Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/323830343a366635303a3a2f33322d3332203d3e20323730363532.roa
File:                     323830343a366635303a3a2f33322d3332203d3e20323730363532.roa (raw, json)
Hash identifier:          TOWqeRgz0S0JE6rmUVO/5haiXHDAVBMMkP6P8pCmVb4=
Subject key identifier:   D8:19:2A:68:7E:F0:D7:79:6F:5B:D2:DD:C6:F1:6C:0E:02:1C:E6:E6
Certificate issuer:       /CN=0144765DC0A3D9D0EADA845625C5E7F14C552690
Certificate serial:       6AF785073F347DF3F397F5DBC5941533FCF93F3E
Authority key identifier: 01:44:76:5D:C0:A3:D9:D0:EA:DA:84:56:25:C5:E7:F1:4C:55:26:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/323830343a366635303a3a2f33322d3332203d3e20323730363532.roa
Signing time:             Wed 03 Apr 2024 22:21:41 +0000
ROA not before:           Wed 03 Apr 2024 22:16:41 +0000
ROA not after:            Wed 02 Apr 2025 22:21:41 +0000
asID:                     270652
IP address blocks:        2804:6f50::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.crl
                          rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:f7:85:07:3f:34:7d:f3:f3:97:f5:db:c5:94:15:33:fc:f9:3f:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0144765DC0A3D9D0EADA845625C5E7F14C552690
        Validity
            Not Before: Apr  3 22:16:41 2024 GMT
            Not After : Apr  2 22:21:41 2025 GMT
        Subject: CN=D8192A687EF0D7796F5BD2DDC6F16C0E021CE6E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:32:d7:88:0d:bf:91:e6:f0:9e:43:be:de:2c:
                    4d:58:ff:1b:06:e7:4f:aa:06:9a:d5:30:ad:a8:67:
                    83:29:07:b4:7d:7e:d5:8c:f1:8c:f2:83:e1:cc:cc:
                    3f:46:db:9a:a4:53:8a:8d:03:97:a6:d6:79:de:7d:
                    bd:a8:1f:c9:87:66:3d:c2:3e:6b:b1:e3:bd:be:e2:
                    fe:3a:1b:c4:97:e4:00:66:87:17:16:79:fe:15:f4:
                    2a:de:ba:c0:12:25:ee:6f:c0:6d:4d:c6:d1:a7:69:
                    d0:a0:2d:5b:7a:74:cf:d0:b2:61:2e:e9:bf:85:65:
                    6f:ca:f8:a5:a8:34:43:7b:d9:c1:2b:e6:28:72:38:
                    7c:38:0c:df:bc:19:88:57:ea:84:58:5f:b1:12:c6:
                    b1:f0:c0:d7:9c:ee:cc:d6:a8:f7:45:88:c4:6c:cc:
                    bc:ee:3d:05:df:ff:c0:f8:14:94:48:4d:d4:ca:76:
                    ed:8c:ed:24:41:b2:48:e9:94:8b:9c:b5:21:fd:91:
                    ca:e4:68:83:68:c5:45:a6:cc:6c:ee:c7:5e:7b:76:
                    ac:21:d5:5e:8e:7f:6d:30:67:0e:e5:52:9a:46:53:
                    3f:09:27:2e:09:18:1d:51:9c:f9:c7:0d:8c:9b:b9:
                    31:52:33:9d:b9:db:db:0e:18:53:ca:cb:22:5f:1c:
                    4d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:19:2A:68:7E:F0:D7:79:6F:5B:D2:DD:C6:F1:6C:0E:02:1C:E6:E6
            X509v3 Authority Key Identifier:
