Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/323830343a346263383a313430303a3a2f34302d3432203d3e20323637333239.roa
File:                     323830343a346263383a313430303a3a2f34302d3432203d3e20323637333239.roa (raw, json)
Hash identifier:          gjW2FPBGGjivP7mNOpiGDHs5CJs5AjLknVnMJ6Vd6UE=
Subject key identifier:   76:F7:8B:F9:91:6E:B0:D8:B9:F3:98:74:36:CB:BA:06:AB:68:0C:40
Certificate issuer:       /CN=8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062
Certificate serial:       479A46D2E78F715E4983859556BF2278F2DA9559
Authority key identifier: 8B:C9:F7:AD:42:F2:2B:9F:05:99:DE:DE:F7:DF:60:71:8D:CE:10:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/323830343a346263383a313430303a3a2f34302d3432203d3e20323637333239.roa
Signing time:             Thu 04 Apr 2024 04:01:08 +0000
ROA not before:           Thu 04 Apr 2024 03:56:08 +0000
ROA not after:            Thu 03 Apr 2025 04:01:08 +0000
asID:                     267329
IP address blocks:        2804:4bc8:1400::/40 maxlen: 42

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.crl
                          rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:9a:46:d2:e7:8f:71:5e:49:83:85:95:56:bf:22:78:f2:da:95:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062
        Validity
            Not Before: Apr  4 03:56:08 2024 GMT
            Not After : Apr  3 04:01:08 2025 GMT
        Subject: CN=76F78BF9916EB0D8B9F3987436CBBA06AB680C40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:42:af:5f:cb:20:0e:73:a8:3e:9b:de:2f:b1:
                    75:51:5d:93:06:45:71:fc:4d:84:aa:8b:a9:41:73:
                    ce:76:55:46:e7:86:f9:95:ac:ba:29:04:ef:10:e4:
                    cc:8b:1a:92:25:f2:d4:f7:b4:0c:7c:a4:d4:0d:2b:
                    db:3e:57:51:88:55:4d:a8:bc:c2:d4:5d:1a:db:b5:
                    ba:45:0b:b6:97:ad:b5:32:b7:5b:a6:42:6b:5a:58:
                    ad:28:2a:b6:6f:f4:0c:be:98:96:32:9c:d4:1c:08:
                    fe:b4:8b:b6:37:cc:30:5b:2f:86:86:d4:1e:05:b9:
                    0f:22:7c:0b:6b:7e:54:8a:b2:cf:53:17:c5:77:b4:
                    8b:84:cd:40:b7:5e:27:13:39:2f:3b:4e:97:fc:00:
                    96:62:5b:e1:01:c5:06:7a:bc:9b:ee:ee:03:6e:ba:
                    1b:8e:b6:6f:02:ce:1b:3f:3c:25:10:cf:73:af:f3:
                    ac:62:4a:b0:8a:22:69:77:10:6c:b9:e2:2e:00:44:
                    f7:3c:ee:65:2d:11:bf:3e:ab:80:e0:9e:04:5d:e5:
                    f8:9e:c0:18:5d:77:c9:a4:02:34:c8:2c:04:6b:d2:
                    6e:ef:30:2b:fc:f1:e5:35:b8:68:81:c1:ec:d4:01:
                    b3:01:2f:aa:a8:be:a6:3d:31:0b:96:1e:69:a2:8b:
                    f1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F7:8B:F9:91:6E:B0:D8:B9:F3:98:74:36:CB:BA:06:AB:68:0C:40
            X509v3 Authority Key Identifier:
                keyid:8B:C9:F7:AD:42:F2:2B:9F:05:99:DE:DE:F7:DF:60:71:8D:CE:10:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/323830343a346263383a313430303a3a2f34302d3432203d3e20323637333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bc8:1400::/40

