Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/323830343a363136343a3a2f33372d3337203d3e20323632343234.roa
File:                     323830343a363136343a3a2f33372d3337203d3e20323632343234.roa (raw, json)
Hash identifier:          3NPbHSl2W/mcthsuvj4knYC6f9Uxc0iaIduv1bCw1fo=
Subject key identifier:   57:88:19:54:3C:87:6F:8C:91:37:85:09:B5:6A:E4:E4:C9:01:4B:93
Certificate issuer:       /CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
Certificate serial:       2B2759401982E065B25894177B0D6E48212BF4E7
Authority key identifier: 75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/323830343a363136343a3a2f33372d3337203d3e20323632343234.roa
Signing time:             Wed 15 May 2024 13:26:34 +0000
ROA not before:           Wed 15 May 2024 13:21:34 +0000
ROA not after:            Wed 14 May 2025 13:26:34 +0000
asID:                     262424
IP address blocks:        2804:6164::/37 maxlen: 37

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl
                          rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:27:59:40:19:82:e0:65:b2:58:94:17:7b:0d:6e:48:21:2b:f4:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
        Validity
            Not Before: May 15 13:21:34 2024 GMT
            Not After : May 14 13:26:34 2025 GMT
        Subject: CN=578819543C876F8C91378509B56AE4E4C9014B93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:53:e3:21:92:a9:bc:1b:9e:2f:0c:4f:ff:71:
                    74:30:e3:d4:b7:f1:32:c1:e3:37:8b:22:c5:e1:ee:
                    69:bb:65:1b:ba:2e:ab:0c:6f:34:f0:1e:03:9d:d4:
                    54:57:39:f2:1f:a1:b5:77:8d:4e:25:70:2b:d6:b1:
                    e2:6f:b7:5b:60:18:5f:bf:6e:30:0f:81:3d:22:c8:
                    07:b5:2c:56:08:75:58:29:eb:29:2b:71:71:23:17:
                    34:5c:3c:92:bb:e2:8d:a0:25:84:4e:a5:90:54:cd:
                    59:e9:d9:45:a7:5b:ca:58:57:f8:0c:46:d4:44:e6:
                    b5:93:74:82:7b:08:06:92:ba:f5:2e:53:1a:b9:6d:
                    7f:ce:7c:7a:b0:23:d6:28:b2:6c:ac:8e:9c:49:9a:
                    40:17:98:53:47:5c:d6:8d:c0:dd:24:f0:69:dd:99:
                    af:e9:77:36:9a:b1:ce:ad:e8:8c:91:23:ce:cd:6a:
                    f2:65:ea:8c:61:e5:d7:30:62:08:5c:0b:2c:ea:42:
                    7b:46:da:21:8a:41:e5:4c:ca:27:46:a5:e1:7a:93:
                    b0:d7:2e:da:20:ad:6b:1c:40:3b:14:76:88:ff:7f:
                    27:d4:73:0c:e7:45:c7:3b:a4:15:fa:da:b8:95:87:
                    46:0e:53:36:c3:55:b2:43:16:53:3d:03:01:41:38:
                    4b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:88:19:54:3C:87:6F:8C:91:37:85:09:B5:6A:E4:E4:C9:01:4B:93
            X509v3 Authority Key Identifier:
                keyid:75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/323830343a363136343a3a2f33372d3337203d3e20323632343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6164::/37

