Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a653030333a3a2f34382d3438203d3e20323634343232.roa
File:                     323830343a316535383a653030333a3a2f34382d3438203d3e20323634343232.roa (raw, json)
Hash identifier:          Aq0PU0towYaZBps2QJcFgrdtHHHrZZy0odnj1uzvcU4=
Subject key identifier:   8C:36:AB:15:8C:3E:BA:A6:0D:52:D9:39:25:A3:32:74:C7:13:63:C3
Certificate issuer:       /CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
Certificate serial:       269156480797CCCCDB265E801804D1A7AC48FF97
Authority key identifier: 7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a653030333a3a2f34382d3438203d3e20323634343232.roa
Signing time:             Wed 15 May 2024 14:49:37 +0000
ROA not before:           Wed 15 May 2024 14:44:37 +0000
ROA not after:            Wed 14 May 2025 14:49:37 +0000
asID:                     264422
IP address blocks:        2804:1e58:e003::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl
                          rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 07:18:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:91:56:48:07:97:cc:cc:db:26:5e:80:18:04:d1:a7:ac:48:ff:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
        Validity
            Not Before: May 15 14:44:37 2024 GMT
            Not After : May 14 14:49:37 2025 GMT
        Subject: CN=8C36AB158C3EBAA60D52D93925A33274C71363C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ad:3d:d0:88:10:67:35:67:e2:72:2d:f0:55:
                    5c:3a:01:e7:18:25:a0:84:c1:17:4a:df:26:9f:15:
                    fc:66:cb:20:fb:03:4a:15:1d:45:b3:9d:69:cc:ce:
                    8e:58:22:9a:39:6f:7a:7b:17:4b:9d:02:39:53:7c:
                    a6:ee:14:36:d3:a7:5b:eb:10:7a:d7:8f:17:6c:8b:
                    3f:8f:b9:6e:93:12:5e:a1:e9:e4:be:c5:42:24:3d:
                    7d:87:37:90:e2:7e:47:0a:57:48:74:01:ea:b7:ef:
                    a0:26:02:0d:24:7f:89:7f:b9:99:44:ee:20:50:2a:
                    08:dc:b1:37:79:b9:d3:e0:da:d2:3a:1e:dc:2f:45:
                    ca:1e:a5:83:d4:fd:d4:97:34:04:71:04:41:dc:cc:
                    82:53:43:4c:d7:d4:71:f7:03:22:ea:02:91:96:94:
                    0d:b8:f9:d7:8f:86:a5:af:30:86:f6:c4:7e:81:dc:
                    c9:87:e1:98:60:c8:71:49:25:3e:b8:a1:ca:86:53:
                    dd:83:88:4e:e5:69:f4:90:a4:05:04:4d:27:60:21:
                    1a:5e:bf:d1:6a:80:ac:70:1e:d2:db:a1:88:be:79:
                    e1:bd:df:cc:75:2f:dc:9b:f8:46:28:2d:22:31:70:
                    29:cd:e7:95:af:10:d4:5a:11:5b:2c:14:e0:56:16:
                    20:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:36:AB:15:8C:3E:BA:A6:0D:52:D9:39:25:A3:32:74:C7:13:63:C3
            X509v3 Authority Key Identifier:
                keyid:7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a653030333a3a2f34382d3438203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:e003::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:f3:81:8b:95:bb:bd:58:d3:d5:74:b2:e4:92:a6:ee:a8:f8:
