Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/323830343a3138343a383030303a3a2f33332d3333203d3e20323632373439.roa
File:                     323830343a3138343a383030303a3a2f33332d3333203d3e20323632373439.roa (raw, json)
Hash identifier:          fWGRuBmsm+XuC2fybW6XSCIV1SYlSKcOkmod3T2BRIY=
Subject key identifier:   86:5E:82:31:8F:86:12:7F:D0:1B:BC:24:8A:57:CA:23:73:D9:DB:51
Certificate issuer:       /CN=9DAC040D005E337E60D8E70413DC135C767316A4
Certificate serial:       3A27796AE8DE0D941A2EC71041674151AB5648D4
Authority key identifier: 9D:AC:04:0D:00:5E:33:7E:60:D8:E7:04:13:DC:13:5C:76:73:16:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/323830343a3138343a383030303a3a2f33332d3333203d3e20323632373439.roa
Signing time:             Thu 04 Apr 2024 06:00:26 +0000
ROA not before:           Thu 04 Apr 2024 05:55:26 +0000
ROA not after:            Thu 03 Apr 2025 06:00:26 +0000
asID:                     262749
IP address blocks:        2804:184:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.crl
                          rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:42:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:27:79:6a:e8:de:0d:94:1a:2e:c7:10:41:67:41:51:ab:56:48:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DAC040D005E337E60D8E70413DC135C767316A4
        Validity
            Not Before: Apr  4 05:55:26 2024 GMT
            Not After : Apr  3 06:00:26 2025 GMT
        Subject: CN=865E82318F86127FD01BBC248A57CA2373D9DB51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b6:81:70:a4:d4:dc:8b:21:1c:24:4f:66:7c:
                    74:56:e2:00:92:67:f2:8a:b5:d3:ea:dc:ff:8b:71:
                    63:3b:d1:58:9f:5b:b7:3e:ae:c9:97:6f:c7:f9:c7:
                    c6:88:6d:f1:52:3f:01:66:fb:bc:58:0c:af:87:94:
                    ea:da:26:c5:6b:4e:5b:c2:37:42:89:d3:ef:50:21:
                    b1:89:33:54:47:98:67:66:be:f1:b7:d1:d7:ce:db:
                    1e:4d:7e:33:60:fc:49:46:c1:e8:f4:9a:a8:f0:68:
                    27:7d:de:08:05:91:5e:d1:5b:39:82:ea:40:89:b1:
                    24:95:fa:1f:96:bf:91:10:ab:20:70:63:a3:10:a2:
                    80:c9:4d:11:4c:a0:9c:46:18:43:e3:17:46:5e:5d:
                    44:bf:09:10:4c:ec:0c:42:dd:56:99:de:20:92:d9:
                    06:7a:e8:df:bc:aa:8c:c0:fc:a7:4d:35:56:45:b2:
                    44:41:fb:cb:04:82:59:38:79:4e:ce:f2:09:58:20:
                    c3:8f:e8:77:5f:be:78:c9:c9:5b:19:8b:84:38:99:
                    bf:ee:ef:36:9f:30:53:42:b2:59:e8:6e:8b:ee:d9:
                    f1:bd:48:4a:cf:94:f8:8e:fb:f0:50:d7:31:b2:60:
                    4a:38:83:37:04:6b:b1:89:e6:c7:72:3b:cc:40:5d:
                    d6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:5E:82:31:8F:86:12:7F:D0:1B:BC:24:8A:57:CA:23:73:D9:DB:51
            X509v3 Authority Key Identifier:
                keyid:9D:AC:04:0D:00:5E:33:7E:60:D8:E7:04:13:DC:13:5C:76:73:16:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/323830343a3138343a383030303a3a2f33332d3333203d3e20323632373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:184:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         28:03:84:6a:24:3c:23:0f:bd:ed:e3:15:50:70:be:00:e2:a9:
         c4:44:46:d7:4f:8e:f5:b9:64:b0:3a:bc:d0:75:c3:39:f4:57:
         8b:06:eb:b7:99:95:7d:5b:76:64:bb:0c:7b:df:d1:65:1c:f0:
         c8:ad:9d:7e:01:c1:99:9c:d8:2a:8f:d0:2a:bb:c9:cf:1e:69:
         e2:9d:bd:56:7a:96:d7:13:1e:e7:9b:54:0e:5f:5a:39:af:81:
         78:98:d2:54:9a:ff:8c:f6:85:2d:2c:2c:e9:e8:c8:dd:ce:89:
         3a:b0:45:71:f2:2d:01:7f:1f:7c:ec:6a:a8:ae:69:c2:ba:b6:
         f2:31:13:a1:67:48:a6:a9:19:a4:35:44:8b:52:85:4f:25:3c:
         94:35:b7:e1:4f:ca:4d:88:af:6d:71:64:78:f9:ed:c6:b9:bb:
         de:2d:c2:ba:11:64:bf:05:23:f2:11:14:bf:79:dd:d4:88:24:
         d4:9c:b1:0b:7b:71:7e:62:b7:8d:14:83:cc:32:e9:f8:bf:da:
         58:ca:db:41:9d:15:36:a3:c0:a9:dd:ff:58:6c:b1:7b:72:05:
         ca:4f:68:74:0c:ed:2d:75:d8:e0:27:ec:1b:80:3f:86:26:0e:
         d0:3f:67:b6:a2:9b:15:7c:58:bc:79:eb:11:40:7c:1e:13:20:
         62:f8:e0:c1
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUOid5aujeDZQaLscQQWdBUatWSNQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOURBQzA0MEQwMDVFMzM3RTYwRDhFNzA0MTNEQzEzNUM3
NjczMTZBNDAeFw0yNDA0MDQwNTU1MjZaFw0yNTA0MDMwNjAwMjZaMDMxMTAvBgNV
BAMTKDg2NUU4MjMxOEY4NjEyN0ZEMDFCQkMyNDhBNTdDQTIzNzNEOURCNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEtoFwpNTciyEcJE9mfHRW4gCS
Z/KKtdPq3P+LcWM70VifW7c+rsmXb8f5x8aIbfFSPwFm+7xYDK+HlOraJsVrTlvC
N0KJ0+9QIbGJM1RHmGdmvvG30dfO2x5NfjNg/ElGwej0mqjwaCd93ggFkV7RWzmC
6kCJsSSV+h+Wv5EQqyBwY6MQooDJTRFMoJxGGEPjF0ZeXUS/CRBM7AxC3VaZ3iCS
2QZ66N+8qozA/KdNNVZFskRB+8sEglk4eU7O8glYIMOP6HdfvnjJyVsZi4Q4mb/u
7zafMFNCslnobovu2fG9SErPlPiO+/BQ1zGyYEo4gzcEa7GJ5sdyO8xAXdY1AgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUhl6CMY+GEn/QG7wkilfKI3PZ21EwHwYDVR0j
BBgwFoAUnawEDQBeM35g2OcEE9wTXHZzFqQwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9GdHE4SnBGSnF0S3c4TnNid2hXUFdvam9mWHFjVGpidHBUd0JOUEVNYzNp
LzIvOURBQzA0MEQwMDVFMzM3RTYwRDhFNzA0MTNEQzEzNUM3NjczMTZBNC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS85REFDMDQwRDAwNUUzMzdFNjBE
OEU3MDQxM0RDMTM1Qzc2NzMxNkE0LmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAG
CCsGAQUFBzALhoGTcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9G
dHE4SnBGSnF0S3c4TnNid2hXUFdvam9mWHFjVGpidHBUd0JOUEVNYzNpLzIvMzIz
ODMwMzQzYTMxMzgzNDNhMzgzMDMwMzAzYTNhMmYzMzMzMmQzMzMzMjAzZDNlMjAz
MjM2MzIzNzM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB
BQUHAQcBAf8EEjAQMA4EAgACMAgDBgcoBAGEgDANBgkqhkiG9w0BAQsFAAOCAQEA
KAOEaiQ8Iw+97eMVUHC+AOKpxERG10+O9blksDq80HXDOfRXiwbrt5mVfVt2ZLsM
e9/RZRzwyK2dfgHBmZzYKo/QKrvJzx5p4p29VnqW1xMe55tUDl9aOa+BeJjSVJr/
jPaFLSws6ejI3c6JOrBFcfItAX8ffOxqqK5pwrq28jEToWdIpqkZpDVEi1KFTyU8
lDW34U/KTYivbXFkePntxrm73i3CuhFkvwUj8hEUv3nd1Igk1JyxC3txfmK3jRSD
zDLp+L/aWMrbQZ0VNqPAqd3/WGyxe3IFyk9odAztLXXY4CfsG4A/hiYO0D9ntqKb
FXxYvHnrEUB8HhMgYvjgwQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:52 2024 by rpki-client on console-ams.rpki-client.org