28:ab:3c:55:ff:52:c1:f7:
         fd:31:f6:d7:31:5e:5b:c5:82:27:f7:84:38:9f:92:58:08:db:
         e1:88:21:54:2c:8b:1f:89:c0:83:90:7b:bc:62:ba:8b:ab:3a:
         d7:33:68:aa:10:c1:e0:51:11:5c:13:06:f6:70:f6:23:ab:a1:
         79:3b:54:6b:52:29:3f:ab:f2:e8:d6:8a:2b:bc:07:c6:29:44:
         48:45:6c:13:e4:43:95:02:c0:9e:d4:07:80:2e:ec:65:5d:10:
         f4:a0:07:84:f2:1f:be:11:6c:1e:f1:bf:e0:82:72:5d:b5:76:
         f2:ad:43:95:c4:ec:41:3d:4e:ee:16:cd:06:c5:b9:f8:cc:79:
         00:b8:97:39
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUWdWmlGrABP/0Rv8Kf0WtHpdj/MAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTYxMDVGMTkwRERFOTIzNDkyMkQ1QzNBOTkwRTQ2OUQx
Q0I0MTM5NDAeFw0yNDA0MDQxNDU1NDRaFw0yNTA0MDMxNTAwNDRaMDMxMTAvBgNV
BAMTKDg2MTgxQjg5Mzc2QUU3RUIyOTVBMkRDOUU0MUE4RTg1NTdDMEQyRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMVE964rO1g/4q5uS1BzO9xj1S
XoqgoRlAwgxrmWfaDYhVExwiNgccRwQiR+s7shnj9eos7jZfdlC93euRFqDV1uER
8RADdKMBQ4eJBi14/gC0jurs7/VzaFTzbYpOe4bPkMy5C6IZJmR18iB8El682cKh
wYA+1g34KVG8MUV6Zm/4KroS4aq85SDcaW2C7P2Gb046htJC4eXOu7JQfpXQPMBV
ov2jF6lufFv3JWFMkrk8GDMH/21riqi6RyIc4Iy82j1DDeuYig6LnYYYK2QSKUcU
JwXTp8mT7J4aGmXB5tifs2WM/c3CODXmynyD0MNVzRgb9F7L588C8sG1wzIHAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUhhgbiTdq5+spWi3J5BqOhVfA0uUwHwYDVR0j
BBgwFoAUlhBfGQ3ekjSSLVw6mQ5GnRy0E5QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVhQWlFVN3BqV3pUd2I0N2E1TXpHdTJNdFNQTkh5RXZrbm9halVnRFBT
bmgvMS85NjEwNUYxOTBEREU5MjM0OTIyRDVDM0E5OTBFNDY5RDFDQjQxMzk0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk2MTA1RjE5MERERTkyMzQ5
MjJENUMzQTk5MEU0NjlEMUNCNDEzOTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVYUFpRVTdwald6VHdiNDdhNU16R3UyTXRTUE5IeUV2a25vYWpVZ0RQU25oLzEv
MzIzODMwMzQzYTM3NjUzNzM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzEzNjMyMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBH54MA0GCSqGSIb3DQEBCwUAA4IBAQCgXZPw
oViNctwEWQG0sJpWSeDuDQ7y/FcocI5Mzoene5y2vLI38IL9XxYaZrzlAl49Gwjg
Rh+sze6waND6zWpA98jKcRDBDc466kZsqiTtUX+YbBrIYotS78WuifG4ISeXOIMe
nlAI8AGXf3i4JrlRnGvirt7KKKs8Vf9Swff9MfbXMV5bxYIn94Q4n5JYCNvhiCFU
LIsficCDkHu8YrqLqzrXM2iqEMHgURFcEwb2cPYjq6F5O1RrUik/q/Lo1oorvAfG
KURIRWwT5EOVAsCe1AeALuxlXRD0oAeE8h++EWwe8b/ggnJdtXbyrUOVxOxBPU7u
Fs0Gxbn4zHkAuJc5
-----END CERTIFICATE-----
Generated at Sat Sep 28 04:03:55 2024 by rpki-client on console-fra.rpki-client.org