Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/323830343a356266303a343030303a3a2f33342d3334203d3e20323638383738.roa
File:                     323830343a356266303a343030303a3a2f33342d3334203d3e20323638383738.roa (raw, json)
Hash identifier:          kHEUQTVNIi17uisCU5YbxHh5mtLJ5hc+0xh+mgm2pSU=
Subject key identifier:   E9:0B:7C:71:84:3B:1F:43:6B:B3:BD:3E:1D:1C:DE:0B:E0:AF:84:8A
Certificate issuer:       /CN=DBC42DA8F09130640B6DE00AA84DFB10862A2F59
Certificate serial:       71C6CAABB36370343F308D3DDBB3C7A8F6C8F724
Authority key identifier: DB:C4:2D:A8:F0:91:30:64:0B:6D:E0:0A:A8:4D:FB:10:86:2A:2F:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBC42DA8F09130640B6DE00AA84DFB10862A2F59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/323830343a356266303a343030303a3a2f33342d3334203d3e20323638383738.roa
Signing time:             Tue 12 Nov 2024 19:10:08 +0000
ROA not before:           Tue 12 Nov 2024 19:05:08 +0000
ROA not after:            Tue 11 Nov 2025 19:10:08 +0000
asID:                     268878
IP address blocks:        2804:5bf0:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/DBC42DA8F09130640B6DE00AA84DFB10862A2F59.crl
                          rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/DBC42DA8F09130640B6DE00AA84DFB10862A2F59.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBC42DA8F09130640B6DE00AA84DFB10862A2F59.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 16:38:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:c6:ca:ab:b3:63:70:34:3f:30:8d:3d:db:b3:c7:a8:f6:c8:f7:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBC42DA8F09130640B6DE00AA84DFB10862A2F59
        Validity
            Not Before: Nov 12 19:05:08 2024 GMT
            Not After : Nov 11 19:10:08 2025 GMT
        Subject: CN=E90B7C71843B1F436BB3BD3E1D1CDE0BE0AF848A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:81:0c:72:44:02:a4:ca:ed:a3:2a:c4:4b:fd:
                    b8:87:62:b4:e6:7a:ce:a5:5b:80:dc:b8:3a:6d:91:
                    e4:43:c8:95:5f:c0:e4:0d:3b:04:d7:ba:e2:9d:bb:
                    a0:f3:d4:81:fa:f9:1c:8c:5f:1d:62:6e:cb:f7:79:
                    c2:e1:4b:9e:5f:f5:e7:f2:85:6c:c8:16:51:06:4d:
                    c3:96:bd:74:46:1e:61:0e:d5:ba:9e:1f:25:d1:03:
                    26:33:3d:c5:df:82:83:b0:a3:95:28:86:44:80:7e:
                    b3:aa:f0:1b:ef:97:ef:b8:62:4a:ea:38:6b:39:6f:
                    74:4c:8c:cf:4e:63:06:dd:be:19:ed:0d:5d:ca:36:
                    2c:3c:55:2c:e0:ac:c0:e1:37:4d:72:0e:d8:b3:98:
                    bb:95:c9:20:ae:ec:0e:36:34:84:99:b4:1c:9c:f1:
                    e4:27:39:81:7b:04:31:ef:5d:62:dc:05:0a:96:30:
                    4b:94:11:63:6c:55:40:19:a8:31:07:42:11:9d:a1:
                    65:d5:9d:bb:95:9c:27:ae:a5:a1:7f:47:f1:29:d5:
                    22:49:06:06:40:14:2a:e3:4a:ae:cc:ea:5d:82:23:
                    5a:ee:eb:1f:de:0b:68:78:22:5f:1f:5a:67:56:5c:
                    4f:05:68:d1:41:b1:1a:4a:1b:bd:ad:5a:fa:cf:ce:
                    7f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:0B:7C:71:84:3B:1F:43:6B:B3:BD:3E:1D:1C:DE:0B:E0:AF:84:8A
            X509v3 Authority Key Identifier:
