Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/323830343a333662633a3a2f33332d3333203d3e20323636333638.roa
File:                     323830343a333662633a3a2f33332d3333203d3e20323636333638.roa (raw, json)
Hash identifier:          NFpncXr4t0YHatlJRSe20Sa+LlmR6EtAVwRe64FEtfg=
Subject key identifier:   8E:99:66:1C:2B:B5:41:FE:08:F3:1E:B8:8D:EF:BB:3E:90:0D:18:8C
Certificate issuer:       /CN=A19A48627F9E16209BBEA3245228A659E3EBF9D6
Certificate serial:       45B33DF31EAD0BFA27CDBB2108B5F786C0DC603A
Authority key identifier: A1:9A:48:62:7F:9E:16:20:9B:BE:A3:24:52:28:A6:59:E3:EB:F9:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A19A48627F9E16209BBEA3245228A659E3EBF9D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/323830343a333662633a3a2f33332d3333203d3e20323636333638.roa
Signing time:             Tue 19 Nov 2024 15:52:31 +0000
ROA not before:           Tue 19 Nov 2024 15:47:31 +0000
ROA not after:            Tue 18 Nov 2025 15:52:31 +0000
asID:                     266368
IP address blocks:        2804:36bc::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/A19A48627F9E16209BBEA3245228A659E3EBF9D6.crl
                          rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/A19A48627F9E16209BBEA3245228A659E3EBF9D6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A19A48627F9E16209BBEA3245228A659E3EBF9D6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:b3:3d:f3:1e:ad:0b:fa:27:cd:bb:21:08:b5:f7:86:c0:dc:60:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A19A48627F9E16209BBEA3245228A659E3EBF9D6
        Validity
            Not Before: Nov 19 15:47:31 2024 GMT
            Not After : Nov 18 15:52:31 2025 GMT
        Subject: CN=8E99661C2BB541FE08F31EB88DEFBB3E900D188C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b3:ac:ec:fe:9d:16:ad:39:1e:c1:61:af:ed:
                    ff:d5:8a:35:5b:0d:2f:a9:ac:32:c5:dd:24:dc:54:
                    cb:56:74:77:1e:e7:39:35:7f:8c:72:4d:fd:12:4e:
                    ee:0e:3a:7e:d6:58:9c:a0:42:b5:de:9f:a8:2c:2f:
                    d8:61:03:b0:bf:7a:da:ff:9d:18:aa:b6:ef:26:1e:
                    80:fd:3a:99:f8:c0:08:31:47:30:ca:65:82:a8:2d:
                    12:0d:ed:90:4d:43:8f:b2:f6:6a:88:bf:dd:01:9a:
                    ba:3c:f5:af:d6:fb:17:f1:f9:20:27:43:f5:cc:14:
                    6a:c6:0a:e4:02:6a:d9:f9:35:09:f9:54:c2:aa:6f:
                    03:2a:3d:40:fa:66:8d:5b:1e:93:e5:8e:59:04:30:
                    d0:c9:dd:a1:ad:1f:9a:e6:98:3f:11:66:7d:34:a1:
                    dc:5a:ef:6a:1a:12:8b:e0:8c:10:53:4a:ed:71:87:
                    be:5c:30:2f:58:d0:87:ab:cb:95:31:62:6a:36:12:
                    d0:ec:55:3b:e4:cd:8b:0e:7f:5b:7e:e9:32:07:fe:
                    05:c1:92:23:3d:48:35:f6:42:c6:cb:5e:de:15:4a:
                    dc:df:2a:79:51:8c:dd:83:20:9e:d8:bb:93:d6:43:
                    80:f5:17:43:ef:85:ca:6c:ee:91:c3:42:3e:a3:05:
                    26:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:99:66:1C:2B:B5:41:FE:08:F3:1E:B8:8D:EF:BB:3E:90:0D:18:8C
            X509v3 Authority Key Identifier:
