Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/323830343a363136343a34303a3a2f34322d3432203d3e20323632343234.roa
File:                     323830343a363136343a34303a3a2f34322d3432203d3e20323632343234.roa (raw, json)
Hash identifier:          SAvTJ9K0E6W1d1r06rzmPoe8+BaQ7WcxLpfW7CegAwg=
Subject key identifier:   6C:07:F6:1F:A2:DC:7B:FC:42:04:DC:5F:80:59:D8:58:D8:A4:8D:B6
Certificate issuer:       /CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
Certificate serial:       0C417FBAB611116AB76092716503A834A6FB82A3
Authority key identifier: 75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/323830343a363136343a34303a3a2f34322d3432203d3e20323632343234.roa
Signing time:             Wed 15 May 2024 13:26:38 +0000
ROA not before:           Wed 15 May 2024 13:21:38 +0000
ROA not after:            Wed 14 May 2025 13:26:38 +0000
asID:                     262424
IP address blocks:        2804:6164:40::/42 maxlen: 42

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl
                          rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 17:11:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:41:7f:ba:b6:11:11:6a:b7:60:92:71:65:03:a8:34:a6:fb:82:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
        Validity
            Not Before: May 15 13:21:38 2024 GMT
            Not After : May 14 13:26:38 2025 GMT
        Subject: CN=6C07F61FA2DC7BFC4204DC5F8059D858D8A48DB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f6:fd:81:8d:97:c1:f8:df:e6:0c:64:34:6d:
                    96:49:ea:11:20:2c:c2:81:03:88:07:e1:fe:2a:5b:
                    f2:8f:3e:a1:b8:ab:c5:f9:bb:df:44:8b:67:51:bf:
                    28:5c:b0:25:6e:77:53:64:70:69:05:fa:02:0d:2c:
                    e4:ea:64:15:78:7b:3a:f1:29:8e:d9:88:9f:1d:71:
                    b0:05:fc:56:04:0b:f8:6a:4d:96:2a:9f:d3:cd:17:
                    1b:e7:e8:4a:3d:7e:9e:a6:63:c1:19:e8:ec:b0:fb:
                    63:32:1a:b3:62:2d:bd:d9:b5:e1:fe:8a:4d:3d:1d:
                    b2:6b:60:10:cb:4b:a3:97:c9:c4:13:6d:80:32:5f:
                    aa:2d:4a:b8:83:24:4a:ec:3a:e4:fd:05:ef:d1:9f:
                    d7:97:11:8b:6e:9d:c7:b8:22:67:18:e7:70:27:51:
                    fd:f1:62:10:f9:d3:84:f5:0e:75:35:ae:a2:f8:1a:
                    68:9e:f8:4d:87:a2:ca:f3:a7:51:98:59:71:c4:dd:
                    56:90:a4:05:a2:1c:bb:1a:a2:46:97:32:4d:ae:21:
                    fe:c9:52:84:8e:87:4c:30:80:7e:10:ff:09:e6:5c:
                    61:29:9c:c9:fe:28:5c:d3:f5:a1:fa:3a:e9:d3:d9:
                    cf:35:18:15:34:17:26:2d:1b:0b:27:bf:4d:43:1e:
                    13:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:07:F6:1F:A2:DC:7B:FC:42:04:DC:5F:80:59:D8:58:D8:A4:8D:B6
            X509v3 Authority Key Identifier:
                keyid:75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/323830343a363136343a34303a3a2f34322d3432203d3e20323632343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6164:40::/42

