Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3135303a3a2f34352d3435203d3e20323732373130.roa
File:                     323830343a383737343a3135303a3a2f34352d3435203d3e20323732373130.roa (raw, json)
Hash identifier:          ABWdBfDRXYKDD4LN6xFi62XknPwws5jfeYH1WE3Xx8U=
Subject key identifier:   E2:A4:44:18:91:33:88:95:AB:8C:AB:6F:E8:33:81:A7:0D:49:51:08
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       6D08483C6A1ED0326572E6D75D8CE7127E376B33
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3135303a3a2f34352d3435203d3e20323732373130.roa
Signing time:             Fri 30 Aug 2024 14:26:35 +0000
ROA not before:           Fri 30 Aug 2024 14:21:35 +0000
ROA not after:            Fri 29 Aug 2025 14:26:35 +0000
asID:                     272710
IP address blocks:        2804:8774:150::/45 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 13:27:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:08:48:3c:6a:1e:d0:32:65:72:e6:d7:5d:8c:e7:12:7e:37:6b:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug 30 14:21:35 2024 GMT
            Not After : Aug 29 14:26:35 2025 GMT
        Subject: CN=E2A4441891338895AB8CAB6FE83381A70D495108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7b:ea:f4:af:fa:d1:52:26:c1:81:99:69:bb:
                    dc:3d:a6:cb:cc:30:ba:76:3f:09:c1:ab:47:ba:93:
                    c6:fe:66:11:9d:74:ca:eb:d3:50:db:2d:f7:6f:b8:
                    18:83:42:93:2f:ed:7c:f4:bd:e2:f6:9b:4f:88:3c:
                    8a:a3:a8:23:6a:b1:88:32:f9:28:06:30:b1:fc:bb:
                    e6:a2:84:6c:ea:d6:a4:eb:a9:5a:69:71:f8:5a:7e:
                    7d:ec:75:77:c4:96:64:16:15:84:16:ed:32:29:c8:
                    f4:94:cc:ab:f5:5d:a8:6c:c3:15:98:00:a9:7a:54:
                    65:bf:dc:e6:a9:3e:32:c7:1b:32:bb:57:d4:05:27:
                    24:12:b5:12:65:04:d4:f1:e6:ec:60:48:02:77:51:
                    30:25:86:f3:56:87:fb:57:cc:da:d2:90:f1:e7:63:
                    7e:23:33:07:0a:34:93:78:53:51:69:b1:f7:fd:d6:
                    62:23:3b:e2:e7:62:43:3b:20:f5:3e:3f:58:00:e5:
                    8b:33:76:9c:3b:b2:bf:53:64:a8:2d:3a:9b:58:d4:
                    53:cd:d0:5f:34:cc:2c:3f:5e:62:93:8d:0d:43:f1:
                    46:00:aa:69:24:8b:cd:ab:2d:ff:03:2b:4a:fe:e5:
                    65:f6:12:ba:4d:cb:77:d3:7f:80:50:f5:ce:e1:6b:
                    63:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A4:44:18:91:33:88:95:AB:8C:AB:6F:E8:33:81:A7:0D:49:51:08
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3135303a3a2f34352d3435203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8774:150::/45

    Signature Algorithm: sha256WithRSAEncryption
         ca:cd:f9:a1:63:5e:f7:6a:ec:fc:ab:d0:78:70:43:3e:87:fb:
         a1:d6:1b:cd:d0:1e:e5:2b:35:ff:fe:46:0f:03:6d:9a:e6:e3:
         cc:2a:a5:c3:d2:10:c2:a7:90:df:bf:ac:72:fc:1d:9b:84:c3:
         33:ad:45:f9:19:6c:f9:22:64:97:6a:bc:60:3e:e6:93:eb:7d:
         a1:af:4d:87:bb:93:11:e8:b8:c3:3e:8e:6d:33:b6:92:84:cc:
         e9:28:c2:72:fc:30:83:ae:39:9d:00:3a:fe:f6:66:05:c9:25:
         d5:eb:ef:0e:fc:dd:ff:aa:f4:65:41:95:ed:4e:ed:3b:1d:9c:
         d5:6f:41:3a:e4:52:9c:9c:25:3b:33:05:cd:34:32:34:a7:a7:
         cc:37:5e:3b:c5:61:fc:91:68:02:5e:6f:39:c5:ad:30:70:ed:
         9a:04:45:2b:00:b4:75:ed:ea:2a:1d:63:e5:ad:5a:ed:30:3e:
         3f:57:9c:74:8e:b4:cb:75:4d:30:03:53:7c:0d:4e:58:f9:7a:
         31:24:48:a4:e7:2e:f5:87:15:f2:87:f4:05:ba:df:b3:08:1c:
         09:68:c5:23:be:12:6d:a4:91:8a:2d:eb:19:25:51:ad:c9:e4:
         82:7c:22:d5:aa:66:8b:bb:4f:d3:38:c1:ef:e5:53:c4:6d:59:
         0f:6b:b1:71
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUbQhIPGoe0DJlcubXXYznEn43azMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVEMzdFMjJFQjhFNTY2OEYwOTM1NDZFNjM0QjU1QjBB
NzgwRDI0RjAeFw0yNDA4MzAxNDIxMzVaFw0yNTA4MjkxNDI2MzVaMDMxMTAvBgNV
BAMTKEUyQTQ0NDE4OTEzMzg4OTVBQjhDQUI2RkU4MzM4MUE3MEQ0OTUxMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwe+r0r/rRUibBgZlpu9w9psvM
MLp2PwnBq0e6k8b+ZhGddMrr01DbLfdvuBiDQpMv7Xz0veL2m0+IPIqjqCNqsYgy
+SgGMLH8u+aihGzq1qTrqVppcfhafn3sdXfElmQWFYQW7TIpyPSUzKv1XahswxWY
AKl6VGW/3OapPjLHGzK7V9QFJyQStRJlBNTx5uxgSAJ3UTAlhvNWh/tXzNrSkPHn
Y34jMwcKNJN4U1Fpsff91mIjO+LnYkM7IPU+P1gA5Yszdpw7sr9TZKgtOptY1FPN
0F80zCw/XmKTjQ1D8UYAqmkki82rLf8DK0r+5WX2ErpNy3fTf4BQ9c7ha2NBAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQU4qREGJEziJWrjKtv6DOBpw1JUQgwHwYDVR0j
BBgwFoAUtdN+IuuOVmjwk1RuY0tVsKeA0k8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkRGU3VTRU1YSnJkV0JHVnFFYmg0WlMxZHQ5bUFQRmRuUkJNVnEydUEz
ZFIvMC9CNUQzN0UyMkVCOEU1NjY4RjA5MzU0NkU2MzRCNTVCMEE3ODBEMjRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I1RDM3RTIyRUI4RTU2NjhG
MDkzNTQ2RTYzNEI1NUIwQTc4MEQyNEYuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZERlN1U0VNWEpyZFdCR1ZxRWJoNFpTMWR0OW1BUEZkblJCTVZxMnVBM2RSLzAv
MzIzODMwMzQzYTM4MzczNzM0M2EzMTM1MzAzYTNhMmYzNDM1MmQzNDM1MjAzZDNl
MjAzMjM3MzIzNzMxMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwMoBId0AVAwDQYJKoZIhvcNAQELBQAD
ggEBAMrN+aFjXvdq7Pyr0HhwQz6H+6HWG83QHuUrNf/+Rg8DbZrm48wqpcPSEMKn
kN+/rHL8HZuEwzOtRfkZbPkiZJdqvGA+5pPrfaGvTYe7kxHouMM+jm0ztpKEzOko
wnL8MIOuOZ0AOv72ZgXJJdXr7w783f+q9GVBle1O7TsdnNVvQTrkUpycJTszBc00
MjSnp8w3XjvFYfyRaAJebznFrTBw7ZoERSsAtHXt6iodY+WtWu0wPj9XnHSOtMt1
TTADU3wNTlj5ejEkSKTnLvWHFfKH9AW637MIHAloxSO+Em2kkYot6xklUa3J5IJ8
ItWqZou7T9M4we/lU8RtWQ9rsXE=
-----END CERTIFICATE-----
Generated at Fri Nov 29 13:09:35 2024 by rpki-client on console-fra.rpki-client.org