Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/323830343a343530383a3a2f33322d3332203d3e20323637363638.roa
File:                     323830343a343530383a3a2f33322d3332203d3e20323637363638.roa (raw, json)
Hash identifier:          U1HFv6hKNTtLLbGoNzeQ+moyUl3g8TeuqPqIPUt8uCk=
Subject key identifier:   B2:8D:D2:9E:F9:81:4F:AF:E6:93:23:62:91:1F:4C:70:C7:FF:85:86
Certificate issuer:       /CN=E78F0A2152F1A8E4D5B309774272DB70D8BDE05D
Certificate serial:       581FC74B337F57E09B0841CB069764EE596E992A
Authority key identifier: E7:8F:0A:21:52:F1:A8:E4:D5:B3:09:77:42:72:DB:70:D8:BD:E0:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/323830343a343530383a3a2f33322d3332203d3e20323637363638.roa
Signing time:             Thu 15 Aug 2024 20:08:03 +0000
ROA not before:           Thu 15 Aug 2024 20:03:03 +0000
ROA not after:            Thu 14 Aug 2025 20:08:03 +0000
asID:                     267668
IP address blocks:        2804:4508::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.crl
                          rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:11:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:1f:c7:4b:33:7f:57:e0:9b:08:41:cb:06:97:64:ee:59:6e:99:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78F0A2152F1A8E4D5B309774272DB70D8BDE05D
        Validity
            Not Before: Aug 15 20:03:03 2024 GMT
            Not After : Aug 14 20:08:03 2025 GMT
        Subject: CN=B28DD29EF9814FAFE6932362911F4C70C7FF8586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:66:9d:ca:ca:ff:6f:55:5f:d1:cb:d6:5a:14:
                    49:12:9b:e1:02:cd:57:d9:4a:49:ef:d8:49:ef:1a:
                    43:90:c2:28:26:08:74:fd:51:b5:ee:05:88:6e:49:
                    0a:51:76:e9:cf:78:72:ac:f2:9d:c0:a9:e8:6b:27:
                    a3:55:87:e6:49:c6:e4:0c:6d:2a:58:cc:6c:92:f6:
                    83:fe:b1:f6:a0:da:fd:f4:0b:97:4a:19:fb:36:a8:
                    2a:7e:3f:a6:ed:d1:bc:0b:41:70:8c:ee:03:a5:b2:
                    1f:62:2b:59:2f:2f:7d:fd:ce:16:c2:e8:d2:50:99:
                    e6:5b:bf:c3:b6:de:3a:26:0b:a6:84:e8:84:a7:5e:
                    0a:ca:7a:08:5b:7e:d0:13:0f:f8:e3:83:5c:6d:80:
                    37:cf:1c:4a:d3:e2:c2:af:52:c9:b1:9c:94:4e:6e:
                    0c:1d:8a:37:b2:17:c1:22:7b:d3:08:62:f7:61:69:
                    fc:f3:1b:84:9c:c7:8d:47:e8:a3:89:17:65:a7:08:
                    f3:b2:64:5e:c9:d6:bd:16:f9:85:ac:52:09:20:71:
                    6d:55:6a:28:91:6a:9a:f5:71:d4:c4:fe:4e:e7:21:
                    d6:0e:51:d6:1a:ed:ff:68:b6:91:b6:14:29:6e:17:
                    47:89:54:f3:8a:ca:f6:b3:1a:6d:7b:22:84:6d:b8:
                    77:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:8D:D2:9E:F9:81:4F:AF:E6:93:23:62:91:1F:4C:70:C7:FF:85:86
            X509v3 Authority Key Identifier:
                keyid:E7:8F:0A:21:52:F1:A8:E4:D5:B3:09:77:42:72:DB:70:D8:BD:E0:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/323830343a343530383a3a2f33322d3332203d3e20323637363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4508::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:91:c1:19:b0:83:a5:1a:5b:29:e6:63:01:49:f7:d2:5d:e9:
         19:8e:01:e6:38:7a:24:1d:9a:0c:40:74:77:ad:68:e5:13:6e:
         76:e1:2a:42:d5:46:e2:3d:60:d7:a7:51:57:b4:4d:79:f4:32:
         14:cc:62:30:5a:6c:a2:2b:d0:b8:19:0e:76:7f:56:b6:b1:7e:
         30:57:2a:75:ae:41:b0:ed:dc:41:10:61:03:e0:b9:9f:79:08:
         dd:60:75:3e:85:0c:5c:62:39:30:9c:ad:30:9e:bc:4b:80:13:
         00:e4:b0:b6:7d:fe:cc:a2:4f:1c:2c:ae:1f:a6:67:a3:12:98:
         7b:89:e9:be:92:9c:6e:c3:59:9b:12:ee:da:f3:b3:02:72:2f:
         29:42:5a:26:1b:37:0b:5d:1a:ee:34:36:f2:01:90:0c:41:22:
         e0:81:12:1b:1f:85:2d:95:32:50:6f:bf:48:12:40:74:18:5e:
         75:ed:4a:fa:65:27:92:90:4e:60:32:a3:8b:2e:ea:db:82:68:
         62:a0:15:7e:07:02:6f:9c:3e:e9:d5:dc:63:7d:1e:49:ac:5a:
         ea:85:de:2c:10:85:16:5b:f2:45:71:c5:c3:2e:7a:70:f9:a1:
         65:a9:76:f9:33:af:b2:57:c6:ea:d6:4d:73:e6:73:8e:c6:9e:
         84:96:d2:a6
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUWB/HSzN/V+CbCEHLBpdk7llumSowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTc4RjBBMjE1MkYxQThFNEQ1QjMwOTc3NDI3MkRCNzBE
OEJERTA1RDAeFw0yNDA4MTUyMDAzMDNaFw0yNTA4MTQyMDA4MDNaMDMxMTAvBgNV
BAMTKEIyOEREMjlFRjk4MTRGQUZFNjkzMjM2MjkxMUY0QzcwQzdGRjg1ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTZp3Kyv9vVV/Ry9ZaFEkSm+EC
zVfZSknv2EnvGkOQwigmCHT9UbXuBYhuSQpRdunPeHKs8p3AqehrJ6NVh+ZJxuQM
bSpYzGyS9oP+sfag2v30C5dKGfs2qCp+P6bt0bwLQXCM7gOlsh9iK1kvL339zhbC
6NJQmeZbv8O23jomC6aE6ISnXgrKeghbftATD/jjg1xtgDfPHErT4sKvUsmxnJRO
bgwdijeyF8Eie9MIYvdhafzzG4Scx41H6KOJF2WnCPOyZF7J1r0W+YWsUgkgcW1V
aiiRapr1cdTE/k7nIdYOUdYa7f9otpG2FCluF0eJVPOKyvazGm17IoRtuHdnAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUso3SnvmBT6/mkyNikR9McMf/hYYwHwYDVR0j
BBgwFoAU548KIVLxqOTVswl3QnLbcNi94F0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVVicEZZS1RRc21WcG45b3dqcUN2TnlxQ3NCM1hkNzJOVzVnWkd5aWt5
TGEvMS9FNzhGMEEyMTUyRjFBOEU0RDVCMzA5Nzc0MjcyREI3MEQ4QkRFMDVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U3OEYwQTIxNTJGMUE4RTRE
NUIzMDk3NzQyNzJEQjcwRDhCREUwNUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VVYnBGWUtUUXNtVnBuOW93anFDdk55cUNzQjNYZDcyTlc1Z1pHeWlreUxhLzEv
MzIzODMwMzQzYTM0MzUzMDM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM3
MzYzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARFCDANBgkqhkiG9w0BAQsFAAOCAQEAcpHBGbCD
pRpbKeZjAUn30l3pGY4B5jh6JB2aDEB0d61o5RNuduEqQtVG4j1g16dRV7RNefQy
FMxiMFpsoivQuBkOdn9WtrF+MFcqda5BsO3cQRBhA+C5n3kI3WB1PoUMXGI5MJyt
MJ68S4ATAOSwtn3+zKJPHCyuH6ZnoxKYe4npvpKcbsNZmxLu2vOzAnIvKUJaJhs3
C10a7jQ28gGQDEEi4IESGx+FLZUyUG+/SBJAdBhede1K+mUnkpBOYDKjiy7q24Jo
YqAVfgcCb5w+6dXcY30eSaxa6oXeLBCFFlvyRXHFwy56cPmhZal2+TOvslfG6tZN
c+ZzjsaehJbSpg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:07 2024 by rpki-client on console-ams.rpki-client.org