Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/1/323830343a313336343a3a2f33322d3438203d3e20323633353332.roa
File:                     323830343a313336343a3a2f33322d3438203d3e20323633353332.roa (raw, json)
Hash identifier:          EdZJD4lR2kvbArc2/yCIId4cvOwM9/YEI5zqhhDtrAs=
Subject key identifier:   AB:4A:0B:90:ED:D7:B0:5C:43:AD:DA:09:1E:4C:36:85:14:65:DB:C2
Certificate issuer:       /CN=40024D9137B1E11B244B48E87E69634A33E200A3
Certificate serial:       1C5BC8B11084A361DDF23636124CCBC5738F8001
Authority key identifier: 40:02:4D:91:37:B1:E1:1B:24:4B:48:E8:7E:69:63:4A:33:E2:00:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40024D9137B1E11B244B48E87E69634A33E200A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/1/323830343a313336343a3a2f33322d3438203d3e20323633353332.roa
Signing time:             Thu 04 Apr 2024 08:12:44 +0000
ROA not before:           Thu 04 Apr 2024 08:07:44 +0000
ROA not after:            Thu 03 Apr 2025 08:12:44 +0000
asID:                     263532
IP address blocks:        2804:1364::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/1/40024D9137B1E11B244B48E87E69634A33E200A3.crl
                          rsync://rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/1/40024D9137B1E11B244B48E87E69634A33E200A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40024D9137B1E11B244B48E87E69634A33E200A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:5b:c8:b1:10:84:a3:61:dd:f2:36:36:12:4c:cb:c5:73:8f:80:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40024D9137B1E11B244B48E87E69634A33E200A3
        Validity
            Not Before: Apr  4 08:07:44 2024 GMT
            Not After : Apr  3 08:12:44 2025 GMT
        Subject: CN=AB4A0B90EDD7B05C43ADDA091E4C36851465DBC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e4:bd:7d:90:1e:77:5a:f9:98:4e:d8:90:92:
                    0a:04:c9:ec:22:ea:7b:e5:e1:61:0a:50:8b:ae:d7:
                    d3:55:fe:2f:59:89:9d:50:f8:3d:9f:24:e8:7d:df:
                    7b:b7:de:b8:4c:3a:07:e9:0b:b7:35:62:1c:9a:0b:
                    bc:4e:3e:e6:c6:eb:04:f2:9f:be:3a:e2:70:ef:60:
                    15:66:22:e4:e9:02:bb:97:e8:6c:6d:5c:b7:32:e1:
                    5b:0a:ba:1b:47:a1:5d:00:7d:5b:ef:5c:43:0b:d2:
                    71:d5:8c:a5:fd:71:f9:9e:bf:48:8a:f6:0a:57:5f:
                    9b:51:44:b8:24:7b:52:7c:6a:dd:b0:f2:e6:7f:94:
                    b9:c4:4c:c0:66:cf:f3:22:da:31:27:b8:58:f5:49:
                    2b:73:29:43:18:3a:ee:2a:25:88:2e:1d:e1:5b:92:
                    86:42:0c:5a:a1:8e:77:7b:56:21:bd:0f:e4:ff:ab:
                    10:a8:b8:7b:0a:f6:cc:13:cd:3b:15:75:c7:d8:54:
                    fd:5a:b8:8e:f2:5f:85:cd:63:c8:56:ab:a5:fb:80:
                    ba:fb:f9:4c:62:87:c6:21:f0:26:d5:50:f5:8e:05:
                    9a:7e:80:e3:00:a2:bf:0d:d0:2f:45:c5:8d:02:53:
                    2d:8e:43:75:f5:19:b7:4a:55:4e:08:67:f1:23:88:
                    2b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:4A:0B:90:ED:D7:B0:5C:43:AD:DA:09:1E:4C:36:85:14:65:DB:C2
            X509v3 Authority Key Identifier:
                keyid:40:02:4D:91:37:B1:E1:1B:24:4B:48:E8:7E:69:63:4A:33:E2:00:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/1/40024D9137B1E11B244B48E87E69634A33E200A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40024D9137B1E11B244B48E87E69634A33E200A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/1/323830343a313336343a3a2f33322d3438203d3e20323633353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1364::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:6f:8f:61:ae:39:01:99:97:0b:2c:a9:fd:7c:1d:81:27:4e:
         b6:82:69:32:4b:5f:6b:78:e4:31:18:01:b6:02:f2:93:e7:aa:
         71:f5:47:3c:51:e4:4a:bb:01:43:0e:d4:90:c2:f7:3f:02:9b:
         93:9f:7f:5b:60:b8:cc:1d:08:7c:84:47:7f:eb:40:74:aa:46:
         05:fe:f1:0d:2f:4e:25:16:32:c9:d7:d3:f9:7e:d6:97:cc:05:
         bd:9b:0f:6a:ac:bf:3a:f9:48:05:a2:f9:dd:f9:c6:ea:15:6a:
         b1:d5:c5:35:35:87:0a:63:a6:e9:8d:8e:46:0a:ea:49:be:aa:
         62:c6:72:58:73:50:26:39:ab:62:ff:6a:bf:e9:e6:2c:1c:8d:
         f0:f2:4c:59:51:fe:25:fa:50:45:9f:f3:25:52:95:6a:fa:79:
         99:fd:5b:1c:e6:28:97:9e:44:06:ce:af:61:e7:58:3f:8a:c0:
         e2:43:af:cc:d5:83:88:71:bf:ae:1d:43:ed:e6:8b:5e:90:89:
         e0:1e:35:17:8f:d1:ae:b0:3a:af:e0:e1:8a:fe:64:fb:7d:a5:
         77:cd:be:c8:44:4b:15:6f:d9:28:d7:40:58:90:1b:4b:c2:5c:
         32:58:5c:d7:3b:aa:d0:8e:49:13:19:b8:20:7a:16:2c:29:06:
         9c:4d:eb:48
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUHFvIsRCEo2Hd8jY2EkzLxXOPgAEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDAwMjREOTEzN0IxRTExQjI0NEI0OEU4N0U2OTYzNEEz
M0UyMDBBMzAeFw0yNDA0MDQwODA3NDRaFw0yNTA0MDMwODEyNDRaMDMxMTAvBgNV
BAMTKEFCNEEwQjkwRUREN0IwNUM0M0FEREEwOTFFNEMzNjg1MTQ2NURCQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA5L19kB53WvmYTtiQkgoEyewi
6nvl4WEKUIuu19NV/i9ZiZ1Q+D2fJOh933u33rhMOgfpC7c1YhyaC7xOPubG6wTy
n7464nDvYBVmIuTpAruX6GxtXLcy4VsKuhtHoV0AfVvvXEML0nHVjKX9cfmev0iK
9gpXX5tRRLgke1J8at2w8uZ/lLnETMBmz/Mi2jEnuFj1SStzKUMYOu4qJYguHeFb
koZCDFqhjnd7ViG9D+T/qxCouHsK9swTzTsVdcfYVP1auI7yX4XNY8hWq6X7gLr7
+Uxih8Yh8CbVUPWOBZp+gOMAor8N0C9FxY0CUy2OQ3X1GbdKVU4IZ/EjiCvjAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUq0oLkO3XsFxDrdoJHkw2hRRl28IwHwYDVR0j
BBgwFoAUQAJNkTex4RskS0jofmljSjPiAKMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXBvdzd0eUR2UEE2MjFVN3JKcG9DaUVGRjZwV1Y1bTdjV2hUOW1zajRy
VkgvMS80MDAyNEQ5MTM3QjFFMTFCMjQ0QjQ4RTg3RTY5NjM0QTMzRTIwMEEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwMDI0RDkxMzdCMUUxMUIy
NDRCNDhFODdFNjk2MzRBMzNFMjAwQTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Vwb3c3dHlEdlBBNjIxVTdySnBvQ2lFRkY2cFdWNW03Y1doVDltc2o0clZILzEv
MzIzODMwMzQzYTMxMzMzNjM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjMz
MzUzMzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQTZDANBgkqhkiG9w0BAQsFAAOCAQEAMG+PYa45
AZmXCyyp/XwdgSdOtoJpMktfa3jkMRgBtgLyk+eqcfVHPFHkSrsBQw7UkML3PwKb
k59/W2C4zB0IfIRHf+tAdKpGBf7xDS9OJRYyydfT+X7Wl8wFvZsPaqy/OvlIBaL5
3fnG6hVqsdXFNTWHCmOm6Y2ORgrqSb6qYsZyWHNQJjmrYv9qv+nmLByN8PJMWVH+
JfpQRZ/zJVKVavp5mf1bHOYol55EBs6vYedYP4rA4kOvzNWDiHG/rh1D7eaLXpCJ
4B41F4/RrrA6r+Dhiv5k+32ld82+yERLFW/ZKNdAWJAbS8JcMlhc1zuq0I5JExm4
IHoWLCkGnE3rSA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:01 2024 by rpki-client on console-fra.rpki-client.org