Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6V2xnPURfXb8rf8fC5jyxrbMU9Td2h4tWenWGdAeWdhf/0/323830343a366461633a3a2f33322d3438203d3e20323730353438.roa
File:                     323830343a366461633a3a2f33322d3438203d3e20323730353438.roa (raw, json)
Hash identifier:          bEMu0C205BsOfu6kMHbSlkBqbAFzsdHiF8OHgW0jnxI=
Subject key identifier:   D6:D7:37:1D:2F:83:24:90:5E:A0:A3:0B:A1:7C:0C:AF:2B:C1:30:D3
Certificate issuer:       /CN=DCFCD6DA30876D8BFC651FD630336A5E3933886A
Certificate serial:       5474DC627862C076A50E45112CB19FC2B090FA83
Authority key identifier: DC:FC:D6:DA:30:87:6D:8B:FC:65:1F:D6:30:33:6A:5E:39:33:88:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCFCD6DA30876D8BFC651FD630336A5E3933886A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6V2xnPURfXb8rf8fC5jyxrbMU9Td2h4tWenWGdAeWdhf/0/323830343a366461633a3a2f33322d3438203d3e20323730353438.roa
Signing time:             Wed 30 Oct 2024 01:11:08 +0000
ROA not before:           Wed 30 Oct 2024 01:06:08 +0000
ROA not after:            Wed 29 Oct 2025 01:11:08 +0000
asID:                     270548
IP address blocks:        2804:6dac::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6V2xnPURfXb8rf8fC5jyxrbMU9Td2h4tWenWGdAeWdhf/0/DCFCD6DA30876D8BFC651FD630336A5E3933886A.crl
                          rsync://rpki-repo.registro.br/repo/6V2xnPURfXb8rf8fC5jyxrbMU9Td2h4tWenWGdAeWdhf/0/DCFCD6DA30876D8BFC651FD630336A5E3933886A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCFCD6DA30876D8BFC651FD630336A5E3933886A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 02:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:74:dc:62:78:62:c0:76:a5:0e:45:11:2c:b1:9f:c2:b0:90:fa:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCFCD6DA30876D8BFC651FD630336A5E3933886A
        Validity
            Not Before: Oct 30 01:06:08 2024 GMT
            Not After : Oct 29 01:11:08 2025 GMT
        Subject: CN=D6D7371D2F8324905EA0A30BA17C0CAF2BC130D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e3:12:e5:4c:e3:4d:1c:38:89:b5:23:d6:16:
                    d5:05:b0:73:60:8c:a3:ae:b7:a2:d2:f9:e6:8e:a7:
                    8d:08:6a:31:73:02:fb:a4:ed:03:af:a5:9d:76:c6:
                    6b:c2:1a:96:31:09:6d:2e:55:74:44:ee:1a:1a:ee:
                    b5:40:86:59:aa:03:bc:e0:86:1b:4a:f3:a7:34:48:
                    c4:75:1f:6e:4f:28:62:57:e8:f5:49:ee:98:ee:97:
                    c6:88:b1:10:23:5a:ca:b7:70:c2:26:7e:c4:8c:6f:
                    40:c8:7a:38:cd:62:57:63:f0:b8:8f:e0:6e:f0:69:
                    b5:71:2c:c6:be:de:ca:bb:45:48:28:35:4b:b0:1c:
                    0a:76:bd:81:d7:3f:45:55:2a:7e:ef:dc:5c:5b:ff:
                    7d:f6:0c:b6:73:f3:55:a4:8a:07:00:0c:dd:c8:d1:
                    b8:7f:3a:16:b1:09:4c:79:d1:68:a0:8e:43:5b:53:
                    39:16:be:a1:ee:01:82:43:4e:3f:df:9b:0e:b1:73:
                    bc:f8:d2:8d:8a:4a:6c:66:52:0e:84:cf:67:b0:f8:
                    41:03:99:9d:0d:ab:35:4c:3d:22:4d:37:50:f1:bd:
                    c2:05:01:e7:94:9e:44:22:b8:3b:41:cb:1d:6e:94:
                    7e:fc:d3:ba:07:09:b4:2f:21:f7:ca:ca:d2:06:6a:
                    d8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:D7:37:1D:2F:83:24:90:5E:A0:A3:0B:A1:7C:0C:AF:2B:C1:30:D3
            X509v3 Authority Key Identifier:
