Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CMJwaQCqwMQspc64Z6ndtiWMw6ieQ8pxSx86tQVXqRsU/0/323830343a363662343a3a2f33322d313238203d3e20323639353737.roa
File:                     323830343a363662343a3a2f33322d313238203d3e20323639353737.roa (raw, json)
Hash identifier:          UuDfIg2jrifNsQzGYh2eaywMbnTdq8rP1aS06gJ2myM=
Subject key identifier:   A8:73:CD:67:5F:E1:16:3B:29:66:7F:2F:73:96:95:57:90:B4:DF:9B
Certificate issuer:       /CN=0018B0B693218ABDCE0E6726EFEED92C24DF3CD5
Certificate serial:       1EB013B5FF1C1B5553C468D2DE6C8ECF62F9F572
Authority key identifier: 00:18:B0:B6:93:21:8A:BD:CE:0E:67:26:EF:EE:D9:2C:24:DF:3C:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0018B0B693218ABDCE0E6726EFEED92C24DF3CD5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CMJwaQCqwMQspc64Z6ndtiWMw6ieQ8pxSx86tQVXqRsU/0/323830343a363662343a3a2f33322d313238203d3e20323639353737.roa
Signing time:             Thu 19 Sep 2024 17:38:56 +0000
ROA not before:           Thu 19 Sep 2024 17:33:56 +0000
ROA not after:            Thu 18 Sep 2025 17:38:56 +0000
asID:                     269577
IP address blocks:        2804:66b4::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CMJwaQCqwMQspc64Z6ndtiWMw6ieQ8pxSx86tQVXqRsU/0/0018B0B693218ABDCE0E6726EFEED92C24DF3CD5.crl
                          rsync://rpki-repo.registro.br/repo/CMJwaQCqwMQspc64Z6ndtiWMw6ieQ8pxSx86tQVXqRsU/0/0018B0B693218ABDCE0E6726EFEED92C24DF3CD5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0018B0B693218ABDCE0E6726EFEED92C24DF3CD5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 11:24:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:b0:13:b5:ff:1c:1b:55:53:c4:68:d2:de:6c:8e:cf:62:f9:f5:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0018B0B693218ABDCE0E6726EFEED92C24DF3CD5
        Validity
            Not Before: Sep 19 17:33:56 2024 GMT
            Not After : Sep 18 17:38:56 2025 GMT
        Subject: CN=A873CD675FE1163B29667F2F7396955790B4DF9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3a:51:c3:89:52:67:20:0b:6f:11:5b:68:e2:
                    05:c3:8d:1f:0e:8b:47:f8:86:23:13:2d:42:cc:59:
                    fb:33:51:3e:91:26:6f:5d:a3:5a:5b:88:b1:cd:61:
                    08:64:1a:7c:05:db:fa:19:65:c6:92:68:be:01:f9:
                    fe:70:92:d2:b7:4b:a2:17:84:88:f0:62:6d:00:f4:
                    4b:01:36:04:ac:f1:1f:75:64:f6:70:1a:3f:68:d2:
                    08:83:4d:9c:6c:c8:eb:ec:00:cd:60:d0:6e:b8:3a:
                    34:00:db:21:b9:69:90:c3:b7:43:88:6d:d5:6b:e9:
                    05:b4:25:1a:34:94:3c:13:0b:12:08:09:f4:37:a5:
                    f4:56:90:9e:7b:09:ca:37:c9:7a:d8:e9:ac:84:fe:
                    09:db:fe:9a:78:9d:b3:a8:f1:93:2b:93:1e:b5:eb:
                    14:84:99:4d:b4:f2:26:84:19:a4:07:fd:d2:0d:f0:
                    cb:f6:99:a2:a1:1f:44:f5:3b:0f:db:33:f2:6f:5c:
                    26:ec:fa:35:ae:c8:f5:e6:68:9c:2e:d2:2b:27:3d:
                    55:63:43:35:4a:4a:53:a8:e0:34:e6:c8:09:bc:63:
                    14:a4:0b:32:47:1c:87:72:05:9f:c4:1a:c5:4a:d0:
                    ab:88:e8:a7:f7:fc:41:fe:18:db:88:0a:f2:75:f7:
                    b6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:73:CD:67:5F:E1:16:3B:29:66:7F:2F:73:96:95:57:90:B4:DF:9B
            X509v3 Authority Key Identifier:
                keyid:00:18:B0:B6:93:21:8A:BD:CE:0E:67:26:EF:EE:D9:2C:24:DF:3C:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CMJwaQCqwMQspc64Z6ndtiWMw6ieQ8pxSx86tQVXqRsU/0/0018B0B693218ABDCE0E6726EFEED92C24DF3CD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0018B0B693218ABDCE0E6726EFEED92C24DF3CD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CMJwaQCqwMQspc64Z6ndtiWMw6ieQ8pxSx86tQVXqRsU/0/323830343a363662343a3a2f33322d313238203d3e20323639353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:66b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:dc:b4:f1:8a:eb:4c:ac:99:25:44:63:79:e5:f2:51:03:41:
         c8:05:23:19:5b:e7:cb:16:ae:28:dc:fc:73:43:c4:4c:37:71:
         7b:e0:29:a1:9e:43:82:ec:e1:ab:40:99:d7:e2:da:10:f3:e7:
         37:30:90:7c:4f:e2:8a:06:e0:20:23:6f:67:34:d3:ff:cc:5b:
         a2:07:ce:9a:88:30:76:7d:41:f9:f5:b0:8d:1e:f4:91:c1:e6:
         dc:ef:74:89:65:a0:57:f2:57:a6:9a:4f:df:65:69:aa:45:f6:
         36:6c:65:28:fc:41:ed:6c:c0:e2:da:d5:bc:22:be:c1:5f:b6:
         fa:5a:e2:b0:37:c9:f6:3c:a2:6d:35:9c:8c:78:df:03:05:ef:
         51:df:4e:ba:16:84:00:c8:06:b7:87:59:92:d0:a0:f4:12:8d:
         60:26:39:0a:65:49:51:d7:38:24:70:be:89:4e:8f:01:d9:8c:
         a0:a8:b3:05:32:2f:39:b0:3b:c1:7c:61:58:c7:71:56:0a:d1:
         e1:3c:1c:af:a0:77:f5:8b:ce:51:f2:1a:9f:5f:e2:36:ec:34:
         9a:c0:74:42:b9:99:cc:7f:4f:76:1a:00:77:e0:d3:c8:b7:5f:
         39:94:e1:bd:5d:81:70:ed:54:38:26:83:22:b6:27:d1:dc:64:
         4a:2c:19:5f
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUHrATtf8cG1VTxGjS3myOz2L59XIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDAxOEIwQjY5MzIxOEFCRENFMEU2NzI2RUZFRUQ5MkMy
NERGM0NENTAeFw0yNDA5MTkxNzMzNTZaFw0yNTA5MTgxNzM4NTZaMDMxMTAvBgNV
BAMTKEE4NzNDRDY3NUZFMTE2M0IyOTY2N0YyRjczOTY5NTU3OTBCNERGOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLOlHDiVJnIAtvEVto4gXDjR8O
i0f4hiMTLULMWfszUT6RJm9do1pbiLHNYQhkGnwF2/oZZcaSaL4B+f5wktK3S6IX
hIjwYm0A9EsBNgSs8R91ZPZwGj9o0giDTZxsyOvsAM1g0G64OjQA2yG5aZDDt0OI
bdVr6QW0JRo0lDwTCxIICfQ3pfRWkJ57Cco3yXrY6ayE/gnb/pp4nbOo8ZMrkx61
6xSEmU208iaEGaQH/dIN8Mv2maKhH0T1Ow/bM/JvXCbs+jWuyPXmaJwu0isnPVVj
QzVKSlOo4DTmyAm8YxSkCzJHHIdyBZ/EGsVK0KuI6Kf3/EH+GNuICvJ197aVAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUqHPNZ1/hFjspZn8vc5aVV5C035swHwYDVR0j
BBgwFoAUABiwtpMhir3ODmcm7+7ZLCTfPNUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ01Kd2FRQ3F3TVFzcGM2NFo2bmR0aVdNdzZpZVE4cHhTeDg2dFFWWHFS
c1UvMC8wMDE4QjBCNjkzMjE4QUJEQ0UwRTY3MjZFRkVFRDkyQzI0REYzQ0Q1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAwMThCMEI2OTMyMThBQkRD
RTBFNjcyNkVGRUVEOTJDMjRERjNDRDUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NNSndhUUNxd01Rc3BjNjRaNm5kdGlXTXc2aWVROHB4U3g4NnRRVlhxUnNVLzAv
MzIzODMwMzQzYTM2MzY2MjM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzkzNTM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBGa0MA0GCSqGSIb3DQEBCwUAA4IBAQCr3LTx
iutMrJklRGN55fJRA0HIBSMZW+fLFq4o3PxzQ8RMN3F74CmhnkOC7OGrQJnX4toQ
8+c3MJB8T+KKBuAgI29nNNP/zFuiB86aiDB2fUH59bCNHvSRwebc73SJZaBX8lem
mk/fZWmqRfY2bGUo/EHtbMDi2tW8Ir7BX7b6WuKwN8n2PKJtNZyMeN8DBe9R3066
FoQAyAa3h1mS0KD0Eo1gJjkKZUlR1zgkcL6JTo8B2YygqLMFMi85sDvBfGFYx3FW
CtHhPByvoHf1i85R8hqfX+I27DSawHRCuZnMf092GgB34NPIt185lOG9XYFw7VQ4
JoMitifR3GRKLBlf
-----END CERTIFICATE-----
Generated at Fri Sep 27 10:45:46 2024 by rpki-client on console-fra.rpki-client.org