Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/323830343a323566303a3a2f33332d3333203d3e20323634333131.roa
File:                     323830343a323566303a3a2f33332d3333203d3e20323634333131.roa (raw, json)
Hash identifier:          Cx0dkQKkH6iPomEJ3HS514SwROrMuMRe8vj0iZ3E0i4=
Subject key identifier:   DA:6A:00:AF:15:C9:17:D2:0E:7B:64:5D:F1:4F:2B:47:6C:6F:CA:4D
Certificate issuer:       /CN=B5E0BE3C4F73F852BFF3535537037CAE482A4EFA
Certificate serial:       5FE1199EA0AEAF69D31E09FE55FE40DDC5E7D122
Authority key identifier: B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/323830343a323566303a3a2f33332d3333203d3e20323634333131.roa
Signing time:             Wed 03 Apr 2024 18:30:32 +0000
ROA not before:           Wed 03 Apr 2024 18:25:32 +0000
ROA not after:            Wed 02 Apr 2025 18:30:32 +0000
asID:                     264311
IP address blocks:        2804:25f0::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.crl
                          rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:e1:19:9e:a0:ae:af:69:d3:1e:09:fe:55:fe:40:dd:c5:e7:d1:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5E0BE3C4F73F852BFF3535537037CAE482A4EFA
        Validity
            Not Before: Apr  3 18:25:32 2024 GMT
            Not After : Apr  2 18:30:32 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:4f:d2:36:71:9d:f1:f2:bc:de:61:52:8f:88:
                    58:13:1e:2d:ab:26:72:19:a3:94:97:a3:15:bc:dd:
                    be:25:71:61:40:be:e4:5b:e5:26:18:5e:d3:3e:32:
                    9f:99:15:ca:b4:e4:5b:f6:85:7d:bd:40:30:09:c9:
                    b9:a1:c1:50:b9:a8:c7:3c:42:97:e7:e1:9b:89:29:
                    98:78:f7:d1:39:09:8f:65:6e:72:e3:54:c2:c2:a3:
                    22:09:47:2c:9d:08:f8:a3:a4:7a:2c:d6:c9:88:cc:
                    42:69:b2:41:72:50:9a:b3:c8:d3:e8:59:9a:16:4b:
                    d8:ba:60:69:a7:b4:6c:b6:80:6e:3c:07:2f:b9:54:
                    03:53:9c:14:e5:eb:1f:0b:05:93:26:b6:4b:d4:1c:
                    1d:ed:11:b0:bb:53:c4:43:a0:4d:1e:2f:87:53:b2:
                    7e:37:78:fb:b2:cd:58:2d:ca:e1:5f:ec:c6:a5:63:
                    8a:05:b0:f1:94:fa:9b:80:e2:75:01:37:1a:bb:50:
                    fa:56:b0:59:5d:4e:23:3f:4f:a3:58:5c:11:15:b6:
                    fd:7a:33:77:a1:39:20:e3:e4:88:b0:97:74:a4:61:
                    a5:95:a6:c9:d3:e7:8b:45:6b:40:f2:b6:6d:3f:dc:
                    33:31:d7:ec:03:39:66:f6:77:c2:e4:48:e4:18:ce:
                    45:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:6A:00:AF:15:C9:17:D2:0E:7B:64:5D:F1:4F:2B:47:6C:6F:CA:4D
            X509v3 Authority Key Identifier:
                keyid:B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/323830343a323566303a3a2f33332d3333203d3e20323634333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25f0::/33

    Signature Algorithm: sha256WithRSAEncryption
         89:05:30:57:0a:06:49:88:03:ba:ca:24:30:14:be:c0:bb:3d:
         6e:46:8c:4c:8c:90:ef:7c:19:1c:d7:fe:f7:01:81:aa:b7:45:
         b0:6d:ea:14:7b:f0:e8:51:78:9b:89:4e:a3:a5:cc:31:83:b5:
         4c:80:0b:b5:da:dd:3f:1f:c1:37:34:ab:ac:ef:5a:ff:e0:ed:
         d8:0d:aa:c5:e6:d1:e1:4b:c2:1d:7b:04:77:8b:01:54:73:5f:
         70:11:37:bc:1f:ec:b6:b7:42:0a:6e:f0:21:99:a8:f3:71:ce:
         6c:dd:69:6e:70:ae:a1:3b:e5:06:4a:8c:c3:49:83:0c:00:81:
         65:50:bf:37:f3:06:56:eb:67:06:6a:3a:36:82:6e:cd:62:59:
         6c:50:6b:ef:d2:63:a0:57:6e:04:a9:2d:83:0d:97:33:70:70:
         fd:9c:95:c8:65:d6:e3:72:85:c2:a6:cb:fd:20:0d:f0:03:f6:
         b0:bb:da:85:41:52:1a:2f:dc:fb:27:dc:df:87:b7:6b:4c:61:
         a2:05:f9:72:2c:64:7b:fb:07:92:01:75:a3:4a:0c:be:df:7e:
         b1:70:f8:fe:bb:03:58:eb:81:ed:39:c7:c3:2f:29:5e:50:50:
         bf:00:77:5c:a1:ad:bf:35:1c:ad:9b:d1:eb:70:f1:3e:29:55:
         88:dd:26:1f
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUX+EZnqCur2nTHgn+Vf5A3cXn0SIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVFMEJFM0M0RjczRjg1MkJGRjM1MzU1MzcwMzdDQUU0
ODJBNEVGQTAeFw0yNDA0MDMxODI1MzJaFw0yNTA0MDIxODMwMzJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREM0RkQyMzY3MTlERjFGMkJD
REU2MTUyOEY4ODU4MTMxRTJEQUIyNjcyMTlBMzk0OTdBMzE1QkNEREJFMjU3MTYx
NDBCRUU0NUJFNTI2MTg1RUQzM0UzMjlGOTkxNUNBQjRFNDVCRjY4NTdEQkQ0MDMw
MDlDOUI5QTFDMTUwQjlBOEM3M0M0Mjk3RTdFMTlCODkyOTk4NzhGN0QxMzkwOThG
NjU2RTcyRTM1NEMyQzJBMzIyMDk0NzJDOUQwOEY4QTNBNDdBMkNENkM5ODhDQzQy
NjlCMjQxNzI1MDlBQjNDOEQzRTg1OTlBMTY0QkQ4QkE2MDY5QTdCNDZDQjY4MDZF
M0MwNzJGQjk1NDAzNTM5QzE0RTVFQjFGMEIwNTkzMjZCNjRCRDQxQzFERUQxMUIw
QkI1M0M0NDNBMDREMUUyRjg3NTNCMjdFMzc3OEZCQjJDRDU4MkRDQUUxNUZFQ0M2
QTU2MzhBMDVCMEYxOTRGQTlCODBFMjc1MDEzNzFBQkI1MEZBNTZCMDU5NUQ0RTIz
M0Y0RkEzNTg1QzExMTVCNkZEN0EzMzc3QTEzOTIwRTNFNDg4QjA5Nzc0QTQ2MUE1
OTVBNkM5RDNFNzhCNDU2QjQwRjJCNjZEM0ZEQzMzMzFEN0VDMDMzOTY2RjY3N0My
RTQ0OEU0MThDRTQ1NTMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA3E/SNnGd8fK83mFSj4hYEx4tqyZyGaOUl6MVvN2+JXFhQL7kW+Um
GF7TPjKfmRXKtORb9oV9vUAwCcm5ocFQuajHPEKX5+GbiSmYePfROQmPZW5y41TC
wqMiCUcsnQj4o6R6LNbJiMxCabJBclCas8jT6FmaFkvYumBpp7RstoBuPAcvuVQD
U5wU5esfCwWTJrZL1Bwd7RGwu1PEQ6BNHi+HU7J+N3j7ss1YLcrhX+zGpWOKBbDx
lPqbgOJ1ATcau1D6VrBZXU4jP0+jWFwRFbb9ejN3oTkg4+SIsJd0pGGllabJ0+eL
RWtA8rZtP9wzMdfsAzlm9nfC5EjkGM5FUwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FNpqAK8VyRfSDntkXfFPK0dsb8pNMB8GA1UdIwQYMBaAFLXgvjxPc/hSv/NTVTcD
fK5IKk76MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NDbXdzVEgzZ3F0UUdI
d2VWRGtWVjV6RXdRS1JkUHZVQWNEYWpBUXQ5V1JmLzEvQjVFMEJFM0M0RjczRjg1
MkJGRjM1MzU1MzcwMzdDQUU0ODJBNEVGQS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9CNUUwQkUzQzRGNzNGODUyQkZGMzUzNTUzNzAzN0NBRTQ4MkE0
RUZBLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9DQ213c1RIM2dxdFFHSHdlVkRr
VlY1ekV3UUtSZFB2VUFjRGFqQVF0OVdSZi8xLzMyMzgzMDM0M2EzMjM1NjYzMDNh
M2EyZjMzMzMyZDMzMzMyMDNkM2UyMDMyMzYzNDMzMzEzMS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygE
JfAAMA0GCSqGSIb3DQEBCwUAA4IBAQCJBTBXCgZJiAO6yiQwFL7Auz1uRoxMjJDv
fBkc1/73AYGqt0WwbeoUe/DoUXibiU6jpcwxg7VMgAu12t0/H8E3NKus71r/4O3Y
DarF5tHhS8IdewR3iwFUc19wETe8H+y2t0IKbvAhmajzcc5s3WlucK6hO+UGSozD
SYMMAIFlUL838wZW62cGajo2gm7NYllsUGvv0mOgV24EqS2DDZczcHD9nJXIZdbj
coXCpsv9IA3wA/awu9qFQVIaL9z7J9zfh7drTGGiBflyLGR7+weSAXWjSgy+336x
cPj+uwNY64HtOcfDLyleUFC/AHdcoa2/NRytm9HrcPE+KVWI3SYf
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:02 2024 by rpki-client on console-ams.rpki-client.org