Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/323830343a333537633a3a2f33322d313238203d3e20323636323839.roa
File:                     323830343a333537633a3a2f33322d313238203d3e20323636323839.roa (raw, json)
Hash identifier:          2fx+BV4vHqauhR1dsza/0cuoNkEWoKkm2cw0Ukgrrqk=
Subject key identifier:   ED:E1:2F:B4:5B:55:CC:77:EB:9F:A2:BE:1F:94:31:C7:67:6C:5A:1F
Certificate issuer:       /CN=5068952903F5F17C21FA5B2EC1BE472DF306072C
Certificate serial:       6ADD00C0198E4DB40F505C4F7F088D30260D142C
Authority key identifier: 50:68:95:29:03:F5:F1:7C:21:FA:5B:2E:C1:BE:47:2D:F3:06:07:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5068952903F5F17C21FA5B2EC1BE472DF306072C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/323830343a333537633a3a2f33322d313238203d3e20323636323839.roa
Signing time:             Sat 13 Jul 2024 00:47:36 +0000
ROA not before:           Sat 13 Jul 2024 00:42:36 +0000
ROA not after:            Sat 12 Jul 2025 00:47:36 +0000
asID:                     266289
IP address blocks:        2804:357c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/5068952903F5F17C21FA5B2EC1BE472DF306072C.crl
                          rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/5068952903F5F17C21FA5B2EC1BE472DF306072C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5068952903F5F17C21FA5B2EC1BE472DF306072C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 08:47:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:dd:00:c0:19:8e:4d:b4:0f:50:5c:4f:7f:08:8d:30:26:0d:14:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5068952903F5F17C21FA5B2EC1BE472DF306072C
        Validity
            Not Before: Jul 13 00:42:36 2024 GMT
            Not After : Jul 12 00:47:36 2025 GMT
        Subject: CN=EDE12FB45B55CC77EB9FA2BE1F9431C7676C5A1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5a:e8:b1:7b:ae:8c:10:59:db:49:00:19:d1:
                    2f:a3:77:45:30:77:b5:c8:04:24:f9:a9:07:3e:17:
                    33:38:95:4b:74:03:55:d8:d7:69:c9:29:bb:5c:15:
                    e0:6b:2e:d1:f0:1f:51:82:87:5b:84:ad:d2:8a:3d:
                    9c:4e:3a:35:91:cb:86:33:15:e3:b8:e1:77:7a:d4:
                    34:3a:d4:50:ae:da:77:9c:8e:94:06:33:c6:58:74:
                    86:9e:a7:38:c9:d8:62:ea:76:2d:9e:31:ec:30:68:
                    98:b0:00:19:44:8b:49:1a:f6:8d:47:a4:21:e0:c8:
                    cd:c7:f5:ad:72:a9:ab:7e:f4:e4:12:97:6a:ae:c7:
                    b3:f4:bd:66:a8:b6:0b:6f:84:3d:5b:2f:15:83:31:
                    1a:7c:8f:55:b5:6c:b9:82:97:00:5c:f6:3c:65:7c:
                    e0:46:ba:a4:07:9d:3e:ee:cb:cd:6f:89:c5:86:65:
                    00:f2:93:53:d3:7e:e8:5e:67:2c:0d:95:fa:a9:de:
                    c4:d3:11:31:7c:51:32:f7:77:fa:df:cf:8e:d3:54:
                    fc:bb:15:a4:8a:8c:98:6d:20:31:ed:19:fc:0d:1c:
                    7d:5e:c5:20:ab:e1:c3:1e:2c:d9:67:79:d1:ae:f3:
                    7e:8e:0a:08:11:06:5c:05:e3:ae:84:a6:fc:d7:1f:
                    16:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E1:2F:B4:5B:55:CC:77:EB:9F:A2:BE:1F:94:31:C7:67:6C:5A:1F
            X509v3 Authority Key Identifier:
                keyid:50:68:95:29:03:F5:F1:7C:21:FA:5B:2E:C1:BE:47:2D:F3:06:07:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/5068952903F5F17C21FA5B2EC1BE472DF306072C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5068952903F5F17C21FA5B2EC1BE472DF306072C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/323830343a333537633a3a2f33322d313238203d3e20323636323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:357c::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:f9:2a:b7:ac:b0:7f:bf:3c:c7:23:58:c2:4e:7a:29:22:11:
         6c:f6:25:e8:c4:cb:95:2e:46:49:af:f6:4e:a4:59:f5:67:d3:
         50:5e:f3:c4:ef:21:fe:60:4f:9a:d3:e3:5c:48:68:c3:28:c3:
         87:c3:ea:c6:d3:33:ed:6d:4b:c3:e8:a6:98:4f:bc:bb:ca:98:
         6e:b1:90:80:78:c7:96:23:fc:09:ba:2d:64:d9:dd:1f:ff:1a:
         53:e3:66:a8:11:f9:5d:47:10:44:2e:2d:8d:aa:f1:fe:99:d6:
         e1:29:7e:af:17:e9:a0:1f:4b:6a:90:9d:ff:1c:ee:0f:16:83:
         c7:22:4e:35:9b:66:2b:6a:85:61:00:b5:d8:96:05:e0:f0:da:
         de:6e:8b:49:10:ad:32:60:7e:2e:cd:b8:44:c5:fd:72:41:0e:
         d3:09:a6:01:76:ac:11:9f:32:38:29:1b:c0:e3:75:84:0b:ad:
         f8:fa:6b:3c:12:c2:26:56:8f:a5:d4:d1:06:60:3b:d6:e8:22:
         bf:d3:a3:99:71:d1:8c:d0:13:57:91:c1:53:91:65:16:75:db:
         41:20:64:91:c7:25:8e:4a:f6:3d:07:d3:72:fe:bb:86:db:14:
         27:df:5e:08:b7:0f:44:55:43:5a:e9:53:ce:36:c0:c2:5f:63:
         d3:ed:e4:07
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUat0AwBmOTbQPUFxPfwiNMCYNFCwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTA2ODk1MjkwM0Y1RjE3QzIxRkE1QjJFQzFCRTQ3MkRG
MzA2MDcyQzAeFw0yNDA3MTMwMDQyMzZaFw0yNTA3MTIwMDQ3MzZaMDMxMTAvBgNV
BAMTKEVERTEyRkI0NUI1NUNDNzdFQjlGQTJCRTFGOTQzMUM3Njc2QzVBMUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLWuixe66MEFnbSQAZ0S+jd0Uw
d7XIBCT5qQc+FzM4lUt0A1XY12nJKbtcFeBrLtHwH1GCh1uErdKKPZxOOjWRy4Yz
FeO44Xd61DQ61FCu2necjpQGM8ZYdIaepzjJ2GLqdi2eMewwaJiwABlEi0ka9o1H
pCHgyM3H9a1yqat+9OQSl2qux7P0vWaotgtvhD1bLxWDMRp8j1W1bLmClwBc9jxl
fOBGuqQHnT7uy81vicWGZQDyk1PTfuheZywNlfqp3sTTETF8UTL3d/rfz47TVPy7
FaSKjJhtIDHtGfwNHH1exSCr4cMeLNlnedGu836OCggRBlwF466EpvzXHxYHAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU7eEvtFtVzHfrn6K+H5Qxx2dsWh8wHwYDVR0j
BBgwFoAUUGiVKQP18Xwh+lsuwb5HLfMGBywwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2o1bzY5S1lHa3dmWFBvcDR3SE5CUzVpdFVMQ3hSUFl0aXpyWktEdWh1
SFcvMC81MDY4OTUyOTAzRjVGMTdDMjFGQTVCMkVDMUJFNDcyREYzMDYwNzJDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUwNjg5NTI5MDNGNUYxN0My
MUZBNUIyRUMxQkU0NzJERjMwNjA3MkMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NqNW82OUtZR2t3ZlhQb3A0d0hOQlM1aXRVTEN4UlBZdGl6clpLRHVodUhXLzAv
MzIzODMwMzQzYTMzMzUzNzYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzYzMjM4Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBDV8MA0GCSqGSIb3DQEBCwUAA4IBAQBo+Sq3
rLB/vzzHI1jCTnopIhFs9iXoxMuVLkZJr/ZOpFn1Z9NQXvPE7yH+YE+a0+NcSGjD
KMOHw+rG0zPtbUvD6KaYT7y7yphusZCAeMeWI/wJui1k2d0f/xpT42aoEfldRxBE
Li2NqvH+mdbhKX6vF+mgH0tqkJ3/HO4PFoPHIk41m2YraoVhALXYlgXg8NrebotJ
EK0yYH4uzbhExf1yQQ7TCaYBdqwRnzI4KRvA43WEC634+ms8EsImVo+l1NEGYDvW
6CK/06OZcdGM0BNXkcFTkWUWddtBIGSRxyWOSvY9B9Ny/ruG2xQn314Itw9EVUNa
6VPONsDCX2PT7eQH
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:23 2025 by rpki-client