Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GEK89HK9UgscSpED6PFwoSWsfFhv2mpZy4FD7s3V4BAG/1/323830343a3334383a3a2f33322d3438203d3e203238313333.roa
File:                     323830343a3334383a3a2f33322d3438203d3e203238313333.roa (raw, json)
Hash identifier:          Cq/sQgps/ggeiNVymn6ZiJRe0Y/B5EvRI/FUXJ+9Ox4=
Subject key identifier:   6D:6C:59:74:5A:CB:13:D1:6B:70:85:C7:4E:00:0D:58:56:53:89:56
Certificate issuer:       /CN=57293D96DAFC56E0450C22FBEE7A673DF7BB26B8
Certificate serial:       3264DE1191C7B28FEEC930FAD7961E320FCB8A13
Authority key identifier: 57:29:3D:96:DA:FC:56:E0:45:0C:22:FB:EE:7A:67:3D:F7:BB:26:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57293D96DAFC56E0450C22FBEE7A673DF7BB26B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEK89HK9UgscSpED6PFwoSWsfFhv2mpZy4FD7s3V4BAG/1/323830343a3334383a3a2f33322d3438203d3e203238313333.roa
Signing time:             Fri 05 Apr 2024 00:05:06 +0000
ROA not before:           Fri 05 Apr 2024 00:00:06 +0000
ROA not after:            Fri 04 Apr 2025 00:05:06 +0000
asID:                     28133
IP address blocks:        2804:348::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GEK89HK9UgscSpED6PFwoSWsfFhv2mpZy4FD7s3V4BAG/1/57293D96DAFC56E0450C22FBEE7A673DF7BB26B8.crl
                          rsync://rpki-repo.registro.br/repo/GEK89HK9UgscSpED6PFwoSWsfFhv2mpZy4FD7s3V4BAG/1/57293D96DAFC56E0450C22FBEE7A673DF7BB26B8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57293D96DAFC56E0450C22FBEE7A673DF7BB26B8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:64:de:11:91:c7:b2:8f:ee:c9:30:fa:d7:96:1e:32:0f:cb:8a:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57293D96DAFC56E0450C22FBEE7A673DF7BB26B8
        Validity
            Not Before: Apr  5 00:00:06 2024 GMT
            Not After : Apr  4 00:05:06 2025 GMT
        Subject: CN=6D6C59745ACB13D16B7085C74E000D5856538956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d9:8f:7a:9e:50:e8:49:91:1b:54:fa:85:00:
                    ae:ac:c1:b2:41:bd:70:46:9a:8f:74:5b:ee:d7:c8:
                    b2:a0:8a:7e:18:66:9d:67:62:75:b5:f6:54:3c:58:
                    ca:7f:f5:30:55:3f:b2:41:91:06:d4:03:c2:6f:24:
                    9d:a4:ae:b3:c2:50:d3:86:dd:5f:c6:14:17:ff:69:
                    02:c8:d4:d4:f8:ed:8a:d3:6f:19:b9:04:19:80:bb:
                    4d:e1:88:28:65:35:66:db:67:fc:fa:50:fd:b6:e3:
                    dd:87:c9:0c:ba:bf:8f:48:66:09:43:2c:7d:9d:c9:
                    a5:91:a3:aa:cc:3d:b0:39:7f:ea:3e:03:53:4b:8b:
                    3d:79:b2:90:7d:d9:1b:6d:5e:ca:11:86:68:d0:e3:
                    98:f6:5b:89:6b:d2:4a:ca:76:d1:08:43:03:d4:eb:
                    d0:f9:f6:24:21:2b:7a:e2:a4:4b:50:45:17:46:0a:
                    2d:48:3f:46:68:98:87:34:35:ca:c3:a1:77:65:59:
                    fa:73:60:c4:66:2a:68:07:5f:0c:2d:d0:2a:93:c6:
                    a6:19:e3:57:07:d7:92:c2:5a:f1:68:45:2a:44:cc:
                    12:7b:24:6b:2b:49:85:1c:c6:53:b6:e8:d9:37:0b:
                    05:74:d8:d7:4f:8a:13:4f:42:0c:4c:a4:ed:61:0c:
                    5e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:6C:59:74:5A:CB:13:D1:6B:70:85:C7:4E:00:0D:58:56:53:89:56
            X509v3 Authority Key Identifier:
                keyid:57:29:3D:96:DA:FC:56:E0:45:0C:22:FB:EE:7A:67:3D:F7:BB:26:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEK89HK9UgscSpED6PFwoSWsfFhv2mpZy4FD7s3V4BAG/1/57293D96DAFC56E0450C22FBEE7A673DF7BB26B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57293D96DAFC56E0450C22FBEE7A673DF7BB26B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEK89HK9UgscSpED6PFwoSWsfFhv2mpZy4FD7s3V4BAG/1/323830343a3334383a3a2f33322d3438203d3e203238313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:348::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:e3:bf:02:4b:be:1b:18:bd:5c:f7:3c:f1:c4:ac:9a:8c:6a:
         20:1b:97:1c:14:01:ca:bc:a0:83:1d:6a:5a:18:b0:3a:42:66:
         a5:19:08:3f:34:ec:0e:8e:ce:0d:44:0f:3e:f2:b6:f7:04:41:
         cf:67:78:dd:20:a4:75:94:70:29:92:4a:13:ef:db:76:3c:f9:
         9b:30:8e:79:8c:19:84:f9:66:ea:bf:35:47:65:90:78:c8:67:
         07:27:dd:45:89:0a:ae:d1:e8:15:64:2b:0b:6e:d5:3d:0e:76:
         13:06:d1:f0:af:68:6e:87:bc:ba:9b:b3:c4:79:c9:88:2f:7b:
         0f:97:e6:47:3d:21:30:ce:87:c0:e2:f9:52:ba:73:67:9d:59:
         cb:eb:9e:6b:a5:0c:67:d4:41:4d:6c:aa:08:5f:1e:c1:1b:18:
         a0:ac:df:ba:1e:5c:ec:9f:32:8a:45:9d:38:f5:68:70:97:2d:
         ed:64:55:a6:95:fb:02:df:48:c2:5c:18:ad:0e:db:fe:9b:76:
         8d:06:72:5d:3e:56:02:c7:f7:fe:5a:ce:60:d5:ba:8b:f1:8b:
         42:cc:c0:a0:53:b7:23:d5:f5:1a:72:f0:27:f0:d9:e3:82:73:
         16:64:96:98:8b:22:b8:59:a1:24:50:cb:8b:2a:d0:ac:30:18:
         28:87:96:ff
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUMmTeEZHHso/uyTD615YeMg/LihMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTcyOTNEOTZEQUZDNTZFMDQ1MEMyMkZCRUU3QTY3M0RG
N0JCMjZCODAeFw0yNDA0MDUwMDAwMDZaFw0yNTA0MDQwMDA1MDZaMDMxMTAvBgNV
BAMTKDZENkM1OTc0NUFDQjEzRDE2QjcwODVDNzRFMDAwRDU4NTY1Mzg5NTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV2Y96nlDoSZEbVPqFAK6swbJB
vXBGmo90W+7XyLKgin4YZp1nYnW19lQ8WMp/9TBVP7JBkQbUA8JvJJ2krrPCUNOG
3V/GFBf/aQLI1NT47YrTbxm5BBmAu03hiChlNWbbZ/z6UP22492HyQy6v49IZglD
LH2dyaWRo6rMPbA5f+o+A1NLiz15spB92RttXsoRhmjQ45j2W4lr0krKdtEIQwPU
69D59iQhK3ripEtQRRdGCi1IP0ZomIc0NcrDoXdlWfpzYMRmKmgHXwwt0CqTxqYZ
41cH15LCWvFoRSpEzBJ7JGsrSYUcxlO26Nk3CwV02NdPihNPQgxMpO1hDF7vAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUbWxZdFrLE9FrcIXHTgANWFZTiVYwHwYDVR0j
BBgwFoAUVyk9ltr8VuBFDCL77npnPfe7JrgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0VLODlISzlVZ3NjU3BFRDZQRndvU1dzZkZodjJtcFp5NEZEN3MzVjRC
QUcvMS81NzI5M0Q5NkRBRkM1NkUwNDUwQzIyRkJFRTdBNjczREY3QkIyNkI4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU3MjkzRDk2REFGQzU2RTA0
NTBDMjJGQkVFN0E2NzNERjdCQjI2QjguY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dFSzg5SEs5VWdzY1NwRUQ2UEZ3b1NXc2ZGaHYybXBaeTRGRDdzM1Y0QkFHLzEv
MzIzODMwMzQzYTMzMzQzODNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzgzMTMz
MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBANIMA0GCSqGSIb3DQEBCwUAA4IBAQAt478CS74bGL1c
9zzxxKyajGogG5ccFAHKvKCDHWpaGLA6QmalGQg/NOwOjs4NRA8+8rb3BEHPZ3jd
IKR1lHApkkoT79t2PPmbMI55jBmE+WbqvzVHZZB4yGcHJ91FiQqu0egVZCsLbtU9
DnYTBtHwr2huh7y6m7PEecmIL3sPl+ZHPSEwzofA4vlSunNnnVnL655rpQxn1EFN
bKoIXx7BGxigrN+6HlzsnzKKRZ049Whwly3tZFWmlfsC30jCXBitDtv+m3aNBnJd
PlYCx/f+Ws5g1bqL8YtCzMCgU7cj1fUacvAn8NnjgnMWZJaYiyK4WaEkUMuLKtCs
MBgoh5b/
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:47 2024 by rpki-client on console-ams.rpki-client.org