                keyid:DB:C4:2D:A8:F0:91:30:64:0B:6D:E0:0A:A8:4D:FB:10:86:2A:2F:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/DBC42DA8F09130640B6DE00AA84DFB10862A2F59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBC42DA8F09130640B6DE00AA84DFB10862A2F59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/323830343a356266303a343030303a3a2f33342d3334203d3e20323638383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5bf0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3a:b6:04:ce:5a:c0:06:e4:6e:e1:2a:1b:ed:45:df:21:4c:7b:
         f8:29:98:cf:d3:4c:ef:ee:99:b3:fc:25:a3:90:ac:ec:33:54:
         36:1d:57:65:ee:c6:e6:10:3c:1b:24:a3:82:9c:f4:1d:f9:3c:
         a8:9e:c6:e6:d2:01:14:33:89:ac:7a:d4:fd:18:18:be:59:fa:
         c4:5d:79:da:07:a5:27:3c:f0:00:46:b4:ec:83:49:4e:a7:b8:
         3c:31:e0:4f:7f:b8:95:47:72:e1:bd:ba:4e:15:84:64:95:a5:
         65:69:d4:ee:bf:c1:22:28:fd:ae:dc:e0:4d:a7:ec:74:77:e3:
         b4:0c:1d:39:da:c8:2d:ea:72:e9:aa:2c:c5:b3:eb:c5:21:dc:
         f0:ba:58:a4:5b:03:d0:f3:7f:45:7e:47:c9:0c:d7:6d:77:84:
         6d:f4:6a:e8:ff:71:e8:3c:16:68:e7:55:5d:cd:d7:6a:e5:53:
         72:33:6c:77:82:da:20:d8:da:fb:42:80:8d:87:48:b7:6b:33:
         5c:ea:8d:53:f2:71:ca:45:4a:25:63:e4:56:1f:ca:34:f8:97:
         43:4b:8c:e8:54:07:20:74:1e:31:88:55:03:00:77:c4:3b:8c:
         90:76:83:35:07:c2:8c:a9:b3:26:81:ae:8d:91:3c:29:f5:ab:
         d3:d0:a4:1b
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUccbKq7NjcDQ/MI0927PHqPbI9yQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREJDNDJEQThGMDkxMzA2NDBCNkRFMDBBQTg0REZCMTA4
NjJBMkY1OTAeFw0yNDExMTIxOTA1MDhaFw0yNTExMTExOTEwMDhaMDMxMTAvBgNV
BAMTKEU5MEI3QzcxODQzQjFGNDM2QkIzQkQzRTFEMUNERTBCRTBBRjg0OEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMgQxyRAKkyu2jKsRL/biHYrTm
es6lW4DcuDptkeRDyJVfwOQNOwTXuuKdu6Dz1IH6+RyMXx1ibsv3ecLhS55f9efy
hWzIFlEGTcOWvXRGHmEO1bqeHyXRAyYzPcXfgoOwo5UohkSAfrOq8Bvvl++4Ykrq
OGs5b3RMjM9OYwbdvhntDV3KNiw8VSzgrMDhN01yDtizmLuVySCu7A42NISZtByc
8eQnOYF7BDHvXWLcBQqWMEuUEWNsVUAZqDEHQhGdoWXVnbuVnCeupaF/R/Ep1SJJ
BgZAFCrjSq7M6l2CI1ru6x/eC2h4Il8fWmdWXE8FaNFBsRpKG72tWvrPzn8VAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU6Qt8cYQ7H0Nrs70+HRzeC+CvhIowHwYDVR0j
BBgwFoAU28QtqPCRMGQLbeAKqE37EIYqL1kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzlLNGlkbUxtNGVlczUyUHdZTUFKUUtXWGJjVlFUODU2OTNpa1J5enNr
Ym8vMC9EQkM0MkRBOEYwOTEzMDY0MEI2REUwMEFBODRERkIxMDg2MkEyRjU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RCQzQyREE4RjA5MTMwNjQw
QjZERTAwQUE4NERGQjEwODYyQTJGNTkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzc5SzRpZG1MbTRlZXM1MlB3WU1BSlFLV1hiY1ZRVDg1NjkzaWtSeXpza2JvLzAv
MzIzODMwMzQzYTM1NjI2NjMwM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzODM4MzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEW/BAMA0GCSqGSIb3DQEBCwUA
A4IBAQA6tgTOWsAG5G7hKhvtRd8hTHv4KZjP00zv7pmz/CWjkKzsM1Q2HVdl7sbm
EDwbJKOCnPQd+Tyonsbm0gEUM4msetT9GBi+WfrEXXnaB6UnPPAARrTsg0lOp7g8
MeBPf7iVR3LhvbpOFYRklaVladTuv8EiKP2u3OBNp+x0d+O0DB052sgt6nLpqizF
s+vFIdzwulikWwPQ839FfkfJDNdtd4Rt9Gro/3HoPBZo51Vdzddq5VNyM2x3gtog
2Nr7QoCNh0i3azNc6o1T8nHKRUolY+RWH8o0+JdDS4zoVAcgdB4xiFUDAHfEO4yQ
doM1B8KMqbMmga6NkTwp9avT0KQb
-----END CERTIFICATE-----
Generated at Mon Nov 25 18:43:13 2024 by rpki-client on console-ams.rpki-client.org