    Signature Algorithm: sha256WithRSAEncryption
         09:c8:f7:84:42:35:b4:7e:3b:fc:79:ca:ec:f1:63:b8:6f:1e:
         90:3f:06:59:6b:d9:46:ed:00:69:7c:1d:93:b8:1a:cd:23:45:
         2d:05:32:16:98:46:7d:f6:93:86:92:8a:07:0d:d8:2e:ba:a4:
         4b:50:9a:41:04:f6:b4:4c:3d:7f:f3:69:1f:23:85:3f:be:73:
         d4:b1:ad:15:aa:e5:cd:73:29:1b:23:d4:18:82:75:09:ed:ca:
         16:16:d5:0e:47:78:c5:72:c3:62:cd:36:dd:24:22:f9:17:9d:
         6c:a2:82:ba:7c:22:4d:14:d6:a1:8b:f2:a2:32:fa:6a:82:5d:
         ea:6f:72:c5:c9:79:7f:c8:b2:01:a1:d1:4f:f8:bf:1f:41:17:
         fc:e8:2e:83:00:c2:64:72:48:f0:16:e8:b1:ef:93:cc:fe:01:
         b6:7b:25:52:c5:db:67:3c:ad:6b:7e:8d:d3:1e:79:23:e3:e3:
         6a:bc:18:ce:d5:f5:0c:0f:e6:11:91:69:2a:3c:fa:50:fd:a6:
         a1:da:31:5e:5b:e6:43:dd:5f:48:3c:b7:b3:62:56:f4:45:9a:
         99:34:bc:f9:23:ec:a5:7a:63:77:6f:06:10:5a:11:32:2f:be:
         8b:c4:2b:7e:73:66:ac:9a:b4:fd:c7:75:07:70:27:80:b9:db:
         4d:44:54:3e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKydZQBmC4GWyWJQXew1uSCEr9OcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzU5RUM1MzA5N0U3MjQ4QzQwOEMzRDFBNjQyMkRCODVC
QjQ0NzBBMzAeFw0yNDA1MTUxMzIxMzRaFw0yNTA1MTQxMzI2MzRaMDMxMTAvBgNV
BAMTKDU3ODgxOTU0M0M4NzZGOEM5MTM3ODUwOUI1NkFFNEU0QzkwMTRCOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4U+Mhkqm8G54vDE//cXQw49S3
8TLB4zeLIsXh7mm7ZRu6LqsMbzTwHgOd1FRXOfIfobV3jU4lcCvWseJvt1tgGF+/
bjAPgT0iyAe1LFYIdVgp6ykrcXEjFzRcPJK74o2gJYROpZBUzVnp2UWnW8pYV/gM
RtRE5rWTdIJ7CAaSuvUuUxq5bX/OfHqwI9YosmysjpxJmkAXmFNHXNaNwN0k8Gnd
ma/pdzaasc6t6IyRI87NavJl6oxh5dcwYghcCyzqQntG2iGKQeVMyidGpeF6k7DX
LtogrWscQDsUdoj/fyfUcwznRcc7pBX62riVh0YOUzbDVbJDFlM9AwFBOEs3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUV4gZVDyHb4yRN4UJtWrk5MkBS5MwHwYDVR0j
BBgwFoAUdZ7FMJfnJIxAjD0aZCLbhbtEcKMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXV1RGtxS3hlUzR2YXlyUnhwVlBpZm9jbVpWVnhuVnlSVWpGYXVOVlJU
QkIvMC83NTlFQzUzMDk3RTcyNDhDNDA4QzNEMUE2NDIyREI4NUJCNDQ3MEEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc1OUVDNTMwOTdFNzI0OEM0
MDhDM0QxQTY0MjJEQjg1QkI0NDcwQTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV1dURrcUt4ZVM0dmF5clJ4cFZQaWZvY21aVlZ4blZ5UlVqRmF1TlZSVEJCLzAv
MzIzODMwMzQzYTM2MzEzNjM0M2EzYTJmMzMzNzJkMzMzNzIwM2QzZTIwMzIzNjMy
MzQzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYDKARhZAAwDQYJKoZIhvcNAQELBQADggEBAAnI94RC
NbR+O/x5yuzxY7hvHpA/Bllr2UbtAGl8HZO4Gs0jRS0FMhaYRn32k4aSigcN2C66
pEtQmkEE9rRMPX/zaR8jhT++c9SxrRWq5c1zKRsj1BiCdQntyhYW1Q5HeMVyw2LN
Nt0kIvkXnWyigrp8Ik0U1qGL8qIy+mqCXepvcsXJeX/IsgGh0U/4vx9BF/zoLoMA
wmRySPAW6LHvk8z+AbZ7JVLF22c8rWt+jdMeeSPj42q8GM7V9QwP5hGRaSo8+lD9
pqHaMV5b5kPdX0g8t7NiVvRFmpk0vPkj7KV6Y3dvBhBaETIvvovEK35zZqyatP3H
dQdwJ4C5201EVD4=
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:20:53 2024 by rpki-client on console-fra.rpki-client.org