         4d:f0:ab:b1:b2:ab:a3:29:e0:9d:c8:51:4c:55:f0:2b:a9:4f:
         8b:f1:59:b7:ce:af:de:1d:60:8e:54:9c:c3:7a:e9:4d:71:9f:
         24:a1:78:87:e7:db:11:c6:94:58:99:bd:6b:52:fe:57:2a:10:
         e1:48:7a:26:77:fd:0a:15:52:0e:59:9d:99:44:d4:da:50:b3:
         5a:58:52:81:ee:ae:9f:b4:ff:fd:e2:3b:cc:fc:0f:7f:ab:e3:
         03:fe:a4:16:8d:ba:0d:8f:82:0b:ec:53:f3:3a:7f:95:cf:e1:
         c9:62:20:65:65:c7:1f:35:1e:fc:5a:96:c3:1a:f9:d9:31:98:
         aa:60:e6:46:c4:8f:49:a5:b4:46:02:16:ba:ee:3f:7b:e3:f1:
         db:c8:f4:f2:36:3d:8f:b2:52:7c:36:71:dc:18:e5:1f:a4:cc:
         cd:70:2e:67:5f:d5:3a:f1:80:e9:75:0b:47:7a:41:f0:f0:14:
         a8:85:13:05:0c:8b:0f:7a:08:a8:e8:28:bc:8c:55:e1:6b:33:
         f2:02:7c:ee:d3:f5:3d:43:cd:f5:32:ff:d6:d1:e7:26:9b:be:
         77:7c:0c:b7:7f:c1:e4:f6:f2:80:c9:5b:ff:d3:2f:8d:e0:b9:
         ff:c0:8f:8d
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUJpFWSAeXzMzbJl6AGATRp6xI/5cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0Q0Q0Q4RTY0MDg4Nzk0OUIxQjYzOEE0M0E5NzRBQ0FE
NTlEQjkxMzAeFw0yNDA1MTUxNDQ0MzdaFw0yNTA1MTQxNDQ5MzdaMDMxMTAvBgNV
BAMTKDhDMzZBQjE1OEMzRUJBQTYwRDUyRDkzOTI1QTMzMjc0QzcxMzYzQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYrT3QiBBnNWfici3wVVw6AecY
JaCEwRdK3yafFfxmyyD7A0oVHUWznWnMzo5YIpo5b3p7F0udAjlTfKbuFDbTp1vr
EHrXjxdsiz+PuW6TEl6h6eS+xUIkPX2HN5DifkcKV0h0Aeq376AmAg0kf4l/uZlE
7iBQKgjcsTd5udPg2tI6HtwvRcoepYPU/dSXNARxBEHczIJTQ0zX1HH3AyLqApGW
lA24+dePhqWvMIb2xH6B3MmH4ZhgyHFJJT64ocqGU92DiE7lafSQpAUETSdgIRpe
v9FqgKxwHtLboYi+eeG938x1L9yb+EYoLSIxcCnN55WvENRaEVssFOBWFiBlAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUjDarFYw+uqYNUtk5JaMydMcTY8MwHwYDVR0j
BBgwFoAUfUzY5kCIeUmxtjikOpdKytWduRMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnRTTXdHdk1ZdWRlUUd0dGtQMWNEdDVEUUdQclNna0J2aHdZemZGd3N2
dkQvMC83RDRDRDhFNjQwODg3OTQ5QjFCNjM4QTQzQTk3NEFDQUQ1OURCOTEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdENENEOEU2NDA4ODc5NDlC
MUI2MzhBNDNBOTc0QUNBRDU5REI5MTMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ0U013R3ZNWXVkZVFHdHRrUDFjRHQ1RFFHUHJTZ2tCdmh3WXpmRndzdnZELzAv
MzIzODMwMzQzYTMxNjUzNTM4M2E2NTMwMzAzMzNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzNDM0MzIzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEHljgAzANBgkqhkiG9w0BAQsF
AAOCAQEAZPOBi5W7vVjT1XSy5JKm7qj4TfCrsbKroyngnchRTFXwK6lPi/FZt86v
3h1gjlScw3rpTXGfJKF4h+fbEcaUWJm9a1L+VyoQ4Uh6Jnf9ChVSDlmdmUTU2lCz
WlhSge6un7T//eI7zPwPf6vjA/6kFo26DY+CC+xT8zp/lc/hyWIgZWXHHzUe/FqW
wxr52TGYqmDmRsSPSaW0RgIWuu4/e+Px28j08jY9j7JSfDZx3BjlH6TMzXAuZ1/V
OvGA6XULR3pB8PAUqIUTBQyLD3oIqOgovIxV4Wsz8gJ87tP1PUPN9TL/1tHnJpu+
d3wMt3/B5PbygMlb/9MvjeC5/8CPjQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:34:00 2024 by rpki-client on console-ams.rpki-client.org