Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/1/323830343a326563303a3a2f33322d3332203d3e20323635333634.roa
File:                     323830343a326563303a3a2f33322d3332203d3e20323635333634.roa (raw, json)
Hash identifier:          iVU4d+BcGVwuD3TOFLSWbX8RiP/mDROZmImZWReQpgI=
Subject key identifier:   18:75:46:B8:6F:B6:78:8B:CE:3D:3D:31:CA:1F:CA:6A:AD:A6:A8:3D
Certificate issuer:       /CN=53B8EF890E159C97C854A2FD8A6A51B3E34E626C
Certificate serial:       12D825AB5BF8AE1AADA2E65E5FD0A82FA3CB2F2C
Authority key identifier: 53:B8:EF:89:0E:15:9C:97:C8:54:A2:FD:8A:6A:51:B3:E3:4E:62:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/1/323830343a326563303a3a2f33322d3332203d3e20323635333634.roa
Signing time:             Thu 04 Apr 2024 23:59:33 +0000
ROA not before:           Thu 04 Apr 2024 23:54:33 +0000
ROA not after:            Thu 03 Apr 2025 23:59:33 +0000
asID:                     265364
IP address blocks:        2804:2ec0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.crl
                          rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:d8:25:ab:5b:f8:ae:1a:ad:a2:e6:5e:5f:d0:a8:2f:a3:cb:2f:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53B8EF890E159C97C854A2FD8A6A51B3E34E626C
        Validity
            Not Before: Apr  4 23:54:33 2024 GMT
            Not After : Apr  3 23:59:33 2025 GMT
        Subject: CN=187546B86FB6788BCE3D3D31CA1FCA6AADA6A83D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1e:6f:b4:46:2d:89:92:bc:e5:25:1e:bc:25:
                    1d:0c:ed:72:d3:8c:8b:59:54:7c:bc:45:2f:33:f5:
                    04:e8:2a:79:f6:f3:fb:80:1c:6f:e6:33:29:f0:9f:
                    39:da:4b:e2:a8:6a:b1:8d:16:ef:69:01:cc:2d:88:
                    06:08:dd:62:33:2a:0c:7d:2c:49:4c:18:ab:4d:30:
                    cc:7d:c7:7d:34:0c:35:b0:1d:31:3c:3c:af:08:9d:
                    58:af:ec:17:db:45:b9:ff:e4:96:aa:e5:6d:82:f9:
                    16:45:bd:39:94:9a:e3:1e:1d:80:11:5d:00:c6:d5:
                    a7:73:47:64:3d:74:bc:cb:48:65:c3:c3:d2:13:1e:
                    c8:4d:6b:67:4b:18:c3:05:b3:f0:f9:a7:41:b6:cd:
                    ae:f3:1d:c7:6c:bc:6b:a5:21:7e:74:bf:71:a4:2e:
                    b6:7c:e9:50:9c:00:90:2a:fc:27:b3:db:3e:f4:88:
                    76:fd:a4:54:df:ec:ed:22:51:c0:59:0b:f4:91:31:
                    ae:5e:2f:ba:a3:57:cf:bb:52:b8:dc:83:4a:79:27:
                    e5:b7:d3:04:40:65:9a:99:e3:d3:be:de:d0:d6:08:
                    7d:74:a3:7c:d3:e1:2f:6e:01:d6:23:93:8a:0c:56:
                    e7:15:e1:fc:7e:ab:ff:26:82:f7:6d:58:40:01:86:
                    7e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:75:46:B8:6F:B6:78:8B:CE:3D:3D:31:CA:1F:CA:6A:AD:A6:A8:3D
            X509v3 Authority Key Identifier:
