Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3330303a3a2f34322d3432203d3e20323635313837.roa
File:                     323830343a326330303a3330303a3a2f34322d3432203d3e20323635313837.roa (raw, json)
Hash identifier:          uXNdlCgwQ2s87u28LN8zhchRNpg1qI6EH4KaVZ59nLU=
Subject key identifier:   6F:97:A8:F2:73:69:E1:A8:1D:9D:48:B4:C4:E8:7A:13:B9:18:83:97
Certificate issuer:       /CN=F455D0BE5138AE552B4857270EED2A7CE5B5C6F2
Certificate serial:       33D532A32134DECD642A9BE44949A3B37D43CE21
Authority key identifier: F4:55:D0:BE:51:38:AE:55:2B:48:57:27:0E:ED:2A:7C:E5:B5:C6:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3330303a3a2f34322d3432203d3e20323635313837.roa
Signing time:             Tue 14 May 2024 17:10:19 +0000
ROA not before:           Tue 14 May 2024 17:05:19 +0000
ROA not after:            Tue 13 May 2025 17:10:19 +0000
asID:                     265187
IP address blocks:        2804:2c00:300::/42 maxlen: 42

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.crl
                          rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 06:24:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:d5:32:a3:21:34:de:cd:64:2a:9b:e4:49:49:a3:b3:7d:43:ce:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F455D0BE5138AE552B4857270EED2A7CE5B5C6F2
        Validity
            Not Before: May 14 17:05:19 2024 GMT
            Not After : May 13 17:10:19 2025 GMT
        Subject: CN=6F97A8F27369E1A81D9D48B4C4E87A13B9188397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c1:b3:c2:d3:79:53:e8:e6:94:b5:63:a7:93:
                    47:4d:96:83:4f:04:cd:cd:e2:2e:04:50:54:4a:3a:
                    01:a2:2a:b9:9f:71:6d:56:33:65:c9:e1:3f:ba:9a:
                    b0:56:75:1f:99:91:92:cf:e8:63:8b:cf:cb:f3:b6:
                    46:48:39:70:1f:73:a1:52:3f:7d:04:eb:05:5d:34:
                    be:d8:3c:ac:66:b2:59:d2:53:38:2b:e2:ca:31:79:
                    4b:36:11:3a:bd:1a:b7:0e:34:30:d9:6b:51:ab:ef:
                    9e:11:32:58:4b:d7:2d:24:64:8d:6b:4a:5a:2e:f7:
                    0e:77:33:ef:bd:87:b3:e6:c0:31:08:bb:8c:a9:a7:
                    8d:b2:e0:0c:b1:32:44:d0:80:b7:45:6d:33:15:59:
                    cf:fc:a4:a7:a4:b9:71:db:da:81:5a:67:22:e2:e9:
                    c3:39:f2:34:ca:09:9b:69:69:3f:08:27:3b:b7:0c:
                    8c:48:e9:e2:2d:8d:95:ef:6c:6d:c0:30:11:3d:b3:
                    42:9e:9c:ed:76:46:38:c7:34:4b:42:4d:dd:df:f3:
                    c8:73:9c:27:38:16:c9:57:ca:ea:72:56:e7:b8:f9:
                    77:bd:21:85:2b:0c:f8:ac:8d:fe:f7:a2:3f:fb:23:
                    b7:91:cc:41:d1:7e:12:2d:e7:9d:fd:66:ca:a0:0a:
                    ee:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:97:A8:F2:73:69:E1:A8:1D:9D:48:B4:C4:E8:7A:13:B9:18:83:97
            X509v3 Authority Key Identifier:
                keyid:F4:55:D0:BE:51:38:AE:55:2B:48:57:27:0E:ED:2A:7C:E5:B5:C6:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3330303a3a2f34322d3432203d3e20323635313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c00:300::/42