                keyid:A1:9A:48:62:7F:9E:16:20:9B:BE:A3:24:52:28:A6:59:E3:EB:F9:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/A19A48627F9E16209BBEA3245228A659E3EBF9D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A19A48627F9E16209BBEA3245228A659E3EBF9D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/323830343a333662633a3a2f33332d3333203d3e20323636333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:36bc::/33

    Signature Algorithm: sha256WithRSAEncryption
         3e:71:d0:da:ce:fe:f2:7a:6e:f2:28:23:22:d0:2f:9d:62:9b:
         e6:22:06:10:e2:fe:1d:91:d2:1a:47:d0:21:b2:b9:70:86:c1:
         a1:1a:35:b7:f9:55:8a:1d:25:2c:1e:9b:76:a7:54:c6:34:27:
         d5:fb:05:12:20:04:14:72:6e:06:00:af:c6:75:b7:d3:df:c3:
         96:ad:4c:6c:0c:9f:68:84:b1:35:83:63:fd:59:69:06:78:f3:
         17:84:09:71:4f:bf:f2:d0:a7:a3:e8:fb:dc:eb:58:f3:67:14:
         a4:f6:86:3b:1c:ca:2e:3e:21:cd:d3:06:a6:ae:81:3e:a2:b9:
         62:f3:32:9d:71:f5:d0:4b:c1:8f:6a:62:ca:db:20:95:0d:bd:
         8d:b5:39:11:07:ab:aa:b2:80:67:91:92:06:8c:2a:87:cf:01:
         b1:5b:b6:1b:01:c9:ca:c0:e2:ad:a5:86:d5:46:5f:a4:2b:65:
         51:25:2d:ce:41:53:24:aa:fe:93:16:16:53:c2:17:55:3d:00:
         93:5f:9e:87:ef:bf:52:62:f9:27:2f:58:15:d3:d6:bf:5e:a1:
         51:ba:ce:6f:6e:4c:f4:74:69:78:4e:c0:3c:93:23:d6:e9:65:
         3c:73:f8:90:b9:70:19:cc:ad:c2:62:5b:52:01:39:bf:a1:2c:
         3a:3c:dd:e9
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIURbM98x6tC/onzbshCLX3hsDcYDowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTE5QTQ4NjI3RjlFMTYyMDlCQkVBMzI0NTIyOEE2NTlF
M0VCRjlENjAeFw0yNDExMTkxNTQ3MzFaFw0yNTExMTgxNTUyMzFaMDMxMTAvBgNV
BAMTKDhFOTk2NjFDMkJCNTQxRkUwOEYzMUVCODhERUZCQjNFOTAwRDE4OEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0s6zs/p0WrTkewWGv7f/VijVb
DS+prDLF3STcVMtWdHce5zk1f4xyTf0STu4OOn7WWJygQrXen6gsL9hhA7C/etr/
nRiqtu8mHoD9Opn4wAgxRzDKZYKoLRIN7ZBNQ4+y9mqIv90Bmro89a/W+xfx+SAn
Q/XMFGrGCuQCatn5NQn5VMKqbwMqPUD6Zo1bHpPljlkEMNDJ3aGtH5rmmD8RZn00
odxa72oaEovgjBBTSu1xh75cMC9Y0Iery5UxYmo2EtDsVTvkzYsOf1t+6TIH/gXB
kiM9SDX2QsbLXt4VStzfKnlRjN2DIJ7Yu5PWQ4D1F0Pvhcps7pHDQj6jBSY9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUjplmHCu1Qf4I8x64je+7PpANGIwwHwYDVR0j
BBgwFoAUoZpIYn+eFiCbvqMkUiimWePr+dYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjFmZ2V3TFUzR25HZlJ6OGZZQ0R3UXhjcVFkUVpIU0JxR01pZ2RuWE1p
TU0vMC9BMTlBNDg2MjdGOUUxNjIwOUJCRUEzMjQ1MjI4QTY1OUUzRUJGOUQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ExOUE0ODYyN0Y5RTE2MjA5
QkJFQTMyNDUyMjhBNjU5RTNFQkY5RDYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzYxZmdld0xVM0duR2ZSejhmWUNEd1F4Y3FRZFFaSFNCcUdNaWdkblhNaU1NLzAv
MzIzODMwMzQzYTMzMzY2MjYzM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM2
MzMzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAQ2vAAwDQYJKoZIhvcNAQELBQADggEBAD5x0NrO
/vJ6bvIoIyLQL51im+YiBhDi/h2R0hpH0CGyuXCGwaEaNbf5VYodJSwem3anVMY0
J9X7BRIgBBRybgYAr8Z1t9Pfw5atTGwMn2iEsTWDY/1ZaQZ48xeECXFPv/LQp6Po
+9zrWPNnFKT2hjscyi4+Ic3TBqaugT6iuWLzMp1x9dBLwY9qYsrbIJUNvY21OREH
q6qygGeRkgaMKofPAbFbthsBycrA4q2lhtVGX6QrZVElLc5BUySq/pMWFlPCF1U9
AJNfnofvv1Ji+ScvWBXT1r9eoVG6zm9uTPR0aXhOwDyTI9bpZTxz+JC5cBnMrcJi
W1IBOb+hLDo83ek=
-----END CERTIFICATE-----
Generated at Sat Nov 23 08:41:59 2024 by rpki-client on console-fra.rpki-client.org