Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fsaqi7oZaD7XmR51bLSPFeUHGy6jfE3cgJDPVbjM1Jj1/0/323830343a353231303a3a2f33332d3333203d3e20323638343932.roa
File:                     323830343a353231303a3a2f33332d3333203d3e20323638343932.roa (raw, json)
Hash identifier:          tKQ0bp1clDBRPik3d6acvdkXltmltDMX7zngbQpoTv4=
Subject key identifier:   1A:94:61:57:B6:98:42:B8:86:7B:84:EE:60:7F:99:C0:A5:2A:A3:CB
Certificate issuer:       /CN=862E6B4A1CBE91545E258A4AB625E41F54CC86BE
Certificate serial:       7E684118893DE487B9959E7B635DBCFEF41448C0
Authority key identifier: 86:2E:6B:4A:1C:BE:91:54:5E:25:8A:4A:B6:25:E4:1F:54:CC:86:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/862E6B4A1CBE91545E258A4AB625E41F54CC86BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fsaqi7oZaD7XmR51bLSPFeUHGy6jfE3cgJDPVbjM1Jj1/0/323830343a353231303a3a2f33332d3333203d3e20323638343932.roa
Signing time:             Thu 04 Jul 2024 23:44:03 +0000
ROA not before:           Thu 04 Jul 2024 23:39:03 +0000
ROA not after:            Thu 03 Jul 2025 23:44:03 +0000
asID:                     268492
IP address blocks:        2804:5210::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fsaqi7oZaD7XmR51bLSPFeUHGy6jfE3cgJDPVbjM1Jj1/0/862E6B4A1CBE91545E258A4AB625E41F54CC86BE.crl
                          rsync://rpki-repo.registro.br/repo/Fsaqi7oZaD7XmR51bLSPFeUHGy6jfE3cgJDPVbjM1Jj1/0/862E6B4A1CBE91545E258A4AB625E41F54CC86BE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/862E6B4A1CBE91545E258A4AB625E41F54CC86BE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:05:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:68:41:18:89:3d:e4:87:b9:95:9e:7b:63:5d:bc:fe:f4:14:48:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=862E6B4A1CBE91545E258A4AB625E41F54CC86BE
        Validity
            Not Before: Jul  4 23:39:03 2024 GMT
            Not After : Jul  3 23:44:03 2025 GMT
        Subject: CN=1A946157B69842B8867B84EE607F99C0A52AA3CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3a:18:57:af:ba:51:84:10:06:8f:40:67:9f:
                    08:b5:ae:72:90:ed:41:db:da:ef:83:ad:68:bb:34:
                    60:22:17:6c:dc:19:fa:51:48:e6:39:f9:f7:75:b0:
                    5d:5f:7d:59:17:fc:9c:17:2a:40:81:87:f7:99:7d:
                    bf:10:23:47:81:6f:d1:d3:14:92:46:54:07:3c:13:
                    80:71:cd:e4:ea:e6:9b:9c:d0:4e:a8:c2:be:a4:48:
                    70:9e:d0:e9:48:32:5c:da:b3:e6:0e:fe:b4:fd:85:
                    8f:18:da:12:56:55:b7:0c:29:24:74:36:19:ad:9f:
                    7b:d5:ec:3a:bb:91:15:db:e0:64:72:76:1c:4a:91:
                    2f:07:80:16:dc:ea:5c:60:e0:e7:52:37:72:04:3c:
                    e8:5d:aa:47:df:80:2b:78:1d:d0:03:cf:6b:54:e8:
                    34:56:fc:58:d0:20:78:06:d5:2c:5b:ff:57:20:17:
                    4e:6f:32:8a:8e:1b:c5:eb:0b:1a:26:e4:b1:6c:a7:
                    b5:6e:40:1d:69:bb:01:29:87:e6:ea:af:27:7d:81:
                    5a:ce:bd:1e:8a:fa:7c:17:4f:66:43:66:f8:86:1a:
                    a2:b3:e4:ce:a8:4e:c2:dd:d4:1c:f0:95:25:4f:02:
                    2c:b0:ea:ff:1f:cf:03:9d:02:2b:61:d7:f1:19:00:
                    51:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:94:61:57:B6:98:42:B8:86:7B:84:EE:60:7F:99:C0:A5:2A:A3:CB
            X509v3 Authority Key Identifier:
                keyid:86:2E:6B:4A:1C:BE:91:54:5E:25:8A:4A:B6:25:E4:1F:54:CC:86:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fsaqi7oZaD7XmR51bLSPFeUHGy6jfE3cgJDPVbjM1Jj1/0/862E6B4A1CBE91545E258A4AB625E41F54CC86BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/862E6B4A1CBE91545E258A4AB625E41F54CC86BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fsaqi7oZaD7XmR51bLSPFeUHGy6jfE3cgJDPVbjM1Jj1/0/323830343a353231303a3a2f33332d3333203d3e20323638343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5210::/33

    Signature Algorithm: sha256WithRSAEncryption
         93:4c:ea:d6:bd:96:ff:90:55:df:26:7b:5f:ea:3a:6f:55:e9:
         a0:3c:f5:f7:ad:a3:9a:b0:44:c3:c0:4e:3f:33:ef:3b:24:be:
         d6:ac:d1:2e:27:0d:f2:77:0b:40:3f:da:66:d7:0b:1c:6f:88:
         73:a5:91:2f:e9:e3:86:96:73:96:8f:d2:82:87:0e:76:56:95:
         ce:f8:74:03:4f:ad:3f:30:ea:d1:e3:9c:e6:35:d1:dd:8e:f4:
         3d:30:7c:7d:fd:50:48:c3:a0:f0:8b:48:4b:f4:9c:ab:58:fe:
         83:9a:b5:51:c8:86:b9:df:fb:6e:2e:1b:fd:8a:0c:a9:21:d6:
         f5:9d:4e:8c:0f:2c:de:21:9f:30:35:f4:bd:5e:ca:eb:32:a2:
         dc:b7:c0:10:1b:b5:01:4c:5f:e3:0f:71:3b:07:2e:c0:89:9d:
         f1:68:d0:fd:68:01:55:7e:43:b8:2f:45:c6:7b:d3:03:4d:1c:
         4f:60:60:65:bf:8f:19:0a:54:74:81:7f:51:8c:1a:0c:fd:dd:
         b9:46:ea:94:e0:dd:33:b3:00:93:c4:06:92:1c:72:60:c3:96:
         37:2d:ff:83:ec:fb:31:a9:aa:33:5a:e1:cd:b7:27:b2:81:30:
         a1:81:37:9c:62:39:b6:42:61:63:bd:db:1c:68:40:22:b0:b7:
         49:21:a4:48
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUfmhBGIk95Ie5lZ57Y128/vQUSMAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODYyRTZCNEExQ0JFOTE1NDVFMjU4QTRBQjYyNUU0MUY1
NENDODZCRTAeFw0yNDA3MDQyMzM5MDNaFw0yNTA3MDMyMzQ0MDNaMDMxMTAvBgNV
BAMTKDFBOTQ2MTU3QjY5ODQyQjg4NjdCODRFRTYwN0Y5OUMwQTUyQUEzQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQOhhXr7pRhBAGj0Bnnwi1rnKQ
7UHb2u+DrWi7NGAiF2zcGfpRSOY5+fd1sF1ffVkX/JwXKkCBh/eZfb8QI0eBb9HT
FJJGVAc8E4BxzeTq5puc0E6owr6kSHCe0OlIMlzas+YO/rT9hY8Y2hJWVbcMKSR0
Nhmtn3vV7Dq7kRXb4GRydhxKkS8HgBbc6lxg4OdSN3IEPOhdqkffgCt4HdADz2tU
6DRW/FjQIHgG1Sxb/1cgF05vMoqOG8XrCxom5LFsp7VuQB1puwEph+bqryd9gVrO
vR6K+nwXT2ZDZviGGqKz5M6oTsLd1BzwlSVPAiyw6v8fzwOdAith1/EZAFGNAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUGpRhV7aYQriGe4TuYH+ZwKUqo8swHwYDVR0j
BBgwFoAUhi5rShy+kVReJYpKtiXkH1TMhr4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnNhcWk3b1phRDdYbVI1MWJMU1BGZVVIR3k2amZFM2NnSkRQVmJqTTFK
ajEvMC84NjJFNkI0QTFDQkU5MTU0NUUyNThBNEFCNjI1RTQxRjU0Q0M4NkJFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg2MkU2QjRBMUNCRTkxNTQ1
RTI1OEE0QUI2MjVFNDFGNTRDQzg2QkUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZzYXFpN29aYUQ3WG1SNTFiTFNQRmVVSEd5NmpmRTNjZ0pEUFZiak0xSmoxLzAv
MzIzODMwMzQzYTM1MzIzMTMwM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM4
MzQzOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKARSEAAwDQYJKoZIhvcNAQELBQADggEBAJNM6ta9
lv+QVd8me1/qOm9V6aA89feto5qwRMPATj8z7zskvtas0S4nDfJ3C0A/2mbXCxxv
iHOlkS/p44aWc5aP0oKHDnZWlc74dANPrT8w6tHjnOY10d2O9D0wfH39UEjDoPCL
SEv0nKtY/oOatVHIhrnf+24uG/2KDKkh1vWdTowPLN4hnzA19L1eyusyoty3wBAb
tQFMX+MPcTsHLsCJnfFo0P1oAVV+Q7gvRcZ70wNNHE9gYGW/jxkKVHSBf1GMGgz9
3blG6pTg3TOzAJPEBpIccmDDljct/4Ps+zGpqjNa4c23J7KBMKGBN5xiObZCYWO9
2xxoQCKwt0khpEg=
-----END CERTIFICATE-----
Generated at Mon Nov 25 22:02:58 2024 by rpki-client on console-fra.rpki-client.org