Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/1/323830343a326163383a3a2f33322d3332203d3e20323635313138.roa
File:                     323830343a326163383a3a2f33322d3332203d3e20323635313138.roa (raw, json)
Hash identifier:          Cp0KgSsBF3zswYxertxgGzBgQEsMYV8Fl4PfuWy0l6M=
Subject key identifier:   7E:E1:77:A5:0E:D1:F3:61:0C:27:6D:C2:18:58:24:DD:A0:FF:A1:CD
Certificate issuer:       /CN=5FC5F2A5F8624C96369764264B21B8C29BB52394
Certificate serial:       064936D25D5A005367BB273766057057F630206C
Authority key identifier: 5F:C5:F2:A5:F8:62:4C:96:36:97:64:26:4B:21:B8:C2:9B:B5:23:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FC5F2A5F8624C96369764264B21B8C29BB52394.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/1/323830343a326163383a3a2f33322d3332203d3e20323635313138.roa
Signing time:             Thu 04 Apr 2024 07:15:09 +0000
ROA not before:           Thu 04 Apr 2024 07:10:09 +0000
ROA not after:            Thu 03 Apr 2025 07:15:09 +0000
asID:                     265118
IP address blocks:        2804:2ac8::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/1/5FC5F2A5F8624C96369764264B21B8C29BB52394.crl
                          rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/1/5FC5F2A5F8624C96369764264B21B8C29BB52394.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FC5F2A5F8624C96369764264B21B8C29BB52394.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:49:36:d2:5d:5a:00:53:67:bb:27:37:66:05:70:57:f6:30:20:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FC5F2A5F8624C96369764264B21B8C29BB52394
        Validity
            Not Before: Apr  4 07:10:09 2024 GMT
            Not After : Apr  3 07:15:09 2025 GMT
        Subject: CN=7EE177A50ED1F3610C276DC2185824DDA0FFA1CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ef:41:69:71:06:d7:c3:67:49:03:1c:6f:e0:
                    2f:3a:63:42:08:fc:23:35:68:97:b9:03:09:d2:14:
                    41:0f:77:4b:0d:5d:3a:42:bb:87:be:26:63:bb:03:
                    98:73:6f:34:b0:9e:52:e2:a2:4e:e1:1e:05:06:b4:
                    da:96:81:55:f8:86:2a:9b:b1:6d:06:d2:76:02:8c:
                    df:6b:eb:e6:20:de:79:01:e8:86:5e:7b:04:fc:7e:
                    ea:fe:12:db:03:21:b0:ec:bb:c1:17:b8:fc:b9:09:
                    74:5c:4f:4c:05:19:9a:73:8d:99:e2:75:70:22:a9:
                    b2:13:a1:ef:50:54:ea:7b:5e:c5:de:63:fe:b1:76:
                    b9:b4:cf:58:48:47:1b:2e:76:60:b1:88:b6:4a:5b:
                    4a:41:7d:c0:4a:d0:a8:26:d4:e8:44:24:5d:6c:f1:
                    c5:d6:7f:d0:1c:61:bb:0c:54:13:0d:a2:5f:7f:27:
                    02:7c:62:ea:29:47:52:00:aa:ae:8c:b1:cb:b8:42:
                    7b:c4:bb:ae:b7:27:7b:ad:2d:06:76:0a:d6:d3:c5:
                    79:66:61:f4:53:9a:d9:af:c8:fb:55:bd:43:cd:08:
                    b6:d0:e5:41:78:2f:09:34:9a:2e:6a:1f:c9:49:5c:
                    7d:12:8c:ff:7f:87:f2:65:a2:41:31:7d:5c:ec:2a:
                    38:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:E1:77:A5:0E:D1:F3:61:0C:27:6D:C2:18:58:24:DD:A0:FF:A1:CD
            X509v3 Authority Key Identifier:
                keyid:5F:C5:F2:A5:F8:62:4C:96:36:97:64:26:4B:21:B8:C2:9B:B5:23:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/1/5FC5F2A5F8624C96369764264B21B8C29BB52394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FC5F2A5F8624C96369764264B21B8C29BB52394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/1/323830343a326163383a3a2f33322d3332203d3e20323635313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2ac8::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:da:6b:c6:f7:9a:1e:93:a1:d9:9f:78:3d:b0:6f:75:d9:ed:
         3c:84:f3:8d:1b:56:20:5a:14:74:de:05:53:da:0b:94:a6:0d:
         da:bf:30:44:7c:7d:5e:0a:8b:5b:69:7e:c8:91:18:a3:ce:de:
         92:f8:7c:a0:9e:e6:70:8f:ce:c6:d8:57:80:17:ed:c2:58:39:
         88:5b:ca:54:94:d6:2d:32:fc:4e:bf:63:10:65:e6:0d:d3:69:
         58:b5:3c:b0:64:06:4c:bb:93:41:99:51:54:06:7b:2e:ef:6b:
         a4:fc:96:98:41:c2:4b:a6:e0:e1:5e:25:a7:04:5b:62:3d:df:
         e2:46:82:99:79:d8:e6:ff:33:be:3f:02:85:01:f6:97:fe:2a:
         6f:a2:c7:2b:49:68:95:14:ee:ef:4a:52:6c:bf:0b:43:6b:89:
         1f:a6:97:c2:56:39:09:47:41:09:01:bd:73:7c:75:f6:54:a0:
         15:51:3e:99:c9:0f:38:2f:0b:ec:a8:f8:9f:b7:1a:21:62:3b:
         10:17:76:11:db:51:ad:30:b6:89:71:16:b4:b8:c0:fa:e5:58:
         25:34:9a:18:6c:5c:e5:e3:7d:7c:d5:c5:18:08:98:df:0f:39:
         e7:9c:5f:1f:52:43:99:8b:0a:34:4d:96:85:57:80:f0:ff:53:
         ee:3f:9c:c5
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUBkk20l1aAFNnuyc3ZgVwV/YwIGwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZDNUYyQTVGODYyNEM5NjM2OTc2NDI2NEIyMUI4QzI5
QkI1MjM5NDAeFw0yNDA0MDQwNzEwMDlaFw0yNTA0MDMwNzE1MDlaMDMxMTAvBgNV
BAMTKDdFRTE3N0E1MEVEMUYzNjEwQzI3NkRDMjE4NTgyNEREQTBGRkExQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw70FpcQbXw2dJAxxv4C86Y0II
/CM1aJe5AwnSFEEPd0sNXTpCu4e+JmO7A5hzbzSwnlLiok7hHgUGtNqWgVX4hiqb
sW0G0nYCjN9r6+Yg3nkB6IZeewT8fur+EtsDIbDsu8EXuPy5CXRcT0wFGZpzjZni
dXAiqbIToe9QVOp7XsXeY/6xdrm0z1hIRxsudmCxiLZKW0pBfcBK0Kgm1OhEJF1s
8cXWf9AcYbsMVBMNol9/JwJ8YuopR1IAqq6Mscu4QnvEu663J3utLQZ2CtbTxXlm
YfRTmtmvyPtVvUPNCLbQ5UF4Lwk0mi5qH8lJXH0SjP9/h/JlokExfVzsKjjpAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUfuF3pQ7R82EMJ23CGFgk3aD/oc0wHwYDVR0j
BBgwFoAUX8XypfhiTJY2l2QmSyG4wpu1I5QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjZqdXphb0xFb284aG1vY3o1dEozSkN3dFQ2Qmc5MnIzZ2FoRWFxbjg5
SmMvMS81RkM1RjJBNUY4NjI0Qzk2MzY5NzY0MjY0QjIxQjhDMjlCQjUyMzk0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVGQzVGMkE1Rjg2MjRDOTYz
Njk3NjQyNjRCMjFCOEMyOUJCNTIzOTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I2anV6YW9MRW9vOGhtb2N6NXRKM0pDd3RUNkJnOTJyM2dhaEVhcW44OUpjLzEv
MzIzODMwMzQzYTMyNjE2MzM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM1
MzEzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQqyDANBgkqhkiG9w0BAQsFAAOCAQEAk9prxvea
HpOh2Z94PbBvddntPITzjRtWIFoUdN4FU9oLlKYN2r8wRHx9XgqLW2l+yJEYo87e
kvh8oJ7mcI/OxthXgBftwlg5iFvKVJTWLTL8Tr9jEGXmDdNpWLU8sGQGTLuTQZlR
VAZ7Lu9rpPyWmEHCS6bg4V4lpwRbYj3f4kaCmXnY5v8zvj8ChQH2l/4qb6LHK0lo
lRTu70pSbL8LQ2uJH6aXwlY5CUdBCQG9c3x19lSgFVE+mckPOC8L7Kj4n7caIWI7
EBd2EdtRrTC2iXEWtLjA+uVYJTSaGGxc5eN9fNXFGAiY3w8555xfH1JDmYsKNE2W
hVeA8P9T7j+cxQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:34 2024 by rpki-client on console-fra.rpki-client.org