Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cc963mLcVFK3DoMYQRqrs7gbmmqszFr6NLqSWtNwrFH6/0/323830343a376337383a3a2f33322d313238203d3e20323731343938.roa
File:                     323830343a376337383a3a2f33322d313238203d3e20323731343938.roa (raw, json)
Hash identifier:          3TwMGlOGK30Xiv257BgM6boJllF0rTriXsXfeSev+l4=
Subject key identifier:   CE:6F:A1:6D:DA:B1:75:56:6A:FD:AA:08:3C:B4:B5:D7:F8:A7:DB:F2
Certificate issuer:       /CN=ED7F28047339BBD327D93B874859806D4B1954D2
Certificate serial:       10EDD14D63A6CD94E380910D0492978FD6FDDD0E
Authority key identifier: ED:7F:28:04:73:39:BB:D3:27:D9:3B:87:48:59:80:6D:4B:19:54:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED7F28047339BBD327D93B874859806D4B1954D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cc963mLcVFK3DoMYQRqrs7gbmmqszFr6NLqSWtNwrFH6/0/323830343a376337383a3a2f33322d313238203d3e20323731343938.roa
Signing time:             Tue 16 Apr 2024 15:32:14 +0000
ROA not before:           Tue 16 Apr 2024 15:27:14 +0000
ROA not after:            Tue 15 Apr 2025 15:32:14 +0000
asID:                     271498
IP address blocks:        2804:7c78::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cc963mLcVFK3DoMYQRqrs7gbmmqszFr6NLqSWtNwrFH6/0/ED7F28047339BBD327D93B874859806D4B1954D2.crl
                          rsync://rpki-repo.registro.br/repo/Cc963mLcVFK3DoMYQRqrs7gbmmqszFr6NLqSWtNwrFH6/0/ED7F28047339BBD327D93B874859806D4B1954D2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED7F28047339BBD327D93B874859806D4B1954D2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:ed:d1:4d:63:a6:cd:94:e3:80:91:0d:04:92:97:8f:d6:fd:dd:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED7F28047339BBD327D93B874859806D4B1954D2
        Validity
            Not Before: Apr 16 15:27:14 2024 GMT
            Not After : Apr 15 15:32:14 2025 GMT
        Subject: CN=CE6FA16DDAB175566AFDAA083CB4B5D7F8A7DBF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:09:7d:16:00:bb:bb:08:0d:a7:a1:85:63:bf:
                    2d:0f:29:7d:f0:45:b5:20:62:8f:d7:68:6c:64:a4:
                    d9:43:fe:9c:30:fa:bf:66:19:f1:36:88:b1:92:ca:
                    dd:5f:aa:b1:a1:31:7f:12:f3:c1:51:51:ba:f5:45:
                    e0:c4:f4:d5:b4:45:8b:f6:9d:35:6d:90:4e:70:b6:
                    ad:32:1b:8a:14:3b:f0:40:b3:11:d5:b9:69:12:9c:
                    08:ba:5a:d3:53:df:f3:de:a5:a6:99:99:75:2a:ae:
                    25:75:1a:6f:7a:3f:b4:1a:7b:fd:f3:17:fb:bf:15:
                    df:f2:b0:d8:ca:6a:5a:37:9a:c2:45:e0:c4:c6:aa:
                    34:b5:82:b5:b3:77:db:bb:1a:6d:d5:5c:05:3d:7b:
                    28:d8:aa:1d:1d:b3:e9:42:5a:1d:a9:75:de:b0:25:
                    fd:0e:0d:00:87:b2:07:f1:10:a0:43:ed:57:5c:f5:
                    cd:2c:ca:e3:8c:33:6c:5d:74:57:b9:70:44:4a:64:
                    08:fa:b2:01:b5:4b:f3:ae:fa:bd:6c:84:ba:04:70:
                    2a:c7:6b:2a:b6:51:a5:94:96:93:39:9b:e9:c5:0c:
                    d7:b6:0c:b0:f7:34:c1:36:30:0d:35:ae:3f:4d:01:
                    f6:6f:99:c1:7a:99:9d:f7:52:6e:bd:cd:12:29:70:
                    e1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:6F:A1:6D:DA:B1:75:56:6A:FD:AA:08:3C:B4:B5:D7:F8:A7:DB:F2
            X509v3 Authority Key Identifier:
