Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/1/323830343a346333383a3a2f33322d3335203d3e20323637333537.roa
File:                     323830343a346333383a3a2f33322d3335203d3e20323637333537.roa (raw, json)
Hash identifier:          FlbHV4RYqo/7L1Mr7nQPheHxzm9nPF7XphcqlCYiExs=
Subject key identifier:   E6:EA:52:D1:A7:01:A5:E4:D0:95:71:FD:49:0A:46:B0:FE:1A:11:99
Certificate issuer:       /CN=17ED80E395F8EFDA83018AB531CF36E32B3374B4
Certificate serial:       59D10957383008B5FB0CA5662B915E785909CE69
Authority key identifier: 17:ED:80:E3:95:F8:EF:DA:83:01:8A:B5:31:CF:36:E3:2B:33:74:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17ED80E395F8EFDA83018AB531CF36E32B3374B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/1/323830343a346333383a3a2f33322d3335203d3e20323637333537.roa
Signing time:             Thu 04 Apr 2024 08:14:55 +0000
ROA not before:           Thu 04 Apr 2024 08:09:55 +0000
ROA not after:            Thu 03 Apr 2025 08:14:55 +0000
asID:                     267357
IP address blocks:        2804:4c38::/32 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/1/17ED80E395F8EFDA83018AB531CF36E32B3374B4.crl
                          rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/1/17ED80E395F8EFDA83018AB531CF36E32B3374B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17ED80E395F8EFDA83018AB531CF36E32B3374B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:d1:09:57:38:30:08:b5:fb:0c:a5:66:2b:91:5e:78:59:09:ce:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17ED80E395F8EFDA83018AB531CF36E32B3374B4
        Validity
            Not Before: Apr  4 08:09:55 2024 GMT
            Not After : Apr  3 08:14:55 2025 GMT
        Subject: CN=E6EA52D1A701A5E4D09571FD490A46B0FE1A1199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:23:c7:94:0c:c3:55:c2:49:2a:87:d4:a8:bb:
                    27:34:8a:c0:d4:bf:30:a3:ba:52:0a:8f:fe:b6:ff:
                    5a:d8:e6:d1:72:46:2d:1c:01:6a:77:85:99:31:4f:
                    34:d5:3f:6c:ce:24:22:30:84:f8:61:ed:44:7a:9e:
                    ff:05:9b:bd:02:10:33:b4:46:67:88:3f:58:5d:85:
                    17:67:6d:73:a5:21:a2:6e:5c:0f:4e:1d:8a:a1:83:
                    a1:b5:b7:76:c0:94:d5:30:cc:35:51:fd:7a:9c:01:
                    f7:f7:4c:a5:d1:ae:97:60:44:bc:8f:6d:8f:97:ba:
                    9c:78:0d:a2:4a:48:04:51:a0:12:37:9a:68:da:d0:
                    ef:c0:00:6c:65:49:c7:16:c0:76:17:2e:b4:68:84:
                    f7:41:b0:e4:27:fc:32:1e:92:14:88:2c:47:a3:33:
                    27:28:1a:65:88:b4:67:60:fc:c1:a2:ab:df:8e:08:
                    d2:a9:f5:84:74:fa:5d:cb:07:f7:e6:76:d8:48:85:
                    5e:bb:e0:6f:f0:5b:c3:46:63:34:b5:1b:f7:e9:3a:
                    e0:3a:f8:75:ae:39:86:36:c3:85:9c:96:27:49:36:
                    17:ce:91:c6:4e:2f:7d:1c:3c:56:de:f2:ce:9e:16:
                    15:70:17:fb:e3:58:e9:43:d6:b9:e6:b8:ce:26:93:
                    de:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:EA:52:D1:A7:01:A5:E4:D0:95:71:FD:49:0A:46:B0:FE:1A:11:99
            X509v3 Authority Key Identifier:
                keyid:17:ED:80:E3:95:F8:EF:DA:83:01:8A:B5:31:CF:36:E3:2B:33:74:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/1/17ED80E395F8EFDA83018AB531CF36E32B3374B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17ED80E395F8EFDA83018AB531CF36E32B3374B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/1/323830343a346333383a3a2f33322d3335203d3e20323637333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c38::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:fe:d5:b6:18:c8:2b:5b:8c:33:70:4f:c8:58:6c:2d:ff:12:
         49:3d:34:40:09:d1:cf:ad:33:ca:86:ef:b8:c3:32:1c:66:95:
         0b:32:6e:e4:e2:c5:0f:7c:d4:9c:56:0c:76:7f:e9:14:92:b3:
         79:81:74:66:dc:f1:d5:7f:07:3a:e4:55:02:63:c0:2f:01:00:
         11:34:0e:ce:e5:8e:90:0b:d1:5e:82:ae:ef:b3:bb:01:af:dd:
         df:52:0f:74:4d:88:cc:9e:9f:96:d8:f9:f1:37:21:9c:6b:34:
         2c:be:bb:90:50:9e:35:98:37:52:ea:d0:e9:81:ea:9e:31:0b:
         b2:3d:db:7f:fa:03:ed:8d:3d:1d:eb:64:33:06:c5:1c:06:7c:
         3d:33:cc:0f:e2:ad:36:79:f7:0a:08:f9:53:53:cf:3e:0a:7a:
         60:8e:db:55:e3:bf:c4:5a:bf:08:41:4d:b2:60:14:6a:08:66:
         96:fc:dd:4b:53:d8:bb:41:c7:fe:8a:c4:4a:d8:76:9a:10:54:
         6c:1b:89:35:b9:97:e0:71:06:8d:86:98:6c:ba:78:13:d2:64:
         be:34:4a:6e:13:63:25:e2:6e:a8:a4:ba:45:21:80:11:e5:12:
         86:66:cb:73:94:aa:1b:36:b7:05:44:d3:da:ff:a1:90:d2:ac:
         9d:78:ea:7a
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUWdEJVzgwCLX7DKVmK5FeeFkJzmkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTdFRDgwRTM5NUY4RUZEQTgzMDE4QUI1MzFDRjM2RTMy
QjMzNzRCNDAeFw0yNDA0MDQwODA5NTVaFw0yNTA0MDMwODE0NTVaMDMxMTAvBgNV
BAMTKEU2RUE1MkQxQTcwMUE1RTREMDk1NzFGRDQ5MEE0NkIwRkUxQTExOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUI8eUDMNVwkkqh9Souyc0isDU
vzCjulIKj/62/1rY5tFyRi0cAWp3hZkxTzTVP2zOJCIwhPhh7UR6nv8Fm70CEDO0
RmeIP1hdhRdnbXOlIaJuXA9OHYqhg6G1t3bAlNUwzDVR/XqcAff3TKXRrpdgRLyP
bY+Xupx4DaJKSARRoBI3mmja0O/AAGxlSccWwHYXLrRohPdBsOQn/DIekhSILEej
MycoGmWItGdg/MGiq9+OCNKp9YR0+l3LB/fmdthIhV674G/wW8NGYzS1G/fpOuA6
+HWuOYY2w4WclidJNhfOkcZOL30cPFbe8s6eFhVwF/vjWOlD1rnmuM4mk96TAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU5upS0acBpeTQlXH9SQpGsP4aEZkwHwYDVR0j
BBgwFoAUF+2A45X479qDAYq1Mc824yszdLQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTZKUnVycnlCVHpVS2dpNVViVU5KUE1Qa0ptckt1TjJxSFBLVWlrWjM4
OVUvMS8xN0VEODBFMzk1RjhFRkRBODMwMThBQjUzMUNGMzZFMzJCMzM3NEI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE3RUQ4MEUzOTVGOEVGREE4
MzAxOEFCNTMxQ0YzNkUzMkIzMzc0QjQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0U2SlJ1cnJ5QlR6VUtnaTVVYlVOSlBNUGtKbXJLdU4ycUhQS1Vpa1ozODlVLzEv
MzIzODMwMzQzYTM0NjMzMzM4M2EzYTJmMzMzMjJkMzMzNTIwM2QzZTIwMzIzNjM3
MzMzNTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARMODANBgkqhkiG9w0BAQsFAAOCAQEAP/7VthjI
K1uMM3BPyFhsLf8SST00QAnRz60zyobvuMMyHGaVCzJu5OLFD3zUnFYMdn/pFJKz
eYF0Ztzx1X8HOuRVAmPALwEAETQOzuWOkAvRXoKu77O7Aa/d31IPdE2IzJ6fltj5
8TchnGs0LL67kFCeNZg3UurQ6YHqnjELsj3bf/oD7Y09HetkMwbFHAZ8PTPMD+Kt
Nnn3Cgj5U1PPPgp6YI7bVeO/xFq/CEFNsmAUaghmlvzdS1PYu0HH/orESth2mhBU
bBuJNbmX4HEGjYaYbLp4E9JkvjRKbhNjJeJuqKS6RSGAEeUShmbLc5SqGza3BUTT
2v+hkNKsnXjqeg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:57 2024 by rpki-client on console-fra.rpki-client.org