Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a376162633a3a2f34382d3438203d3e20323634343835.roa
File:                     323830343a323035303a376162633a3a2f34382d3438203d3e20323634343835.roa (raw, json)
Hash identifier:          uBaQE51NrWR0eWX7tqMpM1VnpHZQUk1iTpV+CJJ1lwE=
Subject key identifier:   5B:71:CF:02:B9:73:60:85:55:C7:18:3B:EA:89:12:01:15:77:00:33
Certificate issuer:       /CN=69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693
Certificate serial:       764224D0C233A158FD244676571E46DCE534559F
Authority key identifier: 69:FE:A1:F8:EF:47:CB:C9:7F:6D:B7:89:0A:8E:94:DF:2E:79:76:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a376162633a3a2f34382d3438203d3e20323634343835.roa
Signing time:             Tue 24 Sep 2024 19:47:55 +0000
ROA not before:           Tue 24 Sep 2024 19:42:55 +0000
ROA not after:            Tue 23 Sep 2025 19:47:55 +0000
asID:                     264485
IP address blocks:        2804:2050:7abc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.crl
                          rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 22:18:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:42:24:d0:c2:33:a1:58:fd:24:46:76:57:1e:46:dc:e5:34:55:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693
        Validity
            Not Before: Sep 24 19:42:55 2024 GMT
            Not After : Sep 23 19:47:55 2025 GMT
        Subject: CN=5B71CF02B973608555C7183BEA89120115770033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ed:cf:95:73:45:6d:da:2c:0b:d3:62:58:47:
                    71:6e:0a:dd:8a:7f:62:20:77:25:b2:0d:9d:dc:b9:
                    22:80:21:9c:99:36:1b:3a:cb:5b:c1:c9:70:b0:ca:
                    4b:d9:81:b9:18:c4:f6:f6:41:df:a0:38:20:56:8a:
                    14:2e:f3:8a:2a:ea:12:69:d4:ed:60:26:fd:a7:34:
                    56:08:a2:84:aa:0f:0d:4d:de:a1:90:35:aa:ec:29:
                    fe:f4:07:36:5b:c3:77:80:d7:72:d1:ff:ac:98:5c:
                    53:1f:ac:e2:65:d0:e6:62:17:67:1c:e8:af:3d:ed:
                    d6:02:b1:33:91:a2:08:d9:d3:ab:6c:bf:c0:7c:9e:
                    a4:6b:64:5b:22:b9:17:1e:ec:70:85:ad:cd:9a:5a:
                    62:c4:7c:c4:cf:59:25:85:fd:09:b3:ae:1f:d2:dd:
                    ff:6a:7d:9d:07:ba:61:4a:c0:47:57:de:fe:00:1e:
                    b1:16:96:81:ca:b3:45:9e:12:eb:7c:1c:c7:55:6a:
                    8b:78:7e:45:ea:2f:f1:d7:df:68:76:38:6c:7f:37:
                    b3:f2:17:72:d7:1d:f5:9b:35:4a:f5:33:ea:8b:e4:
                    ca:3e:1f:34:9f:73:71:09:4d:3e:f6:64:d0:b6:10:
                    99:28:c7:6d:6d:72:53:5f:6a:4f:ca:0f:5b:64:61:
                    38:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:71:CF:02:B9:73:60:85:55:C7:18:3B:EA:89:12:01:15:77:00:33
            X509v3 Authority Key Identifier:
                keyid:69:FE:A1:F8:EF:47:CB:C9:7F:6D:B7:89:0A:8E:94:DF:2E:79:76:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a376162633a3a2f34382d3438203d3e20323634343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2050:7abc::/48

