Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/323830343a33343a313030303a383a3a2f36342d3634203d3e203238333036.roa
File:                     323830343a33343a313030303a383a3a2f36342d3634203d3e203238333036.roa (raw, json)
Hash identifier:          IJaARXxKofmsVe0KB0q11g91pCCclD8OhfigAx04kGk=
Subject key identifier:   FF:67:CD:1C:5E:CF:5C:0A:4A:CE:59:C6:94:C1:AA:77:0D:12:4C:6C
Certificate issuer:       /CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
Certificate serial:       220C819B2DAE3FED4BD6319450D9B3E1ABE29A92
Authority key identifier: 94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/323830343a33343a313030303a383a3a2f36342d3634203d3e203238333036.roa
Signing time:             Tue 25 Jun 2024 15:21:14 +0000
ROA not before:           Tue 25 Jun 2024 15:16:14 +0000
ROA not after:            Tue 24 Jun 2025 15:21:14 +0000
asID:                     28306
IP address blocks:        2804:34:1000:8::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/94294401D5CB3E5895F6F68AEC5E4163AED0F324.crl
                          rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/94294401D5CB3E5895F6F68AEC5E4163AED0F324.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 03:20:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:0c:81:9b:2d:ae:3f:ed:4b:d6:31:94:50:d9:b3:e1:ab:e2:9a:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
        Validity
            Not Before: Jun 25 15:16:14 2024 GMT
            Not After : Jun 24 15:21:14 2025 GMT
        Subject: CN=FF67CD1C5ECF5C0A4ACE59C694C1AA770D124C6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:62:05:8f:a9:48:1c:67:c9:1b:4c:93:b8:e2:
                    d1:db:cd:8c:0e:44:e5:a0:a1:c5:60:e7:46:2a:33:
                    52:8d:cf:21:1b:d1:61:95:d7:ca:5b:71:16:b0:7c:
                    5d:99:b0:c9:f7:38:b5:7e:e9:9e:09:92:31:b6:51:
                    aa:b5:3d:64:89:4c:07:76:a9:3b:ba:39:34:48:6b:
                    58:67:5b:6e:36:91:92:37:ab:11:d4:87:35:c2:3e:
                    33:e6:95:b2:89:d5:f9:fe:ed:79:18:a6:31:95:80:
                    7c:4d:de:67:57:d2:01:16:77:c7:ce:fb:bd:07:48:
                    96:5f:8a:c9:47:6a:05:8c:aa:5c:90:4f:81:ea:42:
                    22:97:4d:72:e2:4b:6a:d0:ff:81:c4:40:5a:93:13:
                    8e:43:f6:f4:92:52:9a:c1:6a:74:a9:e4:01:91:82:
                    ce:7c:e4:07:01:8d:9d:d7:86:60:1e:31:c1:f7:1c:
                    af:ff:3e:1d:af:4e:75:3f:f9:3f:97:a8:1d:14:3a:
                    28:19:65:bd:21:8a:5c:ee:01:0f:af:7c:c6:4e:69:
                    08:7b:45:fb:e5:e0:a7:ef:e6:f1:c1:d0:4f:fe:2f:
                    e0:84:d1:35:b7:1a:aa:2e:af:3f:ce:94:bc:0f:e8:
                    cf:51:ae:69:29:6b:73:7e:22:a6:e8:d3:fd:85:70:
                    a9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:67:CD:1C:5E:CF:5C:0A:4A:CE:59:C6:94:C1:AA:77:0D:12:4C:6C
            X509v3 Authority Key Identifier:
                keyid:94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/94294401D5CB3E5895F6F68AEC5E4163AED0F324.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/323830343a33343a313030303a383a3a2f36342d3634203d3e203238333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:34:1000:8::/64

    Signature Algorithm: sha256WithRSAEncryption
         81:a9:f9:01:3e:05:4e:cd:86:bd:27:8d:73:e8:fd:70:b2:d1:
         d0:ff:4e:f8:5a:f4:58:80:46:83:ad:d7:0b:62:31:52:35:ef:
         4c:e5:08:87:36:45:2e:2f:a6:a9:99:f2:c1:74:c6:56:52:ad:
         38:11:00:31:b5:f0:cd:1f:47:05:d4:b9:24:12:1d:b1:19:cd:
         37:0f:30:5a:cf:e8:df:6a:bf:6c:17:b0:4d:f2:90:b0:33:b5:
         32:98:ce:6a:d8:37:af:c9:b6:45:f5:f8:94:ec:aa:17:cd:49:
         76:f7:7a:3a:9f:ba:98:34:56:6c:93:1c:1d:75:79:b0:a4:18:
         d3:9e:f5:7b:19:f1:30:3c:bc:5f:30:c4:74:1d:89:a3:6e:0f:
         be:77:ee:f2:1e:b7:3c:3f:ec:a2:e3:bd:6d:91:5f:a8:d0:08:
         01:7b:20:65:76:1a:cc:4b:fc:f0:d5:7c:1e:0b:a2:c7:68:41:
         5a:41:8e:91:65:14:ff:2a:ed:9e:03:b5:d4:dd:3c:61:0c:ed:
         0c:f4:6a:47:ab:98:dc:55:8d:26:c5:91:0b:93:43:9f:44:d9:
         4b:75:ba:90:54:f8:10:46:7a:94:c4:99:07:37:91:39:47:0f:
         4a:92:a3:8d:85:5a:06:aa:56:18:e3:34:34:9d:cb:bb:7f:2b:
         56:54:3e:4f
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUIgyBmy2uP+1L1jGUUNmz4avimpIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQyOTQ0MDFENUNCM0U1ODk1RjZGNjhBRUM1RTQxNjNB
RUQwRjMyNDAeFw0yNDA2MjUxNTE2MTRaFw0yNTA2MjQxNTIxMTRaMDMxMTAvBgNV
BAMTKEZGNjdDRDFDNUVDRjVDMEE0QUNFNTlDNjk0QzFBQTc3MEQxMjRDNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3YgWPqUgcZ8kbTJO44tHbzYwO
ROWgocVg50YqM1KNzyEb0WGV18pbcRawfF2ZsMn3OLV+6Z4JkjG2Uaq1PWSJTAd2
qTu6OTRIa1hnW242kZI3qxHUhzXCPjPmlbKJ1fn+7XkYpjGVgHxN3mdX0gEWd8fO
+70HSJZfislHagWMqlyQT4HqQiKXTXLiS2rQ/4HEQFqTE45D9vSSUprBanSp5AGR
gs585AcBjZ3XhmAeMcH3HK//Ph2vTnU/+T+XqB0UOigZZb0hilzuAQ+vfMZOaQh7
Rfvl4Kfv5vHB0E/+L+CE0TW3Gqourz/OlLwP6M9Rrmkpa3N+Iqbo0/2FcKkfAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQU/2fNHF7PXApKzlnGlMGqdw0STGwwHwYDVR0j
BBgwFoAUlClEAdXLPliV9vaK7F5BY67Q8yQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1BEMlBudzFaclJFblYzck5rOGF6WmoxWHk2dmZ0ZTFXTE1KOWdCUE5O
dWcvMC85NDI5NDQwMUQ1Q0IzRTU4OTVGNkY2OEFFQzVFNDE2M0FFRDBGMzI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk0Mjk0NDAxRDVDQjNFNTg5
NUY2RjY4QUVDNUU0MTYzQUVEMEYzMjQuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdQRDJQbncxWnJSRW5WM3JOazhhelpqMVh5NnZmdGUxV0xNSjlnQlBOTnVnLzAv
MzIzODMwMzQzYTMzMzQzYTMxMzAzMDMwM2EzODNhM2EyZjM2MzQyZDM2MzQyMDNk
M2UyMDMyMzgzMzMwMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJAYI
KwYBBQUHAQcBAf8EFTATMBEEAgACMAsDCQAoBAA0EAAACDANBgkqhkiG9w0BAQsF
AAOCAQEAgan5AT4FTs2GvSeNc+j9cLLR0P9O+Fr0WIBGg63XC2IxUjXvTOUIhzZF
Li+mqZnywXTGVlKtOBEAMbXwzR9HBdS5JBIdsRnNNw8wWs/o32q/bBewTfKQsDO1
MpjOatg3r8m2RfX4lOyqF81Jdvd6Op+6mDRWbJMcHXV5sKQY0571exnxMDy8XzDE
dB2Jo24Pvnfu8h63PD/souO9bZFfqNAIAXsgZXYazEv88NV8Hguix2hBWkGOkWUU
/yrtngO11N08YQztDPRqR6uY3FWNJsWRC5NDn0TZS3W6kFT4EEZ6lMSZBzeROUcP
SpKjjYVaBqpWGOM0NJ3Lu38rVlQ+Tw==
-----END CERTIFICATE-----
Generated at Fri Nov 29 07:02:03 2024 by rpki-client on console-ams.rpki-client.org