Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a313430303a3a2f33382d3338203d3e20323632373239.roa
File:                     323830343a313664383a313430303a3a2f33382d3338203d3e20323632373239.roa (raw, json)
Hash identifier:          qk4SnDCUVKn9oozpSHRU+MLZUz8fH5n4GTaJUZjU8ME=
Subject key identifier:   1D:2F:4C:9D:1B:AC:91:FE:CC:B7:FC:92:42:AB:46:79:F3:C0:DA:E6
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       6978E9EA4E941630C7960EC491BA797FB411E6B0
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a313430303a3a2f33382d3338203d3e20323632373239.roa
Signing time:             Mon 15 Jul 2024 13:42:23 +0000
ROA not before:           Mon 15 Jul 2024 13:37:23 +0000
ROA not after:            Mon 14 Jul 2025 13:42:23 +0000
asID:                     262729
IP address blocks:        2804:16d8:1400::/38 maxlen: 38

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:78:e9:ea:4e:94:16:30:c7:96:0e:c4:91:ba:79:7f:b4:11:e6:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: Jul 15 13:37:23 2024 GMT
            Not After : Jul 14 13:42:23 2025 GMT
        Subject: CN=1D2F4C9D1BAC91FECCB7FC9242AB4679F3C0DAE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d0:fa:47:6c:cc:6f:f7:8e:65:85:1a:85:c3:
                    74:fa:90:a3:91:77:f6:7f:fa:59:db:8c:5f:76:2d:
                    ba:af:ad:fa:24:ec:24:43:c3:4a:03:db:e1:97:16:
                    42:a1:b9:6b:94:e6:0c:dd:1e:e6:64:f8:ba:f7:8a:
                    87:dc:de:01:54:06:f6:92:30:5d:6c:90:fb:e5:12:
                    82:66:7d:53:88:6a:5f:48:50:43:5a:26:87:c3:82:
                    68:8a:9b:d9:20:bd:4b:de:d9:d4:3c:f0:8b:9f:7d:
                    b0:15:6c:03:1e:2f:20:47:d4:a7:67:8d:75:62:35:
                    f7:1e:01:26:e8:cc:1a:3b:9b:03:4a:a2:4c:f1:00:
                    52:7e:93:7f:3e:f8:bf:b2:d0:3a:00:14:c3:e2:1c:
                    43:b2:10:90:1a:ae:8f:20:4c:3f:33:54:46:da:eb:
                    d5:93:43:7d:5f:92:91:40:85:22:39:1d:1d:a6:3d:
                    9b:77:35:fd:fb:63:b0:8e:c5:ec:98:d0:70:3c:ff:
                    fa:a1:b6:d1:9d:0c:da:31:88:59:0c:3b:51:41:54:
                    2e:08:e7:db:f0:3a:cb:d7:b1:74:5d:e3:ee:88:f5:
                    13:11:ab:49:e9:e8:77:22:cc:9e:8d:57:d2:97:d2:
                    51:97:5f:cf:31:82:39:56:a9:a3:f3:6d:55:d1:55:
                    3c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:2F:4C:9D:1B:AC:91:FE:CC:B7:FC:92:42:AB:46:79:F3:C0:DA:E6
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a313430303a3a2f33382d3338203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:16d8:1400::/38

    Signature Algorithm: sha256WithRSAEncryption
         3d:b5:23:04:6d:df:47:97:3d:70:28:58:6d:68:e7:3b:ab:01:
