Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/323830313a38303a6138303a3a2f34342d3438203d3e203131323432.roa
File:                     323830313a38303a6138303a3a2f34342d3438203d3e203131323432.roa (raw, json)
Hash identifier:          wueWJ6CsTQnv4g69uPK2cX1o0YITiW1nkD780weOghg=
Subject key identifier:   30:DF:6A:01:96:10:D4:42:D2:1C:E4:35:B0:78:AB:60:53:46:BC:AE
Certificate issuer:       /CN=E566AB13DF19F2E8935CAFB119E40308D0A08146
Certificate serial:       6C76ADA5A12B1EE73E47AB1F575227234690A5DC
Authority key identifier: E5:66:AB:13:DF:19:F2:E8:93:5C:AF:B1:19:E4:03:08:D0:A0:81:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/323830313a38303a6138303a3a2f34342d3438203d3e203131323432.roa
Signing time:             Wed 03 Apr 2024 19:34:32 +0000
ROA not before:           Wed 03 Apr 2024 19:29:32 +0000
ROA not after:            Wed 02 Apr 2025 19:34:32 +0000
asID:                     11242
IP address blocks:        2801:80:a80::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.crl
                          rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:76:ad:a5:a1:2b:1e:e7:3e:47:ab:1f:57:52:27:23:46:90:a5:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E566AB13DF19F2E8935CAFB119E40308D0A08146
        Validity
            Not Before: Apr  3 19:29:32 2024 GMT
            Not After : Apr  2 19:34:32 2025 GMT
        Subject: CN=30DF6A019610D442D21CE435B078AB605346BCAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:92:13:ef:45:72:c5:73:95:45:6b:d8:4b:05:
                    eb:5d:66:9d:2a:18:b6:29:cf:2c:39:5e:c8:8e:fb:
                    20:fa:3c:55:8a:45:4f:3e:f9:9f:2b:32:3a:1d:ca:
                    13:03:6f:22:b1:e3:03:67:bf:b6:f5:79:c4:83:ea:
                    47:57:9b:92:b3:04:b5:2a:c0:9f:e1:96:b7:aa:01:
                    42:e2:cf:b0:d5:6f:cf:c6:a5:af:40:3d:36:e5:2e:
                    c5:38:0c:88:62:df:7b:cb:fa:e3:7b:37:72:dd:32:
                    30:f0:07:83:7b:94:d7:8e:6d:21:aa:07:39:39:65:
                    d4:b5:fc:aa:9e:fa:d7:74:d7:94:78:ba:ca:88:bc:
                    d2:0b:e5:e3:6f:7c:1c:59:0e:36:5f:0d:8b:ba:f8:
                    39:01:66:95:0d:66:77:8b:ba:86:cc:02:f8:f1:7f:
                    ee:9d:74:eb:cb:b4:d1:93:0b:0b:4c:52:99:c3:a5:
                    1b:8e:c2:e3:b6:cd:8d:da:95:9d:88:13:b3:8c:b2:
                    9e:ac:31:0b:b7:87:97:ad:eb:62:2e:ba:fa:b6:cd:
                    59:f4:43:e6:aa:c3:af:7b:6e:c7:7c:74:c4:02:2c:
                    4a:66:ca:88:4f:9a:0a:a0:33:73:91:90:a9:e0:af:
                    51:ee:b4:e8:17:c3:22:fc:e9:d0:bc:17:32:aa:2f:
                    99:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:DF:6A:01:96:10:D4:42:D2:1C:E4:35:B0:78:AB:60:53:46:BC:AE
            X509v3 Authority Key Identifier:
                keyid:E5:66:AB:13:DF:19:F2:E8:93:5C:AF:B1:19:E4:03:08:D0:A0:81:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/323830313a38303a6138303a3a2f34342d3438203d3e203131323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:a80::/44

