Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a6461303a3a2f34352d3435203d3e20323633333338.roa
File:                     323830343a313439343a6461303a3a2f34352d3435203d3e20323633333338.roa (raw, json)
Hash identifier:          f8MCiZ0MFxK35PtmBSe1yFa0HBhV5BipbB2PgAw9q20=
Subject key identifier:   9F:F0:CC:F2:18:23:4D:5C:19:DB:33:BA:72:96:3E:1B:A3:65:39:8F
Certificate issuer:       /CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
Certificate serial:       68D2935A8A63F8F10C1EBAD1DA68B2E702199C81
Authority key identifier: 7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a6461303a3a2f34352d3435203d3e20323633333338.roa
Signing time:             Thu 16 May 2024 11:38:27 +0000
ROA not before:           Thu 16 May 2024 11:33:27 +0000
ROA not after:            Thu 15 May 2025 11:38:27 +0000
asID:                     263338
IP address blocks:        2804:1494:da0::/45 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl
                          rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 02:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:d2:93:5a:8a:63:f8:f1:0c:1e:ba:d1:da:68:b2:e7:02:19:9c:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
        Validity
            Not Before: May 16 11:33:27 2024 GMT
            Not After : May 15 11:38:27 2025 GMT
        Subject: CN=9FF0CCF218234D5C19DB33BA72963E1BA365398F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a3:3a:f7:ea:2e:b9:3e:ef:bc:ea:9f:49:33:
                    b2:a6:33:e9:58:9b:f0:41:28:95:1b:1b:0d:83:39:
                    11:2f:06:a7:f0:f9:28:30:0f:d4:89:74:57:83:4e:
                    c2:1e:43:df:e2:62:02:2e:29:3c:2e:fc:9b:04:01:
                    a4:41:59:b0:c5:02:d0:68:80:fc:cd:8b:8f:eb:08:
                    e6:ee:3a:64:07:2b:5a:d8:25:e7:16:fb:45:a0:a7:
                    5b:d2:18:fc:30:ac:6e:72:f3:c7:4a:e2:be:59:54:
                    98:c4:99:d0:06:f8:8a:2b:5e:62:b7:d7:fd:38:ba:
                    23:fd:8d:88:62:a6:6d:45:b7:32:48:57:9a:28:aa:
                    f4:dc:95:61:11:dd:a9:26:27:4a:cd:12:c6:66:35:
                    4b:71:5a:44:5c:98:8c:87:35:98:8a:d7:fd:82:d9:
                    88:fc:52:c2:9f:8a:70:97:55:62:bc:2e:ac:3f:77:
                    ce:95:32:ba:6e:eb:bd:1e:5b:da:32:4c:0d:ea:23:
                    58:f4:bb:95:1e:f6:08:e9:63:19:da:07:b8:4c:8a:
                    08:b7:f9:42:98:0a:7a:3e:0a:10:6b:2c:ff:4a:1a:
                    14:60:32:ff:95:d2:4f:b1:ce:3e:8b:1a:9b:6a:61:
                    05:f9:ce:27:fb:d3:1d:2b:89:cb:bd:58:c3:21:b6:
                    54:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F0:CC:F2:18:23:4D:5C:19:DB:33:BA:72:96:3E:1B:A3:65:39:8F
            X509v3 Authority Key Identifier:
                keyid:7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a6461303a3a2f34352d3435203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1494:da0::/45

