Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/323830343a346331633a633030303a3a2f33342d3334203d3e20323637333530.roa
File:                     323830343a346331633a633030303a3a2f33342d3334203d3e20323637333530.roa (raw, json)
Hash identifier:          8YMLMixqnvwB7r17O2/FrxLa36rykjh6B1Mb+OpkDVQ=
Subject key identifier:   69:78:4F:9B:0E:1F:EF:B8:56:B3:60:CF:F4:D9:D4:CC:BB:57:93:BB
Certificate issuer:       /CN=D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F
Certificate serial:       2398B7F22FE4C420E79D6D21CCC30AD03781C349
Authority key identifier: D1:B4:AF:0A:27:5C:0D:07:42:C7:43:A8:BE:8B:CD:F5:6B:03:DA:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/323830343a346331633a633030303a3a2f33342d3334203d3e20323637333530.roa
Signing time:             Sat 06 Jul 2024 01:43:43 +0000
ROA not before:           Sat 06 Jul 2024 01:38:43 +0000
ROA not after:            Sat 05 Jul 2025 01:43:43 +0000
asID:                     267350
IP address blocks:        2804:4c1c:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.crl
                          rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 12:04:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:98:b7:f2:2f:e4:c4:20:e7:9d:6d:21:cc:c3:0a:d0:37:81:c3:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F
        Validity
            Not Before: Jul  6 01:38:43 2024 GMT
            Not After : Jul  5 01:43:43 2025 GMT
        Subject: CN=69784F9B0E1FEFB856B360CFF4D9D4CCBB5793BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:df:e8:cf:ce:c0:3f:7b:3d:d6:6c:84:f0:e7:
                    4c:50:8d:0b:1e:bd:d5:64:6d:50:80:34:41:3c:21:
                    59:71:c8:a7:11:fa:d1:53:90:09:d6:86:5b:9b:27:
                    bf:00:c3:21:9c:ea:70:30:3e:bc:0d:d1:7f:46:48:
                    10:91:41:a9:fa:c0:05:7a:75:fb:c2:8c:ee:45:c4:
                    d5:a2:02:fa:73:79:1e:0e:e9:50:23:49:67:06:d5:
                    d7:66:0f:98:9a:0d:72:9f:bd:a9:cc:ce:54:a8:f0:
                    6f:c9:0b:a2:7b:8c:cd:d1:d7:ca:52:a4:a9:c4:13:
                    a3:c0:71:89:48:0b:7b:54:f6:ea:84:9f:5c:27:6a:
                    0c:80:86:09:57:a5:7b:aa:e8:fb:f5:7c:6d:d5:c7:
                    c2:da:46:45:e9:b4:54:9e:97:50:b0:33:c7:c2:80:
                    68:09:f9:b7:fb:d6:07:12:c9:3c:6a:0a:f7:bc:1a:
                    81:ee:21:cf:1b:e6:19:e3:d2:fa:d2:f6:f1:38:e8:
                    ce:95:0e:5e:ef:08:68:40:4b:5f:86:48:68:25:73:
                    c6:9b:e7:08:47:b5:53:64:3c:2d:90:44:22:25:26:
                    d4:8c:50:75:60:79:a9:85:e2:77:0a:52:ec:2b:35:
                    19:29:d1:ae:3c:3e:37:b1:07:4d:ba:b4:64:2a:2d:
                    94:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:78:4F:9B:0E:1F:EF:B8:56:B3:60:CF:F4:D9:D4:CC:BB:57:93:BB
            X509v3 Authority Key Identifier:
                keyid:D1:B4:AF:0A:27:5C:0D:07:42:C7:43:A8:BE:8B:CD:F5:6B:03:DA:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/323830343a346331633a633030303a3a2f33342d3334203d3e20323637333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c1c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         8a:1d:b1:cd:4f:49:4c:78:7f:cd:9a:07:df:5d:1b:33:f4:02:
         8a:0c:91:da:85:56:b5:db:50:9e:e6:37:d6:14:79:6c:76:23:
         b4:e3:12:4b:d9:61:c5:44:95:f0:23:89:ed:34:60:08:65:eb:
         cc:08:4b:af:41:b2:6b:ce:1d:5c:0f:b1:f8:39:78:d9:38:ff:
         fb:98:dc:02:99:44:a8:4f:04:b0:e1:44:2b:c7:bd:d0:da:3f:
         e7:46:a2:5c:c7:cc:cc:d8:97:14:4c:31:c9:d5:81:58:41:d1:
         ad:c6:80:9d:ee:8b:0e:67:59:3e:4b:e0:d6:6f:25:90:17:6d:
         af:6e:c7:7d:a7:9f:13:ca:ac:52:eb:ae:b2:4f:ab:ae:9f:41:
         52:a5:f3:9c:46:a7:14:cc:59:2d:d8:ca:49:99:b3:58:17:7d:
         3b:28:c4:da:ed:e0:3a:a2:c7:b6:55:7c:0f:a3:b9:fc:25:2c:
         0f:60:9e:f9:74:21:c9:13:9a:58:0f:2c:7e:5f:bf:e8:d4:a4:
         2b:65:5a:21:67:22:d7:22:1c:8d:8e:db:27:e1:30:e6:b0:f8:
         75:e2:b4:16:37:9b:04:1b:46:f0:7d:0c:9b:af:ae:86:07:f5:
         80:bc:45:34:e0:b9:34:cd:bb:d0:70:b1:57:dd:4b:b9:cb:7e:
         a3:54:4a:67
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUI5i38i/kxCDnnW0hzMMK0DeBw0kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDFCNEFGMEEyNzVDMEQwNzQyQzc0M0E4QkU4QkNERjU2
QjAzREE3RjAeFw0yNDA3MDYwMTM4NDNaFw0yNTA3MDUwMTQzNDNaMDMxMTAvBgNV
BAMTKDY5Nzg0RjlCMEUxRkVGQjg1NkIzNjBDRkY0RDlENENDQkI1NzkzQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS3+jPzsA/ez3WbITw50xQjQse
vdVkbVCANEE8IVlxyKcR+tFTkAnWhlubJ78AwyGc6nAwPrwN0X9GSBCRQan6wAV6
dfvCjO5FxNWiAvpzeR4O6VAjSWcG1ddmD5iaDXKfvanMzlSo8G/JC6J7jM3R18pS
pKnEE6PAcYlIC3tU9uqEn1wnagyAhglXpXuq6Pv1fG3Vx8LaRkXptFSel1CwM8fC
gGgJ+bf71gcSyTxqCve8GoHuIc8b5hnj0vrS9vE46M6VDl7vCGhAS1+GSGglc8ab
5whHtVNkPC2QRCIlJtSMUHVgeamF4ncKUuwrNRkp0a48PjexB026tGQqLZRNAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUaXhPmw4f77hWs2DP9NnUzLtXk7swHwYDVR0j
BBgwFoAU0bSvCidcDQdCx0OovovN9WsD2n8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGk3bWk4bThhUzRmVkFja2dWNDZiYk1KalBINXlBYldLYUhrQ2V4c1hQ
ekUvMC9EMUI0QUYwQTI3NUMwRDA3NDJDNzQzQThCRThCQ0RGNTZCMDNEQTdGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxQjRBRjBBMjc1QzBEMDc0
MkM3NDNBOEJFOEJDREY1NkIwM0RBN0YuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhpN21pOG04YVM0ZlZBY2tnVjQ2YmJNSmpQSDV5QWJXS2FIa0NleHNYUHpFLzAv
MzIzODMwMzQzYTM0NjMzMTYzM2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNzMzMzUzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigETBzAMA0GCSqGSIb3DQEBCwUA
A4IBAQCKHbHNT0lMeH/NmgffXRsz9AKKDJHahVa121Ce5jfWFHlsdiO04xJL2WHF
RJXwI4ntNGAIZevMCEuvQbJrzh1cD7H4OXjZOP/7mNwCmUSoTwSw4UQrx73Q2j/n
RqJcx8zM2JcUTDHJ1YFYQdGtxoCd7osOZ1k+S+DWbyWQF22vbsd9p58TyqxS666y
T6uun0FSpfOcRqcUzFkt2MpJmbNYF307KMTa7eA6ose2VXwPo7n8JSwPYJ75dCHJ
E5pYDyx+X7/o1KQrZVohZyLXIhyNjtsn4TDmsPh14rQWN5sEG0bwfQybr66GB/WA
vEU04Lk0zbvQcLFX3Uu5y36jVEpn
-----END CERTIFICATE-----
Generated at Fri Nov 29 13:26:37 2024 by rpki-client on console-ams.rpki-client.org