                keyid:01:44:76:5D:C0:A3:D9:D0:EA:DA:84:56:25:C5:E7:F1:4C:55:26:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/323830343a366635303a3a2f33322d3332203d3e20323730363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6f50::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:dc:3e:7c:e5:af:c7:47:e7:66:0e:4f:c7:a7:be:74:c8:24:
         59:67:23:ac:7d:fd:84:15:83:a7:de:59:1b:6e:17:51:21:19:
         00:ac:a4:e6:00:f3:ff:72:59:f6:c1:8c:e4:b2:3c:5b:f5:6c:
         03:de:43:f8:49:26:9d:f4:5a:52:6f:99:f9:94:0b:fa:e1:8f:
         ed:d5:e6:60:50:ac:87:6e:2d:d4:97:39:79:fa:ae:06:bb:0e:
         21:55:39:ba:80:0a:e3:97:91:b9:a9:82:5c:5e:12:22:a1:52:
         e5:7c:08:c9:0d:e4:b1:26:a7:d2:d0:7c:57:eb:59:9b:80:46:
         a2:18:9e:d8:33:06:c1:2e:5f:2f:cf:00:2c:8d:f2:1b:35:b8:
         18:65:05:0e:bb:25:83:b2:ad:24:d3:23:02:73:69:5f:9a:c0:
         78:db:69:ac:3c:ad:ec:df:26:41:4e:e6:07:35:d8:88:93:17:
         f1:24:31:5f:61:9d:4f:f5:1a:69:4d:c9:56:64:10:a6:dd:91:
         fd:a1:ca:cb:28:68:05:40:3e:a7:2a:fb:ca:1f:55:4d:b1:fb:
         76:57:c1:8e:05:8a:0f:c6:09:6a:f2:88:93:e3:d0:e9:7c:4e:
         c8:6a:d1:f9:40:f6:db:9e:fa:a4:d7:ac:df:74:73:d7:91:5a:
         c1:87:0c:7f
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUaveFBz80ffPzl/XbxZQVM/z5Pz4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDE0NDc2NURDMEEzRDlEMEVBREE4NDU2MjVDNUU3RjE0
QzU1MjY5MDAeFw0yNDA0MDMyMjE2NDFaFw0yNTA0MDIyMjIxNDFaMDMxMTAvBgNV
BAMTKEQ4MTkyQTY4N0VGMEQ3Nzk2RjVCRDJEREM2RjE2QzBFMDIxQ0U2RTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4MteIDb+R5vCeQ77eLE1Y/xsG
50+qBprVMK2oZ4MpB7R9ftWM8Yzyg+HMzD9G25qkU4qNA5em1nnefb2oH8mHZj3C
Pmux472+4v46G8SX5ABmhxcWef4V9CreusASJe5vwG1NxtGnadCgLVt6dM/QsmEu
6b+FZW/K+KWoNEN72cEr5ihyOHw4DN+8GYhX6oRYX7ESxrHwwNec7szWqPdFiMRs
zLzuPQXf/8D4FJRITdTKdu2M7SRBskjplIuctSH9kcrkaINoxUWmzGzux157dqwh
1V6Of20wZw7lUppGUz8JJy4JGB1RnPnHDYybuTFSM52529sOGFPKyyJfHE0jAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU2BkqaH7w13lvW9LdxvFsDgIc5uYwHwYDVR0j
BBgwFoAUAUR2XcCj2dDq2oRWJcXn8UxVJpAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnpvaUxNWmduVlhaVWRkUjloQ1JVY2tWaWtMaFA4ZWhFVTVoeFJlTFk3
bkMvMS8wMTQ0NzY1REMwQTNEOUQwRUFEQTg0NTYyNUM1RTdGMTRDNTUyNjkwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAxNDQ3NjVEQzBBM0Q5RDBF
QURBODQ1NjI1QzVFN0YxNEM1NTI2OTAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ6b2lMTVpnblZYWlVkZFI5aENSVWNrVmlrTGhQOGVoRVU1aHhSZUxZN25DLzEv
MzIzODMwMzQzYTM2NjYzNTMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMw
MzYzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARvUDANBgkqhkiG9w0BAQsFAAOCAQEAd9w+fOWv
x0fnZg5Px6e+dMgkWWcjrH39hBWDp95ZG24XUSEZAKyk5gDz/3JZ9sGM5LI8W/Vs
A95D+EkmnfRaUm+Z+ZQL+uGP7dXmYFCsh24t1Jc5efquBrsOIVU5uoAK45eRuamC
XF4SIqFS5XwIyQ3ksSan0tB8V+tZm4BGohie2DMGwS5fL88ALI3yGzW4GGUFDrsl
g7KtJNMjAnNpX5rAeNtprDyt7N8mQU7mBzXYiJMX8SQxX2GdT/UaaU3JVmQQpt2R
/aHKyyhoBUA+pyr7yh9VTbH7dlfBjgWKD8YJavKIk+PQ6XxOyGrR+UD22576pNes
33Rz15FawYcMfw==
-----END CERTIFICATE-----
Generated at Sat Sep 28 04:03:56 2024 by rpki-client on console-fra.rpki-client.org