Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/1/323830343a376532633a3a2f33322d3332203d3e20323731363037.roa
File:                     323830343a376532633a3a2f33322d3332203d3e20323731363037.roa (raw, json)
Hash identifier:          Z0FYpLPCff9vfkWoPzH13SNEbmUikHH//BSzse5miF0=
Subject key identifier:   B9:6C:45:1C:CB:EC:14:F2:F8:5F:57:FD:D2:4F:2D:B1:33:B0:19:86
Certificate issuer:       /CN=893D95ADA38B2A288C03DAA99290D5110510F8E7
Certificate serial:       29F2F8DF50DE890CB1878007D23CE3DBA0508914
Authority key identifier: 89:3D:95:AD:A3:8B:2A:28:8C:03:DA:A9:92:90:D5:11:05:10:F8:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/893D95ADA38B2A288C03DAA99290D5110510F8E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/1/323830343a376532633a3a2f33322d3332203d3e20323731363037.roa
Signing time:             Wed 03 Apr 2024 20:23:10 +0000
ROA not before:           Wed 03 Apr 2024 20:18:10 +0000
ROA not after:            Wed 02 Apr 2025 20:23:10 +0000
asID:                     271607
IP address blocks:        2804:7e2c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/1/893D95ADA38B2A288C03DAA99290D5110510F8E7.crl
                          rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/1/893D95ADA38B2A288C03DAA99290D5110510F8E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/893D95ADA38B2A288C03DAA99290D5110510F8E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:f2:f8:df:50:de:89:0c:b1:87:80:07:d2:3c:e3:db:a0:50:89:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=893D95ADA38B2A288C03DAA99290D5110510F8E7
        Validity
            Not Before: Apr  3 20:18:10 2024 GMT
            Not After : Apr  2 20:23:10 2025 GMT
        Subject: CN=B96C451CCBEC14F2F85F57FDD24F2DB133B01986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:83:81:f0:0b:14:82:8a:da:0b:02:4b:ff:99:
                    b3:05:05:00:cf:11:4d:89:62:c2:d7:31:83:d8:4b:
                    53:0d:3f:4a:ef:98:5e:52:8a:10:db:51:6c:9e:98:
                    b3:20:a1:b1:ce:9b:88:a7:af:92:29:c3:29:4c:ec:
                    63:7d:84:57:db:2f:7c:c3:83:19:fe:5f:fc:4a:54:
                    87:4b:6c:0f:c1:e1:0c:95:a2:c0:66:71:1a:f4:c7:
                    38:5c:0c:d8:2b:ae:5f:ea:ea:0f:ee:eb:41:af:f2:
                    b1:65:8d:a8:70:1e:73:11:bb:39:e2:b2:f9:54:9f:
                    e9:33:c5:78:b2:a7:6e:43:ff:d3:0d:fb:46:eb:03:
                    bf:46:1a:ca:5e:9c:e6:1f:f8:d6:69:0e:7e:73:52:
                    62:14:0b:f6:92:a4:4d:78:d4:a2:81:f7:12:4d:8b:
                    f1:f1:e1:64:8f:1a:64:1d:61:f2:ee:96:5c:f6:4e:
                    16:46:43:7f:7f:98:47:fc:40:16:57:6a:21:6e:7c:
                    93:b0:90:f2:3b:8f:91:61:41:ec:2c:a4:f3:f0:3a:
                    78:d4:49:db:55:41:ae:72:e4:8a:e6:04:56:66:3a:
                    66:21:5b:35:ad:ac:b7:f5:94:8b:ed:a2:66:69:af:
                    75:f5:ec:34:d7:d6:0b:3b:22:be:8b:e8:ae:50:14:
                    ed:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:6C:45:1C:CB:EC:14:F2:F8:5F:57:FD:D2:4F:2D:B1:33:B0:19:86
            X509v3 Authority Key Identifier:
                keyid:89:3D:95:AD:A3:8B:2A:28:8C:03:DA:A9:92:90:D5:11:05:10:F8:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/1/893D95ADA38B2A288C03DAA99290D5110510F8E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/893D95ADA38B2A288C03DAA99290D5110510F8E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/1/323830343a376532633a3a2f33322d3332203d3e20323731363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:fe:0c:bb:32:e9:6f:20:d7:83:bc:cf:70:ba:8e:a6:5d:ee:
         e4:f7:1b:61:f8:f7:f8:11:ca:6f:4f:53:31:7c:42:7b:e4:c6:
         a2:89:87:05:48:c2:4f:65:a2:9e:e5:cf:2b:37:cb:f3:7e:60:
         00:67:76:c4:a5:cb:1f:51:24:cf:01:3c:6d:00:b8:98:41:81:
         7a:10:56:b2:b1:2c:21:fc:a7:9f:0b:df:ac:07:65:c4:d8:6a:
         c2:ce:d5:6f:4e:ff:af:ec:94:ed:18:8e:e4:cf:cd:83:f2:e5:
         24:fa:7e:9a:64:fb:4d:40:c2:87:1e:8d:25:43:20:13:cf:2b:
         9d:4b:3b:e3:32:66:f0:2e:dd:c6:86:1c:2a:27:65:e5:7f:c6:
         83:14:80:15:3f:d0:1e:d3:ea:bd:29:6a:7f:ab:b4:d8:1b:cd:
         65:08:4e:49:d9:7b:1f:19:ec:15:96:d6:41:18:f4:a3:b9:3d:
         b1:13:4e:55:0e:74:cb:16:68:57:91:e8:e4:89:24:9a:21:22:
         86:01:3d:0e:28:b7:aa:a1:70:80:06:c9:82:2d:35:6a:da:e1:
         4f:9c:9c:15:28:b3:15:e2:fd:e8:69:72:64:11:60:42:3d:45:
         c7:93:43:14:b0:64:d9:0f:82:00:8a:14:d9:35:af:f4:dd:9b:
         b6:4c:e4:f7
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUKfL431DeiQyxh4AH0jzj26BQiRQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODkzRDk1QURBMzhCMkEyODhDMDNEQUE5OTI5MEQ1MTEw
NTEwRjhFNzAeFw0yNDA0MDMyMDE4MTBaFw0yNTA0MDIyMDIzMTBaMDMxMTAvBgNV
BAMTKEI5NkM0NTFDQ0JFQzE0RjJGODVGNTdGREQyNEYyREIxMzNCMDE5ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2g4HwCxSCitoLAkv/mbMFBQDP
EU2JYsLXMYPYS1MNP0rvmF5SihDbUWyemLMgobHOm4inr5IpwylM7GN9hFfbL3zD
gxn+X/xKVIdLbA/B4QyVosBmcRr0xzhcDNgrrl/q6g/u60Gv8rFljahwHnMRuzni
svlUn+kzxXiyp25D/9MN+0brA79GGspenOYf+NZpDn5zUmIUC/aSpE141KKB9xJN
i/Hx4WSPGmQdYfLullz2ThZGQ39/mEf8QBZXaiFufJOwkPI7j5FhQewspPPwOnjU
SdtVQa5y5IrmBFZmOmYhWzWtrLf1lIvtomZpr3X17DTX1gs7Ir6L6K5QFO3HAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUuWxFHMvsFPL4X1f90k8tsTOwGYYwHwYDVR0j
BBgwFoAUiT2VraOLKiiMA9qpkpDVEQUQ+OcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9DaTJhc1A5MmVxTGN3cmRMRUJudGJlRmVwY21KVlR4N2pVc1pKZGNjWlNH
LzEvODkzRDk1QURBMzhCMkEyODhDMDNEQUE5OTI5MEQ1MTEwNTEwRjhFNy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84OTNEOTVBREEzOEIyQTI4OEMw
M0RBQTk5MjkwRDUxMTA1MTBGOEU3LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9D
aTJhc1A5MmVxTGN3cmRMRUJudGJlRmVwY21KVlR4N2pVc1pKZGNjWlNHLzEvMzIz
ODMwMzQzYTM3NjUzMjYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMxMzYz
MDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKAR+LDANBgkqhkiG9w0BAQsFAAOCAQEADv4MuzLpbyDX
g7zPcLqOpl3u5PcbYfj3+BHKb09TMXxCe+TGoomHBUjCT2WinuXPKzfL835gAGd2
xKXLH1EkzwE8bQC4mEGBehBWsrEsIfynnwvfrAdlxNhqws7Vb07/r+yU7RiO5M/N
g/LlJPp+mmT7TUDChx6NJUMgE88rnUs74zJm8C7dxoYcKidl5X/GgxSAFT/QHtPq
vSlqf6u02BvNZQhOSdl7HxnsFZbWQRj0o7k9sRNOVQ50yxZoV5Ho5IkkmiEihgE9
Dii3qqFwgAbJgi01atrhT5ycFSizFeL96GlyZBFgQj1Fx5NDFLBk2Q+CAIoU2TWv
9N2btkzk9w==
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:41 2024 by rpki-client on console-ams.rpki-client.org