Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5tz3XhhUaYpPgVHWeJwq1kYqXLj1SQFRFbesNH5DHmPU/1/323830343a383833633a313430303a3a2f34302d3430203d3e20323732373538.roa
File:                     323830343a383833633a313430303a3a2f34302d3430203d3e20323732373538.roa (raw, json)
Hash identifier:          E1RkYIwK2SEWkNdRBaOpmhU8Ldksn30apgXVxngGgaU=
Subject key identifier:   AE:7A:05:CB:F9:E6:15:C0:60:07:32:E4:4A:85:B0:57:0E:A9:FD:37
Certificate issuer:       /CN=E68618F45B841B2C0F36D3F8AD7C98AF5A517052
Certificate serial:       4DA4EED3B3FCD8A60251DAA991031B17D4795609
Authority key identifier: E6:86:18:F4:5B:84:1B:2C:0F:36:D3:F8:AD:7C:98:AF:5A:51:70:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68618F45B841B2C0F36D3F8AD7C98AF5A517052.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5tz3XhhUaYpPgVHWeJwq1kYqXLj1SQFRFbesNH5DHmPU/1/323830343a383833633a313430303a3a2f34302d3430203d3e20323732373538.roa
Signing time:             Thu 04 Apr 2024 05:44:17 +0000
ROA not before:           Thu 04 Apr 2024 05:39:17 +0000
ROA not after:            Thu 03 Apr 2025 05:44:17 +0000
asID:                     272758
IP address blocks:        2804:883c:1400::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5tz3XhhUaYpPgVHWeJwq1kYqXLj1SQFRFbesNH5DHmPU/1/E68618F45B841B2C0F36D3F8AD7C98AF5A517052.crl
                          rsync://rpki-repo.registro.br/repo/5tz3XhhUaYpPgVHWeJwq1kYqXLj1SQFRFbesNH5DHmPU/1/E68618F45B841B2C0F36D3F8AD7C98AF5A517052.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68618F45B841B2C0F36D3F8AD7C98AF5A517052.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:a4:ee:d3:b3:fc:d8:a6:02:51:da:a9:91:03:1b:17:d4:79:56:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E68618F45B841B2C0F36D3F8AD7C98AF5A517052
        Validity
            Not Before: Apr  4 05:39:17 2024 GMT
            Not After : Apr  3 05:44:17 2025 GMT
        Subject: CN=AE7A05CBF9E615C0600732E44A85B0570EA9FD37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:67:d7:e6:16:17:7d:46:06:de:f0:8e:72:6a:
                    17:f3:ef:d7:e9:35:1f:44:a2:3d:15:2b:fb:79:18:
                    50:79:67:d0:16:91:89:05:7a:da:8c:2f:70:5c:3c:
                    4b:6b:15:1a:a2:d1:3a:b3:70:a7:5e:31:d2:da:d1:
                    ad:46:07:6d:cc:c3:71:3d:67:b5:46:32:ac:a7:32:
                    26:f8:1c:18:07:40:e4:62:b2:16:c0:91:f8:16:7b:
                    bb:56:ab:e4:0f:7e:d3:a1:66:12:1a:49:7c:43:f3:
                    78:7d:20:8d:87:91:0f:92:b6:5f:1e:d4:77:5d:66:
                    9b:34:58:8a:b8:42:9d:e7:53:5d:af:7f:b0:40:4b:
                    5f:0e:92:44:26:db:f2:fc:40:2c:5c:15:d3:2a:bb:
                    f6:7a:03:5e:05:31:3d:4e:32:5b:32:a7:2f:0b:f1:
                    94:cc:0b:d1:24:5f:e5:7c:e6:63:e9:2d:e2:d7:67:
                    a5:99:c1:10:bc:91:73:33:37:3c:06:46:8b:9c:90:
                    13:89:c3:f6:df:48:b2:74:72:e8:d3:5e:4b:2d:2f:
                    29:ad:15:f2:5d:19:9a:99:b9:c2:92:87:e4:ee:20:
                    2b:d5:1f:af:33:12:44:91:cd:48:27:ad:31:1e:ff:
                    63:7e:0c:7e:81:ff:53:12:3e:c2:d6:2e:66:b2:c3:
                    12:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:7A:05:CB:F9:E6:15:C0:60:07:32:E4:4A:85:B0:57:0E:A9:FD:37
            X509v3 Authority Key Identifier:
                keyid:E6:86:18:F4:5B:84:1B:2C:0F:36:D3:F8:AD:7C:98:AF:5A:51:70:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5tz3XhhUaYpPgVHWeJwq1kYqXLj1SQFRFbesNH5DHmPU/1/E68618F45B841B2C0F36D3F8AD7C98AF5A517052.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68618F45B841B2C0F36D3F8AD7C98AF5A517052.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5tz3XhhUaYpPgVHWeJwq1kYqXLj1SQFRFbesNH5DHmPU/1/323830343a383833633a313430303a3a2f34302d3430203d3e20323732373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:883c:1400::/40

    Signature Algorithm: sha256WithRSAEncryption
         0c:36:84:ba:f4:b3:f9:dc:d7:c0:bb:be:66:83:82:b2:9a:42:
         2c:b8:33:0e:03:9e:b8:c0:e0:85:cd:b1:47:f4:e0:fe:13:59:
         f3:35:8a:83:36:2e:b7:26:d3:c6:79:c2:dd:30:3d:65:91:3a:
         e6:61:32:6b:15:7f:5f:2a:c1:ac:5d:d4:a7:bb:de:8b:8c:10:
         71:57:03:12:60:8b:ce:49:53:ee:04:de:a3:51:0a:d6:8d:fc:
         f9:e7:34:d8:40:72:58:48:95:a6:66:8e:5e:05:04:cd:34:93:
         de:07:0d:9d:63:b8:eb:68:89:a9:ad:7c:44:d8:3c:93:9e:9f:
         a8:db:80:26:60:c5:5d:df:42:17:2b:ce:99:98:ab:12:2e:2a:
         72:44:74:74:cf:55:89:6b:10:d7:6c:35:16:fa:98:f7:b6:6f:
         14:c1:be:62:4e:f5:cb:1c:6e:d3:00:4c:f2:05:98:48:99:a2:
         27:c5:90:28:ca:58:bc:be:85:90:f0:f8:61:7e:49:8d:69:b5:
         23:bf:08:56:a9:41:57:d9:c1:be:ae:b8:c8:87:2c:ef:fe:ae:
         d3:fd:e6:4a:03:02:25:65:33:2f:57:68:fe:0b:2e:aa:6a:a8:
         20:df:16:81:59:56:ca:aa:85:3b:cd:8f:8b:a6:c0:ad:79:c0:
         96:5a:78:94
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUTaTu07P82KYCUdqpkQMbF9R5VgkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTY4NjE4RjQ1Qjg0MUIyQzBGMzZEM0Y4QUQ3Qzk4QUY1
QTUxNzA1MjAeFw0yNDA0MDQwNTM5MTdaFw0yNTA0MDMwNTQ0MTdaMDMxMTAvBgNV
BAMTKEFFN0EwNUNCRjlFNjE1QzA2MDA3MzJFNDRBODVCMDU3MEVBOUZEMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSZ9fmFhd9Rgbe8I5yahfz79fp
NR9Eoj0VK/t5GFB5Z9AWkYkFetqML3BcPEtrFRqi0TqzcKdeMdLa0a1GB23Mw3E9
Z7VGMqynMib4HBgHQORishbAkfgWe7tWq+QPftOhZhIaSXxD83h9II2HkQ+Stl8e
1HddZps0WIq4Qp3nU12vf7BAS18OkkQm2/L8QCxcFdMqu/Z6A14FMT1OMlsypy8L
8ZTMC9EkX+V85mPpLeLXZ6WZwRC8kXMzNzwGRouckBOJw/bfSLJ0cujTXkstLymt
FfJdGZqZucKSh+TuICvVH68zEkSRzUgnrTEe/2N+DH6B/1MSPsLWLmaywxJhAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUrnoFy/nmFcBgBzLkSoWwVw6p/TcwHwYDVR0j
BBgwFoAU5oYY9FuEGywPNtP4rXyYr1pRcFIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXR6M1hoaFVhWXBQZ1ZIV2VKd3Exa1lxWExqMVNRRlJGYmVzTkg1REht
UFUvMS9FNjg2MThGNDVCODQxQjJDMEYzNkQzRjhBRDdDOThBRjVBNTE3MDUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U2ODYxOEY0NUI4NDFCMkMw
RjM2RDNGOEFEN0M5OEFGNUE1MTcwNTIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV0ejNYaGhVYVlwUGdWSFdlSndxMWtZcVhMajFTUUZSRmJlc05INURIbVBVLzEv
MzIzODMwMzQzYTM4MzgzMzYzM2EzMTM0MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzczMjM3MzUzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEiDwUMA0GCSqGSIb3DQEBCwUA
A4IBAQAMNoS69LP53NfAu75mg4KymkIsuDMOA564wOCFzbFH9OD+E1nzNYqDNi63
JtPGecLdMD1lkTrmYTJrFX9fKsGsXdSnu96LjBBxVwMSYIvOSVPuBN6jUQrWjfz5
5zTYQHJYSJWmZo5eBQTNNJPeBw2dY7jraImprXxE2DyTnp+o24AmYMVd30IXK86Z
mKsSLipyRHR0z1WJaxDXbDUW+pj3tm8Uwb5iTvXLHG7TAEzyBZhImaInxZAoyli8
voWQ8PhhfkmNabUjvwhWqUFX2cG+rrjIhyzv/q7T/eZKAwIlZTMvV2j+Cy6qaqgg
3xaBWVbKqoU7zY+LpsCtecCWWniU
-----END CERTIFICATE-----
Generated at Tue Nov 26 08:30:10 2024 by rpki-client on console-ams.rpki-client.org