Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/1/323830313a38303a3231303a3a2f34382d313238203d3e203532393938.roa
File:                     323830313a38303a3231303a3a2f34382d313238203d3e203532393938.roa (raw, json)
Hash identifier:          huBIWcmvgAKpsOQb+YnqUBga7In298Ckl+V8FnyCxSE=
Subject key identifier:   FD:CF:D5:AD:BA:DF:81:34:DA:88:FF:18:83:BD:5F:23:A1:A9:2A:6A
Certificate issuer:       /CN=2E3906019F53CEC4441CD3D21CFF37C136BF24EC
Certificate serial:       0D08CF60E74FD2B47D349D7D8E0524AFE46177A6
Authority key identifier: 2E:39:06:01:9F:53:CE:C4:44:1C:D3:D2:1C:FF:37:C1:36:BF:24:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/1/323830313a38303a3231303a3a2f34382d313238203d3e203532393938.roa
Signing time:             Thu 04 Apr 2024 13:15:31 +0000
ROA not before:           Thu 04 Apr 2024 13:10:31 +0000
ROA not after:            Thu 03 Apr 2025 13:15:31 +0000
asID:                     52998
IP address blocks:        2801:80:210::/48 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.crl
                          rsync://rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:20:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:08:cf:60:e7:4f:d2:b4:7d:34:9d:7d:8e:05:24:af:e4:61:77:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E3906019F53CEC4441CD3D21CFF37C136BF24EC
        Validity
            Not Before: Apr  4 13:10:31 2024 GMT
            Not After : Apr  3 13:15:31 2025 GMT
        Subject: CN=FDCFD5ADBADF8134DA88FF1883BD5F23A1A92A6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:3a:b6:1e:bb:99:c7:7f:0d:b6:60:8c:53:e3:
                    70:6e:57:b6:f7:d1:b8:da:86:4e:ca:56:c1:57:b0:
                    cb:4b:cf:c9:0d:3e:9b:6e:2d:d5:25:6e:42:54:02:
                    a8:3c:1c:91:64:77:f0:77:a7:72:9f:c1:88:97:23:
                    a6:59:29:5e:33:ff:b1:26:b1:d1:02:3f:bb:56:fd:
                    dd:ed:f4:56:2d:2e:8c:e4:09:e2:63:58:12:8b:ab:
                    b9:ac:0d:24:a4:e3:4e:11:a9:c6:c6:0d:db:1f:5b:
                    53:70:8b:aa:ad:f1:b8:58:ca:7d:30:86:de:82:d1:
                    f9:7d:81:e8:91:55:4b:8f:e5:7b:50:32:cb:62:34:
                    1a:91:9e:b9:aa:47:c2:51:65:66:31:f0:cc:cc:36:
                    2a:9a:84:da:df:03:ee:b9:00:00:b9:d0:5e:fa:87:
                    3a:59:9b:0a:9e:53:1f:e1:25:2e:15:de:58:3c:17:
                    27:2f:08:78:d4:63:36:d3:12:dd:01:37:ca:14:7f:
                    bc:52:37:fd:c9:5e:5a:6a:1c:d1:86:56:ca:3b:a5:
                    09:79:17:6b:0d:a4:0e:14:5e:60:a5:15:23:f5:ad:
                    65:43:2a:fc:7c:53:95:31:73:9e:c7:89:03:da:84:
                    fe:af:19:4e:2e:d0:48:35:6d:c0:0c:f8:4a:3d:34:
                    c1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:CF:D5:AD:BA:DF:81:34:DA:88:FF:18:83:BD:5F:23:A1:A9:2A:6A
            X509v3 Authority Key Identifier:
                keyid:2E:39:06:01:9F:53:CE:C4:44:1C:D3:D2:1C:FF:37:C1:36:BF:24:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/1/323830313a38303a3231303a3a2f34382d313238203d3e203532393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:210::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:cd:e2:29:97:18:f4:0b:f7:29:9a:48:77:f9:bb:0a:4e:a4:
         c2:8b:0e:ee:5c:fe:39:99:d7:6d:e1:50:9d:74:5a:7f:4a:86:
         74:f1:6e:3b:20:5e:b6:c9:0d:0b:d1:79:e2:ef:c5:8e:18:43:
         91:eb:14:7d:4e:05:73:fe:e5:4c:d7:01:df:ff:1b:d1:d8:d4:
         08:2b:32:db:9b:d2:02:e5:5e:66:d2:76:47:a8:01:38:7f:31:
         42:5d:3c:71:92:fa:c6:4d:82:01:46:92:d7:95:e4:4c:70:5f:
         63:69:6c:d3:1c:6f:e3:af:b0:99:da:00:15:43:21:56:73:c4:
         c8:f1:29:eb:41:2a:df:30:09:68:e3:ee:59:7b:7c:86:50:ef:
         c9:c2:f1:1e:b8:0d:ff:59:58:8b:93:6c:bd:0d:24:3a:8b:3a:
         26:48:f5:e8:a1:91:62:0c:2c:40:fa:c5:07:2a:09:5e:b7:8f:
         21:26:6e:8f:fc:67:4c:cc:02:04:dc:14:35:bb:26:e7:5c:f2:
         17:7d:ce:d7:94:00:b7:71:2d:45:56:09:93:7a:26:85:40:b3:
         bd:3b:3a:a0:45:c7:63:80:cd:fc:a9:76:45:f5:61:ff:8b:77:
         96:cf:5c:f5:f4:7e:8f:48:fc:42:07:cb:54:ca:56:2f:25:0b:
         24:2b:3f:79
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUDQjPYOdP0rR9NJ19jgUkr+Rhd6YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkUzOTA2MDE5RjUzQ0VDNDQ0MUNEM0QyMUNGRjM3QzEz
NkJGMjRFQzAeFw0yNDA0MDQxMzEwMzFaFw0yNTA0MDMxMzE1MzFaMDMxMTAvBgNV
BAMTKEZEQ0ZENUFEQkFERjgxMzREQTg4RkYxODgzQkQ1RjIzQTFBOTJBNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrOrYeu5nHfw22YIxT43BuV7b3
0bjahk7KVsFXsMtLz8kNPptuLdUlbkJUAqg8HJFkd/B3p3KfwYiXI6ZZKV4z/7Em
sdECP7tW/d3t9FYtLozkCeJjWBKLq7msDSSk404RqcbGDdsfW1Nwi6qt8bhYyn0w
ht6C0fl9geiRVUuP5XtQMstiNBqRnrmqR8JRZWYx8MzMNiqahNrfA+65AAC50F76
hzpZmwqeUx/hJS4V3lg8FycvCHjUYzbTEt0BN8oUf7xSN/3JXlpqHNGGVso7pQl5
F2sNpA4UXmClFSP1rWVDKvx8U5Uxc57HiQPahP6vGU4u0Eg1bcAM+Eo9NMF5AgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQU/c/VrbrfgTTaiP8Yg71fI6GpKmowHwYDVR0j
BBgwFoAULjkGAZ9TzsREHNPSHP83wTa/JOwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXdZN2pXZXJOWHdEdWdxRWlBS1lqWldWb1pDbzdQam5pYW1YTG9YMUJ6
dVYvMS8yRTM5MDYwMTlGNTNDRUM0NDQxQ0QzRDIxQ0ZGMzdDMTM2QkYyNEVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJFMzkwNjAxOUY1M0NFQzQ0
NDFDRDNEMjFDRkYzN0MxMzZCRjI0RUMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F3WTdqV2VyTlh3RHVncUVpQUtZalpXVm9aQ283UGpuaWFtWExvWDFCenVWLzEv
MzIzODMwMzEzYTM4MzAzYTMyMzEzMDNhM2EyZjM0MzgyZDMxMzIzODIwM2QzZTIw
MzUzMjM5MzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACgBAIACEDANBgkqhkiG9w0BAQsFAAOCAQEA
nM3iKZcY9Av3KZpId/m7Ck6kwosO7lz+OZnXbeFQnXRaf0qGdPFuOyBetskNC9F5
4u/FjhhDkesUfU4Fc/7lTNcB3/8b0djUCCsy25vSAuVeZtJ2R6gBOH8xQl08cZL6
xk2CAUaS15XkTHBfY2ls0xxv46+wmdoAFUMhVnPEyPEp60Eq3zAJaOPuWXt8hlDv
ycLxHrgN/1lYi5NsvQ0kOos6Jkj16KGRYgwsQPrFByoJXrePISZuj/xnTMwCBNwU
Nbsm51zyF33O15QAt3EtRVYJk3omhUCzvTs6oEXHY4DN/Kl2RfVh/4t3ls9c9fR+
j0j8QgfLVMpWLyULJCs/eQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:57 2024 by rpki-client on console-fra.rpki-client.org