Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E75EAhsiHth2YT9GViLis1nBe66AecPYQdb1SJy4KJjV/1/323830343a363366633a3a2f33322d3334203d3e20323639333936.roa
File:                     323830343a363366633a3a2f33322d3334203d3e20323639333936.roa (raw, json)
Hash identifier:          dLrvTPMzoRnpwvg++Vv0H3u9MPtNdAjcLJpAaHz8PI8=
Subject key identifier:   74:1B:52:6A:C7:30:14:7C:47:6A:60:6D:9E:64:18:86:A7:4B:AF:8E
Certificate issuer:       /CN=B7090EAB1A08216F934538653EBAD5DA08C323A4
Certificate serial:       6526AF79781C6CFD5532AEAC318E47CB133B60B5
Authority key identifier: B7:09:0E:AB:1A:08:21:6F:93:45:38:65:3E:BA:D5:DA:08:C3:23:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7090EAB1A08216F934538653EBAD5DA08C323A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E75EAhsiHth2YT9GViLis1nBe66AecPYQdb1SJy4KJjV/1/323830343a363366633a3a2f33322d3334203d3e20323639333936.roa
Signing time:             Thu 04 Apr 2024 14:07:57 +0000
ROA not before:           Thu 04 Apr 2024 14:02:57 +0000
ROA not after:            Thu 03 Apr 2025 14:07:57 +0000
asID:                     269396
IP address blocks:        2804:63fc::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E75EAhsiHth2YT9GViLis1nBe66AecPYQdb1SJy4KJjV/1/B7090EAB1A08216F934538653EBAD5DA08C323A4.crl
                          rsync://rpki-repo.registro.br/repo/E75EAhsiHth2YT9GViLis1nBe66AecPYQdb1SJy4KJjV/1/B7090EAB1A08216F934538653EBAD5DA08C323A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7090EAB1A08216F934538653EBAD5DA08C323A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:26:af:79:78:1c:6c:fd:55:32:ae:ac:31:8e:47:cb:13:3b:60:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7090EAB1A08216F934538653EBAD5DA08C323A4
        Validity
            Not Before: Apr  4 14:02:57 2024 GMT
            Not After : Apr  3 14:07:57 2025 GMT
        Subject: CN=741B526AC730147C476A606D9E641886A74BAF8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ad:4f:a7:12:d3:67:cf:35:d8:0d:a2:90:66:
                    f0:b9:85:e9:2b:aa:a6:2b:38:76:cf:a9:31:25:f4:
                    04:62:58:12:c2:fc:84:f8:4e:66:76:4b:ca:65:95:
                    44:6b:1c:2c:5c:08:66:15:ef:c2:7c:2e:bc:91:2c:
                    7d:4a:f7:aa:91:db:23:e3:60:2f:d8:d3:30:c3:be:
                    7a:a9:01:4e:98:df:c6:a5:b7:b1:ec:72:25:a9:a1:
                    7d:1b:20:8f:20:e4:a1:37:d4:4b:c4:04:a0:4f:ff:
                    2a:5a:32:19:35:4b:82:5e:a7:f2:90:63:e5:46:27:
                    50:3c:d5:c0:2f:b1:38:09:0e:12:10:eb:bd:02:ba:
                    a9:98:99:f7:a1:b0:d3:23:b7:ea:41:06:5f:d7:8d:
                    b4:7a:05:48:9d:60:2b:44:02:01:8f:b9:b4:a6:42:
                    73:9f:ee:88:e2:35:34:e9:62:6c:00:5e:80:f4:77:
                    5a:9f:09:2e:df:ee:9c:fc:3e:69:e0:4d:b5:76:63:
                    e8:0a:14:74:2e:17:4b:fb:da:ee:61:d0:bb:04:38:
                    4c:9a:78:d7:df:35:67:b8:97:90:03:7f:26:73:ca:
                    af:ab:6e:cb:4b:fc:78:e9:0d:cc:7a:95:15:c9:67:
                    f7:db:8a:07:59:ee:93:32:54:dd:eb:05:09:d0:08:
                    73:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:1B:52:6A:C7:30:14:7C:47:6A:60:6D:9E:64:18:86:A7:4B:AF:8E
            X509v3 Authority Key Identifier:
                keyid:B7:09:0E:AB:1A:08:21:6F:93:45:38:65:3E:BA:D5:DA:08:C3:23:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E75EAhsiHth2YT9GViLis1nBe66AecPYQdb1SJy4KJjV/1/B7090EAB1A08216F934538653EBAD5DA08C323A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7090EAB1A08216F934538653EBAD5DA08C323A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E75EAhsiHth2YT9GViLis1nBe66AecPYQdb1SJy4KJjV/1/323830343a363366633a3a2f33322d3334203d3e20323639333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:63fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:18:f6:5a:d9:81:81:81:36:c1:6d:14:c5:fc:70:ed:de:31:
         ea:57:bf:e3:31:d3:fe:c1:7d:4f:82:90:41:c7:01:0c:26:10:
         2d:e2:56:0c:d2:fd:9d:65:c6:a6:52:94:56:34:ee:b5:d2:91:
         a6:e9:61:a5:36:5a:6c:b9:19:7c:df:46:fd:61:14:67:ed:6f:
         27:18:9b:fb:11:72:be:f2:8f:71:fa:dc:37:c9:48:8e:14:67:
         3f:47:2a:8e:e1:fb:3e:10:a0:91:6f:45:c8:1d:9f:78:04:a9:
         74:c9:07:88:3a:f6:c5:47:a0:93:0f:71:a4:d3:f7:20:79:2a:
         fe:b9:92:7a:42:fe:93:7e:ac:dc:94:d5:bd:9e:91:5c:20:38:
         47:a1:59:e5:ab:75:11:7b:28:f4:94:2d:ed:ea:b8:a9:da:ea:
         f7:0d:da:8f:9d:fa:6b:37:de:d0:48:4f:d0:2d:7d:f0:2d:7d:
         48:a1:d1:8c:bd:7f:3a:db:70:ec:9f:5a:96:8c:e6:ae:92:51:
         e9:72:5d:7e:4a:d4:4c:ce:4b:f6:96:84:b9:46:4b:8c:e8:90:
         65:d0:01:92:2d:a1:07:91:f6:9b:2c:92:4b:f0:e9:bb:be:72:
         be:80:a9:54:0c:a9:fb:c5:a8:c3:b2:ab:04:e0:1f:9f:72:29:
         4c:1d:58:d3
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUZSaveXgcbP1VMq6sMY5HyxM7YLUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjcwOTBFQUIxQTA4MjE2RjkzNDUzODY1M0VCQUQ1REEw
OEMzMjNBNDAeFw0yNDA0MDQxNDAyNTdaFw0yNTA0MDMxNDA3NTdaMDMxMTAvBgNV
BAMTKDc0MUI1MjZBQzczMDE0N0M0NzZBNjA2RDlFNjQxODg2QTc0QkFGOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCrU+nEtNnzzXYDaKQZvC5hekr
qqYrOHbPqTEl9ARiWBLC/IT4TmZ2S8pllURrHCxcCGYV78J8LryRLH1K96qR2yPj
YC/Y0zDDvnqpAU6Y38alt7HsciWpoX0bII8g5KE31EvEBKBP/ypaMhk1S4Jep/KQ
Y+VGJ1A81cAvsTgJDhIQ670CuqmYmfehsNMjt+pBBl/XjbR6BUidYCtEAgGPubSm
QnOf7ojiNTTpYmwAXoD0d1qfCS7f7pz8PmngTbV2Y+gKFHQuF0v72u5h0LsEOEya
eNffNWe4l5ADfyZzyq+rbstL/HjpDcx6lRXJZ/fbigdZ7pMyVN3rBQnQCHN5AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUdBtSascwFHxHamBtnmQYhqdLr44wHwYDVR0j
BBgwFoAUtwkOqxoIIW+TRThlPrrV2gjDI6QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTc1RUFoc2lIdGgyWVQ5R1ZpTGlzMW5CZTY2QWVjUFlRZGIxU0p5NEtK
alYvMS9CNzA5MEVBQjFBMDgyMTZGOTM0NTM4NjUzRUJBRDVEQTA4QzMyM0E0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I3MDkwRUFCMUEwODIxNkY5
MzQ1Mzg2NTNFQkFENURBMDhDMzIzQTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0U3NUVBaHNpSHRoMllUOUdWaUxpczFuQmU2NkFlY1BZUWRiMVNKeTRLSmpWLzEv
MzIzODMwMzQzYTM2MzM2NjYzM2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjM5
MzMzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARj/DANBgkqhkiG9w0BAQsFAAOCAQEAgxj2WtmB
gYE2wW0Uxfxw7d4x6le/4zHT/sF9T4KQQccBDCYQLeJWDNL9nWXGplKUVjTutdKR
pulhpTZabLkZfN9G/WEUZ+1vJxib+xFyvvKPcfrcN8lIjhRnP0cqjuH7PhCgkW9F
yB2feASpdMkHiDr2xUegkw9xpNP3IHkq/rmSekL+k36s3JTVvZ6RXCA4R6FZ5at1
EXso9JQt7eq4qdrq9w3aj536azfe0EhP0C198C19SKHRjL1/Ottw7J9alozmrpJR
6XJdfkrUTM5L9paEuUZLjOiQZdABki2hB5H2myySS/Dpu75yvoCpVAyp+8Wow7Kr
BOAfn3IpTB1Y0w==
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:19 2024 by rpki-client on console-ams.rpki-client.org