Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9G89gJgZeyhfjANknxDvMdhkyXhQf6VreXRWReDzbAjg/0/323830343a383039383a3a2f33322d3336203d3e20323731373631.roa
File:                     323830343a383039383a3a2f33322d3336203d3e20323731373631.roa (raw, json)
Hash identifier:          9wPPC6rKlXznAaJR8S+s6LQ3IDFC/1R5i7WnugOfodI=
Subject key identifier:   56:49:7C:0D:9B:1F:69:EF:7F:C8:7E:7E:75:B7:EB:B1:55:A2:21:93
Certificate issuer:       /CN=7CC53AEAE00C29CB557DC70BC7A5ADE2238F1742
Certificate serial:       588D8612735F9F4B7994126C2639CE208EEC6B9F
Authority key identifier: 7C:C5:3A:EA:E0:0C:29:CB:55:7D:C7:0B:C7:A5:AD:E2:23:8F:17:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CC53AEAE00C29CB557DC70BC7A5ADE2238F1742.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9G89gJgZeyhfjANknxDvMdhkyXhQf6VreXRWReDzbAjg/0/323830343a383039383a3a2f33322d3336203d3e20323731373631.roa
Signing time:             Tue 22 Oct 2024 20:30:47 +0000
ROA not before:           Tue 22 Oct 2024 20:25:47 +0000
ROA not after:            Tue 21 Oct 2025 20:30:47 +0000
asID:                     271761
IP address blocks:        2804:8098::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9G89gJgZeyhfjANknxDvMdhkyXhQf6VreXRWReDzbAjg/0/7CC53AEAE00C29CB557DC70BC7A5ADE2238F1742.crl
                          rsync://rpki-repo.registro.br/repo/9G89gJgZeyhfjANknxDvMdhkyXhQf6VreXRWReDzbAjg/0/7CC53AEAE00C29CB557DC70BC7A5ADE2238F1742.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CC53AEAE00C29CB557DC70BC7A5ADE2238F1742.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 23:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:8d:86:12:73:5f:9f:4b:79:94:12:6c:26:39:ce:20:8e:ec:6b:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CC53AEAE00C29CB557DC70BC7A5ADE2238F1742
        Validity
            Not Before: Oct 22 20:25:47 2024 GMT
            Not After : Oct 21 20:30:47 2025 GMT
        Subject: CN=56497C0D9B1F69EF7FC87E7E75B7EBB155A22193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a0:dc:5f:8a:0d:c5:05:83:7e:82:9b:dd:89:
                    54:b5:80:e9:21:92:03:61:fc:8a:f4:21:ae:a2:e4:
                    af:c7:15:e9:d6:0d:51:65:a6:e7:6e:10:15:70:9e:
                    19:34:5d:61:ea:c8:53:97:f1:b6:7a:c1:98:8c:78:
                    1b:c6:db:81:d3:ce:46:ad:81:75:0d:49:38:34:dd:
                    0f:c4:e3:d9:06:c8:e1:17:d8:32:1a:91:72:be:da:
                    e0:2f:33:c9:7f:23:34:67:e0:c1:da:52:61:07:5b:
                    68:1f:c1:6b:38:df:99:0a:51:95:65:88:42:7f:21:
                    2f:51:32:73:23:6d:6e:c8:49:02:d3:3c:8c:59:3c:
                    c8:05:f2:4d:48:e2:d6:76:e2:eb:42:92:47:be:8c:
                    a9:65:81:99:d8:1d:b1:8b:e7:f5:3a:35:50:d5:f5:
                    66:31:2e:07:38:83:e0:91:4a:12:93:24:70:f7:36:
                    75:c2:10:39:03:fa:84:7d:78:5a:52:26:f4:65:ce:
                    8f:9d:ff:fe:0e:8f:02:4c:bf:98:64:da:61:c0:14:
                    6d:59:d4:b2:f0:c7:1b:c7:86:a0:67:0c:a2:36:7f:
                    70:f5:51:52:4d:37:9d:8c:3e:ed:2c:1b:bc:74:3c:
                    0e:0b:9a:fa:ee:8b:1e:a2:14:de:0c:ac:17:1d:f6:
                    ec:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:49:7C:0D:9B:1F:69:EF:7F:C8:7E:7E:75:B7:EB:B1:55:A2:21:93
            X509v3 Authority Key Identifier:
                keyid:7C:C5:3A:EA:E0:0C:29:CB:55:7D:C7:0B:C7:A5:AD:E2:23:8F:17:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9G89gJgZeyhfjANknxDvMdhkyXhQf6VreXRWReDzbAjg/0/7CC53AEAE00C29CB557DC70BC7A5ADE2238F1742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CC53AEAE00C29CB557DC70BC7A5ADE2238F1742.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9G89gJgZeyhfjANknxDvMdhkyXhQf6VreXRWReDzbAjg/0/323830343a383039383a3a2f33322d3336203d3e20323731373631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8098::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:9b:59:19:e7:10:d3:1b:f9:ec:f2:29:c4:fe:20:79:af:12:
         b9:c5:b2:bc:7e:0a:6d:bf:df:b2:c8:55:97:bb:4a:cb:39:e5:
         aa:d1:e4:73:aa:73:3b:d8:36:96:5f:29:79:ba:73:8d:2f:9f:
         d1:f3:71:1a:85:c4:4c:66:18:8c:c7:ec:80:37:6d:26:eb:f7:
         e6:59:90:ad:20:fa:14:90:a1:a3:4e:20:4e:fe:28:e0:c2:1d:
         a8:fa:fa:af:02:e8:b7:36:6a:5e:46:7c:82:18:31:bc:8e:bb:
         2b:70:eb:16:28:75:01:ab:29:37:0e:17:33:9a:73:2d:31:b8:
         6e:2e:3d:e9:dc:6d:a6:0a:b1:d7:0f:2b:ae:ce:87:3c:8a:de:
         97:9d:d5:9d:06:76:2e:07:13:86:24:5b:fa:44:d2:f5:47:45:
         13:0c:a2:7a:a8:e5:58:85:86:14:2d:ee:bf:74:61:59:a6:4b:
         ee:1e:f4:d3:1b:e6:18:dd:a0:08:d0:3c:84:03:cd:03:75:6f:
         00:7b:5a:d5:f9:07:f0:71:a7:04:9b:db:09:09:2c:24:79:c3:
         ae:75:45:0c:72:f9:1d:6e:cc:c7:1c:2c:ed:8c:33:83:f5:e2:
         c6:a6:f6:b4:19:49:2f:cf:db:54:ea:d0:61:ea:9b:2c:df:82:
         d3:af:08:ca
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUWI2GEnNfn0t5lBJsJjnOII7sa58wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NDNTNBRUFFMDBDMjlDQjU1N0RDNzBCQzdBNUFERTIy
MzhGMTc0MjAeFw0yNDEwMjIyMDI1NDdaFw0yNTEwMjEyMDMwNDdaMDMxMTAvBgNV
BAMTKDU2NDk3QzBEOUIxRjY5RUY3RkM4N0U3RTc1QjdFQkIxNTVBMjIxOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1oNxfig3FBYN+gpvdiVS1gOkh
kgNh/Ir0Ia6i5K/HFenWDVFlpuduEBVwnhk0XWHqyFOX8bZ6wZiMeBvG24HTzkat
gXUNSTg03Q/E49kGyOEX2DIakXK+2uAvM8l/IzRn4MHaUmEHW2gfwWs435kKUZVl
iEJ/IS9RMnMjbW7ISQLTPIxZPMgF8k1I4tZ24utCkke+jKllgZnYHbGL5/U6NVDV
9WYxLgc4g+CRShKTJHD3NnXCEDkD+oR9eFpSJvRlzo+d//4OjwJMv5hk2mHAFG1Z
1LLwxxvHhqBnDKI2f3D1UVJNN52MPu0sG7x0PA4Lmvruix6iFN4MrBcd9uwBAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUVkl8DZsfae9/yH5+dbfrsVWiIZMwHwYDVR0j
BBgwFoAUfMU66uAMKctVfccLx6Wt4iOPF0IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOUc4OWdKZ1pleWhmakFOa254RHZNZGhreVhoUWY2VnJlWFJXUmVEemJB
amcvMC83Q0M1M0FFQUUwMEMyOUNCNTU3REM3MEJDN0E1QURFMjIzOEYxNzQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdDQzUzQUVBRTAwQzI5Q0I1
NTdEQzcwQkM3QTVBREUyMjM4RjE3NDIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlHODlnSmdaZXloZmpBTmtueER2TWRoa3lYaFFmNlZyZVhSV1JlRHpiQWpnLzAv
MzIzODMwMzQzYTM4MzAzOTM4M2EzYTJmMzMzMjJkMzMzNjIwM2QzZTIwMzIzNzMx
MzczNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASAmDANBgkqhkiG9w0BAQsFAAOCAQEADJtZGecQ
0xv57PIpxP4gea8SucWyvH4Kbb/fsshVl7tKyznlqtHkc6pzO9g2ll8pebpzjS+f
0fNxGoXETGYYjMfsgDdtJuv35lmQrSD6FJCho04gTv4o4MIdqPr6rwLotzZqXkZ8
ghgxvI67K3DrFih1AaspNw4XM5pzLTG4bi496dxtpgqx1w8rrs6HPIrel53VnQZ2
LgcThiRb+kTS9UdFEwyieqjlWIWGFC3uv3RhWaZL7h700xvmGN2gCNA8hAPNA3Vv
AHta1fkH8HGnBJvbCQksJHnDrnVFDHL5HW7Mxxws7Ywzg/Xixqb2tBlJL8/bVOrQ
YeqbLN+C068Iyg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:54 2024 by rpki-client on console-fra.rpki-client.org