Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/323830343a353530343a383030303a3a2f33342d3334203d3e20323638363834.roa
File:                     323830343a353530343a383030303a3a2f33342d3334203d3e20323638363834.roa (raw, json)
Hash identifier:          oFK3CwyA0iE+iZUVzJPUoGwdWLXyV+JuAWLsurimWhQ=
Subject key identifier:   53:94:1A:C4:3D:18:48:BB:40:96:51:5E:96:C9:CF:92:AA:47:07:EB
Certificate issuer:       /CN=5CB9A39B2C0F8B2B32F833DCD5B5F5900A999C8C
Certificate serial:       20BB3FDC47DA61ED95F1C95045E0AF78E739E41C
Authority key identifier: 5C:B9:A3:9B:2C:0F:8B:2B:32:F8:33:DC:D5:B5:F5:90:0A:99:9C:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CB9A39B2C0F8B2B32F833DCD5B5F5900A999C8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/323830343a353530343a383030303a3a2f33342d3334203d3e20323638363834.roa
Signing time:             Sun 02 Jun 2024 14:28:13 +0000
ROA not before:           Sun 02 Jun 2024 14:23:13 +0000
ROA not after:            Sun 01 Jun 2025 14:28:13 +0000
asID:                     268684
IP address blocks:        2804:5504:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/5CB9A39B2C0F8B2B32F833DCD5B5F5900A999C8C.crl
                          rsync://rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/5CB9A39B2C0F8B2B32F833DCD5B5F5900A999C8C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CB9A39B2C0F8B2B32F833DCD5B5F5900A999C8C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 13:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:bb:3f:dc:47:da:61:ed:95:f1:c9:50:45:e0:af:78:e7:39:e4:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CB9A39B2C0F8B2B32F833DCD5B5F5900A999C8C
        Validity
            Not Before: Jun  2 14:23:13 2024 GMT
            Not After : Jun  1 14:28:13 2025 GMT
        Subject: CN=53941AC43D1848BB4096515E96C9CF92AA4707EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:87:19:5d:ef:f5:31:7d:bf:61:9e:e8:d8:a6:
                    3e:6b:54:f9:0f:13:fa:68:14:f8:66:88:c1:62:74:
                    2b:23:8f:6c:d3:5f:16:11:6f:e9:d5:1a:64:a1:b4:
                    c8:21:95:cd:94:d5:a5:c4:2e:26:c4:6f:e1:df:8d:
                    59:af:07:b6:cf:a5:d6:59:a0:80:18:e5:5e:1a:48:
                    ed:bc:bd:77:c9:68:ed:27:1c:31:96:cd:9e:e2:78:
                    52:00:ad:4e:c3:fd:83:9e:5d:75:0c:5a:7d:68:04:
                    9a:5d:a7:65:a1:67:bf:1f:b2:ce:fd:f7:83:52:30:
                    51:67:54:59:5e:60:72:f3:8a:9f:43:94:f7:84:9e:
                    1a:2c:96:a0:60:d2:1d:72:99:35:84:b5:9f:a8:4c:
                    4a:ce:2b:36:f7:99:7a:98:59:af:86:d0:17:7f:2b:
                    f6:53:b1:80:4b:1b:4c:c0:0e:60:e3:53:6d:be:af:
                    dd:7d:c5:30:60:2e:28:7a:1b:01:3a:53:84:8e:14:
                    d4:6f:ef:e3:6e:13:1a:7d:ac:34:ab:4b:df:dc:5e:
                    ab:51:d3:f8:29:e5:ff:7f:e3:10:2b:af:5f:45:98:
                    0f:5b:f3:fb:58:03:15:75:75:96:85:c8:71:77:15:
                    a4:56:6b:df:69:1c:0e:9d:84:5d:6d:c6:a1:e4:fc:
                    72:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:94:1A:C4:3D:18:48:BB:40:96:51:5E:96:C9:CF:92:AA:47:07:EB
            X509v3 Authority Key Identifier:
                keyid:5C:B9:A3:9B:2C:0F:8B:2B:32:F8:33:DC:D5:B5:F5:90:0A:99:9C:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/5CB9A39B2C0F8B2B32F833DCD5B5F5900A999C8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CB9A39B2C0F8B2B32F833DCD5B5F5900A999C8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/323830343a353530343a383030303a3a2f33342d3334203d3e20323638363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5504:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         45:f3:6a:6e:68:88:6f:05:ad:cb:eb:28:e1:7e:5e:8e:ba:89:
         c7:03:93:15:5d:b2:09:65:1a:4b:eb:29:ab:bf:2a:33:2d:b9:
         f7:06:f0:d6:23:59:91:c2:f0:ed:5c:23:d8:84:31:2e:5b:55:
         f5:ae:48:61:cb:ff:52:24:5b:0c:ad:fd:7f:14:56:ef:50:4f:
         e6:cd:a9:1d:e6:45:3b:3e:a0:1a:89:b5:b6:cf:a0:de:0a:57:
         98:f6:4a:41:69:0c:8b:42:9f:38:2a:c2:ec:84:79:a0:4f:b3:
         5f:55:e3:87:f8:86:c7:ba:d7:09:d9:5f:c5:fa:7d:18:50:67:
         3f:6a:ad:29:4b:87:f0:4b:f9:40:77:74:38:b4:eb:c0:2e:ec:
         51:cc:90:77:05:33:d8:73:15:40:66:2c:05:ba:3e:ae:46:93:
         c7:ad:87:9d:43:7e:5c:01:4f:dd:f8:cc:a6:27:68:ca:a4:d6:
         1c:a6:00:73:6c:c9:cd:ca:f6:7c:98:b1:83:14:f0:a0:c5:75:
         5d:d6:dd:56:98:8d:70:46:3c:df:c2:c4:cc:18:52:95:dd:d5:
         c0:4d:c2:8e:c9:bf:fb:c9:d5:e9:61:ac:8e:11:da:b7:f5:71:
         e1:c2:72:50:e3:d1:e2:19:d6:ab:11:35:b2:14:2b:33:e0:28:
         5b:48:94:ff
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUILs/3EfaYe2V8clQReCveOc55BwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUNCOUEzOUIyQzBGOEIyQjMyRjgzM0RDRDVCNUY1OTAw
QTk5OUM4QzAeFw0yNDA2MDIxNDIzMTNaFw0yNTA2MDExNDI4MTNaMDMxMTAvBgNV
BAMTKDUzOTQxQUM0M0QxODQ4QkI0MDk2NTE1RTk2QzlDRjkyQUE0NzA3RUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmhxld7/Uxfb9hnujYpj5rVPkP
E/poFPhmiMFidCsjj2zTXxYRb+nVGmShtMghlc2U1aXELibEb+HfjVmvB7bPpdZZ
oIAY5V4aSO28vXfJaO0nHDGWzZ7ieFIArU7D/YOeXXUMWn1oBJpdp2WhZ78fss79
94NSMFFnVFleYHLzip9DlPeEnhoslqBg0h1ymTWEtZ+oTErOKzb3mXqYWa+G0Bd/
K/ZTsYBLG0zADmDjU22+r919xTBgLih6GwE6U4SOFNRv7+NuExp9rDSrS9/cXqtR
0/gp5f9/4xArr19FmA9b8/tYAxV1dZaFyHF3FaRWa99pHA6dhF1txqHk/HKLAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUU5QaxD0YSLtAllFelsnPkqpHB+swHwYDVR0j
BBgwFoAUXLmjmywPiysy+DPc1bX1kAqZnIwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGZMYXU5eEdhM3hNRU1Od0pQQnRjVmRmeDd5QzE2TGV3Um1aNk5TWUhS
R1ovMC81Q0I5QTM5QjJDMEY4QjJCMzJGODMzRENENUI1RjU5MDBBOTk5QzhDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVDQjlBMzlCMkMwRjhCMkIz
MkY4MzNEQ0Q1QjVGNTkwMEE5OTlDOEMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhmTGF1OXhHYTN4TUVNTndKUEJ0Y1ZkZng3eUMxNkxld1JtWjZOU1lIUkdaLzAv
MzIzODMwMzQzYTM1MzUzMDM0M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzODM2MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEVQSAMA0GCSqGSIb3DQEBCwUA
A4IBAQBF82puaIhvBa3L6yjhfl6OuonHA5MVXbIJZRpL6ymrvyozLbn3BvDWI1mR
wvDtXCPYhDEuW1X1rkhhy/9SJFsMrf1/FFbvUE/mzakd5kU7PqAaibW2z6DeCleY
9kpBaQyLQp84KsLshHmgT7NfVeOH+IbHutcJ2V/F+n0YUGc/aq0pS4fwS/lAd3Q4
tOvALuxRzJB3BTPYcxVAZiwFuj6uRpPHrYedQ35cAU/d+MymJ2jKpNYcpgBzbMnN
yvZ8mLGDFPCgxXVd1t1WmI1wRjzfwsTMGFKV3dXATcKOyb/7ydXpYayOEdq39XHh
wnJQ49HiGdarETWyFCsz4ChbSJT/
-----END CERTIFICATE-----
Generated at Mon Nov 25 13:02:13 2024 by rpki-client on console-fra.rpki-client.org