Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Db27b5chpPQ3s2Z55iPS7pxfyaP2nVJombzdB9xywEeT/1/323830343a353130383a3a2f33322d3332203d3e20323638343236.roa
File:                     323830343a353130383a3a2f33322d3332203d3e20323638343236.roa (raw, json)
Hash identifier:          87V11xP/K8Ysm0MzknCf5nvobZtt2KfHkuv3PeYR5UY=
Subject key identifier:   90:EF:6C:58:DD:C3:C7:4B:DB:83:B9:70:07:B9:BD:9A:27:78:1A:C1
Certificate issuer:       /CN=9C5D5C9A5599F77587485119C21214F577AB3947
Certificate serial:       266BBFC0E34B32C4AFECC0111ADD6DA98EFF7D7C
Authority key identifier: 9C:5D:5C:9A:55:99:F7:75:87:48:51:19:C2:12:14:F5:77:AB:39:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C5D5C9A5599F77587485119C21214F577AB3947.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Db27b5chpPQ3s2Z55iPS7pxfyaP2nVJombzdB9xywEeT/1/323830343a353130383a3a2f33322d3332203d3e20323638343236.roa
Signing time:             Wed 03 Apr 2024 19:00:00 +0000
ROA not before:           Wed 03 Apr 2024 18:55:00 +0000
ROA not after:            Thu 03 Apr 2025 19:00:00 +0000
asID:                     268426
IP address blocks:        2804:5108::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Db27b5chpPQ3s2Z55iPS7pxfyaP2nVJombzdB9xywEeT/1/9C5D5C9A5599F77587485119C21214F577AB3947.crl
                          rsync://rpki-repo.registro.br/repo/Db27b5chpPQ3s2Z55iPS7pxfyaP2nVJombzdB9xywEeT/1/9C5D5C9A5599F77587485119C21214F577AB3947.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C5D5C9A5599F77587485119C21214F577AB3947.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:6b:bf:c0:e3:4b:32:c4:af:ec:c0:11:1a:dd:6d:a9:8e:ff:7d:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C5D5C9A5599F77587485119C21214F577AB3947
        Validity
            Not Before: Apr  3 18:55:00 2024 GMT
            Not After : Apr  3 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:82:81:79:5c:7a:a5:b5:5a:60:23:98:2f:bd:
                    22:77:ca:97:ac:0f:28:53:fe:6c:49:cb:f4:6c:71:
                    2c:d4:b8:62:ca:5f:01:aa:e7:9b:5a:84:86:6c:8c:
                    71:76:10:eb:19:14:fb:57:74:6c:46:ad:76:20:9a:
                    83:03:92:cd:8e:1d:7a:f3:4b:22:41:00:02:42:8a:
                    f3:ab:2d:35:87:63:b9:6f:6b:e9:7e:ee:f4:c2:a7:
                    2e:56:1c:71:10:2b:fc:51:96:f6:17:41:2f:fb:74:
                    50:2a:ae:68:42:8f:3d:a3:64:3d:74:ea:d4:90:1b:
                    1f:1f:4c:2b:6b:a4:8d:66:2d:f1:9d:81:bf:71:87:
                    e9:66:ff:02:7d:51:ca:a6:f2:4b:91:d7:04:3c:22:
                    04:a9:c0:9c:08:8d:2f:5c:0f:d6:d2:78:14:fb:c4:
                    4b:81:32:49:95:5e:f8:31:22:2a:5e:2b:23:7b:66:
                    f1:38:d6:a2:8f:07:3d:44:31:78:8d:72:4f:70:25:
                    e0:cd:a3:c7:06:d1:cb:1b:ad:50:b0:71:fe:1c:71:
                    0b:82:49:e1:d6:48:db:69:d9:a2:48:ba:4e:14:ab:
                    b4:70:9f:53:a5:47:d5:46:58:fd:2c:44:0b:9c:eb:
                    5d:7d:1c:ec:6c:59:69:5b:77:49:77:e4:f5:50:13:
                    d7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:EF:6C:58:DD:C3:C7:4B:DB:83:B9:70:07:B9:BD:9A:27:78:1A:C1
            X509v3 Authority Key Identifier:
                keyid:9C:5D:5C:9A:55:99:F7:75:87:48:51:19:C2:12:14:F5:77:AB:39:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Db27b5chpPQ3s2Z55iPS7pxfyaP2nVJombzdB9xywEeT/1/9C5D5C9A5599F77587485119C21214F577AB3947.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C5D5C9A5599F77587485119C21214F577AB3947.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Db27b5chpPQ3s2Z55iPS7pxfyaP2nVJombzdB9xywEeT/1/323830343a353130383a3a2f33322d3332203d3e20323638343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5108::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:bb:70:e6:c6:b6:e0:9b:9f:a8:1a:f7:8d:77:b9:e7:78:25:
         e0:41:ac:2a:7b:8d:50:7d:d9:ce:6f:b0:94:6c:f1:95:48:81:
         bd:db:b5:f5:45:04:75:19:b0:22:22:d3:7b:03:50:a7:23:d5:
         8e:17:60:63:84:13:91:1b:8b:a6:5f:2e:cf:16:4e:96:09:12:
         b5:03:ff:33:0c:14:5e:86:89:4d:82:b9:f0:73:27:64:bf:95:
         1e:7b:c1:68:d2:87:82:13:5a:f9:92:4f:dc:cf:aa:5f:6f:84:
         bc:f2:57:5f:e9:9e:67:ca:94:88:ec:30:be:7e:35:ea:1c:b0:
         67:10:89:b1:c7:e7:33:3b:80:21:ad:82:e4:1c:74:91:ab:59:
         32:52:2c:70:26:01:9a:96:4b:75:9d:97:1e:f9:1b:a5:e0:8f:
         0e:cb:3f:8a:f7:3c:54:1f:9c:93:e0:ff:3a:7a:b8:ae:20:06:
         6d:12:cb:f0:97:7a:f1:80:27:75:58:6a:54:94:1b:48:bb:93:
         ae:c2:7e:80:cc:29:be:d1:54:0c:76:c7:0d:2c:dc:e2:d4:78:
         62:37:bb:85:8d:61:36:64:ca:32:3e:8e:97:dc:15:3e:c8:0c:
         88:05:cd:ad:b0:1d:d4:ae:9f:48:f9:22:e4:d3:ec:55:e6:73:
         b0:b9:5a:d4
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUJmu/wONLMsSv7MARGt1tqY7/fXwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUM1RDVDOUE1NTk5Rjc3NTg3NDg1MTE5QzIxMjE0RjU3
N0FCMzk0NzAeFw0yNDA0MDMxODU1MDBaFw0yNTA0MDMxOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDA4MjgxNzk1QzdBQTVCNTVB
NjAyMzk4MkZCRDIyNzdDQTk3QUMwRjI4NTNGRTZDNDlDQkY0NkM3MTJDRDRCODYy
Q0E1RjAxQUFFNzlCNUE4NDg2NkM4QzcxNzYxMEVCMTkxNEZCNTc3NDZDNDZBRDc2
MjA5QTgzMDM5MkNEOEUxRDdBRjM0QjIyNDEwMDAyNDI4QUYzQUIyRDM1ODc2M0I5
NkY2QkU5N0VFRUY0QzJBNzJFNTYxQzcxMTAyQkZDNTE5NkY2MTc0MTJGRkI3NDUw
MkFBRTY4NDI4RjNEQTM2NDNENzRFQUQ0OTAxQjFGMUY0QzJCNkJBNDhENjYyREYx
OUQ4MUJGNzE4N0U5NjZGRjAyN0Q1MUNBQTZGMjRCOTFENzA0M0MyMjA0QTlDMDlD
MDg4RDJGNUMwRkQ2RDI3ODE0RkJDNDRCODEzMjQ5OTU1RUY4MzEyMjJBNUUyQjIz
N0I2NkYxMzhENkEyOEYwNzNENDQzMTc4OEQ3MjRGNzAyNUUwQ0RBM0M3MDZEMUNC
MUJBRDUwQjA3MUZFMUM3MTBCODI0OUUxRDY0OERCNjlEOUEyNDhCQTRFMTRBQkI0
NzA5RjUzQTU0N0Q1NDY1OEZEMkM0NDBCOUNFQjVEN0QxQ0VDNkM1OTY5NUI3NzQ5
NzdFNEY1NTAxM0Q3ODkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0IKBeVx6pbVaYCOYL70id8qXrA8oU/5sScv0bHEs1Lhiyl8Bqueb
WoSGbIxxdhDrGRT7V3RsRq12IJqDA5LNjh1680siQQACQorzqy01h2O5b2vpfu70
wqcuVhxxECv8UZb2F0Ev+3RQKq5oQo89o2Q9dOrUkBsfH0wra6SNZi3xnYG/cYfp
Zv8CfVHKpvJLkdcEPCIEqcCcCI0vXA/W0ngU+8RLgTJJlV74MSIqXisje2bxONai
jwc9RDF4jXJPcCXgzaPHBtHLG61QsHH+HHELgknh1kjbadmiSLpOFKu0cJ9TpUfV
Rlj9LEQLnOtdfRzsbFlpW3dJd+T1UBPXiQIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FJDvbFjdw8dL24O5cAe5vZoneBrBMB8GA1UdIwQYMBaAFJxdXJpVmfd1h0hRGcIS
FPV3qzlHMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RiMjdiNWNocFBRM3My
WjU1aVBTN3B4ZnlhUDJuVkpvbWJ6ZEI5eHl3RWVULzEvOUM1RDVDOUE1NTk5Rjc3
NTg3NDg1MTE5QzIxMjE0RjU3N0FCMzk0Ny5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS85QzVENUM5QTU1OTlGNzc1ODc0ODUxMTlDMjEyMTRGNTc3QUIz
OTQ3LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9EYjI3YjVjaHBQUTNzMlo1NWlQ
UzdweGZ5YVAyblZKb21iemRCOXh5d0VlVC8xLzMyMzgzMDM0M2EzNTMxMzAzODNh
M2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzODM0MzIzNi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
UQgwDQYJKoZIhvcNAQELBQADggEBAIS7cObGtuCbn6ga9413ued4JeBBrCp7jVB9
2c5vsJRs8ZVIgb3btfVFBHUZsCIi03sDUKcj1Y4XYGOEE5Ebi6ZfLs8WTpYJErUD
/zMMFF6GiU2CufBzJ2S/lR57wWjSh4ITWvmST9zPql9vhLzyV1/pnmfKlIjsML5+
NeocsGcQibHH5zM7gCGtguQcdJGrWTJSLHAmAZqWS3Wdlx75G6Xgjw7LP4r3PFQf
nJPg/zp6uK4gBm0Sy/CXevGAJ3VYalSUG0i7k67CfoDMKb7RVAx2xw0s3OLUeGI3
u4WNYTZkyjI+jpfcFT7IDIgFza2wHdSun0j5IuTT7FXmc7C5WtQ=
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:43 2024 by rpki-client on console-ams.rpki-client.org