Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/1/323830343a353666383a3a2f33322d3332203d3e20323638303335.roa
File:                     323830343a353666383a3a2f33322d3332203d3e20323638303335.roa (raw, json)
Hash identifier:          XczrtCdYyaxyMRBHauGTyxDdR3WaDbotoJVIj/A38z8=
Subject key identifier:   AC:9D:8A:D0:00:09:7A:1D:1E:FA:62:67:5A:11:A9:4D:20:5C:52:8D
Certificate issuer:       /CN=50489A084AA380458A19AC12E8D87EDE0CC41542
Certificate serial:       16579D55397939D5142C3CA0635E5D824BA42DB7
Authority key identifier: 50:48:9A:08:4A:A3:80:45:8A:19:AC:12:E8:D8:7E:DE:0C:C4:15:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50489A084AA380458A19AC12E8D87EDE0CC41542.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/1/323830343a353666383a3a2f33322d3332203d3e20323638303335.roa
Signing time:             Thu 04 Apr 2024 09:24:30 +0000
ROA not before:           Thu 04 Apr 2024 09:19:30 +0000
ROA not after:            Thu 03 Apr 2025 09:24:30 +0000
asID:                     268035
IP address blocks:        2804:56f8::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/1/50489A084AA380458A19AC12E8D87EDE0CC41542.crl
                          rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/1/50489A084AA380458A19AC12E8D87EDE0CC41542.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50489A084AA380458A19AC12E8D87EDE0CC41542.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 21:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:57:9d:55:39:79:39:d5:14:2c:3c:a0:63:5e:5d:82:4b:a4:2d:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50489A084AA380458A19AC12E8D87EDE0CC41542
        Validity
            Not Before: Apr  4 09:19:30 2024 GMT
            Not After : Apr  3 09:24:30 2025 GMT
        Subject: CN=AC9D8AD000097A1D1EFA62675A11A94D205C528D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:40:cd:c3:f9:ad:63:a8:3e:a8:78:ac:4b:24:
                    5f:6c:62:5c:31:f6:cb:63:a9:84:9d:b6:10:9c:c5:
                    0d:41:bb:c3:05:3c:2f:ed:4a:05:d6:61:33:20:56:
                    65:b0:51:c9:e7:71:4e:98:22:9e:04:35:19:c8:64:
                    e2:33:a1:f4:21:63:af:de:a7:ba:50:3f:ce:2f:44:
                    0b:30:db:cf:f7:be:f5:d2:67:2f:da:01:30:70:de:
                    a2:8f:cd:c0:ed:38:b5:ec:31:c1:a3:1e:ad:73:44:
                    be:8d:ad:ab:72:33:21:fa:12:2b:87:7b:fc:8a:a1:
                    43:96:3d:78:71:46:94:b3:1f:e7:2c:ee:da:7e:30:
                    da:9f:11:6d:2d:23:42:3f:77:b8:f1:9a:88:08:1a:
                    00:ea:f8:d3:d8:a7:9f:4a:86:10:2a:46:cc:f7:6f:
                    5d:f5:ef:47:9c:20:ec:b8:e3:ae:e6:7c:af:42:b9:
                    48:38:84:d7:81:b2:b8:35:f1:27:b7:fc:1c:e9:3f:
                    57:74:b8:7a:7b:5a:f9:3b:f5:4e:46:ef:23:e2:c2:
                    6d:91:da:f6:b4:74:62:31:33:e2:5f:4b:a9:ef:aa:
                    ce:17:6a:6e:c5:15:86:47:af:5d:7a:dd:b3:57:8c:
                    6d:6d:40:37:35:37:2a:9d:fe:c9:fe:87:4c:a3:f9:
                    35:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:9D:8A:D0:00:09:7A:1D:1E:FA:62:67:5A:11:A9:4D:20:5C:52:8D
            X509v3 Authority Key Identifier:
                keyid:50:48:9A:08:4A:A3:80:45:8A:19:AC:12:E8:D8:7E:DE:0C:C4:15:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/1/50489A084AA380458A19AC12E8D87EDE0CC41542.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50489A084AA380458A19AC12E8D87EDE0CC41542.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/1/323830343a353666383a3a2f33322d3332203d3e20323638303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:56f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:9c:69:32:9d:0b:57:68:cf:d1:0d:5b:22:ba:f0:fa:90:62:
         bb:a4:c9:8c:c9:07:74:bb:3d:9b:b9:bd:ec:4a:47:ca:ae:0a:
         8f:76:8e:a0:f0:ad:73:53:77:04:d1:f8:fe:0d:36:cb:c1:2e:
         98:13:77:c7:13:ef:5c:8b:9d:02:be:11:f5:eb:33:f2:b6:e5:
         a3:97:6d:3e:bd:f4:5d:4b:48:33:8e:3a:90:89:68:eb:1e:7f:
         30:d2:37:12:05:99:a5:2d:c5:b5:76:42:2e:77:81:cd:2a:9a:
         e8:e9:d4:c4:c0:a3:39:2b:79:1f:b3:40:24:fd:10:c2:13:3e:
         40:e5:76:dd:3e:3b:53:03:78:35:e5:db:97:62:7a:b9:8a:71:
         a3:54:5e:a0:9c:93:e9:ef:10:03:ef:d0:67:f9:f8:d3:d4:7d:
         af:20:1e:1e:32:3b:db:e6:54:1a:2c:09:d2:4a:41:a6:61:1d:
         83:8f:e9:ee:22:c1:ab:e4:c9:d4:fd:66:fa:d3:3b:3a:20:41:
         74:9f:e7:46:fd:e9:a3:b6:0e:d5:be:63:93:dd:58:21:39:7c:
         a7:25:ab:3c:9d:ef:43:22:68:22:10:80:68:b0:e3:f8:d2:ab:
         a3:d5:8b:91:7c:3f:b6:e2:6d:25:dc:24:58:d1:01:0c:70:6f:
         cb:7c:68:fd
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUFledVTl5OdUULDygY15dgkukLbcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTA0ODlBMDg0QUEzODA0NThBMTlBQzEyRThEODdFREUw
Q0M0MTU0MjAeFw0yNDA0MDQwOTE5MzBaFw0yNTA0MDMwOTI0MzBaMDMxMTAvBgNV
BAMTKEFDOUQ4QUQwMDAwOTdBMUQxRUZBNjI2NzVBMTFBOTREMjA1QzUyOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkQM3D+a1jqD6oeKxLJF9sYlwx
9stjqYSdthCcxQ1Bu8MFPC/tSgXWYTMgVmWwUcnncU6YIp4ENRnIZOIzofQhY6/e
p7pQP84vRAsw28/3vvXSZy/aATBw3qKPzcDtOLXsMcGjHq1zRL6NratyMyH6EiuH
e/yKoUOWPXhxRpSzH+cs7tp+MNqfEW0tI0I/d7jxmogIGgDq+NPYp59KhhAqRsz3
b13170ecIOy4467mfK9CuUg4hNeBsrg18Se3/BzpP1d0uHp7Wvk79U5G7yPiwm2R
2va0dGIxM+JfS6nvqs4Xam7FFYZHr1163bNXjG1tQDc1Nyqd/sn+h0yj+TXRAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUrJ2K0AAJeh0e+mJnWhGpTSBcUo0wHwYDVR0j
BBgwFoAUUEiaCEqjgEWKGawS6Nh+3gzEFUIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2VpM21pZHViaDh4cVN6amV5TmQ0TEwxcFpoUnRKMVRCb0p4YzVSVmNp
RjgvMS81MDQ4OUEwODRBQTM4MDQ1OEExOUFDMTJFOEQ4N0VERTBDQzQxNTQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUwNDg5QTA4NEFBMzgwNDU4
QTE5QUMxMkU4RDg3RURFMENDNDE1NDIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dlaTNtaWR1Ymg4eHFTempleU5kNExMMXBaaFJ0SjFUQm9KeGM1UlZjaUY4LzEv
MzIzODMwMzQzYTM1MzY2NjM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzAzMzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARW+DANBgkqhkiG9w0BAQsFAAOCAQEAqJxpMp0L
V2jP0Q1bIrrw+pBiu6TJjMkHdLs9m7m97EpHyq4Kj3aOoPCtc1N3BNH4/g02y8Eu
mBN3xxPvXIudAr4R9esz8rblo5dtPr30XUtIM446kIlo6x5/MNI3EgWZpS3FtXZC
LneBzSqa6OnUxMCjOSt5H7NAJP0QwhM+QOV23T47UwN4NeXbl2J6uYpxo1ReoJyT
6e8QA+/QZ/n409R9ryAeHjI72+ZUGiwJ0kpBpmEdg4/p7iLBq+TJ1P1m+tM7OiBB
dJ/nRv3po7YO1b5jk91YITl8pyWrPJ3vQyJoIhCAaLDj+NKro9WLkXw/tuJtJdwk
WNEBDHBvy3xo/Q==
-----END CERTIFICATE-----
Generated at Sat Sep 28 20:53:12 2024 by rpki-client on console-ams.rpki-client.org