Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/1/323830343a383937383a343030303a3a2f33352d3335203d3e20323733363036.roa
File:                     323830343a383937383a343030303a3a2f33352d3335203d3e20323733363036.roa (raw, json)
Hash identifier:          fIRWwKFsLggK7ZMAtqbbdOFBNgcUB5iec6KrmUi0cPA=
Subject key identifier:   5C:68:05:2E:69:B5:8B:11:96:EE:56:55:DC:5A:33:48:7F:C2:35:C4
Certificate issuer:       /CN=391294F0484586F9131E6D65BFFAE01A3E7BDCC4
Certificate serial:       7E996BF35CA61F86E436FC0C695B1A44A1CCAA02
Authority key identifier: 39:12:94:F0:48:45:86:F9:13:1E:6D:65:BF:FA:E0:1A:3E:7B:DC:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/391294F0484586F9131E6D65BFFAE01A3E7BDCC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/1/323830343a383937383a343030303a3a2f33352d3335203d3e20323733363036.roa
Signing time:             Mon 08 Apr 2024 20:38:50 +0000
ROA not before:           Mon 08 Apr 2024 20:33:50 +0000
ROA not after:            Mon 07 Apr 2025 20:38:50 +0000
asID:                     273606
IP address blocks:        2804:8978:4000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/1/391294F0484586F9131E6D65BFFAE01A3E7BDCC4.crl
                          rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/1/391294F0484586F9131E6D65BFFAE01A3E7BDCC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/391294F0484586F9131E6D65BFFAE01A3E7BDCC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:99:6b:f3:5c:a6:1f:86:e4:36:fc:0c:69:5b:1a:44:a1:cc:aa:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391294F0484586F9131E6D65BFFAE01A3E7BDCC4
        Validity
            Not Before: Apr  8 20:33:50 2024 GMT
            Not After : Apr  7 20:38:50 2025 GMT
        Subject: CN=5C68052E69B58B1196EE5655DC5A33487FC235C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2f:1a:6a:18:24:49:8d:d7:78:47:a9:74:c9:
                    8f:71:3c:2f:b1:e3:76:cc:f7:29:6f:83:7c:1e:81:
                    48:1a:66:6f:46:28:9d:c9:c3:09:05:b4:41:08:93:
                    d2:65:ce:4b:5f:ee:61:96:82:1f:f0:f7:8c:f9:90:
                    42:b2:43:72:1d:e2:0b:ff:cc:b4:5d:aa:15:e8:28:
                    62:7d:c9:33:19:3e:33:7b:4c:ca:11:3b:36:05:ad:
                    be:a8:ba:59:48:7c:8e:b0:c9:f5:eb:71:26:d9:9e:
                    ba:68:6d:91:5c:ee:1e:1c:2f:2b:24:3e:be:8b:c1:
                    c4:c5:cd:b0:02:d9:cd:76:34:92:98:fb:90:88:c0:
                    02:30:64:84:b3:fb:15:c1:21:b0:98:e3:cf:a1:6d:
                    02:9d:b4:4c:50:68:3c:c2:2f:79:31:f7:2d:20:c5:
                    c1:7e:ad:67:61:a1:e4:00:69:d0:1c:15:b6:13:4b:
                    ad:e1:e3:e5:72:fe:0e:8c:ac:a5:85:df:41:de:80:
                    00:3b:4e:cc:e5:6c:c9:33:f9:f9:69:84:2c:16:10:
                    27:97:ee:e2:67:e2:f8:36:73:18:3d:09:7a:aa:4b:
                    5a:e4:e2:ed:26:46:4f:e8:c1:0b:86:be:d1:52:c4:
                    4b:d1:80:c7:2d:27:64:7d:50:17:08:a1:67:4f:85:
                    62:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:68:05:2E:69:B5:8B:11:96:EE:56:55:DC:5A:33:48:7F:C2:35:C4
            X509v3 Authority Key Identifier:
                keyid:39:12:94:F0:48:45:86:F9:13:1E:6D:65:BF:FA:E0:1A:3E:7B:DC:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/1/391294F0484586F9131E6D65BFFAE01A3E7BDCC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/391294F0484586F9131E6D65BFFAE01A3E7BDCC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/1/323830343a383937383a343030303a3a2f33352d3335203d3e20323733363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8978:4000::/35

    Signature Algorithm: sha256WithRSAEncryption
         55:3b:2d:eb:2d:6b:fb:38:28:53:2a:4e:27:05:e4:d4:25:e2:
         9b:09:24:62:ba:17:21:50:29:ce:bf:67:89:01:9e:ca:3a:8b:
         81:9d:31:1e:87:ff:a4:b5:e0:3b:e1:5c:aa:57:41:20:38:dc:
         6f:82:bc:2e:24:00:5f:64:b9:a5:13:50:7e:e5:ea:46:80:80:
         51:d3:41:16:ab:84:98:22:85:79:78:5e:d9:fa:93:8f:27:76:
         39:e8:3a:8f:1d:aa:7a:81:8d:b6:bb:15:25:c0:78:b4:44:45:
         5f:0c:6b:a9:4c:49:3d:52:a1:c5:e9:77:8a:b1:87:07:29:ff:
         2e:6f:f0:e4:63:2a:e1:bd:03:07:32:2c:80:38:2f:b6:b8:8d:
         7e:e5:54:ea:b3:b7:ed:1e:7a:a2:5d:ee:15:77:e0:27:2f:3f:
         ef:35:95:58:29:01:02:2d:29:29:e0:30:83:f3:d9:8d:7e:ea:
         42:21:c8:6e:d0:2b:27:d7:91:f5:83:af:7c:ca:64:62:09:95:
         7e:fb:64:5c:c6:63:95:0d:e0:ff:33:d1:8a:89:c9:d0:1a:2f:
         01:c8:f9:08:e6:52:48:cd:ce:53:ea:19:0e:c0:7e:7d:d5:59:
         61:b0:64:d4:86:70:eb:e7:bf:19:42:20:cd:7c:48:32:18:86:
         0c:26:26:9a
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUfplr81ymH4bkNvwMaVsaRKHMqgIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzkxMjk0RjA0ODQ1ODZGOTEzMUU2RDY1QkZGQUUwMUEz
RTdCRENDNDAeFw0yNDA0MDgyMDMzNTBaFw0yNTA0MDcyMDM4NTBaMDMxMTAvBgNV
BAMTKDVDNjgwNTJFNjlCNThCMTE5NkVFNTY1NURDNUEzMzQ4N0ZDMjM1QzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQLxpqGCRJjdd4R6l0yY9xPC+x
43bM9ylvg3wegUgaZm9GKJ3JwwkFtEEIk9Jlzktf7mGWgh/w94z5kEKyQ3Id4gv/
zLRdqhXoKGJ9yTMZPjN7TMoROzYFrb6oullIfI6wyfXrcSbZnrpobZFc7h4cLysk
Pr6LwcTFzbAC2c12NJKY+5CIwAIwZISz+xXBIbCY48+hbQKdtExQaDzCL3kx9y0g
xcF+rWdhoeQAadAcFbYTS63h4+Vy/g6MrKWF30HegAA7TszlbMkz+flphCwWECeX
7uJn4vg2cxg9CXqqS1rk4u0mRk/owQuGvtFSxEvRgMctJ2R9UBcIoWdPhWL/AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUXGgFLmm1ixGW7lZV3FozSH/CNcQwHwYDVR0j
BBgwFoAUORKU8EhFhvkTHm1lv/rgGj573MQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHNwV1hBaTF4NmpMd3pORWVTNmVzVGZDejZTb0dZajRzdjZKTERjMncz
Y2EvMS8zOTEyOTRGMDQ4NDU4NkY5MTMxRTZENjVCRkZBRTAxQTNFN0JEQ0M0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM5MTI5NEYwNDg0NTg2Rjkx
MzFFNkQ2NUJGRkFFMDFBM0U3QkRDQzQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RzcFdYQWkxeDZqTHd6TkVlUzZlc1RmQ3o2U29HWWo0c3Y2SkxEYzJ3M2NhLzEv
MzIzODMwMzQzYTM4MzkzNzM4M2EzNDMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk
M2UyMDMyMzczMzM2MzAzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSgEiXhAMA0GCSqGSIb3DQEBCwUA
A4IBAQBVOy3rLWv7OChTKk4nBeTUJeKbCSRiuhchUCnOv2eJAZ7KOouBnTEeh/+k
teA74VyqV0EgONxvgrwuJABfZLmlE1B+5epGgIBR00EWq4SYIoV5eF7Z+pOPJ3Y5
6DqPHap6gY22uxUlwHi0REVfDGupTEk9UqHF6XeKsYcHKf8ub/DkYyrhvQMHMiyA
OC+2uI1+5VTqs7ftHnqiXe4Vd+AnLz/vNZVYKQECLSkp4DCD89mNfupCIchu0Csn
15H1g698ymRiCZV++2RcxmOVDeD/M9GKicnQGi8ByPkI5lJIzc5T6hkOwH591Vlh
sGTUhnDr578ZQiDNfEgyGIYMJiaa
-----END CERTIFICATE-----
Generated at Tue Nov 26 08:30:18 2024 by rpki-client on console-ams.rpki-client.org