Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/323830343a3139633a3a2f33322d3438203d3e20323632373535.roa
File:                     323830343a3139633a3a2f33322d3438203d3e20323632373535.roa (raw, json)
Hash identifier:          B4uSAjQwCIEa2sUyY468WjX7dBGaov1mv6Qt/qG5y5c=
Subject key identifier:   F9:27:A3:3E:78:10:42:79:0D:10:F4:0B:0B:A7:58:0E:1E:A1:8C:C8
Certificate issuer:       /CN=E98018CD2C68060BD13517BC1BB31EAD6E73038A
Certificate serial:       2A5BD21F3C2C4BEB493991D2785C41BFFECD066A
Authority key identifier: E9:80:18:CD:2C:68:06:0B:D1:35:17:BC:1B:B3:1E:AD:6E:73:03:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/323830343a3139633a3a2f33322d3438203d3e20323632373535.roa
Signing time:             Wed 03 Apr 2024 18:30:19 +0000
ROA not before:           Wed 03 Apr 2024 18:25:19 +0000
ROA not after:            Wed 02 Apr 2025 18:30:19 +0000
asID:                     262755
IP address blocks:        2804:19c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.crl
                          rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 01:11:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:5b:d2:1f:3c:2c:4b:eb:49:39:91:d2:78:5c:41:bf:fe:cd:06:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E98018CD2C68060BD13517BC1BB31EAD6E73038A
        Validity
            Not Before: Apr  3 18:25:19 2024 GMT
            Not After : Apr  2 18:30:19 2025 GMT
        Subject: CN=F927A33E781042790D10F40B0BA7580E1EA18CC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ad:af:66:8c:6a:6d:96:f0:fb:50:3c:74:ee:
                    91:c0:17:2d:95:f0:b2:4f:2d:12:3f:29:72:ee:3d:
                    0a:69:30:f7:3a:a0:8b:c0:b4:33:8a:ef:fd:72:cb:
                    f4:48:ac:4c:98:96:ec:11:7b:ad:69:24:3e:22:be:
                    e8:5c:6c:e1:12:5b:7e:04:33:43:9a:df:3f:f6:a8:
                    5f:4f:1b:4a:31:82:b1:1d:97:1e:3d:d8:63:1b:7a:
                    16:8a:61:48:c5:a0:79:79:61:34:42:79:10:f0:17:
                    49:99:fd:53:95:b8:17:e1:ac:c0:36:50:2f:5e:6f:
                    9b:9f:2e:be:29:00:e9:77:85:19:e2:06:2f:32:aa:
                    ea:04:d1:b3:5e:f3:a4:35:12:00:1a:58:db:4d:5c:
                    f6:ee:bf:ba:90:2f:b5:5d:81:66:0c:87:2a:8b:49:
                    c5:96:a3:6b:02:3a:c2:4b:8c:23:e8:53:a8:ae:4a:
                    82:a2:31:f5:3f:79:bf:03:1c:6a:db:85:03:f5:63:
                    63:08:65:ec:ba:33:a9:82:65:90:1c:8a:10:06:45:
                    61:cb:38:6b:4b:08:ea:eb:68:d7:af:9b:2f:55:97:
                    da:df:35:10:19:d6:be:72:25:3a:43:ed:d0:f2:48:
                    59:12:15:0b:4f:e3:fb:b0:98:00:10:dd:82:05:8c:
                    02:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:27:A3:3E:78:10:42:79:0D:10:F4:0B:0B:A7:58:0E:1E:A1:8C:C8
            X509v3 Authority Key Identifier:
                keyid:E9:80:18:CD:2C:68:06:0B:D1:35:17:BC:1B:B3:1E:AD:6E:73:03:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/323830343a3139633a3a2f33322d3438203d3e20323632373535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:19c::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:a8:7e:9d:fc:47:f7:60:b8:61:1d:24:0a:2d:82:8c:0f:1a:
         c2:02:0c:fa:61:02:6c:1d:23:69:39:34:1d:09:c0:ad:8e:c2:
         19:7d:79:e7:98:fa:eb:b7:7b:1c:1e:ba:5c:de:29:9b:63:a4:
         d6:d7:d7:7f:7e:41:2e:05:9e:02:91:43:d9:9b:9e:ca:5f:eb:
         ab:bd:08:7c:b8:b0:e9:3f:ea:d6:b4:0b:9f:5f:eb:48:14:b7:
         29:62:46:51:a8:c1:eb:1b:16:8e:36:fb:7e:bd:08:71:7b:19:
         e8:fa:87:62:ff:e4:33:20:b3:28:e3:41:47:ea:f5:35:15:c9:
         4a:8f:16:28:25:b6:e5:55:f9:76:26:cf:d1:e3:78:2e:49:0f:
         eb:d4:57:86:56:9f:a0:39:24:ec:3b:e2:b9:be:ad:1b:00:06:
         75:23:e5:2e:64:a7:2a:e9:ec:50:16:34:be:3d:24:08:69:05:
         86:d6:c5:d9:5a:b2:68:9b:98:e1:4e:91:69:55:72:a6:a4:de:
         cc:81:d4:e3:3d:8b:7d:cb:bc:bd:7e:a4:46:6c:6d:31:d2:65:
         2a:c2:dc:d5:c3:3d:8c:2d:eb:b7:5c:d8:6c:89:b5:53:80:ff:
         08:7c:86:e0:77:3b:57:21:a6:0c:8c:fe:78:aa:88:27:59:7b:
         8a:22:af:13
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUKlvSHzwsS+tJOZHSeFxBv/7NBmowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTk4MDE4Q0QyQzY4MDYwQkQxMzUxN0JDMUJCMzFFQUQ2
RTczMDM4QTAeFw0yNDA0MDMxODI1MTlaFw0yNTA0MDIxODMwMTlaMDMxMTAvBgNV
BAMTKEY5MjdBMzNFNzgxMDQyNzkwRDEwRjQwQjBCQTc1ODBFMUVBMThDQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/ra9mjGptlvD7UDx07pHAFy2V
8LJPLRI/KXLuPQppMPc6oIvAtDOK7/1yy/RIrEyYluwRe61pJD4ivuhcbOESW34E
M0Oa3z/2qF9PG0oxgrEdlx492GMbehaKYUjFoHl5YTRCeRDwF0mZ/VOVuBfhrMA2
UC9eb5ufLr4pAOl3hRniBi8yquoE0bNe86Q1EgAaWNtNXPbuv7qQL7VdgWYMhyqL
ScWWo2sCOsJLjCPoU6iuSoKiMfU/eb8DHGrbhQP1Y2MIZey6M6mCZZAcihAGRWHL
OGtLCOrraNevmy9Vl9rfNRAZ1r5yJTpD7dDySFkSFQtP4/uwmAAQ3YIFjAIPAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU+SejPngQQnkNEPQLC6dYDh6hjMgwHwYDVR0j
BBgwFoAU6YAYzSxoBgvRNRe8G7MerW5zA4owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1BmMUYxNHFXaVdVa3JmNDJqZWgxczRibVdCMmV6YXNMZ3dqeWpVZDl4
WHMvMS9FOTgwMThDRDJDNjgwNjBCRDEzNTE3QkMxQkIzMUVBRDZFNzMwMzhBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U5ODAxOENEMkM2ODA2MEJE
MTM1MTdCQzFCQjMxRUFENkU3MzAzOEEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NQZjFGMTRxV2lXVWtyZjQyamVoMXM0Ym1XQjJlemFzTGd3anlqVWQ5eFhzLzEv
MzIzODMwMzQzYTMxMzk2MzNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzMjM3
MzUzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEAZwwDQYJKoZIhvcNAQELBQADggEBADeofp38R/dg
uGEdJAotgowPGsICDPphAmwdI2k5NB0JwK2Owhl9eeeY+uu3exweulzeKZtjpNbX
139+QS4FngKRQ9mbnspf66u9CHy4sOk/6ta0C59f60gUtyliRlGowesbFo42+369
CHF7Gej6h2L/5DMgsyjjQUfq9TUVyUqPFigltuVV+XYmz9HjeC5JD+vUV4ZWn6A5
JOw74rm+rRsABnUj5S5kpyrp7FAWNL49JAhpBYbWxdlasmibmOFOkWlVcqak3syB
1OM9i33LvL1+pEZsbTHSZSrC3NXDPYwt67dc2GyJtVOA/wh8huB3O1chpgyM/niq
iCdZe4oirxM=
-----END CERTIFICATE-----
Generated at Sat Jun 29 03:28:43 2024 by rpki-client on console-ams.rpki-client.org