         ce:44:cc:7d:db:4a:c4:e7:0f:75:50:ec:ba:f1:65:60:6b:41:
         fd:33:e4:14:0e:f8:91:12:cd:d4:d7:c8:44:af:38:82:af:32:
         67:ae:a0:53:89:c0:20:0c:7b:fb:40:6e:99:95:ba:4f:15:fa:
         91:06:8c:58:fd:f6:ba:56:1b:eb:96:bc:28:3e:8f:96:8c:75:
         3a:1d:87:48:3e:f1:1b:bb:07:8a:64:dd:e8:aa:70:aa:e0:d8:
         be:64:22:d8:4c:52:21:5d:97:11:1d:e4:5e:ae:43:62:96:d0:
         70:86:6f:44:28:20:98:b1:0c:a8:35:94:9e:79:ad:ab:40:eb:
         84:ae:8b:58:d6:5b:e6:0d:3a:04:bc:3f:a6:e6:49:10:d3:1d:
         56:5e:c0:11:1a:9d:65:f4:c4:db:d5:dc:f6:ce:1f:9e:36:91:
         c4:d1:69:6a:71:50:e5:0b:f4:1f:ec:42:6a:74:90:af:f9:1e:
         46:9f:9d:1d:6c:2f:d4:c4:ef:e5:17:96:3e:09:2a:b9:68:76:
         13:3d:e1:2b:f8:4b:1e:d1:f0:60:bc:3d:83:2e:8e:f7:9f:8c:
         39:b1:5e:19:61:ae:9f:5d:23:a3:52:05:34:a7:79:2b:a8:52:
         c4:f3:b7:43
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUaXjp6k6UFjDHlg7Ekbp5f7QR5rAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjlEQjFCNThEQ0Q0NkMyRTc0NkQ4RERFQUE3RjQ5ODMz
MUREQjAxNzAeFw0yNDA3MTUxMzM3MjNaFw0yNTA3MTQxMzQyMjNaMDMxMTAvBgNV
BAMTKDFEMkY0QzlEMUJBQzkxRkVDQ0I3RkM5MjQyQUI0Njc5RjNDMERBRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL0PpHbMxv945lhRqFw3T6kKOR
d/Z/+lnbjF92Lbqvrfok7CRDw0oD2+GXFkKhuWuU5gzdHuZk+Lr3iofc3gFUBvaS
MF1skPvlEoJmfVOIal9IUENaJofDgmiKm9kgvUve2dQ88IuffbAVbAMeLyBH1Kdn
jXViNfceASbozBo7mwNKokzxAFJ+k38++L+y0DoAFMPiHEOyEJAaro8gTD8zVEba
69WTQ31fkpFAhSI5HR2mPZt3Nf37Y7COxeyY0HA8//qhttGdDNoxiFkMO1FBVC4I
59vwOsvXsXRd4+6I9RMRq0np6HcizJ6NV9KX0lGXX88xgjlWqaPzbVXRVTypAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUHS9MnRuskf7Mt/ySQqtGefPA2uYwHwYDVR0j
BBgwFoAUudsbWNzUbC50bY3eqn9JgzHdsBcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDVmUEVVcmNhM21RVW9hNVVMS3pGNVB6WTdZZExVSkdXbTRiRzF0ZUZn
OWsvMC9COURCMUI1OERDRDQ2QzJFNzQ2RDhEREVBQTdGNDk4MzMxRERCMDE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5REIxQjU4RENENDZDMkU3
NDZEOERERUFBN0Y0OTgzMzFEREIwMTcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q1ZlBFVXJjYTNtUVVvYTVVTEt6RjVQelk3WWRMVUpHV200YkcxdGVGZzlrLzAv
MzIzODMwMzQzYTMxMzY2NDM4M2EzMTM0MzAzMDNhM2EyZjMzMzgyZDMzMzgyMDNk
M2UyMDMyMzYzMjM3MzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAigEFtgUMA0GCSqGSIb3DQEBCwUA
A4IBAQA9tSMEbd9Hlz1wKFhtaOc7qwHORMx920rE5w91UOy68WVga0H9M+QUDviR
Es3U18hErziCrzJnrqBTicAgDHv7QG6ZlbpPFfqRBoxY/fa6VhvrlrwoPo+WjHU6
HYdIPvEbuweKZN3oqnCq4Ni+ZCLYTFIhXZcRHeRerkNiltBwhm9EKCCYsQyoNZSe
ea2rQOuErotY1lvmDToEvD+m5kkQ0x1WXsARGp1l9MTb1dz2zh+eNpHE0WlqcVDl
C/Qf7EJqdJCv+R5Gn50dbC/UxO/lF5Y+CSq5aHYTPeEr+Ese0fBgvD2DLo73n4w5
sV4ZYa6fXSOjUgU0p3krqFLE87dD
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:34 2024 by rpki-client on console-fra.rpki-client.org