    Signature Algorithm: sha256WithRSAEncryption
         49:99:15:67:da:d9:d1:73:ea:28:69:fb:21:31:34:ad:17:d1:
         23:25:80:34:9d:a9:85:60:37:8c:34:78:2f:fe:c6:94:18:d1:
         77:cf:28:6f:f8:0b:f8:95:c9:ce:f1:22:3e:44:f3:89:a0:f7:
         52:ac:2c:c8:49:83:f9:67:8e:df:dd:2c:4f:c5:41:29:61:a8:
         76:12:3a:29:aa:59:cb:37:1a:92:33:ee:d5:a2:ec:e9:19:2f:
         05:b2:be:be:e4:54:32:ce:b2:12:13:63:15:b1:7d:54:a2:1b:
         a1:2c:68:c7:9f:12:26:94:f0:c8:38:a6:f5:6c:39:76:92:d5:
         45:50:72:7e:60:72:e6:42:9f:94:c9:6f:b7:f7:f2:19:47:3f:
         4e:93:6c:46:76:1b:98:dd:78:94:6c:e9:bd:12:b8:cf:5f:09:
         4c:91:de:3d:48:74:21:b1:96:96:67:8e:30:11:56:e7:3d:e9:
         86:2a:e7:40:8a:02:00:ca:7c:03:a6:c2:d3:d7:61:37:bd:85:
         58:a5:05:2b:e8:0c:ac:f4:63:4f:c2:bd:4f:3f:85:f4:ea:97:
         57:51:64:6a:1c:6b:e2:b5:ce:29:16:bc:6e:b6:a4:9f:c1:93:
         e5:3b:6d:6e:16:e2:f8:35:f7:66:2a:ec:f5:f7:89:88:b8:79:
         c2:cd:10:15
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgIUbHatpaErHuc+R6sfV1InI0aQpdwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTU2NkFCMTNERjE5RjJFODkzNUNBRkIxMTlFNDAzMDhE
MEEwODE0NjAeFw0yNDA0MDMxOTI5MzJaFw0yNTA0MDIxOTM0MzJaMDMxMTAvBgNV
BAMTKDMwREY2QTAxOTYxMEQ0NDJEMjFDRTQzNUIwNzhBQjYwNTM0NkJDQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgkhPvRXLFc5VFa9hLBetdZp0q
GLYpzyw5XsiO+yD6PFWKRU8++Z8rMjodyhMDbyKx4wNnv7b1ecSD6kdXm5KzBLUq
wJ/hlreqAULiz7DVb8/Gpa9APTblLsU4DIhi33vL+uN7N3LdMjDwB4N7lNeObSGq
Bzk5ZdS1/Kqe+td015R4usqIvNIL5eNvfBxZDjZfDYu6+DkBZpUNZneLuobMAvjx
f+6ddOvLtNGTCwtMUpnDpRuOwuO2zY3alZ2IE7OMsp6sMQu3h5et62Iuuvq2zVn0
Q+aqw697bsd8dMQCLEpmyohPmgqgM3ORkKngr1HutOgXwyL86dC8FzKqL5kxAgMB
AAGjggJUMIICUDAdBgNVHQ4EFgQUMN9qAZYQ1ELSHOQ1sHirYFNGvK4wHwYDVR0j
BBgwFoAU5WarE98Z8uiTXK+xGeQDCNCggUYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlF2blVuRVhlNUpUZjdWaFFIblVGUndkemVFcGJGNHJ0M2I1UExydmRl
eXkvMS9FNTY2QUIxM0RGMTlGMkU4OTM1Q0FGQjExOUU0MDMwOEQwQTA4MTQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U1NjZBQjEzREYxOUYyRTg5
MzVDQUZCMTE5RTQwMzA4RDBBMDgxNDYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZRdm5VbkVYZTVKVGY3VmhRSG5VRlJ3ZHplRXBiRjRydDNiNVBMcnZkZXl5LzEv
MzIzODMwMzEzYTM4MzAzYTYxMzgzMDNhM2EyZjM0MzQyZDM0MzgyMDNkM2UyMDMx
MzEzMjM0MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH
AQcBAf8EEzARMA8EAgACMAkDBwQoAQCACoAwDQYJKoZIhvcNAQELBQADggEBAEmZ
FWfa2dFz6ihp+yExNK0X0SMlgDSdqYVgN4w0eC/+xpQY0XfPKG/4C/iVyc7xIj5E
84mg91KsLMhJg/lnjt/dLE/FQSlhqHYSOimqWcs3GpIz7tWi7OkZLwWyvr7kVDLO
shITYxWxfVSiG6EsaMefEiaU8Mg4pvVsOXaS1UVQcn5gcuZCn5TJb7f38hlHP06T
bEZ2G5jdeJRs6b0SuM9fCUyR3j1IdCGxlpZnjjARVuc96YYq50CKAgDKfAOmwtPX
YTe9hVilBSvoDKz0Y0/CvU8/hfTql1dRZGoca+K1zikWvG62pJ/Bk+U7bW4W4vg1
92Yq7PX3iYi4ecLNEBU=
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:04 2024 by rpki-client on console-ams.rpki-client.org