Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9MbnSYu4piBENykZXH8SY6D8Ci2ko36tU1qvaVL9ka8n/0/323830343a386666343a3a2f33322d3332203d3e20323733353234.roa
File:                     323830343a386666343a3a2f33322d3332203d3e20323733353234.roa (raw, json)
Hash identifier:          0CNInUIKJ03MSQPiNNF2sR/LOU6g4XgMbTg5btulaac=
Subject key identifier:   5E:FC:20:82:31:73:1A:61:AD:E4:2F:15:A2:C4:EC:ED:92:5F:A8:8D
Certificate issuer:       /CN=5A26C85C73E6B8570445B0D41258C0AE86AFF28B
Certificate serial:       78FBC44939E1D0576F680DC6651AE15135588B99
Authority key identifier: 5A:26:C8:5C:73:E6:B8:57:04:45:B0:D4:12:58:C0:AE:86:AF:F2:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A26C85C73E6B8570445B0D41258C0AE86AFF28B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9MbnSYu4piBENykZXH8SY6D8Ci2ko36tU1qvaVL9ka8n/0/323830343a386666343a3a2f33322d3332203d3e20323733353234.roa
Signing time:             Mon 17 Jun 2024 19:50:15 +0000
ROA not before:           Mon 17 Jun 2024 19:45:15 +0000
ROA not after:            Mon 16 Jun 2025 19:50:15 +0000
asID:                     273524
IP address blocks:        2804:8ff4::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9MbnSYu4piBENykZXH8SY6D8Ci2ko36tU1qvaVL9ka8n/0/5A26C85C73E6B8570445B0D41258C0AE86AFF28B.crl
                          rsync://rpki-repo.registro.br/repo/9MbnSYu4piBENykZXH8SY6D8Ci2ko36tU1qvaVL9ka8n/0/5A26C85C73E6B8570445B0D41258C0AE86AFF28B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A26C85C73E6B8570445B0D41258C0AE86AFF28B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:fb:c4:49:39:e1:d0:57:6f:68:0d:c6:65:1a:e1:51:35:58:8b:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A26C85C73E6B8570445B0D41258C0AE86AFF28B
        Validity
            Not Before: Jun 17 19:45:15 2024 GMT
            Not After : Jun 16 19:50:15 2025 GMT
        Subject: CN=5EFC208231731A61ADE42F15A2C4ECED925FA88D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:64:30:d9:dd:7c:50:5c:ad:b8:16:ae:d0:74:
                    59:c6:3f:b7:f9:52:29:bb:ac:cf:a3:69:0d:fc:79:
                    f9:23:a6:46:f4:a0:0e:82:83:e0:5e:86:ac:6f:26:
                    81:ca:c1:9d:90:f3:ef:9c:6f:a4:6e:25:99:a3:ee:
                    6a:7b:4b:ca:db:8d:d0:31:76:7f:c9:64:f9:26:d7:
                    a7:fc:ca:65:78:20:e6:e9:41:ef:eb:d4:cd:41:4b:
                    0a:51:a6:a6:d7:46:ca:95:74:f5:0b:4a:a6:95:ec:
                    94:a1:22:b2:8e:64:9f:a5:87:79:31:a7:20:cb:b0:
                    62:78:c6:96:ca:84:90:a9:97:2b:4d:c0:7b:91:77:
                    10:41:bd:ec:35:60:9e:ca:88:52:11:6b:94:6b:7d:
                    9d:fa:9d:d6:b2:bf:05:d7:e0:f2:fb:15:71:24:2a:
                    ee:4c:9d:ec:6a:e2:1a:77:61:d5:ed:bb:08:4a:5a:
                    84:72:73:d4:40:c0:1a:ae:d4:5e:4b:52:d6:31:4f:
                    f6:3f:e7:60:7e:6a:f6:c0:8e:c1:6d:8c:14:41:80:
                    a3:a3:48:20:c0:16:60:3d:99:ba:e3:93:92:e3:e6:
                    2d:72:67:76:93:35:aa:8c:d4:0c:2e:6f:bd:aa:5f:
                    63:a4:94:d0:85:25:9c:32:6f:df:5e:bf:57:83:95:
                    39:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:FC:20:82:31:73:1A:61:AD:E4:2F:15:A2:C4:EC:ED:92:5F:A8:8D
            X509v3 Authority Key Identifier:
                keyid:5A:26:C8:5C:73:E6:B8:57:04:45:B0:D4:12:58:C0:AE:86:AF:F2:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9MbnSYu4piBENykZXH8SY6D8Ci2ko36tU1qvaVL9ka8n/0/5A26C85C73E6B8570445B0D41258C0AE86AFF28B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A26C85C73E6B8570445B0D41258C0AE86AFF28B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9MbnSYu4piBENykZXH8SY6D8Ci2ko36tU1qvaVL9ka8n/0/323830343a386666343a3a2f33322d3332203d3e20323733353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ff4::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:f5:ec:eb:84:07:01:9a:8e:b6:f6:58:aa:8e:b3:66:45:54:
         69:90:0e:32:1b:b4:a0:5c:26:2c:23:e4:58:a7:1d:40:97:24:
         6a:68:3a:c4:05:44:ef:20:b8:81:4d:dc:3b:ed:a3:b2:2c:82:
         58:a8:90:96:8f:7c:50:01:2c:4e:13:43:3f:02:df:6b:97:ce:
         d9:65:a5:a9:bd:19:1e:01:0c:86:49:cb:69:30:dd:ea:9e:80:
         86:f2:b3:66:3b:36:1c:6a:53:3e:d2:ff:be:ec:05:e3:ea:7b:
         ae:d8:6e:fa:45:5f:b9:e6:d5:cc:cd:31:13:8a:d6:1f:1a:ff:
         4a:c5:75:1a:14:45:a6:a8:83:00:63:41:a4:84:0e:cb:94:41:
         80:a3:73:6e:93:2e:09:2d:3f:7d:a9:c5:ea:4c:32:56:49:e3:
         de:70:1d:01:f4:ba:05:84:19:b1:99:d8:f0:90:c4:2f:99:26:
         c2:84:c4:2f:b3:3d:31:96:61:66:81:70:d5:4b:36:3a:47:e0:
         76:95:10:12:29:d9:24:a0:88:8e:06:40:b0:1c:55:0b:24:e0:
         ad:dd:0a:3b:b3:83:14:d7:7e:bf:3e:30:2c:a8:25:28:c9:07:
         c7:60:77:98:eb:3e:00:fd:8c:d9:d4:c4:53:4a:f3:22:76:14:
         cc:fd:4e:f5
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUePvESTnh0FdvaA3GZRrhUTVYi5kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUEyNkM4NUM3M0U2Qjg1NzA0NDVCMEQ0MTI1OEMwQUU4
NkFGRjI4QjAeFw0yNDA2MTcxOTQ1MTVaFw0yNTA2MTYxOTUwMTVaMDMxMTAvBgNV
BAMTKDVFRkMyMDgyMzE3MzFBNjFBREU0MkYxNUEyQzRFQ0VEOTI1RkE4OEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQZDDZ3XxQXK24Fq7QdFnGP7f5
Uim7rM+jaQ38efkjpkb0oA6Cg+BehqxvJoHKwZ2Q8++cb6RuJZmj7mp7S8rbjdAx
dn/JZPkm16f8ymV4IObpQe/r1M1BSwpRpqbXRsqVdPULSqaV7JShIrKOZJ+lh3kx
pyDLsGJ4xpbKhJCplytNwHuRdxBBvew1YJ7KiFIRa5RrfZ36ndayvwXX4PL7FXEk
Ku5Mnexq4hp3YdXtuwhKWoRyc9RAwBqu1F5LUtYxT/Y/52B+avbAjsFtjBRBgKOj
SCDAFmA9mbrjk5Lj5i1yZ3aTNaqM1Awub72qX2OklNCFJZwyb99ev1eDlTn3AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUXvwggjFzGmGt5C8VosTs7ZJfqI0wHwYDVR0j
BBgwFoAUWibIXHPmuFcERbDUEljAroav8oswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOU1iblNZdTRwaUJFTnlrWlhIOFNZNkQ4Q2kya28zNnRVMXF2YVZMOWth
OG4vMC81QTI2Qzg1QzczRTZCODU3MDQ0NUIwRDQxMjU4QzBBRTg2QUZGMjhCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVBMjZDODVDNzNFNkI4NTcw
NDQ1QjBENDEyNThDMEFFODZBRkYyOEIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlNYm5TWXU0cGlCRU55a1pYSDhTWTZEOENpMmtvMzZ0VTFxdmFWTDlrYThuLzAv
MzIzODMwMzQzYTM4NjY2NjM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMz
MzUzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASP9DANBgkqhkiG9w0BAQsFAAOCAQEAcvXs64QH
AZqOtvZYqo6zZkVUaZAOMhu0oFwmLCPkWKcdQJckamg6xAVE7yC4gU3cO+2jsiyC
WKiQlo98UAEsThNDPwLfa5fO2WWlqb0ZHgEMhknLaTDd6p6AhvKzZjs2HGpTPtL/
vuwF4+p7rthu+kVfuebVzM0xE4rWHxr/SsV1GhRFpqiDAGNBpIQOy5RBgKNzbpMu
CS0/fanF6kwyVknj3nAdAfS6BYQZsZnY8JDEL5kmwoTEL7M9MZZhZoFw1Us2Okfg
dpUQEinZJKCIjgZAsBxVCyTgrd0KO7ODFNd+vz4wLKglKMkHx2B3mOs+AP2M2dTE
U0rzInYUzP1O9Q==
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:53:06 2024 by rpki-client on console-ams.rpki-client.org