    Signature Algorithm: sha256WithRSAEncryption
         76:33:5c:a2:02:6b:84:4e:de:a5:88:ea:58:b4:32:3f:7f:11:
         dd:ad:37:60:d5:5a:52:e1:be:8f:d2:3e:ad:d9:cf:80:43:be:
         21:cd:ed:42:ef:d2:c0:3e:fe:6c:25:59:58:cd:73:6a:ba:59:
         21:26:cf:50:fe:f4:cb:85:8d:e2:e1:18:ba:fe:42:6d:73:47:
         59:c2:ad:c0:4e:25:66:de:7c:7f:cf:07:dc:06:25:88:b2:47:
         59:5e:00:40:d7:f8:2d:5e:3d:f9:6b:86:4a:d8:3b:46:2d:85:
         c8:1f:2e:87:f1:04:d3:a4:d7:5d:32:99:67:22:1c:e1:c7:5a:
         ae:ae:09:43:7c:24:b6:f8:3d:99:22:18:54:e7:7f:a3:ea:32:
         31:15:19:cf:a3:ab:00:2a:de:d0:17:0b:1f:51:75:45:78:06:
         fb:9c:78:b6:04:2f:81:94:ef:f1:7b:d3:c2:94:32:31:fb:b4:
         5d:4c:0e:86:cb:e4:e9:50:14:cd:7a:e2:b8:3a:25:09:28:82:
         96:79:45:8a:38:23:4a:42:c7:f0:d0:f6:02:df:8d:80:cc:f1:
         7c:55:98:69:e3:35:d8:51:4a:d8:68:65:d9:99:88:18:15:56:
         45:d0:37:6f:f0:0f:73:77:f9:cf:a0:59:15:ac:2e:da:67:58:
         4d:f5:3f:1e
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUR5pG0uePcV5Jg4WVVr8iePLalVkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEJDOUY3QUQ0MkYyMkI5RjA1OTlERURFRjdERjYwNzE4
RENFMTA2MjAeFw0yNDA0MDQwMzU2MDhaFw0yNTA0MDMwNDAxMDhaMDMxMTAvBgNV
BAMTKDc2Rjc4QkY5OTE2RUIwRDhCOUYzOTg3NDM2Q0JCQTA2QUI2ODBDNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvQq9fyyAOc6g+m94vsXVRXZMG
RXH8TYSqi6lBc852VUbnhvmVrLopBO8Q5MyLGpIl8tT3tAx8pNQNK9s+V1GIVU2o
vMLUXRrbtbpFC7aXrbUyt1umQmtaWK0oKrZv9Ay+mJYynNQcCP60i7Y3zDBbL4aG
1B4FuQ8ifAtrflSKss9TF8V3tIuEzUC3XicTOS87Tpf8AJZiW+EBxQZ6vJvu7gNu
uhuOtm8Czhs/PCUQz3Ov86xiSrCKIml3EGy54i4ARPc87mUtEb8+q4DgngRd5fie
wBhdd8mkAjTILARr0m7vMCv88eU1uGiBwezUAbMBL6qovqY9MQuWHmmii/H5AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUdveL+ZFusNi585h0Nsu6BqtoDEAwHwYDVR0j
BBgwFoAUi8n3rULyK58Fmd7e999gcY3OEGIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0VTRmlBSGh2WTd5aTFDZjlGNXFxc1I0RnluUTRuVHlXS3duUURudEEy
Y1AvMS84QkM5RjdBRDQyRjIyQjlGMDU5OURFREVGN0RGNjA3MThEQ0UxMDYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhCQzlGN0FENDJGMjJCOUYw
NTk5REVERUY3REY2MDcxOERDRTEwNjIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdFU0ZpQUhodlk3eWkxQ2Y5RjVxcXNSNEZ5blE0blR5V0t3blFEbnRBMmNQLzEv
MzIzODMwMzQzYTM0NjI2MzM4M2EzMTM0MzAzMDNhM2EyZjM0MzAyZDM0MzIyMDNk
M2UyMDMyMzYzNzMzMzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgES8gUMA0GCSqGSIb3DQEBCwUA
A4IBAQB2M1yiAmuETt6liOpYtDI/fxHdrTdg1VpS4b6P0j6t2c+AQ74hze1C79LA
Pv5sJVlYzXNqulkhJs9Q/vTLhY3i4Ri6/kJtc0dZwq3ATiVm3nx/zwfcBiWIskdZ
XgBA1/gtXj35a4ZK2DtGLYXIHy6H8QTTpNddMplnIhzhx1qurglDfCS2+D2ZIhhU
53+j6jIxFRnPo6sAKt7QFwsfUXVFeAb7nHi2BC+BlO/xe9PClDIx+7RdTA6Gy+Tp
UBTNeuK4OiUJKIKWeUWKOCNKQsfw0PYC342AzPF8VZhp4zXYUUrYaGXZmYgYFVZF
0Ddv8A9zd/nPoFkVrC7aZ1hN9T8e
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:18 2024 by rpki-client on console-ams.rpki-client.org