Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GCpWgdXZQLAMHC8WRh9AAbhmNSijdtGy8yg6nRPS6UQy/0/323830343a393232383a383030303a3a2f33332d3333203d3e20323734363933.roa
File:                     323830343a393232383a383030303a3a2f33332d3333203d3e20323734363933.roa (raw, json)
Hash identifier:          x2jzYY9ovcpa8pf6GuhWRyMplgrlYyirJCNn8KV/cSQ=
Subject key identifier:   DB:9F:BF:33:81:5B:94:07:67:46:00:A2:98:FA:FD:2A:BF:BA:1A:11
Certificate issuer:       /CN=9E24999C7D51597D527510F6CFDD01EB8C81B4C9
Certificate serial:       425DD7A09ACB1898D4788BEB1386BACE892D3BCB
Authority key identifier: 9E:24:99:9C:7D:51:59:7D:52:75:10:F6:CF:DD:01:EB:8C:81:B4:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E24999C7D51597D527510F6CFDD01EB8C81B4C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GCpWgdXZQLAMHC8WRh9AAbhmNSijdtGy8yg6nRPS6UQy/0/323830343a393232383a383030303a3a2f33332d3333203d3e20323734363933.roa
Signing time:             Thu 14 Nov 2024 13:53:40 +0000
ROA not before:           Thu 14 Nov 2024 13:48:40 +0000
ROA not after:            Thu 13 Nov 2025 13:53:40 +0000
asID:                     274693
IP address blocks:        2804:9228:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GCpWgdXZQLAMHC8WRh9AAbhmNSijdtGy8yg6nRPS6UQy/0/9E24999C7D51597D527510F6CFDD01EB8C81B4C9.crl
                          rsync://rpki-repo.registro.br/repo/GCpWgdXZQLAMHC8WRh9AAbhmNSijdtGy8yg6nRPS6UQy/0/9E24999C7D51597D527510F6CFDD01EB8C81B4C9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E24999C7D51597D527510F6CFDD01EB8C81B4C9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:5d:d7:a0:9a:cb:18:98:d4:78:8b:eb:13:86:ba:ce:89:2d:3b:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E24999C7D51597D527510F6CFDD01EB8C81B4C9
        Validity
            Not Before: Nov 14 13:48:40 2024 GMT
            Not After : Nov 13 13:53:40 2025 GMT
        Subject: CN=DB9FBF33815B9407674600A298FAFD2ABFBA1A11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ae:00:da:40:6b:d3:62:5a:5a:e0:ac:01:9a:
                    d3:24:03:f1:31:70:cd:5e:b1:23:88:39:05:f7:0a:
                    ed:c7:84:ec:e4:07:52:da:cd:18:89:7b:c6:ee:63:
                    3f:af:02:d2:19:97:2f:d7:cd:d2:2a:d0:4d:2b:5c:
                    da:70:96:3d:c3:76:9b:20:8c:f0:91:55:42:88:4f:
                    b6:dd:bb:ea:35:03:cd:02:15:04:20:95:61:46:7f:
                    3e:d9:df:78:a4:35:e2:a9:5e:0d:9d:8c:ee:00:c3:
                    88:ae:8a:96:49:f1:3a:86:a2:ac:ec:6c:a2:6f:57:
                    b7:8d:37:8f:b8:f1:6f:00:05:c1:37:b4:de:47:77:
                    dc:71:55:a7:f4:24:c9:0c:56:5b:5b:bf:04:70:35:
                    47:f4:3a:b9:69:02:ce:98:3a:18:0d:d0:32:5d:6d:
                    fe:2d:d6:53:7e:37:dd:69:df:05:0c:b5:fe:60:d8:
                    e5:81:d2:4a:2c:a3:2a:29:82:a3:a3:c7:4d:17:5a:
                    e2:ca:4e:a0:8c:1e:7c:9d:df:e4:57:59:8f:54:9e:
                    da:0f:45:c6:c6:27:35:22:6a:83:1f:dd:c4:b7:f2:
                    87:01:e5:b5:5d:b4:b8:3b:65:1e:18:cf:f4:a9:f9:
                    97:6d:8c:b5:ca:c6:07:1b:c4:a3:f0:05:a0:b8:44:
                    69:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:9F:BF:33:81:5B:94:07:67:46:00:A2:98:FA:FD:2A:BF:BA:1A:11
            X509v3 Authority Key Identifier:
                keyid:9E:24:99:9C:7D:51:59:7D:52:75:10:F6:CF:DD:01:EB:8C:81:B4:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GCpWgdXZQLAMHC8WRh9AAbhmNSijdtGy8yg6nRPS6UQy/0/9E24999C7D51597D527510F6CFDD01EB8C81B4C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E24999C7D51597D527510F6CFDD01EB8C81B4C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GCpWgdXZQLAMHC8WRh9AAbhmNSijdtGy8yg6nRPS6UQy/0/323830343a393232383a383030303a3a2f33332d3333203d3e20323734363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9228:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         3d:8b:71:11:5d:b0:98:84:38:d8:af:05:8d:9f:75:8e:85:d3:
         1e:b9:c7:6a:70:9d:54:20:aa:c6:96:b4:79:9d:52:18:11:37:
         b8:44:c2:bf:8f:c6:bb:2c:47:89:88:75:85:19:27:62:4f:ef:
         f1:4f:e5:6f:1c:52:50:12:ff:5f:21:7c:ce:f8:66:c1:11:ec:
         b6:d7:62:9b:54:62:ae:31:78:d7:fa:12:6e:cb:91:d7:81:39:
         88:f4:be:9c:51:47:ea:d7:cc:12:91:22:b7:8d:35:72:2e:84:
         61:20:85:7e:71:b2:40:a2:3f:2c:b9:34:a0:88:0b:60:87:34:
         b1:81:09:99:0c:9e:0b:5a:e1:c7:99:49:43:65:60:9b:7e:10:
         4b:76:12:1c:2d:b6:10:b7:fe:bb:85:3d:89:48:f4:c8:76:24:
         3a:b4:14:1b:d2:72:4d:4a:b0:8e:18:2b:9c:d7:1d:70:d0:97:
         32:79:fe:f5:51:76:bb:c3:1e:ee:d6:fe:2f:24:d3:8b:73:a1:
         e4:fd:b9:2b:28:6e:58:ee:0e:a2:04:04:b2:22:bb:4d:1d:68:
         e6:af:de:82:01:aa:44:06:68:c7:02:a3:e2:bb:35:a8:c2:7d:
         40:a7:02:bb:46:68:2a:4a:4f:ed:be:21:67:0b:70:4e:b6:f8:
         76:69:f9:90
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUQl3XoJrLGJjUeIvrE4a6zoktO8swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUUyNDk5OUM3RDUxNTk3RDUyNzUxMEY2Q0ZERDAxRUI4
QzgxQjRDOTAeFw0yNDExMTQxMzQ4NDBaFw0yNTExMTMxMzUzNDBaMDMxMTAvBgNV
BAMTKERCOUZCRjMzODE1Qjk0MDc2NzQ2MDBBMjk4RkFGRDJBQkZCQTFBMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdrgDaQGvTYlpa4KwBmtMkA/Ex
cM1esSOIOQX3Cu3HhOzkB1LazRiJe8buYz+vAtIZly/XzdIq0E0rXNpwlj3Ddpsg
jPCRVUKIT7bdu+o1A80CFQQglWFGfz7Z33ikNeKpXg2djO4Aw4iuipZJ8TqGoqzs
bKJvV7eNN4+48W8ABcE3tN5Hd9xxVaf0JMkMVltbvwRwNUf0OrlpAs6YOhgN0DJd
bf4t1lN+N91p3wUMtf5g2OWB0kosoyopgqOjx00XWuLKTqCMHnyd3+RXWY9UntoP
RcbGJzUiaoMf3cS38ocB5bVdtLg7ZR4Yz/Sp+ZdtjLXKxgcbxKPwBaC4RGltAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU25+/M4FblAdnRgCimPr9Kr+6GhEwHwYDVR0j
BBgwFoAUniSZnH1RWX1SdRD2z90B64yBtMkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0NwV2dkWFpRTEFNSEM4V1JoOUFBYmhtTlNpamR0R3k4eWc2blJQUzZV
UXkvMC85RTI0OTk5QzdENTE1OTdENTI3NTEwRjZDRkREMDFFQjhDODFCNEM5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlFMjQ5OTlDN0Q1MTU5N0Q1
Mjc1MTBGNkNGREQwMUVCOEM4MUI0QzkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dDcFdnZFhaUUxBTUhDOFdSaDlBQWJobU5TaWpkdEd5OHlnNm5SUFM2VVF5LzAv
MzIzODMwMzQzYTM5MzIzMjM4M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzczNDM2MzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEkiiAMA0GCSqGSIb3DQEBCwUA
A4IBAQA9i3ERXbCYhDjYrwWNn3WOhdMeucdqcJ1UIKrGlrR5nVIYETe4RMK/j8a7
LEeJiHWFGSdiT+/xT+VvHFJQEv9fIXzO+GbBEey212KbVGKuMXjX+hJuy5HXgTmI
9L6cUUfq18wSkSK3jTVyLoRhIIV+cbJAoj8suTSgiAtghzSxgQmZDJ4LWuHHmUlD
ZWCbfhBLdhIcLbYQt/67hT2JSPTIdiQ6tBQb0nJNSrCOGCuc1x1w0Jcyef71UXa7
wx7u1v4vJNOLc6Hk/bkrKG5Y7g6iBASyIrtNHWjmr96CAapEBmjHAqPiuzWown1A
pwK7RmgqSk/tviFnC3BOtvh2afmQ
-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:38 2024 by rpki-client on console-ams.rpki-client.org