Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/1/323830343a333231383a313030303a3a2f34302d3430203d3e20323635303535.roa
File:                     323830343a333231383a313030303a3a2f34302d3430203d3e20323635303535.roa (raw, json)
Hash identifier:          SgPElOrlibA5ZdGapIfrixMESkApWOEJXVk9FdmL9Zs=
Subject key identifier:   45:99:82:64:A5:C2:33:F8:1A:B6:45:2D:53:65:25:C0:E1:BB:97:A3
Certificate issuer:       /CN=23A7495CCF200B1FCE8BFFD9A3588DC7386FDD15
Certificate serial:       01459759E2B38EA45EDB348822D2D9B564862F2A
Authority key identifier: 23:A7:49:5C:CF:20:0B:1F:CE:8B:FF:D9:A3:58:8D:C7:38:6F:DD:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23A7495CCF200B1FCE8BFFD9A3588DC7386FDD15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/1/323830343a333231383a313030303a3a2f34302d3430203d3e20323635303535.roa
Signing time:             Mon 01 Jul 2024 13:52:49 +0000
ROA not before:           Mon 01 Jul 2024 13:47:49 +0000
ROA not after:            Mon 30 Jun 2025 13:52:49 +0000
asID:                     265055
IP address blocks:        2804:3218:1000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/1/23A7495CCF200B1FCE8BFFD9A3588DC7386FDD15.crl
                          rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/1/23A7495CCF200B1FCE8BFFD9A3588DC7386FDD15.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23A7495CCF200B1FCE8BFFD9A3588DC7386FDD15.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 13:03:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:45:97:59:e2:b3:8e:a4:5e:db:34:88:22:d2:d9:b5:64:86:2f:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23A7495CCF200B1FCE8BFFD9A3588DC7386FDD15
        Validity
            Not Before: Jul  1 13:47:49 2024 GMT
            Not After : Jun 30 13:52:49 2025 GMT
        Subject: CN=45998264A5C233F81AB6452D536525C0E1BB97A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7e:b6:93:43:3f:3f:51:8f:00:db:ab:44:46:
                    84:ea:16:f3:68:97:3f:70:b2:67:d9:51:23:6a:02:
                    1a:6b:f0:ec:8c:e1:b1:a7:6d:2b:9e:e7:8d:e8:ac:
                    14:f8:e7:14:a8:0a:81:54:40:98:e1:27:06:d1:49:
                    36:c1:1e:fc:42:d1:40:2d:65:5c:e0:9e:cf:4f:a7:
                    06:8e:b4:5f:38:01:da:4f:6d:4b:0d:7f:c2:ae:eb:
                    e4:6f:e1:d8:30:48:ce:76:0c:e1:3f:b8:4d:1a:d6:
                    0a:c4:45:1b:d8:df:95:fb:49:45:72:39:94:62:20:
                    a8:29:e4:d3:84:eb:a9:7d:46:69:3f:12:bf:e4:37:
                    73:36:8a:13:42:bd:df:60:eb:7c:ac:3b:df:49:11:
                    2b:e6:13:65:99:1d:d0:85:6f:a8:b5:f2:d5:22:4a:
                    36:e6:7e:3f:59:75:dc:06:e0:09:90:46:f1:fd:ea:
                    e8:74:7d:14:38:de:3e:60:f1:8e:53:40:34:97:b5:
                    e9:17:67:e6:97:6f:42:ee:d9:fb:ae:e4:96:af:ba:
                    00:90:ce:c8:82:e8:f4:5a:48:15:35:43:23:c6:45:
                    c9:a1:04:cd:1f:ab:fc:80:c7:12:23:ac:da:ba:d4:
                    f2:ae:a1:4d:ad:10:c1:8b:5a:21:c4:36:5d:73:42:
                    3d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:99:82:64:A5:C2:33:F8:1A:B6:45:2D:53:65:25:C0:E1:BB:97:A3
            X509v3 Authority Key Identifier:
                keyid:23:A7:49:5C:CF:20:0B:1F:CE:8B:FF:D9:A3:58:8D:C7:38:6F:DD:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/1/23A7495CCF200B1FCE8BFFD9A3588DC7386FDD15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23A7495CCF200B1FCE8BFFD9A3588DC7386FDD15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/1/323830343a333231383a313030303a3a2f34302d3430203d3e20323635303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3218:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         8b:0d:70:3d:09:60:71:44:05:ca:3b:e3:47:6a:9f:eb:e8:9c:
         29:1c:cc:f7:e7:55:2b:57:08:a7:bc:cc:45:7e:7e:d7:e5:d1:
         7d:18:31:ba:41:31:a9:59:e4:27:40:e5:b5:63:cb:25:5f:73:
         4e:29:03:ea:e9:d0:8a:46:db:ef:c1:07:27:ae:36:4a:a5:12:
         28:30:6b:79:b9:44:05:87:70:13:55:b9:28:47:af:e1:ed:54:
         32:8c:02:0a:3b:31:0b:9c:9b:db:8d:a5:78:2d:6c:8a:b5:29:
         c7:8e:2e:c3:df:fd:f3:31:51:77:a9:6e:4a:58:f1:4c:95:81:
         8b:c7:16:ca:aa:0d:cb:45:8f:e7:1a:0b:cd:a9:fb:b2:6f:29:
         b1:a1:6d:fa:04:07:26:ab:0a:59:20:e3:8c:80:2b:c0:ba:e9:
         8f:4f:74:dd:67:48:07:f2:c7:4a:6b:f7:e1:50:be:d6:40:d4:
         10:a3:61:d6:78:50:5b:fc:a0:34:9d:49:07:ee:b0:28:90:a2:
         86:90:92:09:4c:74:81:4a:8c:0e:0f:3f:a7:ac:bc:b4:8c:61:
         43:f6:4b:30:9b:d1:68:f6:ef:c1:95:fe:2b:62:c5:31:46:4e:
         2c:26:27:11:5b:16:52:ff:5f:05:68:6b:c0:bb:a5:12:82:3c:
         a2:0b:3a:6b
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUAUWXWeKzjqRe2zSIItLZtWSGLyowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjNBNzQ5NUNDRjIwMEIxRkNFOEJGRkQ5QTM1ODhEQzcz
ODZGREQxNTAeFw0yNDA3MDExMzQ3NDlaFw0yNTA2MzAxMzUyNDlaMDMxMTAvBgNV
BAMTKDQ1OTk4MjY0QTVDMjMzRjgxQUI2NDUyRDUzNjUyNUMwRTFCQjk3QTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkfraTQz8/UY8A26tERoTqFvNo
lz9wsmfZUSNqAhpr8OyM4bGnbSue543orBT45xSoCoFUQJjhJwbRSTbBHvxC0UAt
ZVzgns9PpwaOtF84AdpPbUsNf8Ku6+Rv4dgwSM52DOE/uE0a1grERRvY35X7SUVy
OZRiIKgp5NOE66l9Rmk/Er/kN3M2ihNCvd9g63ysO99JESvmE2WZHdCFb6i18tUi
Sjbmfj9ZddwG4AmQRvH96uh0fRQ43j5g8Y5TQDSXtekXZ+aXb0Lu2fuu5JavugCQ
zsiC6PRaSBU1QyPGRcmhBM0fq/yAxxIjrNq61PKuoU2tEMGLWiHENl1zQj15AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQURZmCZKXCM/gatkUtU2UlwOG7l6MwHwYDVR0j
BBgwFoAUI6dJXM8gCx/Oi//Zo1iNxzhv3RUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkpMaEpmZTZoa05FSkF4YTZ6OXRNa3ROUHNCdWlZbkVyTHhmaGFjNWZz
aFUvMS8yM0E3NDk1Q0NGMjAwQjFGQ0U4QkZGRDlBMzU4OERDNzM4NkZERDE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIzQTc0OTVDQ0YyMDBCMUZD
RThCRkZEOUEzNTg4REM3Mzg2RkREMTUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZKTGhKZmU2aGtORUpBeGE2ejl0TWt0TlBzQnVpWW5Fckx4ZmhhYzVmc2hVLzEv
MzIzODMwMzQzYTMzMzIzMTM4M2EzMTMwMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzNTMwMzUzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEMhgQMA0GCSqGSIb3DQEBCwUA
A4IBAQCLDXA9CWBxRAXKO+NHap/r6JwpHMz351UrVwinvMxFfn7X5dF9GDG6QTGp
WeQnQOW1Y8slX3NOKQPq6dCKRtvvwQcnrjZKpRIoMGt5uUQFh3ATVbkoR6/h7VQy
jAIKOzELnJvbjaV4LWyKtSnHji7D3/3zMVF3qW5KWPFMlYGLxxbKqg3LRY/nGgvN
qfuybymxoW36BAcmqwpZIOOMgCvAuumPT3TdZ0gH8sdKa/fhUL7WQNQQo2HWeFBb
/KA0nUkH7rAokKKGkJIJTHSBSowODz+nrLy0jGFD9kswm9Fo9u/Blf4rYsUxRk4s
JicRWxZS/18FaGvAu6USgjyiCzpr
-----END CERTIFICATE-----
Generated at Fri Sep 27 12:47:32 2024 by rpki-client on console-fra.rpki-client.org