Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a3530303a3a2f34302d3430203d3e20323635333933.roa
File:                     323830343a333336343a3530303a3a2f34302d3430203d3e20323635333933.roa (raw, json)
Hash identifier:          bR4dUGkspGZJE4DVBCm2cqnhom+5qY/rYNQ7SI7URlI=
Subject key identifier:   13:79:BF:C4:A9:42:32:10:98:66:76:C0:97:E7:21:27:3D:95:B1:D7
Certificate issuer:       /CN=731D49CB201358EE9CDBEE917EC25CF59E02A3B2
Certificate serial:       2C99AC753AE75DB562285FD1A3098215873D2E55
Authority key identifier: 73:1D:49:CB:20:13:58:EE:9C:DB:EE:91:7E:C2:5C:F5:9E:02:A3:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/731D49CB201358EE9CDBEE917EC25CF59E02A3B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a3530303a3a2f34302d3430203d3e20323635333933.roa
Signing time:             Fri 01 Nov 2024 00:56:47 +0000
ROA not before:           Fri 01 Nov 2024 00:51:47 +0000
ROA not after:            Fri 31 Oct 2025 00:56:47 +0000
asID:                     265393
IP address blocks:        2804:3364:500::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/731D49CB201358EE9CDBEE917EC25CF59E02A3B2.crl
                          rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/731D49CB201358EE9CDBEE917EC25CF59E02A3B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/731D49CB201358EE9CDBEE917EC25CF59E02A3B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 11:49:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:99:ac:75:3a:e7:5d:b5:62:28:5f:d1:a3:09:82:15:87:3d:2e:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=731D49CB201358EE9CDBEE917EC25CF59E02A3B2
        Validity
            Not Before: Nov  1 00:51:47 2024 GMT
            Not After : Oct 31 00:56:47 2025 GMT
        Subject: CN=1379BFC4A9423210986676C097E721273D95B1D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:65:81:26:f4:76:f8:3d:b0:3c:71:df:a2:2a:
                    f0:38:d8:04:26:b0:f2:e5:33:67:81:36:49:ba:78:
                    01:f8:c8:37:81:96:08:67:64:5d:c7:ef:da:ba:44:
                    8e:54:0f:cd:cd:33:00:8c:bd:f3:36:21:72:eb:bf:
                    18:90:fe:ae:1c:03:62:49:6a:4c:a8:ef:23:27:d6:
                    6a:1b:e0:4c:6a:af:11:14:99:31:7e:7b:2f:05:8a:
                    8d:e4:21:58:17:2e:97:5f:d4:8c:89:f8:57:9c:e5:
                    be:b1:80:67:8b:71:ed:14:89:b5:aa:fe:9a:e8:f5:
                    aa:d7:69:f3:06:61:95:aa:d1:35:cb:94:1b:51:3c:
                    40:72:75:fd:11:5d:36:ef:89:52:27:08:4e:a9:c2:
                    2e:eb:cb:4c:ce:c3:10:ad:ad:0d:f1:61:9f:1c:74:
                    5d:74:49:b0:2e:f5:7a:8a:13:5f:cc:a6:b4:5f:7e:
                    54:4d:18:90:5e:69:a0:19:a6:e4:ba:a9:c4:9d:09:
                    a2:1b:96:1c:66:89:33:26:d6:28:af:5d:63:a8:dd:
                    07:ae:87:8e:df:82:96:04:df:44:c8:a0:89:eb:4a:
                    57:9e:9d:cc:0b:f5:d3:28:20:41:ee:15:f9:fb:29:
                    ef:51:c0:64:d0:c4:6a:af:c5:09:ca:46:fb:6b:c3:
                    f4:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:79:BF:C4:A9:42:32:10:98:66:76:C0:97:E7:21:27:3D:95:B1:D7
            X509v3 Authority Key Identifier:
                keyid:73:1D:49:CB:20:13:58:EE:9C:DB:EE:91:7E:C2:5C:F5:9E:02:A3:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/731D49CB201358EE9CDBEE917EC25CF59E02A3B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/731D49CB201358EE9CDBEE917EC25CF59E02A3B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a3530303a3a2f34302d3430203d3e20323635333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3364:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         bb:b9:0e:27:93:f6:ee:bf:f5:aa:43:f3:a0:39:6d:f9:4a:71:
         83:1e:fc:8b:1c:68:5f:ec:fe:42:d7:2a:75:51:c1:16:ad:00:
         f9:87:cf:51:76:17:14:23:1f:6c:a1:ae:e8:bf:da:b5:e4:c1:
         e5:be:0b:9a:91:fe:d8:6e:e4:2c:cc:30:c7:10:f7:57:9b:2b:
         0f:c8:94:cf:0f:c7:65:64:5d:11:9d:16:7e:49:8f:4d:a1:9b:
         16:f9:5f:00:d7:9f:36:fa:6b:59:bd:81:37:dc:d1:92:f0:8e:
         96:26:97:c5:bf:55:8a:41:54:fc:15:2a:d0:c1:40:46:a3:83:
         66:3f:49:d4:10:a5:ed:c9:bb:bf:91:71:8f:2a:96:92:ff:ee:
         67:34:7f:ed:c5:af:bb:a0:c8:97:33:ea:ff:ea:56:6a:37:6b:
         6a:fa:82:5f:3b:20:80:d1:97:ca:4e:bb:46:91:3a:3c:ac:f4:
         8c:18:0c:c9:3d:9f:31:06:95:cb:9e:f6:39:08:1c:41:f5:c6:
         45:27:62:98:7d:d1:dd:65:39:c7:06:ef:89:f8:ec:a3:a9:b9:
         1e:a4:be:d2:10:d8:73:c5:cc:41:d5:28:f5:d3:19:11:cf:91:
         72:f7:cf:72:82:c7:c4:08:05:83:54:b4:ec:4f:0c:93:6a:c5:
         c7:9f:7f:13
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIULJmsdTrnXbViKF/RowmCFYc9LlUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzMxRDQ5Q0IyMDEzNThFRTlDREJFRTkxN0VDMjVDRjU5
RTAyQTNCMjAeFw0yNDExMDEwMDUxNDdaFw0yNTEwMzEwMDU2NDdaMDMxMTAvBgNV
BAMTKDEzNzlCRkM0QTk0MjMyMTA5ODY2NzZDMDk3RTcyMTI3M0Q5NUIxRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFZYEm9Hb4PbA8cd+iKvA42AQm
sPLlM2eBNkm6eAH4yDeBlghnZF3H79q6RI5UD83NMwCMvfM2IXLrvxiQ/q4cA2JJ
akyo7yMn1mob4ExqrxEUmTF+ey8Fio3kIVgXLpdf1IyJ+Fec5b6xgGeLce0UibWq
/pro9arXafMGYZWq0TXLlBtRPEBydf0RXTbviVInCE6pwi7ry0zOwxCtrQ3xYZ8c
dF10SbAu9XqKE1/MprRfflRNGJBeaaAZpuS6qcSdCaIblhxmiTMm1iivXWOo3Qeu
h47fgpYE30TIoInrSleencwL9dMoIEHuFfn7Ke9RwGTQxGqvxQnKRvtrw/R1AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUE3m/xKlCMhCYZnbAl+chJz2VsdcwHwYDVR0j
BBgwFoAUcx1JyyATWO6c2+6RfsJc9Z4Co7IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1ZodjVjNFpFaGFmOEFMWkFOdVJ0cEdqcmpZNW4zZEU0VDJ4dms2Z3Zx
ckwvMC83MzFENDlDQjIwMTM1OEVFOUNEQkVFOTE3RUMyNUNGNTlFMDJBM0IyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzczMUQ0OUNCMjAxMzU4RUU5
Q0RCRUU5MTdFQzI1Q0Y1OUUwMkEzQjIuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdWaHY1YzRaRWhhZjhBTFpBTnVSdHBHanJqWTVuM2RFNFQyeHZrNmd2cXJMLzAv
MzIzODMwMzQzYTMzMzMzNjM0M2EzNTMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl
MjAzMjM2MzUzMzM5MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBDNkBTANBgkqhkiG9w0BAQsFAAOC
AQEAu7kOJ5P27r/1qkPzoDlt+Upxgx78ixxoX+z+QtcqdVHBFq0A+YfPUXYXFCMf
bKGu6L/ateTB5b4LmpH+2G7kLMwwxxD3V5srD8iUzw/HZWRdEZ0WfkmPTaGbFvlf
ANefNvprWb2BN9zRkvCOliaXxb9VikFU/BUq0MFARqODZj9J1BCl7cm7v5FxjyqW
kv/uZzR/7cWvu6DIlzPq/+pWajdravqCXzsggNGXyk67RpE6PKz0jBgMyT2fMQaV
y572OQgcQfXGRSdimH3R3WU5xwbvifjso6m5HqS+0hDYc8XMQdUo9dMZEc+RcvfP
coLHxAgFg1S07E8Mk2rFx59/Ew==
-----END CERTIFICATE-----
Generated at Mon Nov 25 13:14:45 2024 by rpki-client on console-ams.rpki-client.org