    Signature Algorithm: sha256WithRSAEncryption
         21:06:19:f3:29:3c:e4:d4:8f:41:85:a3:d4:8e:6f:4a:d4:eb:
         b7:f2:ae:3d:96:50:7d:2d:7e:61:19:27:96:37:0a:dc:cb:7f:
         53:96:fe:8d:3f:2e:e0:6a:09:57:3a:5e:bb:22:63:e3:49:c3:
         85:cf:eb:44:10:08:3f:bb:44:e0:40:6e:53:ee:df:45:a4:f2:
         28:8f:e4:7a:89:17:ee:69:4d:bc:96:b8:89:e2:69:5e:fd:79:
         99:f2:b9:5d:0a:70:88:39:76:5d:08:00:00:58:f7:3f:b3:c7:
         ba:85:a2:9f:94:a2:5a:0a:17:26:1b:3f:7f:c0:72:5d:c1:68:
         4c:bc:00:71:c7:0b:6b:7e:ea:19:60:f7:32:98:45:57:6a:cb:
         b4:13:49:29:1e:ef:d0:79:d1:8d:d8:22:cb:e3:93:40:38:84:
         3d:99:0a:d7:53:02:bc:33:49:66:6b:3b:ea:f5:38:f9:24:c9:
         de:49:06:78:80:b5:08:e4:5e:20:ae:c5:94:f6:89:18:35:39:
         45:bf:22:c4:ee:7f:12:33:83:34:87:fa:06:70:ac:ef:ea:d0:
         aa:86:77:8b:ed:82:49:62:24:f3:65:ff:f0:18:7b:11:be:1b:
         99:d3:32:f4:06:0e:8d:0d:e3:10:24:4a:13:38:9d:a7:1d:5f:
         80:59:d0:b2
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUDEF/urYREWq3YJJxZQOoNKb7gqMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzU5RUM1MzA5N0U3MjQ4QzQwOEMzRDFBNjQyMkRCODVC
QjQ0NzBBMzAeFw0yNDA1MTUxMzIxMzhaFw0yNTA1MTQxMzI2MzhaMDMxMTAvBgNV
BAMTKDZDMDdGNjFGQTJEQzdCRkM0MjA0REM1RjgwNTlEODU4RDhBNDhEQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo9v2BjZfB+N/mDGQ0bZZJ6hEg
LMKBA4gH4f4qW/KPPqG4q8X5u99Ei2dRvyhcsCVud1NkcGkF+gINLOTqZBV4ezrx
KY7ZiJ8dcbAF/FYEC/hqTZYqn9PNFxvn6Eo9fp6mY8EZ6Oyw+2MyGrNiLb3ZteH+
ik09HbJrYBDLS6OXycQTbYAyX6otSriDJErsOuT9Be/Rn9eXEYtunce4ImcY53An
Uf3xYhD504T1DnU1rqL4Gmie+E2Hosrzp1GYWXHE3VaQpAWiHLsaokaXMk2uIf7J
UoSOh0wwgH4Q/wnmXGEpnMn+KFzT9aH6OunT2c81GBU0FyYtGwsnv01DHhOxAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUbAf2H6Lce/xCBNxfgFnYWNikjbYwHwYDVR0j
BBgwFoAUdZ7FMJfnJIxAjD0aZCLbhbtEcKMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXV1RGtxS3hlUzR2YXlyUnhwVlBpZm9jbVpWVnhuVnlSVWpGYXVOVlJU
QkIvMC83NTlFQzUzMDk3RTcyNDhDNDA4QzNEMUE2NDIyREI4NUJCNDQ3MEEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc1OUVDNTMwOTdFNzI0OEM0
MDhDM0QxQTY0MjJEQjg1QkI0NDcwQTMuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV1dURrcUt4ZVM0dmF5clJ4cFZQaWZvY21aVlZ4blZ5UlVqRmF1TlZSVEJCLzAv
MzIzODMwMzQzYTM2MzEzNjM0M2EzNDMwM2EzYTJmMzQzMjJkMzQzMjIwM2QzZTIw
MzIzNjMyMzQzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGKARhZABAMA0GCSqGSIb3DQEBCwUAA4IB
AQAhBhnzKTzk1I9BhaPUjm9K1Ou38q49llB9LX5hGSeWNwrcy39Tlv6NPy7gaglX
Ol67ImPjScOFz+tEEAg/u0TgQG5T7t9FpPIoj+R6iRfuaU28lriJ4mle/XmZ8rld
CnCIOXZdCAAAWPc/s8e6haKflKJaChcmGz9/wHJdwWhMvABxxwtrfuoZYPcymEVX
asu0E0kpHu/QedGN2CLL45NAOIQ9mQrXUwK8M0lmazvq9Tj5JMneSQZ4gLUI5F4g
rsWU9okYNTlFvyLE7n8SM4M0h/oGcKzv6tCqhneL7YJJYiTzZf/wGHsRvhuZ0zL0
Bg6NDeMQJEoTOJ2nHV+AWdCy
-----END CERTIFICATE-----
Generated at Sat Sep 28 16:18:13 2024 by rpki-client on console-ams.rpki-client.org