Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/1/323830343a3236633a3a2f33322d313238203d3e20323632383133.roa
File:                     323830343a3236633a3a2f33322d313238203d3e20323632383133.roa (raw, json)
Hash identifier:          WGY0y6oNhJh+Sz56wi2vo/U5fkBkAqHuD8bHp9wUJ24=
Subject key identifier:   80:CA:69:10:29:C9:98:21:CA:B8:B0:04:F7:A1:64:C6:C5:14:F3:61
Certificate issuer:       /CN=768C468840EAB0C1EAF4BADFFD473AF4BC4719CD
Certificate serial:       30429C65DAB9417F59CD799874D107F4893107E2
Authority key identifier: 76:8C:46:88:40:EA:B0:C1:EA:F4:BA:DF:FD:47:3A:F4:BC:47:19:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/768C468840EAB0C1EAF4BADFFD473AF4BC4719CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/1/323830343a3236633a3a2f33322d313238203d3e20323632383133.roa
Signing time:             Fri 09 Aug 2024 16:39:28 +0000
ROA not before:           Fri 09 Aug 2024 16:34:28 +0000
ROA not after:            Sat 09 Aug 2025 16:39:28 +0000
asID:                     262813
IP address blocks:        2804:26c::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/1/768C468840EAB0C1EAF4BADFFD473AF4BC4719CD.crl
                          rsync://rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/1/768C468840EAB0C1EAF4BADFFD473AF4BC4719CD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/768C468840EAB0C1EAF4BADFFD473AF4BC4719CD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:42:9c:65:da:b9:41:7f:59:cd:79:98:74:d1:07:f4:89:31:07:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=768C468840EAB0C1EAF4BADFFD473AF4BC4719CD
        Validity
            Not Before: Aug  9 16:34:28 2024 GMT
            Not After : Aug  9 16:39:28 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:07:18:0c:d7:34:53:ea:20:3d:4c:89:ce:7e:
                    f6:6e:2e:48:28:f3:1a:4b:10:3b:56:82:84:2e:fe:
                    51:43:dc:a6:55:a3:19:89:42:9b:70:eb:77:ab:3b:
                    00:c4:22:57:42:c3:00:f7:f3:8e:03:d4:91:d9:54:
                    46:ae:7e:12:a5:f5:58:c9:8c:44:e3:08:4c:ed:e0:
                    dc:d4:29:0b:9e:51:72:26:53:41:5e:5a:ad:1d:b8:
                    e8:1a:78:ba:d7:19:27:d5:ec:a7:8b:b4:b9:72:8f:
                    47:71:e7:16:18:49:07:39:73:94:85:f0:1c:99:fd:
                    f5:7f:a6:8c:e8:6c:02:85:fd:97:88:4c:f7:9e:e3:
                    53:fa:85:d8:9d:4f:74:28:7d:6f:b6:34:c4:8b:2a:
                    5f:eb:4e:0b:fe:ab:f6:8f:92:42:6c:4f:e0:72:af:
                    de:b2:ad:fc:a5:5a:20:17:9d:4a:45:3f:98:cf:80:
                    41:d7:68:61:f6:90:90:df:ca:ec:1e:37:96:4b:a8:
                    0b:31:28:97:5f:cb:53:dd:d3:7d:09:25:8c:f7:de:
                    9a:60:1e:8c:11:57:b2:a3:37:87:17:2f:13:04:48:
                    43:c5:5f:35:8a:f9:94:50:2c:fc:32:29:53:e2:4d:
                    a9:af:2c:a7:93:d7:66:52:4c:a3:84:da:a8:99:86:
                    b3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:CA:69:10:29:C9:98:21:CA:B8:B0:04:F7:A1:64:C6:C5:14:F3:61
            X509v3 Authority Key Identifier:
                keyid:76:8C:46:88:40:EA:B0:C1:EA:F4:BA:DF:FD:47:3A:F4:BC:47:19:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/1/768C468840EAB0C1EAF4BADFFD473AF4BC4719CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/768C468840EAB0C1EAF4BADFFD473AF4BC4719CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/1/323830343a3236633a3a2f33322d313238203d3e20323632383133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:26c::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:3a:5d:9d:4d:cc:4a:d5:09:2f:95:dc:86:ff:0e:49:2d:57:
         44:56:aa:3c:07:06:1e:ac:c7:44:7d:f0:07:5a:1b:26:c2:26:
         c2:6e:6f:1f:5c:bd:b2:d2:63:42:33:63:3e:12:b6:20:02:58:
         53:ed:21:95:47:d3:65:e1:5e:55:38:3b:3e:39:fd:40:b5:c1:
         56:7d:f5:0f:1d:47:3c:23:18:2b:ac:f4:23:46:1b:73:12:34:
         fc:d3:a7:92:de:c1:a3:e5:79:21:33:5f:6a:ca:00:21:77:37:
         74:97:27:90:7b:62:99:19:ed:37:19:46:ff:25:3b:78:ba:4e:
         60:f1:f3:85:10:1f:6f:24:d4:f3:d9:eb:b7:0d:2b:03:47:89:
         cb:fb:82:aa:e4:1c:0a:af:17:eb:50:c4:17:a1:1f:3f:b3:41:
         06:70:39:3e:94:0f:74:89:68:97:7f:9c:1d:03:79:5b:4f:d9:
         96:1e:13:6f:59:8a:54:24:1d:ae:fc:91:13:d1:c4:10:8d:5d:
         f6:0e:f9:71:ca:49:e2:9c:07:d5:1a:40:13:b7:bb:d0:e1:46:
         45:3c:68:78:f8:a1:bf:f4:88:46:74:e7:32:93:53:dc:c1:ea:
         04:08:09:c0:6d:97:7c:69:42:39:58:67:f7:30:a9:3e:e9:07:
         a3:0a:c4:99
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUMEKcZdq5QX9ZzXmYdNEH9IkxB+IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY4QzQ2ODg0MEVBQjBDMUVBRjRCQURGRkQ0NzNBRjRC
QzQ3MTlDRDAeFw0yNDA4MDkxNjM0MjhaFw0yNTA4MDkxNjM5MjhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOUEwNzE4MENENzM0NTNFQTIw
M0Q0Qzg5Q0U3RUY2NkUyRTQ4MjhGMzFBNEIxMDNCNTY4Mjg0MkVGRTUxNDNEQ0E2
NTVBMzE5ODk0MjlCNzBFQjc3QUIzQjAwQzQyMjU3NDJDMzAwRjdGMzhFMDNENDkx
RDk1NDQ2QUU3RTEyQTVGNTU4Qzk4QzQ0RTMwODRDRURFMERDRDQyOTBCOUU1MTcy
MjY1MzQxNUU1QUFEMURCOEU4MUE3OEJBRDcxOTI3RDVFQ0E3OEJCNEI5NzI4RjQ3
NzFFNzE2MTg0OTA3Mzk3Mzk0ODVGMDFDOTlGREY1N0ZBNjhDRTg2QzAyODVGRDk3
ODg0Q0Y3OUVFMzUzRkE4NUQ4OUQ0Rjc0Mjg3RDZGQjYzNEM0OEIyQTVGRUI0RTBC
RkVBQkY2OEY5MjQyNkM0RkUwNzJBRkRFQjJBREZDQTU1QTIwMTc5RDRBNDUzRjk4
Q0Y4MDQxRDc2ODYxRjY5MDkwREZDQUVDMUUzNzk2NEJBODBCMzEyODk3NUZDQjUz
REREMzdEMDkyNThDRjdERTlBNjAxRThDMTE1N0IyQTMzNzg3MTcyRjEzMDQ0ODQz
QzU1RjM1OEFGOTk0NTAyQ0ZDMzIyOTUzRTI0REE5QUYyQ0E3OTNENzY2NTI0Q0Ez
ODREQUE4OTk4NkIzNDMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAmgcYDNc0U+ogPUyJzn72bi5IKPMaSxA7VoKELv5RQ9ymVaMZiUKb
cOt3qzsAxCJXQsMA9/OOA9SR2VRGrn4SpfVYyYxE4whM7eDc1CkLnlFyJlNBXlqt
HbjoGni61xkn1eyni7S5co9HcecWGEkHOXOUhfAcmf31f6aM6GwChf2XiEz3nuNT
+oXYnU90KH1vtjTEiypf604L/qv2j5JCbE/gcq/esq38pVogF51KRT+Yz4BB12hh
9pCQ38rsHjeWS6gLMSiXX8tT3dN9CSWM996aYB6MEVeyozeHFy8TBEhDxV81ivmU
UCz8MilT4k2pryynk9dmUkyjhNqomYazQwIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FIDKaRApyZghyriwBPehZMbFFPNhMB8GA1UdIwQYMBaAFHaMRohA6rDB6vS63/1H
OvS8RxnNMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhRM2ZKSHZMTGo2MWFN
OFJhQnR6QnZFRG9DVDJ2blJGOWVLRW9ROWNBN1VLLzEvNzY4QzQ2ODg0MEVBQjBD
MUVBRjRCQURGRkQ0NzNBRjRCQzQ3MTlDRC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS83NjhDNDY4ODQwRUFCMEMxRUFGNEJBREZGRDQ3M0FGNEJDNDcx
OUNELmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84UTNmSkh2TExqNjFhTThSYUJ0
ekJ2RURvQ1Qydm5SRjllS0VvUTljQTdVSy8xLzMyMzgzMDM0M2EzMjM2NjMzYTNh
MmYzMzMyMmQzMTMyMzgyMDNkM2UyMDMyMzYzMjM4MzEzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
AmwwDQYJKoZIhvcNAQELBQADggEBAAM6XZ1NzErVCS+V3Ib/DkktV0RWqjwHBh6s
x0R98AdaGybCJsJubx9cvbLSY0IzYz4StiACWFPtIZVH02XhXlU4Oz45/UC1wVZ9
9Q8dRzwjGCus9CNGG3MSNPzTp5LewaPleSEzX2rKACF3N3SXJ5B7YpkZ7TcZRv8l
O3i6TmDx84UQH28k1PPZ67cNKwNHicv7gqrkHAqvF+tQxBehHz+zQQZwOT6UD3SJ
aJd/nB0DeVtP2ZYeE29ZilQkHa78kRPRxBCNXfYO+XHKSeKcB9UaQBO3u9DhRkU8
aHj4ob/0iEZ05zKTU9zB6gQICcBtl3xpQjlYZ/cwqT7pB6MKxJk=
-----END CERTIFICATE-----
Generated at Tue Nov 26 14:16:53 2024 by rpki-client on console-ams.rpki-client.org