Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/323830343a363136343a343030313a3a2f34382d3438203d3e20323632343234.roa
File:                     323830343a363136343a343030313a3a2f34382d3438203d3e20323632343234.roa (raw, json)
Hash identifier:          Jx/B52ZhNnQNVPSIhAw4f4v4OI0oAqi7RMM2OXJ/YLE=
Subject key identifier:   13:8C:E9:51:7E:D2:A6:67:0F:45:D4:A2:B3:23:65:2E:A0:4D:BE:F0
Certificate issuer:       /CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
Certificate serial:       2FF02F65FAA1230EEAA7FE032889848782915A76
Authority key identifier: 75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/323830343a363136343a343030313a3a2f34382d3438203d3e20323632343234.roa
Signing time:             Wed 15 May 2024 13:26:50 +0000
ROA not before:           Wed 15 May 2024 13:21:50 +0000
ROA not after:            Wed 14 May 2025 13:26:50 +0000
asID:                     262424
IP address blocks:        2804:6164:4001::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl
                          rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:f0:2f:65:fa:a1:23:0e:ea:a7:fe:03:28:89:84:87:82:91:5a:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
        Validity
            Not Before: May 15 13:21:50 2024 GMT
            Not After : May 14 13:26:50 2025 GMT
        Subject: CN=138CE9517ED2A6670F45D4A2B323652EA04DBEF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8e:ce:03:d4:a5:70:53:e9:1b:eb:a6:98:cb:
                    c3:f9:c9:b0:ec:42:e7:10:e1:35:cc:91:f0:99:07:
                    e4:c6:7c:c2:a1:4e:db:e5:37:22:3c:20:74:2f:0b:
                    57:85:af:7b:8d:f0:ad:9d:10:0f:61:94:f8:1f:60:
                    b6:ea:a7:74:68:0e:d3:3c:fe:58:4e:9d:40:13:ef:
                    08:39:78:87:28:21:02:bd:b4:30:97:86:77:51:d1:
                    b0:f0:cd:5b:96:51:44:40:ef:95:02:38:71:66:88:
                    fd:9f:2e:dc:77:a0:4f:db:65:d1:7d:85:75:7e:3f:
                    0b:f0:7a:53:8f:18:bc:c0:9f:e6:a8:00:aa:a9:9a:
                    fc:d2:4e:06:f4:49:cf:76:d9:79:28:df:49:f5:df:
                    3d:98:2b:01:20:da:36:9c:50:7d:43:08:17:9d:96:
                    e1:52:75:54:03:93:6d:04:92:54:9d:e3:94:7a:46:
                    b5:63:48:ac:db:9c:19:56:54:db:f0:8e:fc:71:e5:
                    3d:89:92:12:db:07:8d:2e:a6:f0:06:6b:94:a5:39:
                    32:54:7e:66:c4:5f:0b:f2:86:8e:9b:6f:23:ce:93:
                    3a:07:22:b7:43:86:b4:60:18:9d:15:ca:91:5c:5c:
                    3f:47:0c:2e:2a:62:15:05:fe:4b:94:30:13:4d:93:
                    f5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:8C:E9:51:7E:D2:A6:67:0F:45:D4:A2:B3:23:65:2E:A0:4D:BE:F0
            X509v3 Authority Key Identifier:
                keyid:75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/323830343a363136343a343030313a3a2f34382d3438203d3e20323632343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6164:4001::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:14:0e:22:37:51:7f:4d:af:ce:73:2a:e3:fc:cb:6e:61:53:
         ec:15:4d:a6:fa:a8:5c:eb:1b:ac:7b:9e:d2:47:13:f4:5b:8f:
         c0:f8:9a:47:0b:f7:83:59:3b:f0:bc:26:c0:d5:48:46:00:ba:
         28:d1:5d:38:d4:a2:82:a9:73:e7:9e:b8:a8:dc:51:75:8a:cc:
         cb:06:87:87:6f:c2:b9:1b:1e:2f:cc:b3:55:a5:b6:7d:72:cc:
         98:fa:a0:b8:3f:c4:f7:3b:37:ea:cc:c8:f1:c3:fd:13:d3:9e:
         ca:54:9f:b8:e3:59:48:db:51:d0:19:4f:0b:48:5f:ec:e6:6a:
         47:5e:61:5d:28:a0:c9:3e:86:f1:78:af:32:7b:6b:17:13:8e:
         76:b7:83:7b:3d:d1:7a:ce:b8:23:80:89:2d:d1:09:97:e8:b3:
         d8:d8:d0:85:64:5c:76:d8:3a:a9:52:65:06:28:de:d0:d6:06:
         77:56:42:b2:b9:8f:1f:a8:aa:10:e8:31:21:e7:af:f8:da:7a:
         99:da:88:a6:03:54:90:0e:95:4b:45:0d:99:ef:b9:d0:bf:b2:
         0e:28:65:d5:ce:89:d9:f8:5e:93:32:e9:15:02:cc:f6:a3:ab:
         b9:9d:6c:f1:f0:03:bf:ec:4f:7b:af:cc:2c:f4:05:44:db:d2:
         21:aa:78:1c
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUL/AvZfqhIw7qp/4DKImEh4KRWnYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzU5RUM1MzA5N0U3MjQ4QzQwOEMzRDFBNjQyMkRCODVC
QjQ0NzBBMzAeFw0yNDA1MTUxMzIxNTBaFw0yNTA1MTQxMzI2NTBaMDMxMTAvBgNV
BAMTKDEzOENFOTUxN0VEMkE2NjcwRjQ1RDRBMkIzMjM2NTJFQTA0REJFRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgjs4D1KVwU+kb66aYy8P5ybDs
QucQ4TXMkfCZB+TGfMKhTtvlNyI8IHQvC1eFr3uN8K2dEA9hlPgfYLbqp3RoDtM8
/lhOnUAT7wg5eIcoIQK9tDCXhndR0bDwzVuWUURA75UCOHFmiP2fLtx3oE/bZdF9
hXV+PwvwelOPGLzAn+aoAKqpmvzSTgb0Sc922Xko30n13z2YKwEg2jacUH1DCBed
luFSdVQDk20EklSd45R6RrVjSKzbnBlWVNvwjvxx5T2JkhLbB40upvAGa5SlOTJU
fmbEXwvyho6bbyPOkzoHIrdDhrRgGJ0VypFcXD9HDC4qYhUF/kuUMBNNk/WrAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUE4zpUX7SpmcPRdSisyNlLqBNvvAwHwYDVR0j
BBgwFoAUdZ7FMJfnJIxAjD0aZCLbhbtEcKMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXV1RGtxS3hlUzR2YXlyUnhwVlBpZm9jbVpWVnhuVnlSVWpGYXVOVlJU
QkIvMC83NTlFQzUzMDk3RTcyNDhDNDA4QzNEMUE2NDIyREI4NUJCNDQ3MEEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc1OUVDNTMwOTdFNzI0OEM0
MDhDM0QxQTY0MjJEQjg1QkI0NDcwQTMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV1dURrcUt4ZVM0dmF5clJ4cFZQaWZvY21aVlZ4blZ5UlVqRmF1TlZSVEJCLzAv
MzIzODMwMzQzYTM2MzEzNjM0M2EzNDMwMzAzMTNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzMjM0MzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEYWRAATANBgkqhkiG9w0BAQsF
AAOCAQEARRQOIjdRf02vznMq4/zLbmFT7BVNpvqoXOsbrHue0kcT9FuPwPiaRwv3
g1k78LwmwNVIRgC6KNFdONSigqlz5564qNxRdYrMywaHh2/CuRseL8yzVaW2fXLM
mPqguD/E9zs36szI8cP9E9OeylSfuONZSNtR0BlPC0hf7OZqR15hXSigyT6G8Xiv
MntrFxOOdreDez3Res64I4CJLdEJl+iz2NjQhWRcdtg6qVJlBije0NYGd1ZCsrmP
H6iqEOgxIeev+Np6mdqIpgNUkA6VS0UNme+50L+yDihl1c6J2fhekzLpFQLM9qOr
uZ1s8fADv+xPe6/MLPQFRNvSIap4HA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:20:53 2024 by rpki-client on console-fra.rpki-client.org