    Signature Algorithm: sha256WithRSAEncryption
         88:9c:26:b0:41:b1:df:24:19:73:02:19:eb:f3:e8:7b:1f:9d:
         ab:7b:40:e2:83:e6:b6:d5:06:67:d6:2b:d8:fb:23:34:64:b9:
         52:b1:85:90:a5:d9:ea:8d:a9:81:4f:bb:13:a1:fc:55:f4:0d:
         e3:cd:c4:e3:4b:c7:15:fb:b1:4f:73:e2:1f:9f:ad:ee:41:fa:
         17:74:41:22:19:ef:40:62:f1:e5:ef:91:0a:dc:47:2a:68:50:
         79:46:dd:40:12:f9:44:b9:9f:77:ad:4e:18:e9:59:9c:6c:cb:
         23:e4:df:3c:ca:02:96:1d:0e:17:e5:9b:3e:8f:e3:08:47:9f:
         fc:28:26:a8:11:c3:b6:ad:65:4c:d4:1d:db:4a:7b:ee:72:7a:
         2f:ac:eb:5d:d5:60:14:29:92:7b:d6:35:5c:9c:0b:37:e2:b5:
         02:09:7d:cc:1c:9c:83:fa:1e:e3:d0:a1:c1:ff:c6:30:0b:3a:
         c1:cd:21:99:c2:61:58:1b:e3:8f:d4:f4:59:cd:b0:48:32:89:
         c8:13:6d:38:47:99:ff:86:19:96:98:c6:81:2f:04:76:e8:9f:
         e9:f9:ee:eb:8d:ac:92:ab:70:79:c2:4a:cd:2c:d7:79:9e:51:
         10:24:43:d2:92:fc:22:19:45:74:b6:a1:1e:b8:e7:23:42:6f:
         50:7b:20:c0
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUM9UyoyE03s1kKpvkSUmjs31DziEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjQ1NUQwQkU1MTM4QUU1NTJCNDg1NzI3MEVFRDJBN0NF
NUI1QzZGMjAeFw0yNDA1MTQxNzA1MTlaFw0yNTA1MTMxNzEwMTlaMDMxMTAvBgNV
BAMTKDZGOTdBOEYyNzM2OUUxQTgxRDlENDhCNEM0RTg3QTEzQjkxODgzOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClwbPC03lT6OaUtWOnk0dNloNP
BM3N4i4EUFRKOgGiKrmfcW1WM2XJ4T+6mrBWdR+ZkZLP6GOLz8vztkZIOXAfc6FS
P30E6wVdNL7YPKxmslnSUzgr4soxeUs2ETq9GrcONDDZa1Gr754RMlhL1y0kZI1r
Slou9w53M++9h7PmwDEIu4ypp42y4AyxMkTQgLdFbTMVWc/8pKekuXHb2oFaZyLi
6cM58jTKCZtpaT8IJzu3DIxI6eItjZXvbG3AMBE9s0KenO12RjjHNEtCTd3f88hz
nCc4FslXyupyVue4+Xe9IYUrDPisjf73oj/7I7eRzEHRfhIt5539ZsqgCu7BAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUb5eo8nNp4agdnUi0xOh6E7kYg5cwHwYDVR0j
BBgwFoAU9FXQvlE4rlUrSFcnDu0qfOW1xvIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDdGSFE3YlkzN1Z4VkpvM2RFVmpwUGFweHBiekhrTUxnUUtUem5HYlFh
eGIvMC9GNDU1RDBCRTUxMzhBRTU1MkI0ODU3MjcwRUVEMkE3Q0U1QjVDNkYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y0NTVEMEJFNTEzOEFFNTUy
QjQ4NTcyNzBFRUQyQTdDRTVCNUM2RjIuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q3RkhRN2JZMzdWeFZKbzNkRVZqcFBhcHhwYnpIa01MZ1FLVHpuR2JRYXhiLzAv
MzIzODMwMzQzYTMyNjMzMDMwM2EzMzMwMzAzYTNhMmYzNDMyMmQzNDMyMjAzZDNl
MjAzMjM2MzUzMTM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwYoBCwAAwAwDQYJKoZIhvcNAQELBQAD
ggEBAIicJrBBsd8kGXMCGevz6Hsfnat7QOKD5rbVBmfWK9j7IzRkuVKxhZCl2eqN
qYFPuxOh/FX0DePNxONLxxX7sU9z4h+fre5B+hd0QSIZ70Bi8eXvkQrcRypoUHlG
3UAS+US5n3etThjpWZxsyyPk3zzKApYdDhflmz6P4whHn/woJqgRw7atZUzUHdtK
e+5yei+s613VYBQpknvWNVycCzfitQIJfcwcnIP6HuPQocH/xjALOsHNIZnCYVgb
44/U9FnNsEgyicgTbThHmf+GGZaYxoEvBHbon+n57uuNrJKrcHnCSs0s13meURAk
Q9KS/CIZRXS2oR645yNCb1B7IMA=
-----END CERTIFICATE-----
Generated at Sat Jun 1 11:14:16 2024 by rpki-client on console-fra.rpki-client.org