Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a633030303a3a2f33342d3334203d3e20323633353431.roa
File:                     323830343a313339383a633030303a3a2f33342d3334203d3e20323633353431.roa (raw, json)
Hash identifier:          0oyjEk5rdrFyi6780XJSL+R+ISrdMtNYNJQlvz/U3aM=
Subject key identifier:   8E:C1:0C:C4:A0:D0:15:65:F2:4D:89:B8:A2:CE:4C:71:3F:D7:69:A1
Certificate issuer:       /CN=AB6EBC1B7182C64982948DD7B8CB166F20C4649E
Certificate serial:       0D465D82060CC59D7CF9955166FD824A00B6368B
Authority key identifier: AB:6E:BC:1B:71:82:C6:49:82:94:8D:D7:B8:CB:16:6F:20:C4:64:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB6EBC1B7182C64982948DD7B8CB166F20C4649E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a633030303a3a2f33342d3334203d3e20323633353431.roa
Signing time:             Tue 30 Apr 2024 14:46:00 +0000
ROA not before:           Tue 30 Apr 2024 14:41:00 +0000
ROA not after:            Tue 29 Apr 2025 14:46:00 +0000
asID:                     263541
IP address blocks:        2804:1398:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/AB6EBC1B7182C64982948DD7B8CB166F20C4649E.crl
                          rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/AB6EBC1B7182C64982948DD7B8CB166F20C4649E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB6EBC1B7182C64982948DD7B8CB166F20C4649E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 20:15:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:46:5d:82:06:0c:c5:9d:7c:f9:95:51:66:fd:82:4a:00:b6:36:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB6EBC1B7182C64982948DD7B8CB166F20C4649E
        Validity
            Not Before: Apr 30 14:41:00 2024 GMT
            Not After : Apr 29 14:46:00 2025 GMT
        Subject: CN=8EC10CC4A0D01565F24D89B8A2CE4C713FD769A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:01:3d:d8:cf:d4:94:19:7c:ef:91:39:9c:d5:
                    a6:f3:f7:d9:b2:a1:e0:94:0a:4d:67:47:a0:d7:11:
                    41:99:2e:db:7d:68:54:05:af:4a:86:9f:5e:53:31:
                    64:3b:0f:06:d9:f8:35:7c:3d:c5:c9:1b:f1:a0:08:
                    ac:52:3d:58:fa:f7:14:fd:d3:c1:f9:70:fd:8a:f5:
                    d0:80:51:07:86:08:04:46:a3:1d:b2:2e:05:a3:16:
                    62:e9:44:f5:22:6b:5c:6b:b6:02:34:cf:25:d8:8a:
                    58:8c:ec:75:e7:6e:00:f0:44:ed:2f:3a:7a:ad:43:
                    47:09:1b:ec:d0:7a:e3:c5:a8:cb:9c:e6:2f:d0:b9:
                    e2:a1:87:f0:87:a3:fe:e5:74:ee:fe:78:f7:94:ab:
                    85:16:e5:b1:f2:fe:78:2d:30:f4:6e:b5:60:ce:73:
                    c3:ad:e2:88:28:3d:a4:27:d6:4c:a6:84:42:5e:31:
                    4f:52:aa:9e:35:1b:75:23:02:97:9d:79:d5:fd:83:
                    71:39:31:ae:bb:ac:f9:4e:cd:82:dd:a1:4c:1f:9c:
                    04:98:ea:ce:c8:63:67:59:11:de:07:2c:d8:a2:25:
                    50:2d:e7:18:7a:39:21:7e:d4:28:4a:32:32:6a:39:
                    bd:0e:39:a0:ad:2e:52:b3:2b:6f:b0:fb:b5:98:b3:
                    fd:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C1:0C:C4:A0:D0:15:65:F2:4D:89:B8:A2:CE:4C:71:3F:D7:69:A1
            X509v3 Authority Key Identifier:
