Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/323830343a363031343a3a2f33322d3335203d3e20323639313434.roa
File:                     323830343a363031343a3a2f33322d3335203d3e20323639313434.roa (raw, json)
Hash identifier:          2FA1dThAgvVaUqWBaEsMjziaorWD9wLtnrWx3n4HZTA=
Subject key identifier:   05:92:A4:0F:D2:C7:05:72:61:08:DE:5A:D7:2A:5D:82:E4:06:AB:5D
Certificate issuer:       /CN=474E4FE6C0585832935E6E5D9A67EE410B274CCB
Certificate serial:       35D7C10991FA1722F0784B21D4FD1C4030B1DC5B
Authority key identifier: 47:4E:4F:E6:C0:58:58:32:93:5E:6E:5D:9A:67:EE:41:0B:27:4C:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/474E4FE6C0585832935E6E5D9A67EE410B274CCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/323830343a363031343a3a2f33322d3335203d3e20323639313434.roa
Signing time:             Thu 08 Aug 2024 12:50:20 +0000
ROA not before:           Thu 08 Aug 2024 12:45:20 +0000
ROA not after:            Thu 07 Aug 2025 12:50:20 +0000
asID:                     269144
IP address blocks:        2804:6014::/32 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/474E4FE6C0585832935E6E5D9A67EE410B274CCB.crl
                          rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/474E4FE6C0585832935E6E5D9A67EE410B274CCB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/474E4FE6C0585832935E6E5D9A67EE410B274CCB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 13:08:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:d7:c1:09:91:fa:17:22:f0:78:4b:21:d4:fd:1c:40:30:b1:dc:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=474E4FE6C0585832935E6E5D9A67EE410B274CCB
        Validity
            Not Before: Aug  8 12:45:20 2024 GMT
            Not After : Aug  7 12:50:20 2025 GMT
        Subject: CN=0592A40FD2C705726108DE5AD72A5D82E406AB5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ad:9c:c2:7d:8d:87:00:bc:84:a6:47:af:20:
                    0d:a6:f7:fc:37:82:44:94:27:38:4d:67:04:5a:a7:
                    97:55:02:9d:9d:61:59:00:7a:fb:2f:ca:ea:ac:ee:
                    6e:27:ed:d0:5d:ea:aa:0a:47:2b:80:db:ce:be:e1:
                    6e:ce:77:7e:c1:f3:85:35:19:6c:a2:93:60:d7:50:
                    3b:2c:7a:a4:f9:87:ad:53:f8:af:17:ce:a4:e1:46:
                    66:60:38:d9:0d:1c:52:28:7c:19:00:38:05:af:4d:
                    e0:c8:c3:e3:f7:9f:3a:48:6d:95:d9:93:60:c3:a4:
                    ac:af:72:1f:31:ef:32:33:4c:fc:c8:b1:f8:fc:e4:
                    71:5d:70:49:9d:7e:f6:78:a4:6e:bc:bf:3f:d3:95:
                    67:ec:59:38:96:0e:10:01:a9:54:73:8b:cd:7f:bd:
                    86:61:70:7e:52:d4:9d:cd:98:3f:8f:b0:d8:e0:a5:
                    fb:1d:7f:5c:27:fa:4b:78:7f:7b:fc:1f:0e:20:16:
                    e0:b5:ea:2a:f4:d7:dc:82:42:4f:ba:fa:bc:92:5e:
                    1c:83:5a:9b:05:32:d6:ef:ed:cc:24:5c:e6:7a:c6:
                    6c:ee:fe:41:b3:47:91:14:3e:6a:22:04:b4:00:46:
                    d4:fd:7c:5a:37:54:72:e1:21:bb:ae:02:28:f8:fe:
                    ab:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:92:A4:0F:D2:C7:05:72:61:08:DE:5A:D7:2A:5D:82:E4:06:AB:5D
            X509v3 Authority Key Identifier:
                keyid:47:4E:4F:E6:C0:58:58:32:93:5E:6E:5D:9A:67:EE:41:0B:27:4C:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/474E4FE6C0585832935E6E5D9A67EE410B274CCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/474E4FE6C0585832935E6E5D9A67EE410B274CCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/323830343a363031343a3a2f33322d3335203d3e20323639313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6014::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:dc:2b:14:06:32:29:87:5a:9c:39:66:72:6e:d4:e1:2a:ec:
         48:af:79:e4:9a:25:f7:b5:51:84:ad:dc:ff:97:12:1d:14:74:
         d5:00:ef:ed:dd:62:b8:14:3a:26:ba:e8:e1:11:64:2a:e0:90:
         35:e3:d5:be:ab:53:0d:9d:dc:8a:af:8d:5e:9a:06:97:03:ef:
         d7:0b:3b:8c:87:75:d9:28:03:40:38:b9:10:b3:79:b7:b2:c6:
         c8:bb:c1:ae:28:06:23:07:a5:11:26:a1:81:d8:38:07:01:f2:
         f7:25:59:2e:69:fb:a3:fb:cc:cf:a2:d1:81:8f:dd:f7:37:70:
         a1:08:26:53:ed:b8:d8:6a:7e:83:e2:4a:8d:37:74:58:40:9a:
         67:bd:a8:80:05:b9:84:47:fd:96:75:b7:a2:17:db:29:e2:cf:
         ef:f5:ba:81:d5:be:67:04:82:c4:98:84:29:6c:47:06:17:4c:
         e0:5f:c9:c1:ad:58:47:87:0c:2f:be:42:63:93:59:cb:2b:e3:
         be:d4:72:d4:dc:5b:1b:51:e8:b1:8c:c4:63:09:60:39:cd:fc:
         ac:99:64:c4:12:ee:e7:06:02:2d:e1:dc:17:10:0d:52:75:13:
         d2:52:dc:4b:eb:16:9c:1d:0d:7f:ba:e6:90:9d:f8:d3:8b:37:
         24:7e:16:d9
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUNdfBCZH6FyLweEsh1P0cQDCx3FswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDc0RTRGRTZDMDU4NTgzMjkzNUU2RTVEOUE2N0VFNDEw
QjI3NENDQjAeFw0yNDA4MDgxMjQ1MjBaFw0yNTA4MDcxMjUwMjBaMDMxMTAvBgNV
BAMTKDA1OTJBNDBGRDJDNzA1NzI2MTA4REU1QUQ3MkE1RDgyRTQwNkFCNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcrZzCfY2HALyEpkevIA2m9/w3
gkSUJzhNZwRap5dVAp2dYVkAevsvyuqs7m4n7dBd6qoKRyuA286+4W7Od37B84U1
GWyik2DXUDsseqT5h61T+K8XzqThRmZgONkNHFIofBkAOAWvTeDIw+P3nzpIbZXZ
k2DDpKyvch8x7zIzTPzIsfj85HFdcEmdfvZ4pG68vz/TlWfsWTiWDhABqVRzi81/
vYZhcH5S1J3NmD+PsNjgpfsdf1wn+kt4f3v8Hw4gFuC16ir019yCQk+6+rySXhyD
WpsFMtbv7cwkXOZ6xmzu/kGzR5EUPmoiBLQARtT9fFo3VHLhIbuuAij4/qtPAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUBZKkD9LHBXJhCN5a1ypdguQGq10wHwYDVR0j
BBgwFoAUR05P5sBYWDKTXm5dmmfuQQsnTMswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1pWa281dUYyVkJNeFdVenByNkJZWVhxc2NpRjZOTjF6elhXOFRzSno0
S3kvMC80NzRFNEZFNkMwNTg1ODMyOTM1RTZFNUQ5QTY3RUU0MTBCMjc0Q0NCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ3NEU0RkU2QzA1ODU4MzI5
MzVFNkU1RDlBNjdFRTQxMEIyNzRDQ0IuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0daVmtvNXVGMlZCTXhXVXpwcjZCWVlYcXNjaUY2Tk4xenpYVzhUc0p6NEt5LzAv
MzIzODMwMzQzYTM2MzAzMTM0M2EzYTJmMzMzMjJkMzMzNTIwM2QzZTIwMzIzNjM5
MzEzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARgFDANBgkqhkiG9w0BAQsFAAOCAQEAKNwrFAYy
KYdanDlmcm7U4SrsSK955Jol97VRhK3c/5cSHRR01QDv7d1iuBQ6Jrro4RFkKuCQ
NePVvqtTDZ3ciq+NXpoGlwPv1ws7jId12SgDQDi5ELN5t7LGyLvBrigGIwelESah
gdg4BwHy9yVZLmn7o/vMz6LRgY/d9zdwoQgmU+242Gp+g+JKjTd0WECaZ72ogAW5
hEf9lnW3ohfbKeLP7/W6gdW+ZwSCxJiEKWxHBhdM4F/Jwa1YR4cML75CY5NZyyvj
vtRy1NxbG1HosYzEYwlgOc38rJlkxBLu5wYCLeHcFxANUnUT0lLcS+sWnB0Nf7rm
kJ3404s3JH4W2Q==
-----END CERTIFICATE-----
Generated at Fri Nov 29 13:26:49 2024 by rpki-client on console-ams.rpki-client.org