Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/323830343a356266633a3a2f33322d3438203d3e20323638383831.roa
File:                     323830343a356266633a3a2f33322d3438203d3e20323638383831.roa (raw, json)
Hash identifier:          z9hTSEyIb5Bh7pNE7rmcEHcOHdmt7IjRSKpBxsnepoA=
Subject key identifier:   D7:39:9C:11:31:61:E7:DB:D2:F4:E6:2B:5A:CA:81:C3:A3:7B:31:3A
Certificate issuer:       /CN=DD880B71129737798123EE9EDC1423C3E8280892
Certificate serial:       51F5768EA4D37BB00D972619C9036BDCA4FD57DF
Authority key identifier: DD:88:0B:71:12:97:37:79:81:23:EE:9E:DC:14:23:C3:E8:28:08:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD880B71129737798123EE9EDC1423C3E8280892.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/323830343a356266633a3a2f33322d3438203d3e20323638383831.roa
Signing time:             Wed 03 Apr 2024 19:00:00 +0000
ROA not before:           Wed 03 Apr 2024 18:55:00 +0000
ROA not after:            Thu 03 Apr 2025 19:00:00 +0000
asID:                     268881
IP address blocks:        2804:5bfc::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.crl
                          rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD880B71129737798123EE9EDC1423C3E8280892.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:f5:76:8e:a4:d3:7b:b0:0d:97:26:19:c9:03:6b:dc:a4:fd:57:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD880B71129737798123EE9EDC1423C3E8280892
        Validity
            Not Before: Apr  3 18:55:00 2024 GMT
            Not After : Apr  3 19:00:00 2025 GMT
        Subject: CN=3082010A0282010100D1EFCBD130B418BBAE7F684270ED6ED21C21D4DC7D9D72E957A8CD1BAE10FB63130D568E9DEFD59B066076062D3315C09525C87BBE2972F5F651B21503188F4F6AE33B2F7BBE44D086017C88945C1AE42492D7636F45725690AF5C4DA9B9FBEBE1FA82C8B64B083C293C289BFABAB953EE111649D1D9DB826A9B156BCE44D9107758B31905DDFAE6ADF236038EBB0D91A4F5E2384519D8CD711E16964F03BFAD3C54DE38C73D977EA68FD549AF05667995BB9A205EDAFA25454C3E5DB765C5B0BD2E3598FD8D7027315C6967DA42E0F5DD3C532B45D55DB77627C89183DE0B32B185E7297B6CE76F5E8A3B84380C7AB99C7F3239D3B9937FA6626D3711AF5C910203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ef:cb:d1:30:b4:18:bb:ae:7f:68:42:70:ed:
                    6e:d2:1c:21:d4:dc:7d:9d:72:e9:57:a8:cd:1b:ae:
                    10:fb:63:13:0d:56:8e:9d:ef:d5:9b:06:60:76:06:
                    2d:33:15:c0:95:25:c8:7b:be:29:72:f5:f6:51:b2:
                    15:03:18:8f:4f:6a:e3:3b:2f:7b:be:44:d0:86:01:
                    7c:88:94:5c:1a:e4:24:92:d7:63:6f:45:72:56:90:
                    af:5c:4d:a9:b9:fb:eb:e1:fa:82:c8:b6:4b:08:3c:
                    29:3c:28:9b:fa:ba:b9:53:ee:11:16:49:d1:d9:db:
                    82:6a:9b:15:6b:ce:44:d9:10:77:58:b3:19:05:dd:
                    fa:e6:ad:f2:36:03:8e:bb:0d:91:a4:f5:e2:38:45:
                    19:d8:cd:71:1e:16:96:4f:03:bf:ad:3c:54:de:38:
                    c7:3d:97:7e:a6:8f:d5:49:af:05:66:79:95:bb:9a:
                    20:5e:da:fa:25:45:4c:3e:5d:b7:65:c5:b0:bd:2e:
                    35:98:fd:8d:70:27:31:5c:69:67:da:42:e0:f5:dd:
                    3c:53:2b:45:d5:5d:b7:76:27:c8:91:83:de:0b:32:
                    b1:85:e7:29:7b:6c:e7:6f:5e:8a:3b:84:38:0c:7a:
                    b9:9c:7f:32:39:d3:b9:93:7f:a6:62:6d:37:11:af:
                    5c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:39:9C:11:31:61:E7:DB:D2:F4:E6:2B:5A:CA:81:C3:A3:7B:31:3A
            X509v3 Authority Key Identifier:
                keyid:DD:88:0B:71:12:97:37:79:81:23:EE:9E:DC:14:23:C3:E8:28:08:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD880B71129737798123EE9EDC1423C3E8280892.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/323830343a356266633a3a2f33322d3438203d3e20323638383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5bfc::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:07:da:f3:90:04:cd:4e:67:8a:20:c4:25:a0:58:1b:9e:19:
         d1:85:0b:a6:30:42:29:db:3e:3e:63:45:17:65:4f:21:51:93:
         ca:ad:17:f7:3b:74:5a:8e:04:d1:e3:60:f3:14:17:fc:34:39:
         ac:94:b5:d9:e5:51:27:07:e1:9e:73:fe:40:12:6b:fe:4d:65:
         92:ef:f7:30:a6:4f:9b:d8:1b:c3:54:73:ca:31:2e:ec:33:a3:
         48:8c:9d:12:51:ec:60:f4:dc:17:75:25:e3:ab:ad:bf:50:f0:
         8a:44:07:39:c6:89:ee:0e:dd:e2:7f:93:ff:68:10:46:a8:6e:
         26:b5:0c:a7:9b:ef:1a:fa:26:b4:d0:ad:7b:1e:b0:d3:3f:0a:
         a2:d2:64:a6:f6:73:f8:7e:0e:31:b3:c0:1c:24:84:7b:ee:01:
         b8:29:3f:d0:8f:44:e4:c4:04:b0:b4:1d:74:39:3c:91:30:ff:
         30:7b:e8:14:c4:e7:eb:a3:a2:2a:f3:91:9f:14:88:39:0e:88:
         f4:19:48:b7:9f:3c:cf:de:3a:ca:3c:08:98:d5:15:9b:e7:52:
         04:15:0c:1b:a1:f0:26:ec:85:c2:f1:62:18:10:b4:ed:7e:e6:
         55:17:c4:2a:0a:c8:ee:42:5a:f3:a9:1d:d4:f8:e8:b4:e4:9d:
         19:fb:d1:5f
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUUfV2jqTTe7ANlyYZyQNr3KT9V98wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREQ4ODBCNzExMjk3Mzc3OTgxMjNFRTlFREMxNDIzQzNF
ODI4MDg5MjAeFw0yNDA0MDMxODU1MDBaFw0yNTA0MDMxOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDFFRkNCRDEzMEI0MThCQkFF
N0Y2ODQyNzBFRDZFRDIxQzIxRDREQzdEOUQ3MkU5NTdBOENEMUJBRTEwRkI2MzEz
MEQ1NjhFOURFRkQ1OUIwNjYwNzYwNjJEMzMxNUMwOTUyNUM4N0JCRTI5NzJGNUY2
NTFCMjE1MDMxODhGNEY2QUUzM0IyRjdCQkU0NEQwODYwMTdDODg5NDVDMUFFNDI0
OTJENzYzNkY0NTcyNTY5MEFGNUM0REE5QjlGQkVCRTFGQTgyQzhCNjRCMDgzQzI5
M0MyODlCRkFCQUI5NTNFRTExMTY0OUQxRDlEQjgyNkE5QjE1NkJDRTQ0RDkxMDc3
NThCMzE5MDVEREZBRTZBREYyMzYwMzhFQkIwRDkxQTRGNUUyMzg0NTE5RDhDRDcx
MUUxNjk2NEYwM0JGQUQzQzU0REUzOEM3M0Q5NzdFQTY4RkQ1NDlBRjA1NjY3OTk1
QkI5QTIwNUVEQUZBMjU0NTRDM0U1REI3NjVDNUIwQkQyRTM1OThGRDhENzAyNzMx
NUM2OTY3REE0MkUwRjVERDNDNTMyQjQ1RDU1REI3NzYyN0M4OTE4M0RFMEIzMkIx
ODVFNzI5N0I2Q0U3NkY1RThBM0I4NDM4MEM3QUI5OUM3RjMyMzlEM0I5OTM3RkE2
NjI2RDM3MTFBRjVDOTEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0e/L0TC0GLuuf2hCcO1u0hwh1Nx9nXLpV6jNG64Q+2MTDVaOne/V
mwZgdgYtMxXAlSXIe74pcvX2UbIVAxiPT2rjOy97vkTQhgF8iJRcGuQkktdjb0Vy
VpCvXE2pufvr4fqCyLZLCDwpPCib+rq5U+4RFknR2duCapsVa85E2RB3WLMZBd36
5q3yNgOOuw2RpPXiOEUZ2M1xHhaWTwO/rTxU3jjHPZd+po/VSa8FZnmVu5ogXtr6
JUVMPl23ZcWwvS41mP2NcCcxXGln2kLg9d08UytF1V23difIkYPeCzKxhecpe2zn
b16KO4Q4DHq5nH8yOdO5k3+mYm03Ea9ckQIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FNc5nBExYefb0vTmK1rKgcOjezE6MB8GA1UdIwQYMBaAFN2IC3ESlzd5gSPuntwU
I8PoKAiSMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzl4amhyQzRacnVpeUtO
S3RMMWJwZkQ4dUZ0ZnpldmNmd0RMTXJMVGlEbmNMLzEvREQ4ODBCNzExMjk3Mzc3
OTgxMjNFRTlFREMxNDIzQzNFODI4MDg5Mi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9ERDg4MEI3MTEyOTczNzc5ODEyM0VFOUVEQzE0MjNDM0U4Mjgw
ODkyLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85eGpockM0WnJ1aXlLTkt0TDFi
cGZEOHVGdGZ6ZXZjZndETE1yTFRpRG5jTC8xLzMyMzgzMDM0M2EzNTYyNjY2MzNh
M2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzODM4MzgzMS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
W/wwDQYJKoZIhvcNAQELBQADggEBAIsH2vOQBM1OZ4ogxCWgWBueGdGFC6YwQinb
Pj5jRRdlTyFRk8qtF/c7dFqOBNHjYPMUF/w0OayUtdnlUScH4Z5z/kASa/5NZZLv
9zCmT5vYG8NUc8oxLuwzo0iMnRJR7GD03Bd1JeOrrb9Q8IpEBznGie4O3eJ/k/9o
EEaobia1DKeb7xr6JrTQrXsesNM/CqLSZKb2c/h+DjGzwBwkhHvuAbgpP9CPROTE
BLC0HXQ5PJEw/zB76BTE5+ujoirzkZ8UiDkOiPQZSLefPM/eOso8CJjVFZvnUgQV
DBuh8CbshcLxYhgQtO1+5lUXxCoKyO5CWvOpHdT46LTknRn70V8=
-----END CERTIFICATE-----
Generated at Fri Jun 28 21:05:14 2024 by rpki-client on console-ams.rpki-client.org