Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a3a2f33322d3332203d3e20323634323437.roa
File:                     323830343a323465343a3a2f33322d3332203d3e20323634323437.roa (raw, json)
Hash identifier:          6t0k8e1Gs0YZ6EbhNCea1mBsnx+SR73S1sbV9CtjURQ=
Subject key identifier:   DA:57:0C:FA:36:D6:0F:82:FA:A4:B1:32:EA:34:B1:F8:1E:BF:ED:D7
Certificate issuer:       /CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
Certificate serial:       21C7CFF7178BCF7E63F733A4A00E34DCBFDC9B75
Authority key identifier: 12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a3a2f33322d3332203d3e20323634323437.roa
Signing time:             Wed 03 Apr 2024 18:31:24 +0000
ROA not before:           Wed 03 Apr 2024 18:26:24 +0000
ROA not after:            Wed 02 Apr 2025 18:31:24 +0000
asID:                     264247
IP address blocks:        2804:24e4::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.crl
                          rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:c7:cf:f7:17:8b:cf:7e:63:f7:33:a4:a0:0e:34:dc:bf:dc:9b:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
        Validity
            Not Before: Apr  3 18:26:24 2024 GMT
            Not After : Apr  2 18:31:24 2025 GMT
        Subject: CN=DA570CFA36D60F82FAA4B132EA34B1F81EBFEDD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:61:53:0a:19:25:02:d6:c3:89:f8:41:81:12:
                    6e:7a:d7:9b:16:33:58:a6:0e:65:b2:3c:c6:91:0b:
                    0d:c8:d4:21:3e:83:45:3f:f9:32:1c:f1:39:10:d4:
                    bd:1f:d0:12:07:31:3b:95:2c:38:12:94:f6:9e:f3:
                    09:a8:8f:5a:c0:20:46:3a:f8:82:23:cd:35:8b:11:
                    60:09:10:58:af:0b:ba:39:62:63:39:db:de:84:61:
                    c6:d8:19:da:85:a4:24:e0:30:bf:0a:c9:ad:da:1d:
                    af:b4:82:98:ad:77:82:84:99:97:9a:c3:88:de:56:
                    11:92:84:e3:05:e2:cf:f7:1f:95:c9:70:bb:c0:3c:
                    8b:57:c7:87:80:b1:0b:3f:eb:df:2a:51:e6:4a:fa:
                    ef:84:35:c0:0d:b2:cb:6c:81:4a:c1:d9:0c:9b:ab:
                    8e:97:ab:db:22:c9:5c:65:9b:75:9a:db:8c:b8:2e:
                    37:6c:43:c9:4c:45:f5:da:9e:27:11:4b:7c:43:7e:
                    7e:59:08:2b:4a:4d:dd:0f:6d:d5:f2:e9:ac:be:02:
                    19:af:f9:e8:2a:73:9f:6d:6f:fe:79:d4:87:03:22:
                    71:51:5d:49:49:b2:6f:1c:fc:e0:12:f3:83:1e:4e:
                    d6:65:4e:ea:98:4f:b6:de:eb:86:ba:38:78:92:76:
                    2a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:57:0C:FA:36:D6:0F:82:FA:A4:B1:32:EA:34:B1:F8:1E:BF:ED:D7
            X509v3 Authority Key Identifier:
                keyid:12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a3a2f33322d3332203d3e20323634323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:ed:f5:96:04:a3:97:2e:fa:f1:91:23:10:57:77:56:59:0e:
         db:4b:81:74:0b:cc:66:71:63:11:ed:c8:8b:0d:8e:d0:12:f8:
         37:f3:a0:a2:39:04:1d:93:f4:e8:e0:1e:ea:98:c8:a2:a3:95:
         08:fc:78:af:b4:b1:ba:1e:f9:d6:e9:64:bb:68:74:2b:83:c7:
         c3:e0:bc:22:b5:78:bb:93:82:d3:54:71:26:e7:d9:d1:8b:53:
         66:bf:7a:7b:f3:2e:b3:58:58:51:7f:a0:34:95:cb:1d:2e:0d:
         15:05:8a:43:4d:63:85:ef:1e:91:72:2d:b4:d6:0b:c2:af:c5:
         dd:8b:f5:cc:30:6c:5e:75:3c:24:75:05:d5:4c:94:89:36:40:
         08:2c:6e:5f:f4:4e:16:7d:62:e4:ef:9f:0d:8a:96:90:c2:c4:
         6c:54:19:98:a7:92:8e:b3:fd:85:27:49:f8:fb:64:02:6e:3a:
         09:d0:0c:b1:da:93:b2:0f:07:d8:71:8d:75:f9:a6:58:78:01:
         b3:e4:ab:13:ac:fd:7a:dd:0e:ff:7b:0c:e4:eb:a0:69:a7:f9:
         da:2d:44:bf:14:37:5d:ab:9b:65:8c:80:8e:13:a7:33:d3:5c:
         f0:2e:73:b5:50:01:4c:fd:3a:82:c4:18:9f:78:26:a1:de:49:
         be:b8:07:ff
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUIcfP9xeLz35j9zOkoA403L/cm3UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTJGRTE2RkFDRDI5OTMxNkZDRUY3M0NGRUE3ODI4NDRE
N0MyRTY5ODAeFw0yNDA0MDMxODI2MjRaFw0yNTA0MDIxODMxMjRaMDMxMTAvBgNV
BAMTKERBNTcwQ0ZBMzZENjBGODJGQUE0QjEzMkVBMzRCMUY4MUVCRkVERDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbYVMKGSUC1sOJ+EGBEm5615sW
M1imDmWyPMaRCw3I1CE+g0U/+TIc8TkQ1L0f0BIHMTuVLDgSlPae8wmoj1rAIEY6
+IIjzTWLEWAJEFivC7o5YmM5296EYcbYGdqFpCTgML8Kya3aHa+0gpitd4KEmZea
w4jeVhGShOMF4s/3H5XJcLvAPItXx4eAsQs/698qUeZK+u+ENcANsstsgUrB2Qyb
q46Xq9siyVxlm3Wa24y4LjdsQ8lMRfXanicRS3xDfn5ZCCtKTd0PbdXy6ay+Ahmv
+egqc59tb/551IcDInFRXUlJsm8c/OAS84MeTtZlTuqYT7be64a6OHiSdio/AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU2lcM+jbWD4L6pLEy6jSx+B6/7dcwHwYDVR0j
BBgwFoAUEv4W+s0pkxb873PP6ngoRNfC5pgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGlBdHRMaURMaXJEUjMycWdlZk5oTDNzdkhTYUh0VXltM0dxaHVaWFY0
dHMvMS8xMkZFMTZGQUNEMjk5MzE2RkNFRjczQ0ZFQTc4Mjg0NEQ3QzJFNjk4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEyRkUxNkZBQ0QyOTkzMTZG
Q0VGNzNDRkVBNzgyODQ0RDdDMkU2OTguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RpQXR0TGlETGlyRFIzMnFnZWZOaEwzc3ZIU2FIdFV5bTNHcWh1WlhWNHRzLzEv
MzIzODMwMzQzYTMyMzQ2NTM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM0
MzIzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQk5DANBgkqhkiG9w0BAQsFAAOCAQEAkO31lgSj
ly768ZEjEFd3VlkO20uBdAvMZnFjEe3Iiw2O0BL4N/OgojkEHZP06OAe6pjIoqOV
CPx4r7Sxuh751ulku2h0K4PHw+C8IrV4u5OC01RxJufZ0YtTZr96e/Mus1hYUX+g
NJXLHS4NFQWKQ01jhe8ekXIttNYLwq/F3Yv1zDBsXnU8JHUF1UyUiTZACCxuX/RO
Fn1i5O+fDYqWkMLEbFQZmKeSjrP9hSdJ+PtkAm46CdAMsdqTsg8H2HGNdfmmWHgB
s+SrE6z9et0O/3sM5Ougaaf52i1EvxQ3XaubZYyAjhOnM9Nc8C5ztVABTP06gsQY
n3gmod5JvrgH/w==
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:26 2024 by rpki-client on console-ams.rpki-client.org