    Signature Algorithm: sha256WithRSAEncryption
         aa:44:7a:17:24:93:76:a4:8e:c8:44:3e:f4:10:b8:08:12:25:
         a0:ac:ac:39:ac:b1:b6:0a:63:df:d3:55:ba:28:f1:d6:27:84:
         07:ca:38:fd:88:1e:46:53:37:77:d1:0a:5c:36:64:c1:4f:9a:
         e2:e7:99:d5:75:0f:b9:11:83:e6:3c:6e:9f:d7:42:f1:ab:67:
         d5:2e:2d:be:3d:89:15:e1:66:3f:64:92:0f:e7:1f:85:67:50:
         32:b0:00:b2:04:5d:59:b1:e2:60:0c:fc:70:d7:f4:bb:ad:19:
         72:4b:fc:ff:81:f0:20:21:cc:8f:12:a1:3b:dc:0e:ce:90:ee:
         20:af:bf:06:69:f2:e6:90:41:33:cb:1a:42:73:5f:cc:ae:3a:
         0f:aa:37:fc:10:98:0c:7c:fd:6d:d5:05:5b:20:ce:3c:b8:d5:
         e0:fa:a2:6b:70:dc:08:90:b9:1d:94:12:61:20:a9:f6:81:37:
         45:46:60:a2:12:b1:2e:75:3c:de:b5:8b:ba:07:54:13:47:d2:
         f8:ed:61:c1:f5:59:a0:ed:bb:70:c2:b1:50:34:da:d6:5f:c7:
         4a:a6:92:a8:56:7b:f4:c1:5b:56:f2:54:bb:f9:aa:a5:2b:d7:
         af:91:b9:f8:1c:a7:67:0d:75:f3:db:1f:0d:ec:39:ee:5e:3a:
         53:67:d0:66
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUdkIk0MIzoVj9JEZ2Vx5G3OU0VZ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjlGRUExRjhFRjQ3Q0JDOTdGNkRCNzg5MEE4RTk0REYy
RTc5NzY5MzAeFw0yNDA5MjQxOTQyNTVaFw0yNTA5MjMxOTQ3NTVaMDMxMTAvBgNV
BAMTKDVCNzFDRjAyQjk3MzYwODU1NUM3MTgzQkVBODkxMjAxMTU3NzAwMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq7c+Vc0Vt2iwL02JYR3FuCt2K
f2IgdyWyDZ3cuSKAIZyZNhs6y1vByXCwykvZgbkYxPb2Qd+gOCBWihQu84oq6hJp
1O1gJv2nNFYIooSqDw1N3qGQNarsKf70BzZbw3eA13LR/6yYXFMfrOJl0OZiF2cc
6K897dYCsTORogjZ06tsv8B8nqRrZFsiuRce7HCFrc2aWmLEfMTPWSWF/Qmzrh/S
3f9qfZ0HumFKwEdX3v4AHrEWloHKs0WeEut8HMdVaot4fkXqL/HX32h2OGx/N7Py
F3LXHfWbNUr1M+qL5Mo+HzSfc3EJTT72ZNC2EJkox21tclNfak/KD1tkYTjlAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUW3HPArlzYIVVxxg76okSARV3ADMwHwYDVR0j
BBgwFoAUaf6h+O9Hy8l/bbeJCo6U3y55dpMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRG5qQmdOZHN1WGVlYkhNbmUzZWJmbVhhdG9tRnQ0aGhyNjE3cG8xeFZF
SjYvMC82OUZFQTFGOEVGNDdDQkM5N0Y2REI3ODkwQThFOTRERjJFNzk3NjkzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY5RkVBMUY4RUY0N0NCQzk3
RjZEQjc4OTBBOEU5NERGMkU3OTc2OTMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RuakJnTmRzdVhlZWJITW5lM2ViZm1YYXRvbUZ0NGhocjYxN3BvMXhWRUo2LzAv
MzIzODMwMzQzYTMyMzAzNTMwM2EzNzYxNjI2MzNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzNDM0MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEIFB6vDANBgkqhkiG9w0BAQsF
AAOCAQEAqkR6FySTdqSOyEQ+9BC4CBIloKysOayxtgpj39NVuijx1ieEB8o4/Yge
RlM3d9EKXDZkwU+a4ueZ1XUPuRGD5jxun9dC8atn1S4tvj2JFeFmP2SSD+cfhWdQ
MrAAsgRdWbHiYAz8cNf0u60Zckv8/4HwICHMjxKhO9wOzpDuIK+/Bmny5pBBM8sa
QnNfzK46D6o3/BCYDHz9bdUFWyDOPLjV4Pqia3DcCJC5HZQSYSCp9oE3RUZgohKx
LnU83rWLugdUE0fS+O1hwfVZoO27cMKxUDTa1l/HSqaSqFZ79MFbVvJUu/mqpSvX
r5G5+BynZw1189sfDew57l46U2fQZg==
-----END CERTIFICATE-----
Generated at Fri Mar 14 06:16:09 2025 by rpki-client