                keyid:DC:FC:D6:DA:30:87:6D:8B:FC:65:1F:D6:30:33:6A:5E:39:33:88:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6V2xnPURfXb8rf8fC5jyxrbMU9Td2h4tWenWGdAeWdhf/0/DCFCD6DA30876D8BFC651FD630336A5E3933886A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCFCD6DA30876D8BFC651FD630336A5E3933886A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6V2xnPURfXb8rf8fC5jyxrbMU9Td2h4tWenWGdAeWdhf/0/323830343a366461633a3a2f33322d3438203d3e20323730353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6dac::/32

    Signature Algorithm: sha256WithRSAEncryption
         e5:14:b5:f8:71:b9:0e:87:59:81:b1:4b:27:e5:cc:77:c9:84:
         f2:ee:d5:53:32:10:ea:34:35:86:e9:0c:0d:9a:cc:0c:9a:78:
         34:ec:0d:84:58:e9:76:26:85:5f:fa:81:32:bf:28:94:1b:db:
         32:a2:ff:f7:78:54:ad:7c:d2:8b:71:3b:8f:f9:fa:fb:3b:7d:
         98:9a:4a:76:53:c2:4e:db:37:b6:b9:6d:a2:28:8f:32:44:07:
         5e:f6:62:6c:48:2d:8e:4f:7c:80:e3:25:a2:27:1c:df:67:c9:
         c4:cd:8b:2d:ad:bb:dc:2a:e2:fb:7f:9f:7b:d2:2e:69:cb:18:
         b2:ee:83:75:e4:87:a3:ca:6c:8f:08:d3:9c:f8:aa:21:4c:1b:
         ab:18:66:d3:37:80:78:01:7a:5b:39:4d:d3:3b:53:18:99:ba:
         e5:bc:6a:29:ee:48:7d:2c:38:54:3a:e3:a5:80:40:d7:3d:4d:
         98:9a:82:f7:ef:53:a9:8a:06:fa:04:5c:39:c8:90:4e:ae:15:
         55:f8:cb:e5:af:b1:a9:91:92:24:17:fb:6f:a4:02:e1:d6:56:
         d2:40:63:85:a5:0b:32:bc:67:71:f9:84:76:48:5a:c3:51:89:
         1f:39:74:4e:2f:24:e1:25:e7:06:61:6c:cf:0a:61:31:57:54:
         61:c1:1c:ed
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUVHTcYnhiwHalDkURLLGfwrCQ+oMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENGQ0Q2REEzMDg3NkQ4QkZDNjUxRkQ2MzAzMzZBNUUz
OTMzODg2QTAeFw0yNDEwMzAwMTA2MDhaFw0yNTEwMjkwMTExMDhaMDMxMTAvBgNV
BAMTKEQ2RDczNzFEMkY4MzI0OTA1RUEwQTMwQkExN0MwQ0FGMkJDMTMwRDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP4xLlTONNHDiJtSPWFtUFsHNg
jKOut6LS+eaOp40IajFzAvuk7QOvpZ12xmvCGpYxCW0uVXRE7hoa7rVAhlmqA7zg
hhtK86c0SMR1H25PKGJX6PVJ7pjul8aIsRAjWsq3cMImfsSMb0DIejjNYldj8LiP
4G7wabVxLMa+3sq7RUgoNUuwHAp2vYHXP0VVKn7v3Fxb/332DLZz81WkigcADN3I
0bh/OhaxCUx50WigjkNbUzkWvqHuAYJDTj/fmw6xc7z40o2KSmxmUg6Ez2ew+EED
mZ0NqzVMPSJNN1DxvcIFAeeUnkQiuDtByx1ulH7807oHCbQvIffKytIGatg3AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU1tc3HS+DJJBeoKMLoXwMryvBMNMwHwYDVR0j
BBgwFoAU3PzW2jCHbYv8ZR/WMDNqXjkziGowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlYyeG5QVVJmWGI4cmY4ZkM1anl4cmJNVTlUZDJoNHRXZW5XR2RBZVdk
aGYvMC9EQ0ZDRDZEQTMwODc2RDhCRkM2NTFGRDYzMDMzNkE1RTM5MzM4ODZBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDRkNENkRBMzA4NzZEOEJG
QzY1MUZENjMwMzM2QTVFMzkzMzg4NkEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZWMnhuUFVSZlhiOHJmOGZDNWp5eHJiTVU5VGQyaDR0V2VuV0dkQWVXZGhmLzAv
MzIzODMwMzQzYTM2NjQ2MTYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMw
MzUzNDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARtrDANBgkqhkiG9w0BAQsFAAOCAQEA5RS1+HG5
DodZgbFLJ+XMd8mE8u7VUzIQ6jQ1hukMDZrMDJp4NOwNhFjpdiaFX/qBMr8olBvb
MqL/93hUrXzSi3E7j/n6+zt9mJpKdlPCTts3trltoiiPMkQHXvZibEgtjk98gOMl
oicc32fJxM2LLa273Cri+3+fe9IuacsYsu6DdeSHo8psjwjTnPiqIUwbqxhm0zeA
eAF6WzlN0ztTGJm65bxqKe5IfSw4VDrjpYBA1z1NmJqC9+9TqYoG+gRcOciQTq4V
VfjL5a+xqZGSJBf7b6QC4dZW0kBjhaULMrxncfmEdkhaw1GJHzl0Ti8k4SXnBmFs
zwphMVdUYcEc7Q==
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:51:18 2024 by rpki-client on console-fra.rpki-client.org