                keyid:ED:7F:28:04:73:39:BB:D3:27:D9:3B:87:48:59:80:6D:4B:19:54:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cc963mLcVFK3DoMYQRqrs7gbmmqszFr6NLqSWtNwrFH6/0/ED7F28047339BBD327D93B874859806D4B1954D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED7F28047339BBD327D93B874859806D4B1954D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cc963mLcVFK3DoMYQRqrs7gbmmqszFr6NLqSWtNwrFH6/0/323830343a376337383a3a2f33322d313238203d3e20323731343938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c78::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:86:ee:3f:ce:77:e7:cc:75:1b:78:22:d0:52:81:56:3f:8c:
         5e:48:4a:2d:02:73:c0:cc:95:e7:86:12:39:1b:65:44:b1:bf:
         2b:45:92:2c:a3:c6:8a:fb:db:b6:a2:76:b7:d2:4a:cb:37:67:
         b6:57:58:e2:b8:f1:22:e8:8f:e6:b8:66:3d:41:44:22:51:06:
         5a:c3:3b:33:ae:23:b5:5b:b7:55:44:a9:4b:90:20:c3:ad:63:
         fe:2b:25:c5:c7:b7:2b:58:f9:bb:b7:08:25:e6:a8:2f:db:6a:
         3c:86:5b:8f:cc:86:07:a8:88:b0:f0:77:e7:86:21:c4:44:b6:
         88:2a:53:f8:66:84:d2:0e:51:56:f7:63:b7:0e:fe:b5:82:9c:
         ae:62:ec:97:d6:b3:65:ba:46:a9:c7:dc:a0:5a:48:d5:80:e8:
         b8:57:71:b9:48:ee:51:f7:e9:a1:b6:87:72:54:89:29:5f:c4:
         6f:99:12:1e:4f:0e:b5:1e:79:c3:7e:f5:67:f3:2b:e4:e0:26:
         59:0c:b8:fc:18:75:b7:da:0d:4c:af:45:a5:42:be:75:4e:73:
         76:5a:9f:6d:88:3d:50:8a:ac:af:56:6a:9c:f6:e4:e8:fc:19:
         b1:07:09:51:64:87:77:c0:63:aa:f8:f3:fe:e2:fa:9b:91:ea:
         1a:57:85:6a
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUEO3RTWOmzZTjgJENBJKXj9b93Q4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUQ3RjI4MDQ3MzM5QkJEMzI3RDkzQjg3NDg1OTgwNkQ0
QjE5NTREMjAeFw0yNDA0MTYxNTI3MTRaFw0yNTA0MTUxNTMyMTRaMDMxMTAvBgNV
BAMTKENFNkZBMTZEREFCMTc1NTY2QUZEQUEwODNDQjRCNUQ3RjhBN0RCRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjCX0WALu7CA2noYVjvy0PKX3w
RbUgYo/XaGxkpNlD/pww+r9mGfE2iLGSyt1fqrGhMX8S88FRUbr1ReDE9NW0RYv2
nTVtkE5wtq0yG4oUO/BAsxHVuWkSnAi6WtNT3/PepaaZmXUqriV1Gm96P7Qae/3z
F/u/Fd/ysNjKalo3msJF4MTGqjS1grWzd9u7Gm3VXAU9eyjYqh0ds+lCWh2pdd6w
Jf0ODQCHsgfxEKBD7Vdc9c0syuOMM2xddFe5cERKZAj6sgG1S/Ou+r1shLoEcCrH
ayq2UaWUlpM5m+nFDNe2DLD3NME2MA01rj9NAfZvmcF6mZ33Um69zRIpcOGzAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUzm+hbdqxdVZq/aoIPLS11/in2/IwHwYDVR0j
BBgwFoAU7X8oBHM5u9Mn2TuHSFmAbUsZVNIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2M5NjNtTGNWRkszRG9NWVFScXJzN2dibW1xc3pGcjZOTHFTV3ROd3JG
SDYvMC9FRDdGMjgwNDczMzlCQkQzMjdEOTNCODc0ODU5ODA2RDRCMTk1NEQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VEN0YyODA0NzMzOUJCRDMy
N0Q5M0I4NzQ4NTk4MDZENEIxOTU0RDIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NjOTYzbUxjVkZLM0RvTVlRUnFyczdnYm1tcXN6RnI2TkxxU1d0TndyRkg2LzAv
MzIzODMwMzQzYTM3NjMzNzM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzEzNDM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBHx4MA0GCSqGSIb3DQEBCwUAA4IBAQCRhu4/
znfnzHUbeCLQUoFWP4xeSEotAnPAzJXnhhI5G2VEsb8rRZIso8aK+9u2ona30krL
N2e2V1jiuPEi6I/muGY9QUQiUQZawzszriO1W7dVRKlLkCDDrWP+KyXFx7crWPm7
twgl5qgv22o8hluPzIYHqIiw8HfnhiHERLaIKlP4ZoTSDlFW92O3Dv61gpyuYuyX
1rNlukapx9ygWkjVgOi4V3G5SO5R9+mhtodyVIkpX8RvmRIeTw61HnnDfvVn8yvk
4CZZDLj8GHW32g1Mr0WlQr51TnN2Wp9tiD1QiqyvVmqc9uTo/BmxBwlRZId3wGOq
+PP+4vqbkeoaV4Vq
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:50:06 2024 by rpki-client on console-fra.rpki-client.org