Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/323830343a333835633a3a2f33332d3333203d3e20323632363837.roa
File:                     323830343a333835633a3a2f33332d3333203d3e20323632363837.roa (raw, json)
Hash identifier:          Q0LUf1zXWavkM6h8dg+sOji7gxOSq/c37gvIdAMiPW4=
Subject key identifier:   04:6A:90:8F:CC:2B:F1:F7:3D:A7:26:E9:50:97:8B:D2:08:44:B9:A4
Certificate issuer:       /CN=5FD5F562B3272E44A51282911986EA038C5D6919
Certificate serial:       79E09C13E91AD2B713E08E4A37E9FDA55A0A31FC
Authority key identifier: 5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/323830343a333835633a3a2f33332d3333203d3e20323632363837.roa
Signing time:             Tue 21 May 2024 20:06:18 +0000
ROA not before:           Tue 21 May 2024 20:01:18 +0000
ROA not after:            Tue 20 May 2025 20:06:18 +0000
asID:                     262687
IP address blocks:        2804:385c::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:e0:9c:13:e9:1a:d2:b7:13:e0:8e:4a:37:e9:fd:a5:5a:0a:31:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FD5F562B3272E44A51282911986EA038C5D6919
        Validity
            Not Before: May 21 20:01:18 2024 GMT
            Not After : May 20 20:06:18 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c7:89:f9:42:0e:aa:a8:18:a8:35:c6:c2:ba:
                    50:7d:a2:97:73:54:cb:2f:0b:f4:d1:ac:3e:90:96:
                    6a:59:53:83:0d:9f:56:2b:c0:e4:69:3d:27:e4:c7:
                    0e:07:14:a0:80:ed:ed:eb:76:74:3a:4f:8d:5b:9f:
                    d5:c2:af:6e:43:95:29:02:0a:b1:7d:c8:11:47:0d:
                    75:b8:2e:91:e7:b6:81:c3:6e:dc:16:16:84:d0:6e:
                    31:02:00:84:44:04:23:f0:cf:42:51:e0:c0:a6:8a:
                    4f:a2:ed:a8:e5:37:04:f2:2a:dc:04:ad:54:c4:3f:
                    c6:c8:27:c4:8d:ff:5e:57:fd:c5:d9:7b:9f:77:97:
                    6c:e8:7b:d6:3f:19:a5:16:a1:6e:fa:47:a0:86:96:
                    6d:a6:6e:46:86:e2:5b:24:65:eb:e2:8d:c4:65:f1:
                    fa:a8:54:ea:77:86:84:fd:6b:e2:db:a8:b3:bb:9c:
                    30:04:d8:1c:5d:26:c0:62:9b:d9:af:77:79:d1:ae:
                    b4:d0:89:31:4f:86:12:33:08:dd:25:90:2a:75:c7:
                    db:6f:b0:a3:0a:cb:26:40:13:a7:86:8a:cf:11:d0:
                    0d:ec:e5:f0:f7:d9:19:ec:5a:59:35:83:ba:6d:75:
                    8b:ce:3c:97:7f:8b:de:42:2f:84:b9:63:70:b4:60:
                    d4:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:6A:90:8F:CC:2B:F1:F7:3D:A7:26:E9:50:97:8B:D2:08:44:B9:A4
            X509v3 Authority Key Identifier:
                keyid:5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/323830343a333835633a3a2f33332d3333203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:385c::/33

    Signature Algorithm: sha256WithRSAEncryption
         a3:ef:23:f5:50:8f:22:c3:85:07:eb:73:22:f3:6e:10:28:55:
         3a:a7:69:a5:67:c4:25:c0:57:35:b5:e6:b3:da:8c:98:21:88:
         5c:8a:c9:35:af:b2:90:42:38:10:83:f4:39:73:a2:5f:3a:a5:
         1e:83:68:30:8f:11:d0:23:95:d9:7d:51:b2:68:0d:c8:66:da:
         7c:58:51:59:0c:d2:0a:c8:31:0a:60:da:58:99:45:b5:d3:1b:
         43:fc:9f:5c:88:2a:bb:c4:18:c6:1b:b4:02:73:70:6c:55:e3:
         45:9a:72:f5:46:36:a0:af:0f:d6:00:ab:94:1b:98:24:77:80:
         6c:63:98:dd:14:da:c5:37:52:c3:40:05:6b:d4:8d:b7:90:79:
         bb:49:44:ce:9e:08:3e:99:80:4c:54:16:de:e5:d4:1b:b9:be:
         7a:1c:8e:d2:54:4d:23:22:ab:10:98:da:02:33:07:5d:e6:2e:
         7f:78:39:6c:7d:94:cd:c8:e2:71:60:14:e6:2a:12:9e:81:3d:
         46:62:04:6b:24:cd:fc:aa:c7:55:c2:8f:aa:a8:a5:37:43:3d:
         9c:8a:c1:8b:ff:2b:c4:e5:01:25:12:ea:19:04:6b:c3:25:b9:
         99:44:58:e0:1e:e4:5b:8b:99:71:9b:c6:bc:ce:d6:77:24:65:
         4c:3d:ce:2e
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUeeCcE+ka0rcT4I5KN+n9pVoKMfwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZENUY1NjJCMzI3MkU0NEE1MTI4MjkxMTk4NkVBMDM4
QzVENjkxOTAeFw0yNDA1MjEyMDAxMThaFw0yNTA1MjAyMDA2MThaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzdDNzg5Rjk0MjBFQUFBODE4
QTgzNUM2QzJCQTUwN0RBMjk3NzM1NENCMkYwQkY0RDFBQzNFOTA5NjZBNTk1Mzgz
MEQ5RjU2MkJDMEU0NjkzRDI3RTRDNzBFMDcxNEEwODBFREVERUI3Njc0M0E0RjhE
NUI5RkQ1QzJBRjZFNDM5NTI5MDIwQUIxN0RDODExNDcwRDc1QjgyRTkxRTdCNjgx
QzM2RURDMTYxNjg0RDA2RTMxMDIwMDg0NDQwNDIzRjBDRjQyNTFFMEMwQTY4QTRG
QTJFREE4RTUzNzA0RjIyQURDMDRBRDU0QzQzRkM2QzgyN0M0OERGRjVFNTdGREM1
RDk3QjlGNzc5NzZDRTg3QkQ2M0YxOUE1MTZBMTZFRkE0N0EwODY5NjZEQTY2RTQ2
ODZFMjVCMjQ2NUVCRTI4REM0NjVGMUZBQTg1NEVBNzc4Njg0RkQ2QkUyREJBOEIz
QkI5QzMwMDREODFDNUQyNkMwNjI5QkQ5QUY3Nzc5RDFBRUI0RDA4OTMxNEY4NjEy
MzMwOEREMjU5MDJBNzVDN0RCNkZCMEEzMEFDQjI2NDAxM0E3ODY4QUNGMTFEMDBE
RUNFNUYwRjdEOTE5RUM1QTU5MzU4M0JBNkQ3NThCQ0UzQzk3N0Y4QkRFNDIyRjg0
Qjk2MzcwQjQ2MEQ0MzEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAx8eJ+UIOqqgYqDXGwrpQfaKXc1TLLwv00aw+kJZqWVODDZ9WK8Dk
aT0n5McOBxSggO3t63Z0Ok+NW5/Vwq9uQ5UpAgqxfcgRRw11uC6R57aBw27cFhaE
0G4xAgCERAQj8M9CUeDApopPou2o5TcE8ircBK1UxD/GyCfEjf9eV/3F2Xufd5ds
6HvWPxmlFqFu+keghpZtpm5GhuJbJGXr4o3EZfH6qFTqd4aE/Wvi26izu5wwBNgc
XSbAYpvZr3d50a600IkxT4YSMwjdJZAqdcfbb7CjCssmQBOnhorPEdAN7OXw99kZ
7FpZNYO6bXWLzjyXf4veQi+EuWNwtGDUMQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FARqkI/MK/H3Pacm6VCXi9IIRLmkMB8GA1UdIwQYMBaAFF/V9WKzJy5EpRKCkRmG
6gOMXWkZMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0E5ZkJ2dnV2NDVQMTFi
eDJWbmpWM29ndDlqV0Jjck4zMlYxWlNmeUhvcjVvLzEvNUZENUY1NjJCMzI3MkU0
NEE1MTI4MjkxMTk4NkVBMDM4QzVENjkxOS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS81RkQ1RjU2MkIzMjcyRTQ0QTUxMjgyOTExOTg2RUEwMzhDNUQ2
OTE5LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BOWZCdnZ1djQ1UDExYngyVm5q
VjNvZ3Q5aldCY3JOMzJWMVpTZnlIb3I1by8xLzMyMzgzMDM0M2EzMzM4MzU2MzNh
M2EyZjMzMzMyZDMzMzMyMDNkM2UyMDMyMzYzMjM2MzgzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygE
OFwAMA0GCSqGSIb3DQEBCwUAA4IBAQCj7yP1UI8iw4UH63Mi824QKFU6p2mlZ8Ql
wFc1teaz2oyYIYhcisk1r7KQQjgQg/Q5c6JfOqUeg2gwjxHQI5XZfVGyaA3IZtp8
WFFZDNIKyDEKYNpYmUW10xtD/J9ciCq7xBjGG7QCc3BsVeNFmnL1Rjagrw/WAKuU
G5gkd4BsY5jdFNrFN1LDQAVr1I23kHm7SUTOngg+mYBMVBbe5dQbub56HI7SVE0j
IqsQmNoCMwdd5i5/eDlsfZTNyOJxYBTmKhKegT1GYgRrJM38qsdVwo+qqKU3Qz2c
isGL/yvE5QElEuoZBGvDJbmZRFjgHuRbi5lxm8a8ztZ3JGVMPc4u
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:27 2024 by rpki-client on console-fra.rpki-client.org