    Signature Algorithm: sha256WithRSAEncryption
         11:b5:dd:55:5d:01:b0:2a:c1:a4:2b:fa:f2:6b:a5:c6:3b:9a:
         c7:e8:64:a1:f8:74:e1:38:2d:03:eb:8e:f8:9b:f4:bb:e9:19:
         bb:bc:d9:bd:67:db:71:0b:72:ec:f6:fc:55:88:cb:5f:57:22:
         15:65:39:74:a4:c0:7f:f2:2b:d0:c1:71:a8:cc:c5:c0:ac:bf:
         4b:80:eb:e2:2a:87:1f:3e:cc:ac:27:fb:90:fe:26:cb:e6:88:
         15:ae:fe:7a:42:93:d9:45:35:0d:3e:e7:26:d3:a3:62:39:7c:
         65:9a:77:d2:4e:a2:0b:5a:d8:25:76:f4:f4:d4:c3:a3:d7:48:
         75:7a:d2:02:28:3a:eb:58:7d:28:a8:2d:33:6e:2d:89:ec:1c:
         6a:32:7e:20:a7:c0:7a:08:d4:17:21:49:ab:5a:67:47:98:7a:
         ec:86:82:db:e5:13:6e:34:1f:6a:9c:0e:e9:62:a5:d8:34:e0:
         7b:0e:9b:76:9d:33:1a:09:d4:27:f5:38:70:87:a8:3d:d7:34:
         cc:27:14:a5:aa:5d:5e:6e:81:09:3a:10:ca:41:8e:75:37:c7:
         d6:11:68:66:45:85:90:34:a0:42:a1:cb:11:56:cf:0c:e2:ca:
         80:bf:49:3d:00:82:82:76:6f:73:ca:8c:a5:3b:a8:bf:ae:f8:
         5d:61:14:c4
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUaNKTWopj+PEMHrrR2miy5wIZnIEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0I0NjM4NTNFQTRBQzAxMkJEOUYzMTk0Q0ZBMzNBRjMy
NTkxREYwQjAeFw0yNDA1MTYxMTMzMjdaFw0yNTA1MTUxMTM4MjdaMDMxMTAvBgNV
BAMTKDlGRjBDQ0YyMTgyMzRENUMxOURCMzNCQTcyOTYzRTFCQTM2NTM5OEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZozr36i65Pu+86p9JM7KmM+lY
m/BBKJUbGw2DOREvBqfw+SgwD9SJdFeDTsIeQ9/iYgIuKTwu/JsEAaRBWbDFAtBo
gPzNi4/rCObuOmQHK1rYJecW+0Wgp1vSGPwwrG5y88dK4r5ZVJjEmdAG+IorXmK3
1/04uiP9jYhipm1FtzJIV5ooqvTclWER3akmJ0rNEsZmNUtxWkRcmIyHNZiK1/2C
2Yj8UsKfinCXVWK8Lqw/d86VMrpu670eW9oyTA3qI1j0u5Ue9gjpYxnaB7hMigi3
+UKYCno+ChBrLP9KGhRgMv+V0k+xzj6LGptqYQX5zif70x0ricu9WMMhtlSpAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUn/DM8hgjTVwZ2zO6cpY+G6NlOY8wHwYDVR0j
BBgwFoAUe0Y4U+pKwBK9nzGUz6M68yWR3wswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXZwOXc4Z2hZY2JWZURlZnZNRENDaGJZVEdvZXB1WEVua1lNcWVRWlAx
UEQvMC83QjQ2Mzg1M0VBNEFDMDEyQkQ5RjMxOTRDRkEzM0FGMzI1OTFERjBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdCNDYzODUzRUE0QUMwMTJC
RDlGMzE5NENGQTMzQUYzMjU5MURGMEIuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F2cDl3OGdoWWNiVmVEZWZ2TURDQ2hiWVRHb2VwdVhFbmtZTXFlUVpQMVBELzAv
MzIzODMwMzQzYTMxMzQzOTM0M2E2NDYxMzAzYTNhMmYzNDM1MmQzNDM1MjAzZDNl
MjAzMjM2MzMzMzMzMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwMoBBSUDaAwDQYJKoZIhvcNAQELBQAD
ggEBABG13VVdAbAqwaQr+vJrpcY7msfoZKH4dOE4LQPrjvib9LvpGbu82b1n23EL
cuz2/FWIy19XIhVlOXSkwH/yK9DBcajMxcCsv0uA6+Iqhx8+zKwn+5D+JsvmiBWu
/npCk9lFNQ0+5ybTo2I5fGWad9JOogta2CV29PTUw6PXSHV60gIoOutYfSioLTNu
LYnsHGoyfiCnwHoI1BchSataZ0eYeuyGgtvlE240H2qcDulipdg04HsOm3adMxoJ
1Cf1OHCHqD3XNMwnFKWqXV5ugQk6EMpBjnU3x9YRaGZFhZA0oEKhyxFWzwziyoC/
ST0AgoJ2b3PKjKU7qL+u+F1hFMQ=
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:51:20 2024 by rpki-client on console-fra.rpki-client.org