Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/323830343a333433633a3a2f33322d3332203d3e20323633363635.roa
File:                     323830343a333433633a3a2f33322d3332203d3e20323633363635.roa (raw, json)
Hash identifier:          hufpOjHKi2ZXVWGsNuwyK4SAC9lGvMMWE+yxOgZeP1M=
Subject key identifier:   9D:7F:C1:7B:8D:73:BC:9A:88:EB:66:30:8A:B2:CD:3A:3A:ED:09:8E
Certificate issuer:       /CN=8EF1AA8783ADB33CABDBF9713F95F290C225B7FD
Certificate serial:       5321D0742B30F0FF48D8DE6D22EFCC07E89B34FD
Authority key identifier: 8E:F1:AA:87:83:AD:B3:3C:AB:DB:F9:71:3F:95:F2:90:C2:25:B7:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EF1AA8783ADB33CABDBF9713F95F290C225B7FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/323830343a333433633a3a2f33322d3332203d3e20323633363635.roa
Signing time:             Mon 09 Sep 2024 15:04:37 +0000
ROA not before:           Mon 09 Sep 2024 14:59:37 +0000
ROA not after:            Mon 08 Sep 2025 15:04:37 +0000
asID:                     263665
IP address blocks:        2804:343c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/8EF1AA8783ADB33CABDBF9713F95F290C225B7FD.crl
                          rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/8EF1AA8783ADB33CABDBF9713F95F290C225B7FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EF1AA8783ADB33CABDBF9713F95F290C225B7FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 01:57:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:21:d0:74:2b:30:f0:ff:48:d8:de:6d:22:ef:cc:07:e8:9b:34:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF1AA8783ADB33CABDBF9713F95F290C225B7FD
        Validity
            Not Before: Sep  9 14:59:37 2024 GMT
            Not After : Sep  8 15:04:37 2025 GMT
        Subject: CN=9D7FC17B8D73BC9A88EB66308AB2CD3A3AED098E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:37:4f:1c:48:3f:82:c2:1a:d3:dc:60:ca:39:
                    b8:3b:79:b3:7c:51:34:09:15:72:3e:90:af:15:af:
                    e7:b8:58:99:b2:85:ce:b1:b1:0d:43:5f:dd:0f:16:
                    f1:55:97:1d:d6:8d:c2:d1:f0:00:c9:3d:6f:0d:10:
                    8e:07:75:20:c9:bd:41:4a:fd:6c:95:67:7b:03:61:
                    43:15:2f:4e:3f:33:7e:7a:2e:8c:00:e0:4e:08:8f:
                    2d:dc:93:80:29:e5:c8:e0:4d:46:55:00:a6:83:4d:
                    19:9f:28:f9:30:60:c8:7e:41:52:0e:b5:d9:00:49:
                    ed:f8:57:49:7e:be:e9:8c:46:9f:b6:d2:b8:af:06:
                    44:a5:08:af:2a:6c:6b:90:80:37:ab:5e:f3:2c:6a:
                    e4:6e:bd:c3:84:d0:09:b2:c3:58:52:8e:4d:02:39:
                    2a:3d:67:68:35:23:14:02:b2:c6:4a:dd:36:e3:8f:
                    91:63:41:72:a7:db:7c:02:a8:ca:47:13:d6:a0:f7:
                    ad:96:21:66:bb:fb:9d:27:de:f5:fe:09:ba:61:df:
                    47:38:72:a5:0e:24:07:9a:c5:f4:59:d3:4b:da:7d:
                    35:9d:fc:41:a4:5c:ad:6c:45:7e:1f:39:0f:7c:d7:
                    57:b6:f5:75:ba:bd:e0:7a:91:c5:c2:d1:6f:7c:96:
                    a4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:7F:C1:7B:8D:73:BC:9A:88:EB:66:30:8A:B2:CD:3A:3A:ED:09:8E
            X509v3 Authority Key Identifier:
                keyid:8E:F1:AA:87:83:AD:B3:3C:AB:DB:F9:71:3F:95:F2:90:C2:25:B7:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/8EF1AA8783ADB33CABDBF9713F95F290C225B7FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EF1AA8783ADB33CABDBF9713F95F290C225B7FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/323830343a333433633a3a2f33322d3332203d3e20323633363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:343c::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:4e:c6:cf:16:4c:3c:71:fe:d7:e9:76:07:50:33:f2:e5:61:
         be:a3:13:6a:d6:a9:a0:3b:51:ce:a1:85:01:5a:a3:e4:1a:d9:
         ef:8e:51:89:2e:1b:ed:01:9c:04:c2:f1:09:95:06:6a:f9:51:
         b8:7b:16:2d:a8:df:b8:8c:7c:63:5c:75:f9:0a:98:29:e9:24:
         5e:90:f6:6f:17:cc:b6:70:93:f1:57:98:28:8d:e3:d7:d5:82:
         1c:70:21:94:15:1d:e9:38:22:5c:05:d1:20:58:f9:25:3b:3c:
         b7:90:0c:71:e6:12:4d:38:28:6c:d7:67:6a:be:43:f8:99:1d:
         41:2b:f9:dc:34:36:a2:f8:66:7e:5f:16:84:95:a8:e2:7e:8a:
         7b:12:9a:40:b6:c9:3d:49:c6:f0:ed:9f:3b:38:42:fc:b1:de:
         ed:69:a9:c1:82:64:bd:f2:c8:c1:31:f2:07:87:02:6f:52:f8:
         c7:6e:1a:58:36:69:2d:72:e7:b1:bf:0e:29:6d:35:88:25:60:
         26:7c:9b:01:71:54:78:33:90:35:b5:2f:e7:63:7f:de:a6:db:
         8b:2b:19:e5:fe:55:bd:f5:ac:e1:34:90:3f:7c:1e:91:ec:fc:
         cf:bf:9e:30:2d:6a:85:99:85:dd:dd:ad:cb:59:dd:b7:b2:e1:
         11:3f:11:ce
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUUyHQdCsw8P9I2N5tIu/MB+ibNP0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEVGMUFBODc4M0FEQjMzQ0FCREJGOTcxM0Y5NUYyOTBD
MjI1QjdGRDAeFw0yNDA5MDkxNDU5MzdaFw0yNTA5MDgxNTA0MzdaMDMxMTAvBgNV
BAMTKDlEN0ZDMTdCOEQ3M0JDOUE4OEVCNjYzMDhBQjJDRDNBM0FFRDA5OEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqN08cSD+CwhrT3GDKObg7ebN8
UTQJFXI+kK8Vr+e4WJmyhc6xsQ1DX90PFvFVlx3WjcLR8ADJPW8NEI4HdSDJvUFK
/WyVZ3sDYUMVL04/M356LowA4E4Ijy3ck4Ap5cjgTUZVAKaDTRmfKPkwYMh+QVIO
tdkASe34V0l+vumMRp+20rivBkSlCK8qbGuQgDerXvMsauRuvcOE0Amyw1hSjk0C
OSo9Z2g1IxQCssZK3Tbjj5FjQXKn23wCqMpHE9ag962WIWa7+50n3vX+Cbph30c4
cqUOJAeaxfRZ00vafTWd/EGkXK1sRX4fOQ9811e29XW6veB6kcXC0W98lqTHAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUnX/Be41zvJqI62YwirLNOjrtCY4wHwYDVR0j
BBgwFoAUjvGqh4Otszyr2/lxP5XykMIlt/0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOU03WlFMVXp5Tkt2M3lTRTNGQ05KQ0t1bXdLTkN0Y3pTVFlwRjdIOE1n
cmYvMC84RUYxQUE4NzgzQURCMzNDQUJEQkY5NzEzRjk1RjI5MEMyMjVCN0ZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFRjFBQTg3ODNBREIzM0NB
QkRCRjk3MTNGOTVGMjkwQzIyNUI3RkQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlNN1pRTFV6eU5LdjN5U0UzRkNOSkNLdW13S05DdGN6U1RZcEY3SDhNZ3JmLzAv
MzIzODMwMzQzYTMzMzQzMzYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjMz
MzYzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ0PDANBgkqhkiG9w0BAQsFAAOCAQEAZk7GzxZM
PHH+1+l2B1Az8uVhvqMTatapoDtRzqGFAVqj5BrZ745RiS4b7QGcBMLxCZUGavlR
uHsWLajfuIx8Y1x1+QqYKekkXpD2bxfMtnCT8VeYKI3j19WCHHAhlBUd6TgiXAXR
IFj5JTs8t5AMceYSTTgobNdnar5D+JkdQSv53DQ2ovhmfl8WhJWo4n6KexKaQLbJ
PUnG8O2fOzhC/LHe7WmpwYJkvfLIwTHyB4cCb1L4x24aWDZpLXLnsb8OKW01iCVg
JnybAXFUeDOQNbUv52N/3qbbiysZ5f5VvfWs4TSQP3wekez8z7+eMC1qhZmF3d2t
y1ndt7LhET8Rzg==
-----END CERTIFICATE-----
Generated at Sat Sep 28 02:14:32 2024 by rpki-client on console-fra.rpki-client.org