Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/1/323830343a353463303a3a2f33322d313238203d3e20323638363638.roa
File:                     323830343a353463303a3a2f33322d313238203d3e20323638363638.roa (raw, json)
Hash identifier:          aEVHqHh2MaGUduFWgm7E42AbNbgZKFMu+AoN4Dbnf9A=
Subject key identifier:   BC:67:A3:8C:90:FD:9C:3D:FF:3F:30:21:B3:30:67:FE:29:9D:2B:25
Certificate issuer:       /CN=F2738956AE39E8B7EBBDAEF909D996F13EDA7B48
Certificate serial:       1055483343E03717AA8B2C9E8087958BF6A2E343
Authority key identifier: F2:73:89:56:AE:39:E8:B7:EB:BD:AE:F9:09:D9:96:F1:3E:DA:7B:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2738956AE39E8B7EBBDAEF909D996F13EDA7B48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/1/323830343a353463303a3a2f33322d313238203d3e20323638363638.roa
Signing time:             Wed 03 Apr 2024 21:30:24 +0000
ROA not before:           Wed 03 Apr 2024 21:25:24 +0000
ROA not after:            Wed 02 Apr 2025 21:30:24 +0000
asID:                     268668
IP address blocks:        2804:54c0::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/1/F2738956AE39E8B7EBBDAEF909D996F13EDA7B48.crl
                          rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/1/F2738956AE39E8B7EBBDAEF909D996F13EDA7B48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2738956AE39E8B7EBBDAEF909D996F13EDA7B48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 15:23:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:55:48:33:43:e0:37:17:aa:8b:2c:9e:80:87:95:8b:f6:a2:e3:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2738956AE39E8B7EBBDAEF909D996F13EDA7B48
        Validity
            Not Before: Apr  3 21:25:24 2024 GMT
            Not After : Apr  2 21:30:24 2025 GMT
        Subject: CN=BC67A38C90FD9C3DFF3F3021B33067FE299D2B25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:45:e1:ba:23:a0:eb:8e:fc:7c:a6:66:74:c7:
                    22:18:c7:4a:67:04:b0:55:99:c1:4d:a7:34:bf:61:
                    86:77:69:ce:49:9f:59:00:83:9f:e7:d8:3c:72:4c:
                    65:45:b7:d6:de:db:66:21:fc:bd:6a:ed:73:85:56:
                    a5:76:6a:02:98:4f:bd:7c:18:2e:72:56:30:96:a9:
                    ca:20:d3:6d:dc:0d:fe:bf:ef:ae:df:0d:08:ee:e1:
                    7e:2e:11:9d:97:6f:27:4d:9f:4a:39:6d:6e:82:24:
                    50:78:06:21:47:68:bf:51:cc:b3:44:64:8a:e4:1a:
                    a5:ff:aa:d9:c4:f1:ee:11:c5:0f:de:0e:b8:c9:30:
                    7f:ef:de:ee:19:2e:60:d3:a7:f6:9d:36:7c:7f:e1:
                    8c:d8:3e:aa:19:09:30:0d:95:50:49:d0:51:04:ed:
                    dd:21:72:ad:a3:71:55:6a:5d:33:f9:2c:4e:5f:d8:
                    1d:82:ec:b1:34:9a:a0:75:8e:7f:b9:38:ed:7f:e8:
                    28:7a:7f:48:eb:09:1d:30:b0:23:9b:6c:fd:37:9d:
                    92:2f:c1:75:08:00:f8:1e:1a:88:11:f6:d2:dc:19:
                    cf:71:cc:02:a9:fa:58:c9:3b:55:b0:0b:d9:dd:13:
                    25:04:3f:0a:8d:0d:c9:aa:af:ee:e4:3b:fa:3e:41:
                    9c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:67:A3:8C:90:FD:9C:3D:FF:3F:30:21:B3:30:67:FE:29:9D:2B:25
            X509v3 Authority Key Identifier:
                keyid:F2:73:89:56:AE:39:E8:B7:EB:BD:AE:F9:09:D9:96:F1:3E:DA:7B:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/1/F2738956AE39E8B7EBBDAEF909D996F13EDA7B48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2738956AE39E8B7EBBDAEF909D996F13EDA7B48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/1/323830343a353463303a3a2f33322d313238203d3e20323638363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:45:9f:2d:bf:f1:3c:f3:c5:cd:14:f3:fc:d1:c4:ec:33:08:
         db:39:86:e6:41:de:7e:50:67:22:e5:f8:1c:66:ae:8e:13:6d:
         2d:06:a9:e3:84:c8:67:ce:63:d2:91:42:3c:59:79:2c:73:8c:
         d3:0f:c5:32:05:ef:7e:58:ae:ae:b4:f9:30:d9:94:d1:45:2a:
         03:57:07:36:09:90:ec:27:2d:68:d9:97:4a:7c:ec:e5:17:47:
         6b:5f:39:21:9d:57:7c:dd:31:25:fb:4a:6a:4e:cb:f7:ff:97:
         85:46:46:c4:ca:ab:72:1c:ab:b0:f6:11:c7:9c:92:b9:67:54:
         20:76:44:41:03:23:7c:9a:41:f6:39:ae:52:dd:32:a4:ef:a3:
         6b:1d:d5:8c:18:f9:14:ae:05:d2:d3:bc:a5:10:c3:35:71:78:
         d4:cd:ba:52:d4:6c:46:c2:46:f8:a7:19:30:9b:85:3a:ee:94:
         db:d6:55:99:75:97:8f:22:a0:45:51:11:7d:76:96:e7:99:2f:
         27:2f:88:b7:16:40:cf:15:2b:10:06:21:52:04:7b:3c:69:8f:
         d1:24:6e:da:67:21:95:07:fc:1e:3e:99:10:01:9d:1f:29:f2:
         e1:11:46:0d:49:81:b4:92:7f:ff:9e:40:49:0f:1e:f5:41:0e:
         7c:20:40:5d
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUEFVIM0PgNxeqiyyegIeVi/ai40MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjI3Mzg5NTZBRTM5RThCN0VCQkRBRUY5MDlEOTk2RjEz
RURBN0I0ODAeFw0yNDA0MDMyMTI1MjRaFw0yNTA0MDIyMTMwMjRaMDMxMTAvBgNV
BAMTKEJDNjdBMzhDOTBGRDlDM0RGRjNGMzAyMUIzMzA2N0ZFMjk5RDJCMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdReG6I6Drjvx8pmZ0xyIYx0pn
BLBVmcFNpzS/YYZ3ac5Jn1kAg5/n2DxyTGVFt9be22Yh/L1q7XOFVqV2agKYT718
GC5yVjCWqcog023cDf6/767fDQju4X4uEZ2XbydNn0o5bW6CJFB4BiFHaL9RzLNE
ZIrkGqX/qtnE8e4RxQ/eDrjJMH/v3u4ZLmDTp/adNnx/4YzYPqoZCTANlVBJ0FEE
7d0hcq2jcVVqXTP5LE5f2B2C7LE0mqB1jn+5OO1/6Ch6f0jrCR0wsCObbP03nZIv
wXUIAPgeGogR9tLcGc9xzAKp+ljJO1WwC9ndEyUEPwqNDcmqr+7kO/o+QZx3AgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUvGejjJD9nD3/PzAhszBn/imdKyUwHwYDVR0j
BBgwFoAU8nOJVq456Lfrva75CdmW8T7ae0gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXJqQmZjY2ZITXI1VE5zcTVRQ2Y1Q3dHYkVWa0tmc0o3cGRGcW1na0xt
Q1kvMS9GMjczODk1NkFFMzlFOEI3RUJCREFFRjkwOUQ5OTZGMTNFREE3QjQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YyNzM4OTU2QUUzOUU4QjdF
QkJEQUVGOTA5RDk5NkYxM0VEQTdCNDguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VyakJmY2NmSE1yNVROc3E1UUNmNUN3R2JFVmtLZnNKN3BkRnFtZ2tMbUNZLzEv
MzIzODMwMzQzYTM1MzQ2MzMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzgzNjM2Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBFTAMA0GCSqGSIb3DQEBCwUAA4IBAQA0RZ8t
v/E888XNFPP80cTsMwjbOYbmQd5+UGci5fgcZq6OE20tBqnjhMhnzmPSkUI8WXks
c4zTD8UyBe9+WK6utPkw2ZTRRSoDVwc2CZDsJy1o2ZdKfOzlF0drXzkhnVd83TEl
+0pqTsv3/5eFRkbEyqtyHKuw9hHHnJK5Z1QgdkRBAyN8mkH2Oa5S3TKk76NrHdWM
GPkUrgXS07ylEMM1cXjUzbpS1GxGwkb4pxkwm4U67pTb1lWZdZePIqBFURF9dpbn
mS8nL4i3FkDPFSsQBiFSBHs8aY/RJG7aZyGVB/wePpkQAZ0fKfLhEUYNSYG0kn//
nkBJDx71QQ58IEBd
-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:12 2024 by rpki-client on console-ams.rpki-client.org