Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/1/323830343a316537303a3a2f33322d3334203d3e20323634343239.roa
File:                     323830343a316537303a3a2f33322d3334203d3e20323634343239.roa (raw, json)
Hash identifier:          S3zRO0U6CFTWTAHczh75NWtfoIej84a1IIXuZx2uoF4=
Subject key identifier:   45:E1:21:89:AF:4D:4C:52:9D:58:2A:52:FF:85:FE:58:A7:8D:06:AE
Certificate issuer:       /CN=A524FE3F2C38E55657BE6FF4933831B625A9332B
Certificate serial:       6FE9F57452455F2DE32B8BDE12F5719438D3622E
Authority key identifier: A5:24:FE:3F:2C:38:E5:56:57:BE:6F:F4:93:38:31:B6:25:A9:33:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A524FE3F2C38E55657BE6FF4933831B625A9332B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/1/323830343a316537303a3a2f33322d3334203d3e20323634343239.roa
Signing time:             Thu 04 Apr 2024 05:14:45 +0000
ROA not before:           Thu 04 Apr 2024 05:09:45 +0000
ROA not after:            Thu 03 Apr 2025 05:14:45 +0000
asID:                     264429
IP address blocks:        2804:1e70::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/1/A524FE3F2C38E55657BE6FF4933831B625A9332B.crl
                          rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/1/A524FE3F2C38E55657BE6FF4933831B625A9332B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A524FE3F2C38E55657BE6FF4933831B625A9332B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:07:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e9:f5:74:52:45:5f:2d:e3:2b:8b:de:12:f5:71:94:38:d3:62:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A524FE3F2C38E55657BE6FF4933831B625A9332B
        Validity
            Not Before: Apr  4 05:09:45 2024 GMT
            Not After : Apr  3 05:14:45 2025 GMT
        Subject: CN=45E12189AF4D4C529D582A52FF85FE58A78D06AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:63:9d:8d:33:72:b1:07:7d:42:57:a3:87:16:
                    a2:80:fe:55:16:e8:62:5a:e4:24:4f:d2:6b:b4:7d:
                    de:98:24:5d:c6:2f:6b:8a:f3:c2:72:97:d3:d8:31:
                    c4:6f:4f:5f:ce:cf:01:cf:39:b3:a8:fa:8f:1e:6f:
                    60:40:94:35:ab:f0:58:32:46:23:e2:89:c3:47:10:
                    6e:f2:b7:c7:7d:0c:f3:9d:a5:2b:45:8c:20:87:a6:
                    2f:39:f8:8c:7b:a3:de:7a:40:48:09:0b:d0:f8:d3:
                    8d:0d:7d:cc:ad:ec:7f:41:be:43:40:ce:9a:fd:4d:
                    b5:4a:ac:0a:33:cc:cf:69:15:6c:f2:c4:b0:3f:28:
                    00:b0:ee:6e:37:0d:c1:83:ee:71:be:f6:1f:64:29:
                    34:3d:8a:1a:a0:4b:98:cf:78:d1:8b:c6:f0:b5:18:
                    7a:fd:ba:44:d9:ea:d8:21:0c:28:33:d1:95:ab:61:
                    fe:28:db:c1:4b:90:16:63:52:7a:a7:da:c6:12:7f:
                    8b:58:cb:af:e7:d4:a3:87:f0:f8:59:66:2c:c7:e0:
                    cc:77:10:29:eb:a3:17:39:51:95:fa:e7:d6:5a:55:
                    4d:4a:6d:d3:ee:bd:08:ea:d0:07:d7:38:ce:fe:a6:
                    3c:2e:02:a6:35:1f:ca:0d:63:27:d0:c7:09:41:ee:
                    6a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:E1:21:89:AF:4D:4C:52:9D:58:2A:52:FF:85:FE:58:A7:8D:06:AE
            X509v3 Authority Key Identifier:
                keyid:A5:24:FE:3F:2C:38:E5:56:57:BE:6F:F4:93:38:31:B6:25:A9:33:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/1/A524FE3F2C38E55657BE6FF4933831B625A9332B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A524FE3F2C38E55657BE6FF4933831B625A9332B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/1/323830343a316537303a3a2f33322d3334203d3e20323634343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e70::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:ae:be:ca:77:66:ea:b0:94:ae:40:40:a2:e5:47:3b:a9:ac:
         a3:ed:92:1b:e1:e0:17:4c:85:5c:ab:c5:9c:20:fa:a4:2f:52:
         1b:cf:8f:80:03:e4:2b:fb:eb:fc:d2:d5:a2:89:0a:e4:d6:11:
         a8:77:94:f3:c1:12:8a:2f:c0:5c:67:1f:c9:de:60:69:22:c1:
         da:26:d3:36:78:77:15:ec:5f:2d:d9:b0:80:8b:61:d2:c5:3e:
         20:e0:af:ce:64:32:c5:7d:12:18:b4:c1:1e:58:a1:e5:f5:a0:
         14:d5:9a:6d:a9:18:a1:78:79:75:59:0e:34:88:91:15:0e:05:
         56:de:9f:43:2a:c9:24:11:ae:b4:4d:4d:cd:5c:fc:af:d3:be:
         d4:8a:a8:03:3c:b4:e7:63:be:c7:f5:af:87:ca:d0:e0:4a:69:
         d2:05:53:3d:19:d2:9e:60:8b:0a:99:83:ff:aa:bc:22:2d:5c:
         d1:00:9a:84:be:fe:5a:ac:2a:6e:fe:0f:a3:eb:bb:a8:16:c4:
         4c:72:76:ce:70:da:37:d6:d8:eb:69:17:dc:49:c1:87:9b:86:
         9b:82:78:91:a1:95:73:1f:cf:e7:be:43:65:cc:0d:bd:3b:1c:
         7f:d1:99:cc:ec:eb:ff:97:f3:8f:9b:67:da:34:05:06:77:42:
         66:49:76:bd
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUb+n1dFJFXy3jK4veEvVxlDjTYi4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTUyNEZFM0YyQzM4RTU1NjU3QkU2RkY0OTMzODMxQjYy
NUE5MzMyQjAeFw0yNDA0MDQwNTA5NDVaFw0yNTA0MDMwNTE0NDVaMDMxMTAvBgNV
BAMTKDQ1RTEyMTg5QUY0RDRDNTI5RDU4MkE1MkZGODVGRTU4QTc4RDA2QUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAY52NM3KxB31CV6OHFqKA/lUW
6GJa5CRP0mu0fd6YJF3GL2uK88Jyl9PYMcRvT1/OzwHPObOo+o8eb2BAlDWr8Fgy
RiPiicNHEG7yt8d9DPOdpStFjCCHpi85+Ix7o956QEgJC9D4040Nfcyt7H9BvkNA
zpr9TbVKrAozzM9pFWzyxLA/KACw7m43DcGD7nG+9h9kKTQ9ihqgS5jPeNGLxvC1
GHr9ukTZ6tghDCgz0ZWrYf4o28FLkBZjUnqn2sYSf4tYy6/n1KOH8PhZZizH4Mx3
ECnroxc5UZX659ZaVU1KbdPuvQjq0AfXOM7+pjwuAqY1H8oNYyfQxwlB7mpXAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUReEhia9NTFKdWCpS/4X+WKeNBq4wHwYDVR0j
BBgwFoAUpST+Pyw45VZXvm/0kzgxtiWpMyswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXNRRTg3cHZMbzJCMllHUFNZSHpWa2g2QWpLdGE3cjVmZkFCTlk1RmpG
TlEvMS9BNTI0RkUzRjJDMzhFNTU2NTdCRTZGRjQ5MzM4MzFCNjI1QTkzMzJCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1MjRGRTNGMkMzOEU1NTY1
N0JFNkZGNDkzMzgzMUI2MjVBOTMzMkIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VzUUU4N3B2TG8yQjJZR1BTWUh6VmtoNkFqS3RhN3I1ZmZBQk5ZNUZqRk5RLzEv
MzIzODMwMzQzYTMxNjUzNzMwM2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjM0
MzQzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQecDANBgkqhkiG9w0BAQsFAAOCAQEASa6+yndm
6rCUrkBAouVHO6mso+2SG+HgF0yFXKvFnCD6pC9SG8+PgAPkK/vr/NLVookK5NYR
qHeU88ESii/AXGcfyd5gaSLB2ibTNnh3FexfLdmwgIth0sU+IOCvzmQyxX0SGLTB
Hlih5fWgFNWabakYoXh5dVkONIiRFQ4FVt6fQyrJJBGutE1NzVz8r9O+1IqoAzy0
52O+x/Wvh8rQ4Epp0gVTPRnSnmCLCpmD/6q8Ii1c0QCahL7+Wqwqbv4Po+u7qBbE
THJ2znDaN9bY62kX3EnBh5uGm4J4kaGVcx/P575DZcwNvTscf9GZzOzr/5fzj5tn
2jQFBndCZkl2vQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:07 2024 by rpki-client on console-ams.rpki-client.org