Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/1/323830343a376433633a343030303a3a2f33362d3336203d3e20323731353438.roa
File:                     323830343a376433633a343030303a3a2f33362d3336203d3e20323731353438.roa (raw, json)
Hash identifier:          Ntq0BrikyekYcCIOVzzGkFjfwLC9uDlPFJwgQCAaDpM=
Subject key identifier:   48:C1:F0:A3:F7:22:9D:18:E8:84:3F:F6:BE:F1:D6:50:A0:76:5B:86
Certificate issuer:       /CN=090868DBC98ADC1F6A723C3495F8BFBDF361207C
Certificate serial:       3720AA93052C37F1C52E1A4996DC4A4F42A73E01
Authority key identifier: 09:08:68:DB:C9:8A:DC:1F:6A:72:3C:34:95:F8:BF:BD:F3:61:20:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/090868DBC98ADC1F6A723C3495F8BFBDF361207C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/1/323830343a376433633a343030303a3a2f33362d3336203d3e20323731353438.roa
Signing time:             Wed 03 Apr 2024 22:44:39 +0000
ROA not before:           Wed 03 Apr 2024 22:39:39 +0000
ROA not after:            Wed 02 Apr 2025 22:44:39 +0000
asID:                     271548
IP address blocks:        2804:7d3c:4000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/1/090868DBC98ADC1F6A723C3495F8BFBDF361207C.crl
                          rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/1/090868DBC98ADC1F6A723C3495F8BFBDF361207C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/090868DBC98ADC1F6A723C3495F8BFBDF361207C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 10:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:20:aa:93:05:2c:37:f1:c5:2e:1a:49:96:dc:4a:4f:42:a7:3e:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=090868DBC98ADC1F6A723C3495F8BFBDF361207C
        Validity
            Not Before: Apr  3 22:39:39 2024 GMT
            Not After : Apr  2 22:44:39 2025 GMT
        Subject: CN=48C1F0A3F7229D18E8843FF6BEF1D650A0765B86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:9c:4f:1e:53:82:f4:c2:98:2d:a5:46:e5:45:
                    69:aa:45:b7:b2:aa:93:2c:16:ca:41:ee:99:47:d6:
                    98:a2:df:7c:00:92:7c:4f:d6:47:13:ff:4e:51:d1:
                    54:d0:63:db:e3:cd:73:14:f5:7c:61:5b:03:6b:35:
                    9a:dc:05:85:bf:d8:6e:99:2f:78:7b:84:e5:82:7f:
                    4d:d2:f2:13:7b:dc:49:72:29:00:3d:30:4c:1d:4e:
                    c4:70:45:71:8b:e5:64:ac:c6:a6:fe:4e:36:2d:74:
                    d4:c9:c7:a0:7d:54:50:6b:b3:02:38:80:7c:4c:04:
                    68:8c:1f:3e:88:a9:58:6a:0c:1a:8e:f3:1b:a8:03:
                    7a:8b:df:9b:f0:46:2f:59:47:ef:35:ac:af:43:79:
                    d5:4e:93:cd:14:66:b9:f8:22:7f:a5:47:9b:01:28:
                    7d:bf:b2:ee:57:bb:53:2f:34:94:a0:38:7c:f9:20:
                    7d:f4:2c:60:7c:8b:80:42:49:00:9e:2f:94:5a:32:
                    f7:5f:c7:b2:69:70:d6:70:bd:2c:4e:d9:1c:79:7c:
                    65:9f:80:63:74:98:19:22:30:2c:f5:79:d6:d4:11:
                    43:95:ee:e6:3b:b2:f9:13:3a:b9:ee:3e:b7:d1:40:
                    c0:dd:cc:89:34:44:4a:a1:91:79:d1:8f:67:86:1b:
                    53:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C1:F0:A3:F7:22:9D:18:E8:84:3F:F6:BE:F1:D6:50:A0:76:5B:86
            X509v3 Authority Key Identifier:
                keyid:09:08:68:DB:C9:8A:DC:1F:6A:72:3C:34:95:F8:BF:BD:F3:61:20:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/1/090868DBC98ADC1F6A723C3495F8BFBDF361207C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/090868DBC98ADC1F6A723C3495F8BFBDF361207C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/1/323830343a376433633a343030303a3a2f33362d3336203d3e20323731353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d3c:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         4c:f3:7e:24:0e:87:01:ae:a5:89:41:7c:9b:9e:2a:18:54:d3:
         e7:b5:21:83:78:4f:3d:fa:92:d2:5d:17:01:9a:c9:4e:a2:8e:
         1b:e9:54:55:9c:6c:9b:6a:f1:7a:e0:bc:76:55:eb:22:b2:d5:
         16:cd:8e:c0:c7:83:d9:1c:07:81:f4:3a:45:c5:a7:a1:0a:57:
         f1:e7:00:7c:cf:82:2a:80:04:60:8d:9e:7c:e1:d0:f6:97:ca:
         34:95:92:09:dd:31:6a:4d:d4:a8:86:d0:b8:23:9c:f3:0d:8e:
         63:66:58:ad:d8:17:b3:f2:91:f7:72:71:c3:14:aa:16:53:d3:
         58:7b:cd:fc:87:8f:95:ba:d1:6e:49:8d:8d:1f:f9:a4:76:d9:
         d0:2e:a9:70:12:2a:fa:19:f2:d3:88:94:9d:98:88:93:41:1f:
         bd:ea:07:41:43:0d:de:c9:a1:58:9d:4b:80:5a:f0:05:28:82:
         37:33:34:6f:3d:fc:4c:c7:e3:1a:1d:34:ce:0d:98:c8:4d:65:
         2d:c9:b5:ed:13:61:9e:80:fe:19:64:98:ff:8f:3b:a0:93:c8:
         73:d2:26:8b:2e:c9:aa:6d:25:e5:1a:19:3e:d5:1b:3f:4d:9c:
         76:8c:6d:5e:4c:ab:9c:84:7d:13:c4:81:e4:ee:2b:61:12:ef:
         89:4d:b6:f5
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUNyCqkwUsN/HFLhpJltxKT0KnPgEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDkwODY4REJDOThBREMxRjZBNzIzQzM0OTVGOEJGQkRG
MzYxMjA3QzAeFw0yNDA0MDMyMjM5MzlaFw0yNTA0MDIyMjQ0MzlaMDMxMTAvBgNV
BAMTKDQ4QzFGMEEzRjcyMjlEMThFODg0M0ZGNkJFRjFENjUwQTA3NjVCODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnnE8eU4L0wpgtpUblRWmqRbey
qpMsFspB7plH1pii33wAknxP1kcT/05R0VTQY9vjzXMU9XxhWwNrNZrcBYW/2G6Z
L3h7hOWCf03S8hN73ElyKQA9MEwdTsRwRXGL5WSsxqb+TjYtdNTJx6B9VFBrswI4
gHxMBGiMHz6IqVhqDBqO8xuoA3qL35vwRi9ZR+81rK9DedVOk80UZrn4In+lR5sB
KH2/su5Xu1MvNJSgOHz5IH30LGB8i4BCSQCeL5RaMvdfx7JpcNZwvSxO2Rx5fGWf
gGN0mBkiMCz1edbUEUOV7uY7svkTOrnuPrfRQMDdzIk0REqhkXnRj2eGG1MFAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUSMHwo/cinRjohD/2vvHWUKB2W4YwHwYDVR0j
BBgwFoAUCQho28mK3B9qcjw0lfi/vfNhIHwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzFRNXd5aWJpZ1lyOTkzRlhRTHFaNkxDR0tWdUM5RFcyUlVuUVhKdEhk
aUovMS8wOTA4NjhEQkM5OEFEQzFGNkE3MjNDMzQ5NUY4QkZCREYzNjEyMDdDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA5MDg2OERCQzk4QURDMUY2
QTcyM0MzNDk1RjhCRkJERjM2MTIwN0MuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0MxUTV3eWliaWdZcjk5M0ZYUUxxWjZMQ0dLVnVDOURXMlJVblFYSnRIZGlKLzEv
MzIzODMwMzQzYTM3NjQzMzYzM2EzNDMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzczMTM1MzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEfTxAMA0GCSqGSIb3DQEBCwUA
A4IBAQBM834kDocBrqWJQXybnioYVNPntSGDeE89+pLSXRcBmslOoo4b6VRVnGyb
avF64Lx2VesistUWzY7Ax4PZHAeB9DpFxaehClfx5wB8z4IqgARgjZ584dD2l8o0
lZIJ3TFqTdSohtC4I5zzDY5jZlit2Bez8pH3cnHDFKoWU9NYe838h4+VutFuSY2N
H/mkdtnQLqlwEir6GfLTiJSdmIiTQR+96gdBQw3eyaFYnUuAWvAFKII3MzRvPfxM
x+MaHTTODZjITWUtybXtE2GegP4ZZJj/jzugk8hz0iaLLsmqbSXlGhk+1Rs/TZx2
jG1eTKuchH0TxIHk7ithEu+JTbb1
-----END CERTIFICATE-----
Generated at Sat Sep 28 09:28:25 2024 by rpki-client on console-fra.rpki-client.org