Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7jkfUhbhdxHvKqKhW2wND8HmY4sJQz7u27BEYy8EQwL5/1/323830343a326536383a3a2f33322d3438203d3e20323635333434.roa
File:                     323830343a326536383a3a2f33322d3438203d3e20323635333434.roa (raw, json)
Hash identifier:          eymHKA3NpC2dpiFGKJJglZFl2EZCUqjmNazec4pd6es=
Subject key identifier:   FF:16:A2:6E:4C:48:B3:5A:E8:82:AD:E1:54:2E:FA:69:F7:58:3E:DE
Certificate issuer:       /CN=71E169D36940CB71A5ADBB76D2764F1539336D84
Certificate serial:       46D524C10A4CCEECCAFF95E100B72E655307B798
Authority key identifier: 71:E1:69:D3:69:40:CB:71:A5:AD:BB:76:D2:76:4F:15:39:33:6D:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71E169D36940CB71A5ADBB76D2764F1539336D84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7jkfUhbhdxHvKqKhW2wND8HmY4sJQz7u27BEYy8EQwL5/1/323830343a326536383a3a2f33322d3438203d3e20323635333434.roa
Signing time:             Thu 04 Apr 2024 20:41:41 +0000
ROA not before:           Thu 04 Apr 2024 20:36:41 +0000
ROA not after:            Thu 03 Apr 2025 20:41:41 +0000
asID:                     265344
IP address blocks:        2804:2e68::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7jkfUhbhdxHvKqKhW2wND8HmY4sJQz7u27BEYy8EQwL5/1/71E169D36940CB71A5ADBB76D2764F1539336D84.crl
                          rsync://rpki-repo.registro.br/repo/7jkfUhbhdxHvKqKhW2wND8HmY4sJQz7u27BEYy8EQwL5/1/71E169D36940CB71A5ADBB76D2764F1539336D84.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71E169D36940CB71A5ADBB76D2764F1539336D84.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:d5:24:c1:0a:4c:ce:ec:ca:ff:95:e1:00:b7:2e:65:53:07:b7:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71E169D36940CB71A5ADBB76D2764F1539336D84
        Validity
            Not Before: Apr  4 20:36:41 2024 GMT
            Not After : Apr  3 20:41:41 2025 GMT
        Subject: CN=FF16A26E4C48B35AE882ADE1542EFA69F7583EDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3a:7a:3f:11:19:fa:d5:ab:b9:32:06:3f:91:
                    bd:0d:5a:5b:01:64:a1:f9:a1:9b:46:e0:cf:53:25:
                    73:2a:2f:d3:a7:64:70:85:20:31:e4:8b:c6:b1:b0:
                    60:d2:73:a6:62:91:56:6e:eb:68:aa:0d:ca:46:88:
                    2a:18:24:4d:fa:5c:fe:38:0c:5f:e4:39:94:f1:80:
                    36:83:9d:9c:fb:82:69:d7:82:ce:19:cb:e4:15:2c:
                    66:10:d6:d2:4c:25:5f:42:a0:b4:c0:e0:9d:f6:8f:
                    9a:09:12:0f:0b:c2:5d:58:ff:6f:98:8e:32:16:bb:
                    37:32:62:63:40:ba:9c:8f:ba:2e:ec:9c:e2:9b:12:
                    38:c9:7e:5a:6c:f0:9b:c1:e2:65:c9:6a:16:07:fc:
                    13:25:58:1d:55:6a:8a:24:a9:f7:3f:ff:15:26:80:
                    ef:40:54:27:0e:66:a8:14:82:34:9f:12:dd:fc:1d:
                    08:46:28:0b:07:47:ac:74:0b:10:2a:85:f0:e0:99:
                    eb:1f:2a:4e:0b:43:62:54:90:07:ef:04:bc:d3:94:
                    a2:2a:da:29:b0:1f:70:42:44:56:9e:1f:e6:70:7e:
                    a8:b8:60:bd:e9:98:45:70:a7:50:f7:2a:af:a5:fa:
                    5a:24:ea:6c:96:4e:70:e0:97:82:e9:08:bb:ad:13:
                    a3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:16:A2:6E:4C:48:B3:5A:E8:82:AD:E1:54:2E:FA:69:F7:58:3E:DE
            X509v3 Authority Key Identifier:
                keyid:71:E1:69:D3:69:40:CB:71:A5:AD:BB:76:D2:76:4F:15:39:33:6D:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7jkfUhbhdxHvKqKhW2wND8HmY4sJQz7u27BEYy8EQwL5/1/71E169D36940CB71A5ADBB76D2764F1539336D84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71E169D36940CB71A5ADBB76D2764F1539336D84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7jkfUhbhdxHvKqKhW2wND8HmY4sJQz7u27BEYy8EQwL5/1/323830343a326536383a3a2f33322d3438203d3e20323635333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e68::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:4b:f5:a6:ba:67:f1:bc:98:b9:5e:7b:25:ed:0b:bf:ed:72:
         66:af:3c:dd:15:aa:e0:3e:68:d2:c1:ba:40:1d:9f:7b:b9:0d:
         69:1d:30:89:a9:b2:1f:03:70:10:bd:50:fd:25:56:95:fb:0d:
         1e:01:13:d2:ee:34:80:5e:f0:5d:b2:23:7c:eb:d8:11:45:dc:
         53:20:c9:54:57:d3:b7:f1:6b:49:17:8a:08:7c:05:30:ad:46:
         b6:a9:6b:cb:80:6b:b4:0a:0d:5b:fa:95:b4:c2:54:a3:b6:aa:
         9f:2a:d5:65:89:b3:97:f4:ee:18:dd:ab:76:8d:8a:2b:9f:54:
         cd:d3:0d:dd:07:05:37:83:8b:39:3d:c8:15:9d:f0:34:ec:8e:
         c3:46:f7:43:97:8e:67:ce:9e:80:f1:e7:92:94:25:96:b3:62:
         1a:60:4f:4f:05:dd:71:54:db:d0:c0:07:f3:df:14:89:86:cf:
         49:69:e6:38:ef:ec:2e:98:b3:30:5f:8c:9d:fe:ec:65:31:aa:
         ed:d9:9e:29:20:7f:cf:96:f6:6d:b4:07:0c:fd:34:e4:30:9e:
         f7:63:94:8c:cc:0c:fd:b3:fc:99:23:9c:d7:44:99:a2:5f:bf:
         46:91:b2:e9:4c:25:98:54:d1:ba:84:1c:d2:49:ab:53:c0:05:
         fe:33:dd:de
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIURtUkwQpMzuzK/5XhALcuZVMHt5gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzFFMTY5RDM2OTQwQ0I3MUE1QURCQjc2RDI3NjRGMTUz
OTMzNkQ4NDAeFw0yNDA0MDQyMDM2NDFaFw0yNTA0MDMyMDQxNDFaMDMxMTAvBgNV
BAMTKEZGMTZBMjZFNEM0OEIzNUFFODgyQURFMTU0MkVGQTY5Rjc1ODNFREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQOno/ERn61au5MgY/kb0NWlsB
ZKH5oZtG4M9TJXMqL9OnZHCFIDHki8axsGDSc6ZikVZu62iqDcpGiCoYJE36XP44
DF/kOZTxgDaDnZz7gmnXgs4Zy+QVLGYQ1tJMJV9CoLTA4J32j5oJEg8Lwl1Y/2+Y
jjIWuzcyYmNAupyPui7snOKbEjjJflps8JvB4mXJahYH/BMlWB1Vaookqfc//xUm
gO9AVCcOZqgUgjSfEt38HQhGKAsHR6x0CxAqhfDgmesfKk4LQ2JUkAfvBLzTlKIq
2imwH3BCRFaeH+Zwfqi4YL3pmEVwp1D3Kq+l+lok6myWTnDgl4LpCLutE6MPAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU/xaibkxIs1rogq3hVC76afdYPt4wHwYDVR0j
BBgwFoAUceFp02lAy3Glrbt20nZPFTkzbYQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2prZlVoYmhkeEh2S3FLaFcyd05EOEhtWTRzSlF6N3UyN0JFWXk4RVF3
TDUvMS83MUUxNjlEMzY5NDBDQjcxQTVBREJCNzZEMjc2NEYxNTM5MzM2RDg0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxRTE2OUQzNjk0MENCNzFB
NUFEQkI3NkQyNzY0RjE1MzkzMzZEODQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzdqa2ZVaGJoZHhIdktxS2hXMndORDhIbVk0c0pRejd1MjdCRVl5OEVRd0w1LzEv
MzIzODMwMzQzYTMyNjUzNjM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM1
MzMzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQuaDANBgkqhkiG9w0BAQsFAAOCAQEAW0v1prpn
8byYuV57Je0Lv+1yZq883RWq4D5o0sG6QB2fe7kNaR0wiamyHwNwEL1Q/SVWlfsN
HgET0u40gF7wXbIjfOvYEUXcUyDJVFfTt/FrSReKCHwFMK1Gtqlry4BrtAoNW/qV
tMJUo7aqnyrVZYmzl/TuGN2rdo2KK59UzdMN3QcFN4OLOT3IFZ3wNOyOw0b3Q5eO
Z86egPHnkpQllrNiGmBPTwXdcVTb0MAH898UiYbPSWnmOO/sLpizMF+Mnf7sZTGq
7dmeKSB/z5b2bbQHDP005DCe92OUjMwM/bP8mSOc10SZol+/RpGy6UwlmFTRuoQc
0kmrU8AF/jPd3g==
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:56 2024 by rpki-client on console-fra.rpki-client.org