Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/1/323830343a363063633a3a2f33322d3332203d3e20323639313932.roa
File:                     323830343a363063633a3a2f33322d3332203d3e20323639313932.roa (raw, json)
Hash identifier:          4gOw6E+MbgHyoMrOl1WCa0r8yMUGMMB9L2x9Mu0OJqc=
Subject key identifier:   F3:BC:C5:E3:A5:18:A5:3F:A1:1F:2F:17:CF:0D:6B:68:0C:62:7B:97
Certificate issuer:       /CN=19DB591368FFC9C033D175BED1136000D4C84821
Certificate serial:       6833DFD7EEB0484AD64AF1F975008098F460FC6D
Authority key identifier: 19:DB:59:13:68:FF:C9:C0:33:D1:75:BE:D1:13:60:00:D4:C8:48:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19DB591368FFC9C033D175BED1136000D4C84821.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/1/323830343a363063633a3a2f33322d3332203d3e20323639313932.roa
Signing time:             Wed 03 Apr 2024 18:31:59 +0000
ROA not before:           Wed 03 Apr 2024 18:26:59 +0000
ROA not after:            Wed 02 Apr 2025 18:31:59 +0000
asID:                     269192
IP address blocks:        2804:60cc::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/1/19DB591368FFC9C033D175BED1136000D4C84821.crl
                          rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/1/19DB591368FFC9C033D175BED1136000D4C84821.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19DB591368FFC9C033D175BED1136000D4C84821.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:33:df:d7:ee:b0:48:4a:d6:4a:f1:f9:75:00:80:98:f4:60:fc:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19DB591368FFC9C033D175BED1136000D4C84821
        Validity
            Not Before: Apr  3 18:26:59 2024 GMT
            Not After : Apr  2 18:31:59 2025 GMT
        Subject: CN=F3BCC5E3A518A53FA11F2F17CF0D6B680C627B97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:95:77:59:65:86:6a:0f:12:fb:1a:03:4f:97:
                    0f:dc:dd:aa:66:7e:69:2f:8d:8e:81:e5:95:bf:eb:
                    4f:92:f0:d0:21:e1:88:37:1e:5c:41:6b:d7:79:6b:
                    e2:fe:c3:5c:36:05:2e:f6:4a:b1:a7:3d:4e:c8:26:
                    5b:20:59:9d:0f:70:00:96:e8:21:51:44:85:51:df:
                    b6:6b:d7:2e:b6:8e:9a:0b:db:1a:71:c9:6c:fa:d8:
                    1d:0e:27:c9:44:a1:7e:bd:71:77:1b:6f:c9:6b:95:
                    a7:80:1b:7d:be:eb:e7:d1:50:6e:02:5d:df:89:8a:
                    03:61:4f:e6:9c:0e:a7:4f:6c:e3:cb:a1:07:bf:80:
                    a0:c8:aa:8b:0c:b2:38:27:15:c3:18:73:bc:1b:41:
                    ce:60:34:af:de:08:66:a8:a1:47:fa:ce:8f:2f:dc:
                    a7:58:e8:48:3c:76:0c:e7:ee:60:03:8a:be:42:00:
                    1a:3b:9f:2f:dc:58:28:eb:81:54:7e:54:ee:da:03:
                    e9:b6:93:c9:7b:15:7a:3c:7d:a6:1e:a9:e1:b6:ee:
                    22:e2:d7:05:e1:94:d9:23:2b:a3:03:e9:ac:a2:5d:
                    5e:14:4d:d1:c1:b4:68:a4:f0:2d:dc:08:70:e8:d4:
                    f3:15:40:c9:bb:e5:3e:e5:0b:6b:96:77:af:84:3f:
                    ff:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:BC:C5:E3:A5:18:A5:3F:A1:1F:2F:17:CF:0D:6B:68:0C:62:7B:97
            X509v3 Authority Key Identifier:
                keyid:19:DB:59:13:68:FF:C9:C0:33:D1:75:BE:D1:13:60:00:D4:C8:48:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/1/19DB591368FFC9C033D175BED1136000D4C84821.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19DB591368FFC9C033D175BED1136000D4C84821.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/1/323830343a363063633a3a2f33322d3332203d3e20323639313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:3f:07:86:a5:db:cb:8a:a3:1e:0c:47:15:1d:75:aa:32:97:
         e0:e5:7f:37:7c:63:a1:a3:fc:b9:5a:19:23:db:1c:dd:8e:95:
         20:19:05:18:99:08:91:a6:d8:40:8d:0b:42:20:a5:b6:41:19:
         2d:f6:57:5f:f1:ab:fa:5d:b9:14:f6:e6:3d:b6:51:41:d7:63:
         b9:51:72:37:95:2c:26:58:33:42:ca:89:d7:ae:bc:14:14:74:
         df:95:ed:0a:3a:21:cf:c8:f2:44:99:b6:1f:03:da:f0:a4:80:
         62:13:eb:50:fa:1d:b3:0e:2b:49:ff:86:19:8e:08:7f:71:c4:
         d9:7d:ad:0f:16:2e:b3:8c:08:27:26:21:cb:eb:2e:3a:d6:f1:
         7e:8a:34:fb:c2:e5:2b:13:fd:d7:bc:3c:06:16:5f:d6:ec:82:
         d7:9b:87:92:94:82:d0:ff:c8:9b:8e:82:a6:55:34:0a:a8:86:
         3b:cd:4b:e6:f5:36:2d:74:20:23:13:3b:0c:c0:06:e6:05:1f:
         2a:30:66:cd:57:8d:6f:93:08:30:ad:cd:f0:d7:0b:a2:41:8e:
         3a:4e:ba:88:d7:17:19:23:dd:1f:55:dd:30:4f:0e:b6:23:78:
         fe:e5:58:26:ad:df:50:4d:b8:4e:99:cf:a0:b1:18:60:ac:7e:
         49:1e:bd:51
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUaDPf1+6wSErWSvH5dQCAmPRg/G0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTlEQjU5MTM2OEZGQzlDMDMzRDE3NUJFRDExMzYwMDBE
NEM4NDgyMTAeFw0yNDA0MDMxODI2NTlaFw0yNTA0MDIxODMxNTlaMDMxMTAvBgNV
BAMTKEYzQkNDNUUzQTUxOEE1M0ZBMTFGMkYxN0NGMEQ2QjY4MEM2MjdCOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZlXdZZYZqDxL7GgNPlw/c3apm
fmkvjY6B5ZW/60+S8NAh4Yg3HlxBa9d5a+L+w1w2BS72SrGnPU7IJlsgWZ0PcACW
6CFRRIVR37Zr1y62jpoL2xpxyWz62B0OJ8lEoX69cXcbb8lrlaeAG32+6+fRUG4C
Xd+JigNhT+acDqdPbOPLoQe/gKDIqosMsjgnFcMYc7wbQc5gNK/eCGaooUf6zo8v
3KdY6Eg8dgzn7mADir5CABo7ny/cWCjrgVR+VO7aA+m2k8l7FXo8faYeqeG27iLi
1wXhlNkjK6MD6ayiXV4UTdHBtGik8C3cCHDo1PMVQMm75T7lC2uWd6+EP//zAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU87zF46UYpT+hHy8Xzw1raAxie5cwHwYDVR0j
BBgwFoAUGdtZE2j/ycAz0XW+0RNgANTISCEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGpZcnE4cmFuMWJSREVvUGM5aXZVZlM5NnZxb2R3WnpoMmNGSk5KeEpt
a3MvMS8xOURCNTkxMzY4RkZDOUMwMzNEMTc1QkVEMTEzNjAwMEQ0Qzg0ODIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE5REI1OTEzNjhGRkM5QzAz
M0QxNzVCRUQxMTM2MDAwRDRDODQ4MjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RqWXJxOHJhbjFiUkRFb1BjOWl2VWZTOTZ2cW9kd1p6aDJjRkpOSnhKbWtzLzEv
MzIzODMwMzQzYTM2MzA2MzYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM5
MzEzOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARgzDANBgkqhkiG9w0BAQsFAAOCAQEAJT8HhqXb
y4qjHgxHFR11qjKX4OV/N3xjoaP8uVoZI9sc3Y6VIBkFGJkIkabYQI0LQiCltkEZ
LfZXX/Gr+l25FPbmPbZRQddjuVFyN5UsJlgzQsqJ1668FBR035XtCjohz8jyRJm2
HwPa8KSAYhPrUPodsw4rSf+GGY4If3HE2X2tDxYus4wIJyYhy+suOtbxfoo0+8Ll
KxP917w8BhZf1uyC15uHkpSC0P/Im46CplU0CqiGO81L5vU2LXQgIxM7DMAG5gUf
KjBmzVeNb5MIMK3N8NcLokGOOk66iNcXGSPdH1XdME8OtiN4/uVYJq3fUE24TpnP
oLEYYKx+SR69UQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:11 2024 by rpki-client on console-fra.rpki-client.org