Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BbQFJsdihXPJ7toycY6vTcHUeRyTQrKxR6WqpdKgvw6H/1/323830343a323131343a3a2f33322d313238203d3e20323634353331.roa
File:                     323830343a323131343a3a2f33322d313238203d3e20323634353331.roa (raw, json)
Hash identifier:          5BD0eiSk+rMuOD0T8jKZ90FiMO8iUu0AXGA3nnY18Tg=
Subject key identifier:   71:D3:F6:56:FB:98:F3:DF:0E:7B:06:A9:CC:FF:E0:C2:B4:BE:4E:CC
Certificate issuer:       /CN=678744E2F008A98B388D024DEEAB7AEEF09D3883
Certificate serial:       2885E8990149B684D6DCC5F4CF8746182774ED36
Authority key identifier: 67:87:44:E2:F0:08:A9:8B:38:8D:02:4D:EE:AB:7A:EE:F0:9D:38:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/678744E2F008A98B388D024DEEAB7AEEF09D3883.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BbQFJsdihXPJ7toycY6vTcHUeRyTQrKxR6WqpdKgvw6H/1/323830343a323131343a3a2f33322d313238203d3e20323634353331.roa
Signing time:             Thu 04 Apr 2024 02:12:27 +0000
ROA not before:           Thu 04 Apr 2024 02:07:27 +0000
ROA not after:            Thu 03 Apr 2025 02:12:27 +0000
asID:                     264531
IP address blocks:        2804:2114::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BbQFJsdihXPJ7toycY6vTcHUeRyTQrKxR6WqpdKgvw6H/1/678744E2F008A98B388D024DEEAB7AEEF09D3883.crl
                          rsync://rpki-repo.registro.br/repo/BbQFJsdihXPJ7toycY6vTcHUeRyTQrKxR6WqpdKgvw6H/1/678744E2F008A98B388D024DEEAB7AEEF09D3883.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/678744E2F008A98B388D024DEEAB7AEEF09D3883.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 09:23:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:85:e8:99:01:49:b6:84:d6:dc:c5:f4:cf:87:46:18:27:74:ed:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=678744E2F008A98B388D024DEEAB7AEEF09D3883
        Validity
            Not Before: Apr  4 02:07:27 2024 GMT
            Not After : Apr  3 02:12:27 2025 GMT
        Subject: CN=71D3F656FB98F3DF0E7B06A9CCFFE0C2B4BE4ECC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:87:a9:8c:4b:81:17:43:8a:23:a4:48:c7:ee:
                    4c:cd:4c:74:01:cd:3f:5a:c3:a2:46:af:3e:89:38:
                    7e:9d:b4:9d:eb:29:d2:f8:7f:bf:04:35:ae:e8:68:
                    81:03:2c:83:a1:ea:dc:1b:b5:ac:18:2c:43:f2:ef:
                    67:a8:d6:e3:f4:77:46:ab:57:46:cc:42:a8:38:e4:
                    2e:a5:9a:29:25:0b:68:67:7a:35:04:89:0c:1b:c6:
                    b8:4c:23:1c:aa:a4:75:9f:5c:e3:dd:7e:b8:52:4e:
                    30:c4:1b:29:35:ca:ee:30:4a:3e:46:28:b8:fe:20:
                    f7:10:b9:f2:9e:54:0f:db:55:1d:bb:7c:2b:6a:f8:
                    91:84:40:3c:6d:53:ba:9f:66:d1:aa:61:a8:cc:ff:
                    06:8e:39:6d:9c:af:30:ac:dc:f4:69:8d:a5:2b:69:
                    d9:90:b6:fe:f7:be:b6:9d:92:f5:ed:c6:a7:f4:bb:
                    53:85:17:72:e9:e8:f8:a1:af:2c:32:3e:72:aa:1e:
                    4a:62:2f:13:64:f5:5f:f9:2e:66:4b:92:5e:37:a4:
                    9e:6e:33:dc:af:d8:d6:e7:ac:16:c2:b0:50:00:d6:
                    31:b4:1a:0d:7b:bf:c9:ae:d5:ec:a1:a6:46:45:4e:
                    cb:37:5c:3a:7c:b9:05:1e:41:f2:75:3b:31:78:db:
                    72:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:D3:F6:56:FB:98:F3:DF:0E:7B:06:A9:CC:FF:E0:C2:B4:BE:4E:CC
            X509v3 Authority Key Identifier:
                keyid:67:87:44:E2:F0:08:A9:8B:38:8D:02:4D:EE:AB:7A:EE:F0:9D:38:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BbQFJsdihXPJ7toycY6vTcHUeRyTQrKxR6WqpdKgvw6H/1/678744E2F008A98B388D024DEEAB7AEEF09D3883.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/678744E2F008A98B388D024DEEAB7AEEF09D3883.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BbQFJsdihXPJ7toycY6vTcHUeRyTQrKxR6WqpdKgvw6H/1/323830343a323131343a3a2f33322d313238203d3e20323634353331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2114::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:54:77:48:41:eb:45:43:2a:64:c5:38:30:8d:aa:9d:d9:95:
         38:26:fa:b7:40:3c:b0:79:6c:79:9e:aa:f7:07:a1:a4:bf:ed:
         87:98:cc:25:b3:4f:01:c1:8b:ea:92:e2:6b:7a:b0:38:c0:c1:
         9f:9e:ba:24:e4:67:b9:63:f9:0b:31:79:b0:cd:a6:d8:09:ef:
         28:4c:56:62:32:ad:db:d7:c7:56:95:3e:9f:25:c1:3f:60:a3:
         9a:72:86:61:01:37:91:7e:da:46:3a:6a:f8:ee:c3:9a:52:1a:
         a0:70:75:68:db:d7:98:b2:69:6a:b3:39:e7:2e:14:56:51:d0:
         49:8f:f7:09:2b:69:d2:ab:15:2b:59:fd:76:38:d0:8a:63:ea:
         75:11:f1:e1:d1:79:19:b2:86:fa:67:a0:0a:e7:1b:1e:f1:c9:
         85:84:9d:97:db:3d:b5:1d:e0:ee:f8:90:ee:8d:4d:91:87:94:
         15:7e:b8:4c:2a:5e:57:b6:6c:70:a2:f4:a1:d2:69:9e:e9:1f:
         cd:93:94:a2:28:0c:ee:13:16:ef:7f:43:bf:1d:27:d4:26:f9:
         8f:3e:80:cd:83:18:1d:c1:14:eb:d6:0e:38:8b:75:f7:10:0b:
         1b:37:62:ea:e9:0d:64:76:92:04:dc:95:26:7b:8a:df:88:1c:
         79:38:71:2e
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUKIXomQFJtoTW3MX0z4dGGCd07TYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjc4NzQ0RTJGMDA4QTk4QjM4OEQwMjRERUVBQjdBRUVG
MDlEMzg4MzAeFw0yNDA0MDQwMjA3MjdaFw0yNTA0MDMwMjEyMjdaMDMxMTAvBgNV
BAMTKDcxRDNGNjU2RkI5OEYzREYwRTdCMDZBOUNDRkZFMEMyQjRCRTRFQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxh6mMS4EXQ4ojpEjH7kzNTHQB
zT9aw6JGrz6JOH6dtJ3rKdL4f78ENa7oaIEDLIOh6twbtawYLEPy72eo1uP0d0ar
V0bMQqg45C6lmiklC2hnejUEiQwbxrhMIxyqpHWfXOPdfrhSTjDEGyk1yu4wSj5G
KLj+IPcQufKeVA/bVR27fCtq+JGEQDxtU7qfZtGqYajM/waOOW2crzCs3PRpjaUr
admQtv73vradkvXtxqf0u1OFF3Lp6PihrywyPnKqHkpiLxNk9V/5LmZLkl43pJ5u
M9yv2NbnrBbCsFAA1jG0Gg17v8mu1eyhpkZFTss3XDp8uQUeQfJ1OzF423LpAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUcdP2VvuY898OewapzP/gwrS+TswwHwYDVR0j
BBgwFoAUZ4dE4vAIqYs4jQJN7qt67vCdOIMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmJRRkpzZGloWFBKN3RveWNZNnZUY0hVZVJ5VFFyS3hSNldxcGRLZ3Z3
NkgvMS82Nzg3NDRFMkYwMDhBOThCMzg4RDAyNERFRUFCN0FFRUYwOUQzODgzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY3ODc0NEUyRjAwOEE5OEIz
ODhEMDI0REVFQUI3QUVFRjA5RDM4ODMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JiUUZKc2RpaFhQSjd0b3ljWTZ2VGNIVWVSeVRRckt4UjZXcXBkS2d2dzZILzEv
MzIzODMwMzQzYTMyMzEzMTM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzQzNTMzMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBCEUMA0GCSqGSIb3DQEBCwUAA4IBAQCPVHdI
QetFQypkxTgwjaqd2ZU4Jvq3QDyweWx5nqr3B6Gkv+2HmMwls08BwYvqkuJrerA4
wMGfnrok5Ge5Y/kLMXmwzabYCe8oTFZiMq3b18dWlT6fJcE/YKOacoZhATeRftpG
Omr47sOaUhqgcHVo29eYsmlqsznnLhRWUdBJj/cJK2nSqxUrWf12ONCKY+p1EfHh
0XkZsob6Z6AK5xse8cmFhJ2X2z21HeDu+JDujU2Rh5QVfrhMKl5XtmxwovSh0mme
6R/Nk5SiKAzuExbvf0O/HSfUJvmPPoDNgxgdwRTr1g44i3X3EAsbN2Lq6Q1kdpIE
3JUme4rfiBx5OHEu
-----END CERTIFICATE-----
Generated at Fri Sep 27 09:15:46 2024 by rpki-client on console-fra.rpki-client.org