Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a633030303a3a2f33362d3336203d3e20323635313735.roa
File:                     323830343a326263383a633030303a3a2f33362d3336203d3e20323635313735.roa (raw, json)
Hash identifier:          1fJIbD5LM9MWF2ZmV6q60q5Z19NfmGALHA02iKHHz5I=
Subject key identifier:   D8:E1:6A:33:C0:4A:59:50:DC:79:89:04:9D:FF:5D:B2:73:AE:B6:47
Certificate issuer:       /CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
Certificate serial:       57B5CB6F2CACE999DDDE90C28A41B49D9BF8D788
Authority key identifier: 23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a633030303a3a2f33362d3336203d3e20323635313735.roa
Signing time:             Tue 01 Oct 2024 14:05:51 +0000
ROA not before:           Tue 01 Oct 2024 14:00:51 +0000
ROA not after:            Tue 30 Sep 2025 14:05:51 +0000
asID:                     265175
IP address blocks:        2804:2bc8:c000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.crl
                          rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:b5:cb:6f:2c:ac:e9:99:dd:de:90:c2:8a:41:b4:9d:9b:f8:d7:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
        Validity
            Not Before: Oct  1 14:00:51 2024 GMT
            Not After : Sep 30 14:05:51 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a5:c8:f9:49:53:bb:0f:fe:95:78:69:6e:77:
                    75:60:fe:aa:04:4f:71:cd:34:43:4a:d3:a7:1d:60:
                    23:c3:33:1c:f9:9a:9c:75:08:22:8c:e1:13:fe:2b:
                    29:3f:13:9b:7e:40:6a:99:af:90:a7:b7:09:4c:33:
                    97:ff:c9:e0:cc:8b:8e:12:a0:52:24:6a:57:71:ee:
                    4d:db:e6:d1:6c:16:aa:d4:c6:8f:f4:6e:1f:e9:6f:
                    8e:6d:37:3f:8a:26:9b:e4:2d:0f:07:37:e5:7e:95:
                    43:e8:dc:d4:57:93:53:1c:89:bc:c9:4b:d7:39:75:
                    8f:ce:1f:7f:db:08:8f:a0:2a:8b:2e:29:60:56:3f:
                    1e:00:8c:60:53:4a:ab:31:31:14:cb:25:2e:60:58:
                    8e:c2:27:e6:11:c6:36:2b:54:f3:e5:a9:c1:b6:2a:
                    de:6d:db:02:c8:1a:d8:cd:a5:9c:50:1f:0f:bb:cd:
                    db:2e:a9:42:ec:e8:92:2a:2a:56:ff:2a:3a:9e:b5:
                    4d:0c:f2:08:d0:00:3a:ed:e6:9b:1f:0c:dd:be:02:
                    23:f7:79:51:e4:03:51:dc:7b:35:de:62:7d:f1:70:
                    5d:52:30:fa:40:eb:bb:79:6e:46:db:56:fd:2a:96:
                    f6:2a:78:90:c1:ef:79:80:a8:ac:d9:ab:8a:fe:24:
                    02:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:E1:6A:33:C0:4A:59:50:DC:79:89:04:9D:FF:5D:B2:73:AE:B6:47
            X509v3 Authority Key Identifier:
                keyid:23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a633030303a3a2f33362d3336203d3e20323635313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bc8:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         6e:98:df:73:83:42:00:73:4a:87:47:21:d2:7f:02:17:e5:8a:
         d4:93:4d:f5:7c:79:1d:fa:b0:25:e0:90:fa:36:16:83:75:b4:
         f0:92:bc:ed:05:5b:c7:93:3d:63:8c:8d:15:49:13:72:47:17:
         ea:67:20:b5:75:6a:43:e3:2c:76:e6:c7:d8:e2:99:83:5c:90:
         90:92:fe:2e:78:c2:b1:16:c0:b4:0a:9c:86:f1:23:79:9e:9a:
         57:8f:99:a6:04:e9:c2:3f:1f:5c:3e:57:60:f7:65:eb:eb:e2:
         68:b8:9b:9e:af:89:31:3b:4b:aa:d6:56:39:5c:d7:03:88:24:
         f1:6a:14:cb:fd:33:41:97:79:2d:1c:e6:d9:b8:36:02:fc:81:
         3f:8d:7e:bc:37:4a:33:00:11:b6:ad:85:7f:8b:be:58:d1:68:
         0a:b3:44:fc:50:cd:17:9d:52:33:1c:77:f8:b9:e7:0e:3a:6f:
         f9:c8:8d:bc:a3:68:a4:52:51:89:26:7b:12:a7:6e:d3:cc:92:
         40:f7:67:24:0a:b3:8c:37:1f:30:d3:e3:2f:45:82:2a:21:f3:
         9d:08:f5:bc:4d:cc:78:1c:f5:6a:c7:1b:1d:ff:fa:78:a3:1b:
         4c:36:67:0a:f0:1c:d7:15:69:51:6d:81:9f:21:9f:75:d4:af:
         6e:89:ee:d7
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUV7XLbyys6Znd3pDCikG0nZv414gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjMxRDhDNzk2MDNFOTZEMTMwOURGQjlCQTg4QUVCNkE2
MkM3QzY0MjAeFw0yNDEwMDExNDAwNTFaFw0yNTA5MzAxNDA1NTFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjVBNUM4Rjk0OTUzQkIwRkZF
OTU3ODY5NkU3Nzc1NjBGRUFBMDQ0RjcxQ0QzNDQzNEFEM0E3MUQ2MDIzQzMzMzFD
Rjk5QTlDNzUwODIyOENFMTEzRkUyQjI5M0YxMzlCN0U0MDZBOTlBRjkwQTdCNzA5
NEMzMzk3RkZDOUUwQ0M4QjhFMTJBMDUyMjQ2QTU3NzFFRTREREJFNkQxNkMxNkFB
RDRDNjhGRjQ2RTFGRTk2RjhFNkQzNzNGOEEyNjlCRTQyRDBGMDczN0U1N0U5NTQz
RThEQ0Q0NTc5MzUzMUM4OUJDQzk0QkQ3Mzk3NThGQ0UxRjdGREIwODhGQTAyQThC
MkUyOTYwNTYzRjFFMDA4QzYwNTM0QUFCMzEzMTE0Q0IyNTJFNjA1ODhFQzIyN0U2
MTFDNjM2MkI1NEYzRTVBOUMxQjYyQURFNkREQjAyQzgxQUQ4Q0RBNTlDNTAxRjBG
QkJDRERCMkVBOTQyRUNFODkyMkEyQTU2RkYyQTNBOUVCNTREMENGMjA4RDAwMDNB
RURFNjlCMUYwQ0REQkUwMjIzRjc3OTUxRTQwMzUxREM3QjM1REU2MjdERjE3MDVE
NTIzMEZBNDBFQkJCNzk2RTQ2REI1NkZEMkE5NkY2MkE3ODkwQzFFRjc5ODBBOEFD
RDlBQjhBRkUyNDAyOTUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtaXI+UlTuw/+lXhpbnd1YP6qBE9xzTRDStOnHWAjwzMc+ZqcdQgi
jOET/ispPxObfkBqma+Qp7cJTDOX/8ngzIuOEqBSJGpXce5N2+bRbBaq1MaP9G4f
6W+ObTc/iiab5C0PBzflfpVD6NzUV5NTHIm8yUvXOXWPzh9/2wiPoCqLLilgVj8e
AIxgU0qrMTEUyyUuYFiOwifmEcY2K1Tz5anBtirebdsCyBrYzaWcUB8Pu83bLqlC
7OiSKipW/yo6nrVNDPII0AA67eabHwzdvgIj93lR5ANR3Hs13mJ98XBdUjD6QOu7
eW5G21b9Kpb2KniQwe95gKis2auK/iQClQIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FNjhajPASllQ3HmJBJ3/XbJzrrZHMB8GA1UdIwQYMBaAFCMdjHlgPpbRMJ37m6iK
62pix8ZCMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzluNEpSS2pDbXk2NGE5
eVl4NUpuUm04VVA4MzFrM3VWZ3J6emJIQlI2ZzdkLzEvMjMxRDhDNzk2MDNFOTZE
MTMwOURGQjlCQTg4QUVCNkE2MkM3QzY0Mi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8yMzFEOEM3OTYwM0U5NkQxMzA5REZCOUJBODhBRUI2QTYyQzdD
NjQyLmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85bjRKUktqQ215NjRhOXlZeDVK
blJtOFVQODMxazN1VmdyenpiSEJSNmc3ZC8xLzMyMzgzMDM0M2EzMjYyNjMzODNh
NjMzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzUzMTM3MzUucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgQoBCvIwDANBgkqhkiG9w0BAQsFAAOCAQEAbpjfc4NCAHNKh0ch0n8C
F+WK1JNN9Xx5HfqwJeCQ+jYWg3W08JK87QVbx5M9Y4yNFUkTckcX6mcgtXVqQ+Ms
dubH2OKZg1yQkJL+LnjCsRbAtAqchvEjeZ6aV4+ZpgTpwj8fXD5XYPdl6+viaLib
nq+JMTtLqtZWOVzXA4gk8WoUy/0zQZd5LRzm2bg2AvyBP41+vDdKMwARtq2Ff4u+
WNFoCrNE/FDNF51SMxx3+LnnDjpv+ciNvKNopFJRiSZ7Eqdu08ySQPdnJAqzjDcf
MNPjL0WCKiHznQj1vE3MeBz1ascbHf/6eKMbTDZnCvAc1xVpUW2BnyGfddSvbonu
1w==
-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:34 2024 by rpki-client on console-fra.rpki-client.org