Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/323830343a363762633a383030303a3a2f33332d3333203d3e20323639363437.roa
File:                     323830343a363762633a383030303a3a2f33332d3333203d3e20323639363437.roa (raw, json)
Hash identifier:          KctBYzhgTnNl7KtCEYaty0thjvqre3Zb4fv76RrcVuQ=
Subject key identifier:   D2:03:CD:9C:95:6D:B6:8C:AE:A8:4D:E4:8C:E7:C9:B3:42:47:36:57
Certificate issuer:       /CN=D95F78E630398477E9BAE976B3EAEDB0059994DB
Certificate serial:       59260975D0D756A32ACDE5BEF80C0BC9A9905078
Authority key identifier: D9:5F:78:E6:30:39:84:77:E9:BA:E9:76:B3:EA:ED:B0:05:99:94:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/323830343a363762633a383030303a3a2f33332d3333203d3e20323639363437.roa
Signing time:             Thu 04 Apr 2024 08:17:32 +0000
ROA not before:           Thu 04 Apr 2024 08:12:32 +0000
ROA not after:            Thu 03 Apr 2025 08:17:32 +0000
asID:                     269647
IP address blocks:        2804:67bc:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.crl
                          rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:26:09:75:d0:d7:56:a3:2a:cd:e5:be:f8:0c:0b:c9:a9:90:50:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D95F78E630398477E9BAE976B3EAEDB0059994DB
        Validity
            Not Before: Apr  4 08:12:32 2024 GMT
            Not After : Apr  3 08:17:32 2025 GMT
        Subject: CN=D203CD9C956DB68CAEA84DE48CE7C9B342473657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:76:01:d0:d6:7c:7e:a0:d4:e9:dd:02:3c:59:
                    58:d6:12:79:43:57:86:c0:8c:29:50:67:7c:0c:99:
                    f2:f1:98:8b:76:17:0a:89:3a:73:48:03:ca:10:c2:
                    e0:d3:b3:13:b2:62:8f:9c:be:25:eb:9d:7a:13:99:
                    42:36:c7:ca:c7:86:87:1f:06:e5:81:b0:4c:09:8a:
                    68:08:ea:93:d9:c2:52:15:6e:d2:35:da:18:dd:f5:
                    86:bd:61:69:a3:f7:09:c4:70:de:e7:1c:b0:91:6a:
                    34:46:54:51:e1:5d:d1:b6:e2:88:0b:c3:1f:c2:78:
                    2f:38:4b:21:ac:07:20:f4:33:9c:48:f9:84:90:25:
                    1b:35:3d:35:de:1d:4f:ec:11:66:91:bf:49:4a:b7:
                    45:ec:fb:db:6f:46:8c:88:de:fe:a1:5c:83:0b:b5:
                    ff:d8:d8:c3:49:c3:1f:e2:5e:c9:b2:59:cf:95:f7:
                    bd:57:e6:a9:bc:7e:9f:84:e9:38:c3:c2:49:03:3b:
                    48:96:38:f0:4c:40:c5:33:22:28:bd:2b:96:38:22:
                    7f:fd:8c:83:d4:6d:42:88:90:e6:c4:23:b5:65:5d:
                    60:e4:6c:7a:99:79:cf:b3:eb:7c:59:73:4d:b2:0f:
                    b4:4e:db:e7:7e:76:7c:d6:19:f8:2b:43:ae:61:57:
                    10:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:03:CD:9C:95:6D:B6:8C:AE:A8:4D:E4:8C:E7:C9:B3:42:47:36:57
            X509v3 Authority Key Identifier:
                keyid:D9:5F:78:E6:30:39:84:77:E9:BA:E9:76:B3:EA:ED:B0:05:99:94:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/323830343a363762633a383030303a3a2f33332d3333203d3e20323639363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:67bc:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         6f:4f:3d:da:4a:67:ec:92:62:b1:74:4e:4f:a0:e1:bf:a1:4f:
         f0:8b:ee:08:69:fc:23:31:77:1d:40:4d:63:80:c9:44:bf:a2:
         01:9c:f9:b2:77:f2:0e:27:63:cc:05:3f:b7:d9:50:df:c4:bc:
         bc:79:b9:a1:f6:95:d8:d5:c4:e3:92:bf:19:55:07:5f:72:70:
         2d:30:0c:f9:cf:a4:80:f6:9d:15:59:d8:69:70:0a:4b:66:13:
         5f:00:1c:75:7b:14:9a:bd:07:a4:4c:42:60:09:1f:cf:12:b1:
         22:82:5c:2c:63:97:c6:35:66:d3:b8:f6:4a:f5:06:1f:b2:f2:
         b7:e9:39:73:50:01:bb:6a:8b:94:1e:c3:39:0d:15:1f:a0:5f:
         1c:46:05:05:95:90:fb:5b:2d:9b:aa:80:93:8d:ec:19:11:8e:
         30:4a:13:5e:dc:23:5b:90:76:74:18:b8:ca:9a:5a:ad:63:9e:
         e3:07:04:e2:53:e9:16:3d:9d:6e:16:5c:df:a7:2c:37:16:48:
         a0:1c:23:b8:d6:e2:2b:6d:a5:8e:23:64:02:19:fe:12:2e:fa:
         1c:eb:38:66:40:a4:80:ad:7c:74:5c:15:d3:fe:f9:f5:da:bb:
         57:d2:75:84:81:ee:03:c4:d0:d0:c6:82:b9:6b:8a:6b:4d:47:
         d3:03:52:3a
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUWSYJddDXVqMqzeW++AwLyamQUHgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDk1Rjc4RTYzMDM5ODQ3N0U5QkFFOTc2QjNFQUVEQjAw
NTk5OTREQjAeFw0yNDA0MDQwODEyMzJaFw0yNTA0MDMwODE3MzJaMDMxMTAvBgNV
BAMTKEQyMDNDRDlDOTU2REI2OENBRUE4NERFNDhDRTdDOUIzNDI0NzM2NTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/dgHQ1nx+oNTp3QI8WVjWEnlD
V4bAjClQZ3wMmfLxmIt2FwqJOnNIA8oQwuDTsxOyYo+cviXrnXoTmUI2x8rHhocf
BuWBsEwJimgI6pPZwlIVbtI12hjd9Ya9YWmj9wnEcN7nHLCRajRGVFHhXdG24ogL
wx/CeC84SyGsByD0M5xI+YSQJRs1PTXeHU/sEWaRv0lKt0Xs+9tvRoyI3v6hXIML
tf/Y2MNJwx/iXsmyWc+V971X5qm8fp+E6TjDwkkDO0iWOPBMQMUzIii9K5Y4In/9
jIPUbUKIkObEI7VlXWDkbHqZec+z63xZc02yD7RO2+d+dnzWGfgrQ65hVxCxAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU0gPNnJVttoyuqE3kjOfJs0JHNlcwHwYDVR0j
BBgwFoAU2V945jA5hHfpuul2s+rtsAWZlNswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFRGOFdYR0hXZVBkekZNOUEzanU4VGVnNUNSUHM0THFVS2NXelZhcXBR
TDUvMS9EOTVGNzhFNjMwMzk4NDc3RTlCQUU5NzZCM0VBRURCMDA1OTk5NERCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5NUY3OEU2MzAzOTg0NzdF
OUJBRTk3NkIzRUFFREIwMDU5OTk0REIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhURjhXWEdIV2VQZHpGTTlBM2p1OFRlZzVDUlBzNExxVUtjV3pWYXFwUUw1LzEv
MzIzODMwMzQzYTM2Mzc2MjYzM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzOTM2MzQzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEZ7yAMA0GCSqGSIb3DQEBCwUA
A4IBAQBvTz3aSmfskmKxdE5PoOG/oU/wi+4IafwjMXcdQE1jgMlEv6IBnPmyd/IO
J2PMBT+32VDfxLy8ebmh9pXY1cTjkr8ZVQdfcnAtMAz5z6SA9p0VWdhpcApLZhNf
ABx1exSavQekTEJgCR/PErEiglwsY5fGNWbTuPZK9QYfsvK36TlzUAG7aouUHsM5
DRUfoF8cRgUFlZD7Wy2bqoCTjewZEY4wShNe3CNbkHZ0GLjKmlqtY57jBwTiU+kW
PZ1uFlzfpyw3FkigHCO41uIrbaWOI2QCGf4SLvoc6zhmQKSArXx0XBXT/vn12rtX
0nWEge4DxNDQxoK5a4prTUfTA1I6
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:04 2024 by rpki-client on console-ams.rpki-client.org