                keyid:AB:6E:BC:1B:71:82:C6:49:82:94:8D:D7:B8:CB:16:6F:20:C4:64:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/AB6EBC1B7182C64982948DD7B8CB166F20C4649E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB6EBC1B7182C64982948DD7B8CB166F20C4649E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a633030303a3a2f33342d3334203d3e20323633353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1398:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         b6:c4:be:45:7f:32:98:65:83:da:8e:15:fa:36:69:93:4d:bd:
         24:cb:82:10:e7:31:b9:ef:3c:6b:cb:50:53:ab:fb:30:d9:52:
         c9:a1:7a:05:19:52:d7:2f:ef:89:7c:38:8b:8d:b0:ad:bc:b4:
         79:19:6b:cb:75:d6:57:e6:cd:95:9d:25:d9:af:04:b7:f4:3f:
         a7:e7:89:28:fe:d8:9b:83:54:e4:01:3f:ea:f5:80:ec:bc:14:
         bd:eb:0f:e5:4e:15:57:8d:b4:45:80:47:f5:53:86:48:a3:56:
         70:e7:2c:49:3a:62:d0:62:61:20:ce:03:c7:6b:0a:ae:6a:78:
         f6:1c:ba:cd:cf:21:6c:f0:99:74:6f:24:35:61:02:55:e1:76:
         35:d9:28:69:13:ef:c1:81:2d:e4:a4:56:31:5e:d1:b3:35:e7:
         8f:1e:b8:6e:7b:ad:97:20:7d:2e:33:8e:57:36:77:7d:23:cd:
         eb:a8:ae:28:23:fa:31:a8:d9:ba:ca:c9:ee:be:32:60:00:c5:
         d3:40:fb:b5:eb:3b:16:76:5e:43:76:39:69:ad:43:67:44:ef:
         78:d1:06:f4:05:63:05:e1:6f:27:a1:9e:d9:15:c9:bf:9a:33:
         d0:2d:92:74:63:ac:b1:dd:f6:8d:06:41:4e:fe:8d:a0:90:d8:
         a6:a1:5e:33
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUDUZdggYMxZ18+ZVRZv2CSgC2NoswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUI2RUJDMUI3MTgyQzY0OTgyOTQ4REQ3QjhDQjE2NkYy
MEM0NjQ5RTAeFw0yNDA0MzAxNDQxMDBaFw0yNTA0MjkxNDQ2MDBaMDMxMTAvBgNV
BAMTKDhFQzEwQ0M0QTBEMDE1NjVGMjREODlCOEEyQ0U0QzcxM0ZENzY5QTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnAT3Yz9SUGXzvkTmc1abz99my
oeCUCk1nR6DXEUGZLtt9aFQFr0qGn15TMWQ7DwbZ+DV8PcXJG/GgCKxSPVj69xT9
08H5cP2K9dCAUQeGCARGox2yLgWjFmLpRPUia1xrtgI0zyXYiliM7HXnbgDwRO0v
OnqtQ0cJG+zQeuPFqMuc5i/QueKhh/CHo/7ldO7+ePeUq4UW5bHy/ngtMPRutWDO
c8Ot4ogoPaQn1kymhEJeMU9Sqp41G3UjApededX9g3E5Ma67rPlOzYLdoUwfnASY
6s7IY2dZEd4HLNiiJVAt5xh6OSF+1ChKMjJqOb0OOaCtLlKzK2+w+7WYs/2jAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUjsEMxKDQFWXyTYm4os5McT/XaaEwHwYDVR0j
BBgwFoAUq268G3GCxkmClI3XuMsWbyDEZJ4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2lhenB2ZzgxUTRER00yajgxQ1ZTRmF1WVdSUWM2NFlBeU13ckdYdlJ6
U1UvMC9BQjZFQkMxQjcxODJDNjQ5ODI5NDhERDdCOENCMTY2RjIwQzQ2NDlFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FCNkVCQzFCNzE4MkM2NDk4
Mjk0OEREN0I4Q0IxNjZGMjBDNDY0OUUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NpYXpwdmc4MVE0REdNMmo4MUNWU0ZhdVlXUlFjNjRZQXlNd3JHWHZSelNVLzAv
MzIzODMwMzQzYTMxMzMzOTM4M2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzMzM1MzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEE5jAMA0GCSqGSIb3DQEBCwUA
A4IBAQC2xL5FfzKYZYPajhX6NmmTTb0ky4IQ5zG57zxry1BTq/sw2VLJoXoFGVLX
L++JfDiLjbCtvLR5GWvLddZX5s2VnSXZrwS39D+n54ko/tibg1TkAT/q9YDsvBS9
6w/lThVXjbRFgEf1U4ZIo1Zw5yxJOmLQYmEgzgPHawquanj2HLrNzyFs8Jl0byQ1
YQJV4XY12ShpE+/BgS3kpFYxXtGzNeePHrhue62XIH0uM45XNnd9I83rqK4oI/ox
qNm6ysnuvjJgAMXTQPu16zsWdl5DdjlprUNnRO940Qb0BWMF4W8noZ7ZFcm/mjPQ
LZJ0Y6yx3faNBkFO/o2gkNimoV4z
-----END CERTIFICATE-----
Generated at Fri Jun 28 21:05:18 2024 by rpki-client on console-ams.rpki-client.org