Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/323830343a343761383a3a2f33322d313238203d3e20323637303639.roa
File:                     323830343a343761383a3a2f33322d313238203d3e20323637303639.roa (raw, json)
Hash identifier:          7jDkrLp4ayTzOL5LqdZDvV5/Cuvygbg0upRrXyrXxkE=
Subject key identifier:   01:CC:9A:99:B8:83:94:86:2F:A0:48:93:A5:01:FE:2F:1C:99:8E:DE
Certificate issuer:       /CN=21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78
Certificate serial:       59B9838A05980E7CA3F6CD8EC29A040556273F8A
Authority key identifier: 21:F9:CE:F6:E0:C3:03:7B:53:F9:4A:33:CE:0F:31:0F:9F:9A:1D:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/323830343a343761383a3a2f33322d313238203d3e20323637303639.roa
Signing time:             Fri 30 Aug 2024 14:05:19 +0000
ROA not before:           Fri 30 Aug 2024 14:00:19 +0000
ROA not after:            Fri 29 Aug 2025 14:05:19 +0000
asID:                     267069
IP address blocks:        2804:47a8::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.crl
                          rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:42:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:b9:83:8a:05:98:0e:7c:a3:f6:cd:8e:c2:9a:04:05:56:27:3f:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78
        Validity
            Not Before: Aug 30 14:00:19 2024 GMT
            Not After : Aug 29 14:05:19 2025 GMT
        Subject: CN=01CC9A99B88394862FA04893A501FE2F1C998EDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:73:fd:eb:52:45:85:79:6a:10:34:c4:67:ba:
                    b6:69:ca:52:6c:89:5c:bf:b2:27:63:b0:86:6f:f3:
                    06:da:84:8a:10:c2:b5:39:d2:f3:d9:ef:d8:83:21:
                    57:74:ba:c6:b6:cc:04:82:2d:07:0d:00:07:bc:c2:
                    bb:fe:de:a2:ee:fa:4a:16:36:3a:9c:82:33:5c:df:
                    73:ee:b5:45:bb:dc:cd:2a:da:f1:73:c4:cf:bc:98:
                    36:20:fd:54:e4:0d:79:dd:ac:50:5c:2b:a4:11:48:
                    f0:6f:35:f3:74:33:1a:d8:39:0f:1d:d4:33:31:5c:
                    66:0c:88:12:46:4d:db:d1:e4:19:72:48:09:c8:87:
                    a4:55:63:44:63:c7:db:26:50:f2:a7:a0:e0:4d:b9:
                    3e:54:c2:fa:bf:6f:32:b0:ab:a6:88:25:97:a2:8d:
                    3c:bc:a1:9d:30:38:26:2f:8a:47:da:12:d3:09:6c:
                    9b:88:77:16:1d:5d:45:a2:6a:71:cb:d6:3a:b7:7f:
                    3d:4d:d2:a0:a8:5c:e0:07:e8:52:27:0f:26:8e:8f:
                    c6:6d:27:f2:35:f0:d6:8f:a5:e1:39:f2:81:ec:22:
                    c0:00:ce:10:b6:a6:f9:ef:57:dd:cc:94:b4:55:a2:
                    7e:6d:1b:11:7f:0c:b9:ca:f4:98:92:4a:bb:ea:95:
                    f7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:CC:9A:99:B8:83:94:86:2F:A0:48:93:A5:01:FE:2F:1C:99:8E:DE
            X509v3 Authority Key Identifier:
                keyid:21:F9:CE:F6:E0:C3:03:7B:53:F9:4A:33:CE:0F:31:0F:9F:9A:1D:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/323830343a343761383a3a2f33322d313238203d3e20323637303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:47a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:eb:70:f3:8a:7f:c6:78:7d:ec:ae:53:80:78:e5:05:8c:a4:
         7f:48:03:b0:89:ea:6c:de:df:0e:24:41:9a:1b:ec:18:d0:6e:
         b9:24:8e:9a:0a:23:29:c7:9a:6a:22:17:69:4a:49:ba:4c:33:
         2d:95:79:68:dd:f7:5f:80:4a:7f:9e:d4:29:54:d6:19:b8:e0:
         ea:87:b6:80:d0:0e:3b:63:23:b8:30:b0:8c:90:d4:c5:d5:18:
         c6:c1:36:e1:87:27:1c:bf:08:bc:6c:ca:74:e3:6a:f4:6e:11:
         bc:18:08:ea:f0:f2:ab:32:f0:4d:a0:a9:36:cc:66:e2:d2:be:
         03:d7:de:c0:c6:ee:6b:1c:f3:d3:5c:a1:f1:b3:83:65:75:df:
         84:95:fc:17:52:eb:66:7e:d6:fd:6b:2e:02:65:c2:b5:7e:03:
         6a:e7:b3:db:ad:ab:91:81:93:b3:e8:39:55:41:89:41:d8:78:
         a8:d0:28:50:a5:05:16:c6:6e:86:d5:49:6a:e4:e4:4e:01:ab:
         50:83:a3:36:59:ae:78:82:60:55:ab:32:23:9a:be:eb:a0:97:
         87:ce:57:b9:41:f8:ba:0e:43:b3:f1:00:57:6c:40:6b:14:0d:
         4b:17:b6:da:40:cd:be:5e:86:da:98:31:a2:c8:f2:07:6b:0e:
         29:4e:de:fd
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUWbmDigWYDnyj9s2OwpoEBVYnP4owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFGOUNFRjZFMEMzMDM3QjUzRjk0QTMzQ0UwRjMxMEY5
RjlBMUQ3ODAeFw0yNDA4MzAxNDAwMTlaFw0yNTA4MjkxNDA1MTlaMDMxMTAvBgNV
BAMTKDAxQ0M5QTk5Qjg4Mzk0ODYyRkEwNDg5M0E1MDFGRTJGMUM5OThFREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIc/3rUkWFeWoQNMRnurZpylJs
iVy/sidjsIZv8wbahIoQwrU50vPZ79iDIVd0usa2zASCLQcNAAe8wrv+3qLu+koW
NjqcgjNc33PutUW73M0q2vFzxM+8mDYg/VTkDXndrFBcK6QRSPBvNfN0MxrYOQ8d
1DMxXGYMiBJGTdvR5BlySAnIh6RVY0Rjx9smUPKnoOBNuT5Uwvq/bzKwq6aIJZei
jTy8oZ0wOCYvikfaEtMJbJuIdxYdXUWianHL1jq3fz1N0qCoXOAH6FInDyaOj8Zt
J/I18NaPpeE58oHsIsAAzhC2pvnvV93MlLRVon5tGxF/DLnK9JiSSrvqlfe7AgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUAcyambiDlIYvoEiTpQH+LxyZjt4wHwYDVR0j
BBgwFoAUIfnO9uDDA3tT+Uozzg8xD5+aHXgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0NXS2JHenJhcEJZeG5YV3dmNXg0cXdnWWg3ZXpHR0ZMczd0dTlVUFBw
WWUvMC8yMUY5Q0VGNkUwQzMwMzdCNTNGOTRBMzNDRTBGMzEwRjlGOUExRDc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxRjlDRUY2RTBDMzAzN0I1
M0Y5NEEzM0NFMEYzMTBGOUY5QTFENzguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NDV0tiR3pyYXBCWXhuWFd3ZjV4NHF3Z1loN2V6R0dGTHM3dHU5VVBQcFllLzAv
MzIzODMwMzQzYTM0Mzc2MTM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzczMDM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBEeoMA0GCSqGSIb3DQEBCwUAA4IBAQB963Dz
in/GeH3srlOAeOUFjKR/SAOwieps3t8OJEGaG+wY0G65JI6aCiMpx5pqIhdpSkm6
TDMtlXlo3fdfgEp/ntQpVNYZuODqh7aA0A47YyO4MLCMkNTF1RjGwTbhhyccvwi8
bMp042r0bhG8GAjq8PKrMvBNoKk2zGbi0r4D197Axu5rHPPTXKHxs4Nldd+ElfwX
Uutmftb9ay4CZcK1fgNq57PbrauRgZOz6DlVQYlB2Hio0ChQpQUWxm6G1Ulq5ORO
AatQg6M2Wa54gmBVqzIjmr7roJeHzle5Qfi6DkOz8QBXbEBrFA1LF7baQM2+Xoba
mDGiyPIHaw4pTt79
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:41 2024 by rpki-client on console-ams.rpki-client.org