                keyid:53:B8:EF:89:0E:15:9C:97:C8:54:A2:FD:8A:6A:51:B3:E3:4E:62:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/1/323830343a326563303a3a2f33322d3332203d3e20323635333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2ec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:0f:d6:68:ad:98:32:4f:a6:30:c8:9c:cb:67:24:37:01:22:
         d5:3a:31:e4:51:ed:ac:98:dc:e2:c5:82:51:47:73:3b:53:d6:
         89:23:8a:39:8d:89:80:6f:c9:2c:3b:35:48:35:e8:d9:71:b6:
         32:8a:77:51:27:c6:13:34:f5:cd:3f:34:37:cc:f7:51:06:11:
         46:63:2d:56:8d:56:f9:25:0e:d2:37:f3:02:e0:34:7f:ec:ff:
         71:b4:ba:73:0e:f3:55:6a:29:6b:3e:75:31:c7:c3:97:32:92:
         74:8c:f6:d2:68:5f:be:71:24:ff:25:09:a4:9e:c9:14:e8:1b:
         05:92:91:39:4c:1a:ec:1a:98:20:f3:bc:0d:fc:25:3d:03:d7:
         44:44:ea:f8:f1:77:64:2e:23:fa:91:59:1c:d3:eb:a3:df:fd:
         7d:db:d7:e3:42:00:d2:be:d2:d9:74:35:58:91:1a:8d:26:4c:
         68:a5:f9:69:33:62:10:d5:ea:41:7d:b8:36:47:81:e5:15:33:
         f1:c3:79:c4:ae:3d:53:da:24:12:97:9c:2c:d7:4e:cc:eb:70:
         23:d9:4f:db:1a:ec:36:4e:2a:af:9a:06:fe:c7:15:7b:82:cf:
         74:1e:b4:39:0b:57:79:4a:3d:86:c3:f7:3b:3e:c0:7f:fb:7f:
         ae:34:e5:7a
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUEtglq1v4rhqtouZeX9CoL6PLLywwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTNCOEVGODkwRTE1OUM5N0M4NTRBMkZEOEE2QTUxQjNF
MzRFNjI2QzAeFw0yNDA0MDQyMzU0MzNaFw0yNTA0MDMyMzU5MzNaMDMxMTAvBgNV
BAMTKDE4NzU0NkI4NkZCNjc4OEJDRTNEM0QzMUNBMUZDQTZBQURBNkE4M0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Hm+0Ri2JkrzlJR68JR0M7XLT
jItZVHy8RS8z9QToKnn28/uAHG/mMynwnznaS+KoarGNFu9pAcwtiAYI3WIzKgx9
LElMGKtNMMx9x300DDWwHTE8PK8InViv7BfbRbn/5Jaq5W2C+RZFvTmUmuMeHYAR
XQDG1adzR2Q9dLzLSGXDw9ITHshNa2dLGMMFs/D5p0G2za7zHcdsvGulIX50v3Gk
LrZ86VCcAJAq/Cez2z70iHb9pFTf7O0iUcBZC/SRMa5eL7qjV8+7Urjcg0p5J+W3
0wRAZZqZ49O+3tDWCH10o3zT4S9uAdYjk4oMVucV4fx+q/8mgvdtWEABhn55AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUGHVGuG+2eIvOPT0xyh/Kaq2mqD0wHwYDVR0j
BBgwFoAUU7jviQ4VnJfIVKL9impRs+NOYmwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWh1RTJqRDZKdjR2bkFTQkdidU05cGZnRkJUWjdzaUtrQlg4YmFwN1lu
SmIvMS81M0I4RUY4OTBFMTU5Qzk3Qzg1NEEyRkQ4QTZBNTFCM0UzNEU2MjZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUzQjhFRjg5MEUxNTlDOTdD
ODU0QTJGRDhBNkE1MUIzRTM0RTYyNkMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlodUUyakQ2SnY0dm5BU0JHYnVNOXBmZ0ZCVFo3c2lLa0JYOGJhcDdZbkpiLzEv
MzIzODMwMzQzYTMyNjU2MzMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM1
MzMzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQuwDANBgkqhkiG9w0BAQsFAAOCAQEACA/WaK2Y
Mk+mMMicy2ckNwEi1Tox5FHtrJjc4sWCUUdzO1PWiSOKOY2JgG/JLDs1SDXo2XG2
Mop3USfGEzT1zT80N8z3UQYRRmMtVo1W+SUO0jfzAuA0f+z/cbS6cw7zVWopaz51
McfDlzKSdIz20mhfvnEk/yUJpJ7JFOgbBZKROUwa7BqYIPO8DfwlPQPXRETq+PF3
ZC4j+pFZHNPro9/9fdvX40IA0r7S2XQ1WJEajSZMaKX5aTNiENXqQX24NkeB5RUz
8cN5xK49U9okEpecLNdOzOtwI9lP2xrsNk4qr5oG/scVe4LPdB60OQtXeUo9hsP3
Oz7Af/t/rjTleg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:40 2024 by rpki-client on console-ams.rpki-client.org