Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/323830343a313232343a3a2f33322d3332203d3e20323633343539.roa
File:                     323830343a313232343a3a2f33322d3332203d3e20323633343539.roa (raw, json)
Hash identifier:          VgM7z43PAIizc3kk8jRa4j2oKhxbUCqZkWlNjvdXK/g=
Subject key identifier:   C1:39:CE:3B:DD:02:CA:7C:66:8A:CE:CB:90:C7:AC:DF:5D:16:6C:85
Certificate issuer:       /CN=1F0D021CF25E5F3E38DAB45DEEDD26D661CFE78E
Certificate serial:       1BE61D1481BFD93FE55FD5AB7E5BB462E4660419
Authority key identifier: 1F:0D:02:1C:F2:5E:5F:3E:38:DA:B4:5D:EE:DD:26:D6:61:CF:E7:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F0D021CF25E5F3E38DAB45DEEDD26D661CFE78E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/323830343a313232343a3a2f33322d3332203d3e20323633343539.roa
Signing time:             Fri 06 Sep 2024 12:52:49 +0000
ROA not before:           Fri 06 Sep 2024 12:47:49 +0000
ROA not after:            Fri 05 Sep 2025 12:52:49 +0000
asID:                     263459
IP address blocks:        2804:1224::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/1F0D021CF25E5F3E38DAB45DEEDD26D661CFE78E.crl
                          rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/1F0D021CF25E5F3E38DAB45DEEDD26D661CFE78E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F0D021CF25E5F3E38DAB45DEEDD26D661CFE78E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 07:21:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:e6:1d:14:81:bf:d9:3f:e5:5f:d5:ab:7e:5b:b4:62:e4:66:04:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F0D021CF25E5F3E38DAB45DEEDD26D661CFE78E
        Validity
            Not Before: Sep  6 12:47:49 2024 GMT
            Not After : Sep  5 12:52:49 2025 GMT
        Subject: CN=C139CE3BDD02CA7C668ACECB90C7ACDF5D166C85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b7:9f:f5:9f:36:b7:a9:3f:dc:64:57:74:9e:
                    f0:e6:b0:41:5c:6f:5e:60:d2:11:3e:f5:1e:e5:f7:
                    df:5c:d5:05:d1:24:33:9e:f2:5c:d7:9f:40:d5:f0:
                    f8:52:0d:2b:8c:81:44:2e:83:d0:45:6b:d5:23:8f:
                    d8:a4:51:a6:3d:28:14:af:94:f7:1f:2f:ff:24:57:
                    c8:ca:e4:c8:91:38:44:09:f6:29:d6:97:45:a2:bd:
                    6c:fc:48:5e:0b:98:fe:18:f0:65:6e:c0:3c:29:c1:
                    95:0b:27:bc:79:dd:7a:c8:d8:5f:4c:df:0e:28:4f:
                    eb:c4:d7:21:4d:31:99:8e:25:cc:c8:74:55:40:38:
                    be:ad:b7:6e:71:b3:b0:f6:f3:3b:e2:c1:86:c8:cb:
                    bb:95:d7:78:6f:43:aa:59:78:49:4f:b1:75:f1:61:
                    4a:c3:4e:74:64:b6:84:1f:03:da:99:55:dc:03:f9:
                    07:b4:9e:29:47:2f:5d:28:40:2b:34:6d:c9:2c:6e:
                    67:ab:23:b2:c6:54:3d:c0:5c:27:f8:e0:bc:80:bf:
                    b0:0e:64:81:b8:64:9e:b6:c7:ce:40:ce:f8:30:1d:
                    0b:88:cf:d0:ed:60:47:fc:73:53:56:9a:0d:3b:0d:
                    e1:e7:83:e9:9a:54:b9:ab:30:7f:cb:65:b8:f1:91:
                    15:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:39:CE:3B:DD:02:CA:7C:66:8A:CE:CB:90:C7:AC:DF:5D:16:6C:85
            X509v3 Authority Key Identifier:
                keyid:1F:0D:02:1C:F2:5E:5F:3E:38:DA:B4:5D:EE:DD:26:D6:61:CF:E7:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/1F0D021CF25E5F3E38DAB45DEEDD26D661CFE78E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F0D021CF25E5F3E38DAB45DEEDD26D661CFE78E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/323830343a313232343a3a2f33322d3332203d3e20323633343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1224::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:8f:39:e0:93:81:5c:ca:5a:be:54:02:d4:9a:43:9c:16:df:
         d3:30:f5:97:b8:0d:50:59:70:72:6b:4f:52:80:2c:56:83:a7:
         b8:f8:3a:95:67:ad:ed:36:bb:84:b1:68:fd:6b:89:e6:5c:5e:
         79:88:6a:cf:21:38:72:a0:f0:c3:17:fd:d8:61:ef:1c:b3:10:
         68:fd:b8:b4:ee:2c:b2:a1:de:dd:af:fa:3e:5e:fa:66:72:88:
         af:44:57:07:f7:a2:9b:8c:ba:45:d9:ed:3c:0f:94:25:7d:b6:
         37:bf:11:03:d2:42:8e:5f:7f:e8:8d:f3:38:01:ad:ac:b8:9b:
         b8:df:ba:48:ad:f3:4a:6f:37:dd:8b:31:7d:2c:bc:0f:65:76:
         c4:5c:ec:7e:35:9e:37:5f:bc:f6:44:e7:9e:68:af:96:74:cf:
         2f:2b:7c:82:0a:90:c5:86:b8:b6:dd:d6:a1:ed:34:67:1f:4f:
         5b:ac:5e:da:31:4b:d6:f5:6a:31:74:35:d6:96:5a:a8:18:70:
         78:b4:e9:9b:9c:e4:3c:2d:67:4a:75:f2:ca:1b:2c:ca:25:b4:
         6c:03:e9:fc:6b:7c:63:f0:11:c0:00:d2:f5:7c:3f:99:c2:66:
         bc:78:29:6c:b4:91:cd:62:91:d9:f4:94:b8:bf:f2:ac:8c:a1:
         34:cc:9b:70
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUG+YdFIG/2T/lX9Wrflu0YuRmBBkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUYwRDAyMUNGMjVFNUYzRTM4REFCNDVERUVERDI2RDY2
MUNGRTc4RTAeFw0yNDA5MDYxMjQ3NDlaFw0yNTA5MDUxMjUyNDlaMDMxMTAvBgNV
BAMTKEMxMzlDRTNCREQwMkNBN0M2NjhBQ0VDQjkwQzdBQ0RGNUQxNjZDODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYt5/1nza3qT/cZFd0nvDmsEFc
b15g0hE+9R7l999c1QXRJDOe8lzXn0DV8PhSDSuMgUQug9BFa9Ujj9ikUaY9KBSv
lPcfL/8kV8jK5MiROEQJ9inWl0WivWz8SF4LmP4Y8GVuwDwpwZULJ7x53XrI2F9M
3w4oT+vE1yFNMZmOJczIdFVAOL6tt25xs7D28zviwYbIy7uV13hvQ6pZeElPsXXx
YUrDTnRktoQfA9qZVdwD+Qe0nilHL10oQCs0bcksbmerI7LGVD3AXCf44LyAv7AO
ZIG4ZJ62x85AzvgwHQuIz9DtYEf8c1NWmg07DeHng+maVLmrMH/LZbjxkRXzAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUwTnOO90Cynxmis7LkMes310WbIUwHwYDVR0j
BBgwFoAUHw0CHPJeXz442rRd7t0m1mHP544wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRURybUNpaW9Kb0xzdVozTFE3dno3VDF0bTdCOEJ0VVpCTUtTU3JnaGt3
S1QvMC8xRjBEMDIxQ0YyNUU1RjNFMzhEQUI0NURFRUREMjZENjYxQ0ZFNzhFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFGMEQwMjFDRjI1RTVGM0Uz
OERBQjQ1REVFREQyNkQ2NjFDRkU3OEUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VEcm1DaWlvSm9Mc3VaM0xRN3Z6N1QxdG03QjhCdFVaQk1LU1NyZ2hrd0tULzAv
MzIzODMwMzQzYTMxMzIzMjM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjMz
MzQzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQSJDANBgkqhkiG9w0BAQsFAAOCAQEAio854JOB
XMpavlQC1JpDnBbf0zD1l7gNUFlwcmtPUoAsVoOnuPg6lWet7Ta7hLFo/WuJ5lxe
eYhqzyE4cqDwwxf92GHvHLMQaP24tO4ssqHe3a/6Pl76ZnKIr0RXB/eim4y6Rdnt
PA+UJX22N78RA9JCjl9/6I3zOAGtrLibuN+6SK3zSm833YsxfSy8D2V2xFzsfjWe
N1+89kTnnmivlnTPLyt8ggqQxYa4tt3Woe00Zx9PW6xe2jFL1vVqMXQ11pZaqBhw
eLTpm5zkPC1nSnXyyhssyiW0bAPp/Gt8Y/ARwADS9Xw/mcJmvHgpbLSRzWKR2fSU
uL/yrIyhNMybcA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:34:10 2024 by rpki-client on console-ams.rpki-client.org