Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/323830343a383466383a3a2f33322d3332203d3e20323732353439.roa
File:                     323830343a383466383a3a2f33322d3332203d3e20323732353439.roa (raw, json)
Hash identifier:          8Gumauya9FQJlx5GTCBzyWxwK3aff3MndqIxCAjdR4U=
Subject key identifier:   B9:B3:E2:60:30:CF:7A:15:57:03:76:A2:8A:6A:62:68:61:CA:D0:F7
Certificate issuer:       /CN=2C425257AE7B63529EB88108AC7DEA60648B43E5
Certificate serial:       69D7419F580F40AC141C4F810449A831B807F2AB
Authority key identifier: 2C:42:52:57:AE:7B:63:52:9E:B8:81:08:AC:7D:EA:60:64:8B:43:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/323830343a383466383a3a2f33322d3332203d3e20323732353439.roa
Signing time:             Wed 03 Apr 2024 18:31:52 +0000
ROA not before:           Wed 03 Apr 2024 18:26:52 +0000
ROA not after:            Wed 02 Apr 2025 18:31:52 +0000
asID:                     272549
IP address blocks:        2804:84f8::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.crl
                          rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 08:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:d7:41:9f:58:0f:40:ac:14:1c:4f:81:04:49:a8:31:b8:07:f2:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C425257AE7B63529EB88108AC7DEA60648B43E5
        Validity
            Not Before: Apr  3 18:26:52 2024 GMT
            Not After : Apr  2 18:31:52 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3d:ef:11:bf:3a:0a:0c:77:3e:6f:da:e0:25:
                    ce:ae:60:fc:dd:80:28:87:48:95:67:b3:d0:1e:5b:
                    c1:18:ea:6b:9b:1c:1a:30:43:50:a0:25:c5:86:4f:
                    4d:ba:6b:bf:0c:22:99:8b:cd:1c:09:a2:de:af:05:
                    38:37:27:d9:0e:37:1c:8b:df:50:c8:f8:7a:6f:6f:
                    14:d0:57:34:4b:5c:ff:81:90:dc:b3:81:b5:57:3a:
                    ae:f4:6e:85:50:44:e7:d6:b9:31:af:29:ed:7d:f6:
                    55:dd:81:e7:ae:51:73:5a:55:02:43:86:61:bb:a1:
                    53:85:92:86:dd:c8:0e:73:b8:86:64:54:15:9a:98:
                    d0:c2:34:02:8e:87:ed:06:a5:86:af:da:12:1a:5f:
                    8b:8a:94:b5:17:55:58:ff:8b:d9:6c:c0:69:00:a4:
                    bb:9d:82:2e:49:23:3d:f8:7a:f4:a3:7e:3c:7d:fc:
                    60:86:cf:e4:2c:06:be:5e:5a:34:59:79:e4:22:b8:
                    bb:4b:c8:db:70:5e:a0:82:cd:32:1d:3c:37:bc:51:
                    0d:17:2c:3b:43:52:b7:2f:60:00:5c:a0:0c:6a:a1:
                    bc:c4:b9:f9:74:19:58:94:d0:2d:64:6f:13:d8:54:
                    12:1d:8d:30:08:dc:f7:a1:4f:95:6a:46:9d:8f:91:
                    2a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B3:E2:60:30:CF:7A:15:57:03:76:A2:8A:6A:62:68:61:CA:D0:F7
            X509v3 Authority Key Identifier:
                keyid:2C:42:52:57:AE:7B:63:52:9E:B8:81:08:AC:7D:EA:60:64:8B:43:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/323830343a383466383a3a2f33322d3332203d3e20323732353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:84f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:cd:51:13:dd:e0:c7:d3:b9:3b:fe:c3:3a:a3:e8:1a:b1:21:
         57:b7:fd:4f:bb:8e:9a:3f:5b:84:36:69:9a:b1:48:05:35:76:
         3f:bf:6c:aa:7a:df:73:55:5f:da:aa:f5:8f:46:fe:5e:f1:1d:
         e6:a8:54:78:c2:a0:30:99:5d:a4:41:4f:a6:57:0d:19:be:6a:
         b1:3c:3d:c1:9f:5c:41:28:28:a7:a3:f7:d8:d8:52:89:1f:0a:
         0e:45:77:e1:94:57:fa:02:dc:88:3c:4a:ed:dc:f7:8c:14:57:
         42:57:6a:fe:20:57:07:10:8f:99:67:fc:85:1c:76:98:a7:86:
         fd:e9:e1:ff:0e:86:3a:76:13:b3:32:c2:0e:d9:65:5c:76:a2:
         29:a8:55:71:18:79:85:15:45:19:6b:8b:bd:c2:f8:a7:c5:a4:
         d5:0f:77:29:01:66:ee:16:5c:f9:1f:21:9b:b6:77:96:6f:8a:
         92:a3:e2:f5:12:92:f5:d4:76:00:b5:cc:81:8c:c7:11:d5:6f:
         c7:33:40:82:ab:ce:b9:9d:91:0f:e0:51:8a:55:61:3c:99:68:
         39:7d:5b:80:47:11:f6:ca:3f:dd:61:eb:b9:f8:6a:5e:4b:bf:
         66:11:80:f7:b5:42:b0:e7:26:e0:3d:a3:39:5d:a9:2a:e0:81:
         e2:60:4c:cc
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUaddBn1gPQKwUHE+BBEmoMbgH8qswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkM0MjUyNTdBRTdCNjM1MjlFQjg4MTA4QUM3REVBNjA2
NDhCNDNFNTAeFw0yNDA0MDMxODI2NTJaFw0yNTA0MDIxODMxNTJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzgzREVGMTFCRjNBMEEwQzc3
M0U2RkRBRTAyNUNFQUU2MEZDREQ4MDI4ODc0ODk1NjdCM0QwMUU1QkMxMThFQTZC
OUIxQzFBMzA0MzUwQTAyNUM1ODY0RjREQkE2QkJGMEMyMjk5OEJDRDFDMDlBMkRF
QUYwNTM4MzcyN0Q5MEUzNzFDOEJERjUwQzhGODdBNkY2RjE0RDA1NzM0NEI1Q0ZG
ODE5MERDQjM4MUI1NTczQUFFRjQ2RTg1NTA0NEU3RDZCOTMxQUYyOUVEN0RGNjU1
REQ4MUU3QUU1MTczNUE1NTAyNDM4NjYxQkJBMTUzODU5Mjg2RERDODBFNzNCODg2
NjQ1NDE1OUE5OEQwQzIzNDAyOEU4N0VEMDZBNTg2QUZEQTEyMUE1RjhCOEE5NEI1
MTc1NTU4RkY4QkQ5NkNDMDY5MDBBNEJCOUQ4MjJFNDkyMzNERjg3QUY0QTM3RTND
N0RGQzYwODZDRkU0MkMwNkJFNUU1QTM0NTk3OUU0MjJCOEJCNEJDOERCNzA1RUEw
ODJDRDMyMUQzQzM3QkM1MTBEMTcyQzNCNDM1MkI3MkY2MDAwNUNBMDBDNkFBMUJD
QzRCOUY5NzQxOTU4OTREMDJENjQ2RjEzRDg1NDEyMUQ4RDMwMDhEQ0Y3QTE0Rjk1
NkE0NjlEOEY5MTJBRkIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyD3vEb86Cgx3Pm/a4CXOrmD83YAoh0iVZ7PQHlvBGOprmxwaMENQ
oCXFhk9Numu/DCKZi80cCaLerwU4NyfZDjcci99QyPh6b28U0Fc0S1z/gZDcs4G1
Vzqu9G6FUETn1rkxryntffZV3YHnrlFzWlUCQ4Zhu6FThZKG3cgOc7iGZFQVmpjQ
wjQCjoftBqWGr9oSGl+LipS1F1VY/4vZbMBpAKS7nYIuSSM9+Hr0o348ffxghs/k
LAa+Xlo0WXnkIri7S8jbcF6ggs0yHTw3vFENFyw7Q1K3L2AAXKAMaqG8xLn5dBlY
lNAtZG8T2FQSHY0wCNz3oU+Vakadj5Eq+wIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FLmz4mAwz3oVVwN2oopqYmhhytD3MB8GA1UdIwQYMBaAFCxCUleue2NSnriBCKx9
6mBki0PlMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhkaU5tWktkdlBBR3JH
cWhyNXVaN21mQVRnaXpuRnlQbm5zc1lMcGZYZHJMLzEvMkM0MjUyNTdBRTdCNjM1
MjlFQjg4MTA4QUM3REVBNjA2NDhCNDNFNS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8yQzQyNTI1N0FFN0I2MzUyOUVCODgxMDhBQzdERUE2MDY0OEI0
M0U1LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84ZGlObVpLZHZQQUdyR3FocjV1
WjdtZkFUZ2l6bkZ5UG5uc3NZTHBmWGRyTC8xLzMyMzgzMDM0M2EzODM0NjYzODNh
M2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczMjM1MzQzOS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
hPgwDQYJKoZIhvcNAQELBQADggEBAFDNURPd4MfTuTv+wzqj6BqxIVe3/U+7jpo/
W4Q2aZqxSAU1dj+/bKp633NVX9qq9Y9G/l7xHeaoVHjCoDCZXaRBT6ZXDRm+arE8
PcGfXEEoKKej99jYUokfCg5Fd+GUV/oC3Ig8Su3c94wUV0JXav4gVwcQj5ln/IUc
dpinhv3p4f8Ohjp2E7Mywg7ZZVx2oimoVXEYeYUVRRlri73C+KfFpNUPdykBZu4W
XPkfIZu2d5ZvipKj4vUSkvXUdgC1zIGMxxHVb8czQIKrzrmdkQ/gUYpVYTyZaDl9
W4BHEfbKP91h67n4al5Lv2YRgPe1QrDnJuA9ozldqSrggeJgTMw=
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:09 2024 by rpki-client on console-fra.rpki-client.org