Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/323830343a336263383a3a2f33322d3438203d3e20323636313730.roa
File:                     323830343a336263383a3a2f33322d3438203d3e20323636313730.roa (raw, json)
Hash identifier:          etaePo9K9gNxQ1YI9N7nCYydbuOAT/ZvkPi4mio7iDg=
Subject key identifier:   C6:0E:5B:17:05:F3:6D:F1:51:06:3B:69:BD:A5:B7:B7:87:C5:6D:21
Certificate issuer:       /CN=5A85B3827E19AAE0B52BB06C21609C54CE16BF8C
Certificate serial:       4ECB2DA7C416226243FFB45F7A18DD63D07B1D5C
Authority key identifier: 5A:85:B3:82:7E:19:AA:E0:B5:2B:B0:6C:21:60:9C:54:CE:16:BF:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/323830343a336263383a3a2f33322d3438203d3e20323636313730.roa
Signing time:             Mon 06 May 2024 17:39:39 +0000
ROA not before:           Mon 06 May 2024 17:34:39 +0000
ROA not after:            Mon 05 May 2025 17:39:39 +0000
asID:                     266170
IP address blocks:        2804:3bc8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.crl
                          rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 23:23:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:cb:2d:a7:c4:16:22:62:43:ff:b4:5f:7a:18:dd:63:d0:7b:1d:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A85B3827E19AAE0B52BB06C21609C54CE16BF8C
        Validity
            Not Before: May  6 17:34:39 2024 GMT
            Not After : May  5 17:39:39 2025 GMT
        Subject: CN=C60E5B1705F36DF151063B69BDA5B7B787C56D21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:77:28:55:23:88:12:5e:92:9f:05:8f:57:a4:
                    4c:1b:a1:c4:0a:8b:50:24:ba:a7:8d:d2:9f:05:42:
                    62:1a:64:57:62:c2:97:99:e0:9c:ee:f7:25:7c:de:
                    be:1e:6a:52:78:98:c0:85:2d:9e:fb:4a:89:35:75:
                    6a:2c:a6:58:2d:d0:24:4c:c1:07:93:10:cb:fe:57:
                    44:9d:63:2f:2b:e9:5f:25:0a:c4:3d:7f:ae:65:c5:
                    f5:84:9c:a0:35:00:bd:a9:6f:ab:54:82:37:06:2e:
                    e7:2a:81:da:5d:04:00:31:73:55:7e:ea:29:11:c9:
                    4e:ce:3d:2e:b9:cb:5f:a6:18:bd:d5:3f:82:ac:e6:
                    df:2c:eb:1e:5f:2b:5f:26:b6:6a:7c:ec:1f:e1:39:
                    42:d0:6f:5a:a3:f0:40:66:57:75:c0:55:f7:e4:0e:
                    2b:3e:36:7e:e0:a1:5b:57:72:6b:1e:4a:1e:88:d8:
                    f7:f2:3d:c4:cc:ea:87:73:76:0d:60:5e:45:28:f9:
                    f3:20:20:7c:80:a6:7a:3d:f2:a6:ab:e2:54:9c:86:
                    43:ab:7d:ca:59:ca:75:9b:9d:40:b7:c9:89:00:55:
                    62:55:81:0c:30:dd:3c:a7:e5:95:36:a9:f9:61:cb:
                    97:d2:ea:17:16:c6:21:63:ad:e5:0f:9d:9c:a0:ed:
                    27:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:0E:5B:17:05:F3:6D:F1:51:06:3B:69:BD:A5:B7:B7:87:C5:6D:21
            X509v3 Authority Key Identifier:
                keyid:5A:85:B3:82:7E:19:AA:E0:B5:2B:B0:6C:21:60:9C:54:CE:16:BF:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/323830343a336263383a3a2f33322d3438203d3e20323636313730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3bc8::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:e3:41:9f:f3:82:e4:0f:87:d8:ad:b8:f8:db:b2:15:67:4e:
         5d:2d:55:9a:15:c0:71:4d:58:b4:a0:ae:7a:5d:df:98:23:21:
         88:90:d2:52:df:c9:6d:51:5b:3d:1e:d7:7c:2a:c3:4d:46:cd:
         ab:ed:81:11:41:e8:2a:aa:4d:95:ff:03:6d:8f:0d:25:e0:0f:
         b6:09:bd:4f:2c:72:8b:d6:23:6b:14:1f:72:ef:28:90:ca:a1:
         44:78:23:c4:72:f5:47:eb:a3:ce:fc:b6:6c:ac:b9:fb:9a:db:
         f7:47:39:2b:89:7a:66:b5:45:a6:2d:7e:b1:e3:47:f0:ae:4a:
         dc:25:09:6b:98:cb:a4:ce:39:ca:de:38:de:53:0b:26:fe:d6:
         78:a9:9f:bc:73:8b:aa:fc:b4:e5:66:e4:84:dd:8f:e8:df:f3:
         87:78:42:c0:f0:08:5c:2b:0a:65:12:ff:98:6e:7f:8b:81:c4:
         b0:b2:76:13:68:32:66:12:28:1e:c1:a6:64:21:2a:ac:88:8a:
         2a:90:33:f0:70:ef:89:40:cd:de:74:b0:05:18:23:fe:b7:9e:
         de:7b:36:f6:c3:41:74:af:0d:9b:33:ce:62:03:41:6b:73:4e:
         ab:13:12:5b:80:4d:66:9a:46:31:94:c3:62:71:6f:7b:1c:bb:
         88:98:9e:ff
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUTsstp8QWImJD/7RfehjdY9B7HVwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUE4NUIzODI3RTE5QUFFMEI1MkJCMDZDMjE2MDlDNTRD
RTE2QkY4QzAeFw0yNDA1MDYxNzM0MzlaFw0yNTA1MDUxNzM5MzlaMDMxMTAvBgNV
BAMTKEM2MEU1QjE3MDVGMzZERjE1MTA2M0I2OUJEQTVCN0I3ODdDNTZEMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKdyhVI4gSXpKfBY9XpEwbocQK
i1AkuqeN0p8FQmIaZFdiwpeZ4Jzu9yV83r4ealJ4mMCFLZ77Sok1dWosplgt0CRM
wQeTEMv+V0SdYy8r6V8lCsQ9f65lxfWEnKA1AL2pb6tUgjcGLucqgdpdBAAxc1V+
6ikRyU7OPS65y1+mGL3VP4Ks5t8s6x5fK18mtmp87B/hOULQb1qj8EBmV3XAVffk
Dis+Nn7goVtXcmseSh6I2PfyPcTM6odzdg1gXkUo+fMgIHyApno98qar4lSchkOr
fcpZynWbnUC3yYkAVWJVgQww3Tyn5ZU2qflhy5fS6hcWxiFjreUPnZyg7SeTAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUxg5bFwXzbfFRBjtpvaW3t4fFbSEwHwYDVR0j
BBgwFoAUWoWzgn4ZquC1K7BsIWCcVM4Wv4wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjlIOU5ETjFEbXk2akZZNFVjQ1dieW9ZYXdDd2NydUVCUFVyck1Vd1FF
a1kvMC81QTg1QjM4MjdFMTlBQUUwQjUyQkIwNkMyMTYwOUM1NENFMTZCRjhDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVBODVCMzgyN0UxOUFBRTBC
NTJCQjA2QzIxNjA5QzU0Q0UxNkJGOEMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I5SDlORE4xRG15NmpGWTRVY0NXYnlvWWF3Q3djcnVFQlBVcnJNVXdRRWtZLzAv
MzIzODMwMzQzYTMzNjI2MzM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM2
MzEzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ7yDANBgkqhkiG9w0BAQsFAAOCAQEAreNBn/OC
5A+H2K24+NuyFWdOXS1VmhXAcU1YtKCuel3fmCMhiJDSUt/JbVFbPR7XfCrDTUbN
q+2BEUHoKqpNlf8DbY8NJeAPtgm9Tyxyi9YjaxQfcu8okMqhRHgjxHL1R+ujzvy2
bKy5+5rb90c5K4l6ZrVFpi1+seNH8K5K3CUJa5jLpM45yt443lMLJv7WeKmfvHOL
qvy05WbkhN2P6N/zh3hCwPAIXCsKZRL/mG5/i4HEsLJ2E2gyZhIoHsGmZCEqrIiK
KpAz8HDviUDN3nSwBRgj/ree3ns29sNBdK8NmzPOYgNBa3NOqxMSW4BNZppGMZTD
YnFvexy7iJie/w==
-----END CERTIFICATE-----
Generated at Fri Sep 27 21:11:05 2024 by rpki-client on console-ams.rpki-client.org