Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/323830343a313934303a3a2f33322d3332203d3e203631373832.roa
File:                     323830343a313934303a3a2f33322d3332203d3e203631373832.roa (raw, json)
Hash identifier:          12pGxihYAs9/HaVCAhZZAel3CGu/2HkitgbzUWgSo+E=
Subject key identifier:   7B:1C:6A:A3:57:1B:70:96:9B:DA:6E:42:F6:6B:CE:D3:66:1C:1C:83
Certificate issuer:       /CN=79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3
Certificate serial:       766F62F69160E1B91920C06B82651EE68DCBA03A
Authority key identifier: 79:E7:F0:D1:11:FA:B5:A4:37:6D:D9:C7:CF:E7:FD:B6:92:E5:C8:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/323830343a313934303a3a2f33322d3332203d3e203631373832.roa
Signing time:             Mon 27 May 2024 18:47:40 +0000
ROA not before:           Mon 27 May 2024 18:42:40 +0000
ROA not after:            Mon 26 May 2025 18:47:40 +0000
asID:                     61782
IP address blocks:        2804:1940::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.crl
                          rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 23:32:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:6f:62:f6:91:60:e1:b9:19:20:c0:6b:82:65:1e:e6:8d:cb:a0:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3
        Validity
            Not Before: May 27 18:42:40 2024 GMT
            Not After : May 26 18:47:40 2025 GMT
        Subject: CN=7B1C6AA3571B70969BDA6E42F66BCED3661C1C83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5a:0b:0d:8e:7a:77:ac:37:12:7b:dc:fa:c1:
                    10:6c:75:e1:0c:af:d8:c2:2e:6f:bf:bf:32:ee:d6:
                    ea:0b:7f:e9:08:87:2f:0a:4e:7a:f1:cc:de:c9:4f:
                    06:1f:d1:49:c8:f3:18:25:f5:0a:33:03:c6:6a:61:
                    df:ad:3b:b0:28:9f:53:90:99:6f:ee:47:90:36:da:
                    e0:02:a6:0a:81:3c:c8:06:a7:3f:c7:71:9b:02:46:
                    23:dc:49:d0:34:71:cc:3a:ab:df:b9:12:cc:2b:06:
                    02:c6:2a:fe:dd:d1:53:f3:b3:68:1f:77:69:d6:ef:
                    e9:62:4d:61:8d:02:e4:40:5f:42:6c:82:bd:0b:73:
                    2d:22:6f:3c:5e:d6:11:11:28:eb:4d:3e:a2:37:21:
                    6a:8c:3d:7a:ee:96:80:ee:bc:c8:8e:9d:1d:97:25:
                    77:59:4e:c3:8c:39:ee:f8:4f:6b:55:22:b0:f4:6d:
                    ea:89:18:ba:f1:ef:1f:7d:87:12:ce:0f:4d:a1:da:
                    b1:d1:50:72:33:cc:11:6d:bb:c6:03:76:44:bf:d4:
                    91:2e:e8:a7:e6:e6:30:47:47:5b:a7:17:98:be:5f:
                    62:c3:3f:6c:5c:26:8e:ee:7d:b6:a8:27:27:40:ef:
                    43:b1:1c:ca:dc:3f:97:9f:0b:ef:bb:15:67:ae:f4:
                    b2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:1C:6A:A3:57:1B:70:96:9B:DA:6E:42:F6:6B:CE:D3:66:1C:1C:83
            X509v3 Authority Key Identifier:
                keyid:79:E7:F0:D1:11:FA:B5:A4:37:6D:D9:C7:CF:E7:FD:B6:92:E5:C8:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/323830343a313934303a3a2f33322d3332203d3e203631373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1940::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:1f:bc:73:43:8b:9b:27:5e:24:15:05:77:fe:3c:cb:96:a7:
         34:f9:0a:aa:2e:9e:94:b6:9d:b9:70:2b:9b:0c:f5:fd:6b:2f:
         7e:d0:68:eb:89:4a:2b:01:3e:c9:00:2e:55:34:1c:88:68:7d:
         3d:7a:01:0f:34:85:1e:14:e6:7c:b7:f1:0f:07:d6:db:c6:cd:
         31:ab:3c:49:8b:d7:f3:ff:30:2a:c9:1a:b9:a9:9a:73:ce:04:
         16:4e:11:a7:9a:ce:3b:18:68:50:54:88:5f:19:f9:65:fb:28:
         f6:0e:36:83:26:a9:80:ab:ad:ee:e8:3b:80:a0:5d:4c:a1:04:
         36:7c:8b:cf:0e:41:73:ac:99:db:9a:52:4c:d7:b4:b1:23:22:
         dd:ee:ce:36:dc:e3:d2:fc:c2:bb:33:dd:19:de:51:f0:87:51:
         fc:c3:78:5f:cd:f3:32:ce:0f:3b:9f:58:f6:94:a6:f4:03:f7:
         3e:d6:2d:9d:fe:b4:49:5a:3b:3c:0d:61:0c:00:c7:33:a1:b0:
         0d:f8:f1:59:b7:88:38:ce:fd:47:f1:c8:a5:4b:2d:77:bc:07:
         df:47:fa:12:bb:79:40:36:71:83:bd:f6:73:1d:2f:48:b1:52:
         0d:f6:f8:03:44:73:57:38:ca:72:78:ab:57:4c:e8:17:3c:03:
         f1:35:4d:1e
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUdm9i9pFg4bkZIMBrgmUe5o3LoDowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzlFN0YwRDExMUZBQjVBNDM3NkREOUM3Q0ZFN0ZEQjY5
MkU1QzhCMzAeFw0yNDA1MjcxODQyNDBaFw0yNTA1MjYxODQ3NDBaMDMxMTAvBgNV
BAMTKDdCMUM2QUEzNTcxQjcwOTY5QkRBNkU0MkY2NkJDRUQzNjYxQzFDODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRWgsNjnp3rDcSe9z6wRBsdeEM
r9jCLm+/vzLu1uoLf+kIhy8KTnrxzN7JTwYf0UnI8xgl9QozA8ZqYd+tO7Aon1OQ
mW/uR5A22uACpgqBPMgGpz/HcZsCRiPcSdA0ccw6q9+5EswrBgLGKv7d0VPzs2gf
d2nW7+liTWGNAuRAX0Jsgr0Lcy0ibzxe1hERKOtNPqI3IWqMPXruloDuvMiOnR2X
JXdZTsOMOe74T2tVIrD0beqJGLrx7x99hxLOD02h2rHRUHIzzBFtu8YDdkS/1JEu
6Kfm5jBHR1unF5i+X2LDP2xcJo7ufbaoJydA70OxHMrcP5efC++7FWeu9LL9AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUexxqo1cbcJab2m5C9mvO02YcHIMwHwYDVR0j
BBgwFoAUeefw0RH6taQ3bdnHz+f9tpLlyLMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2dXTWE5QzYzcHhLbTFUN04xTW5TenU5am42ZTVadkw5cXVqVExxVEtu
TFYvMC83OUU3RjBEMTExRkFCNUE0Mzc2REQ5QzdDRkU3RkRCNjkyRTVDOEIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc5RTdGMEQxMTFGQUI1QTQz
NzZERDlDN0NGRTdGREI2OTJFNUM4QjMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dnV01hOUM2M3B4S20xVDdOMU1uU3p1OWpuNmU1WnZMOXF1alRMcVRLbkxWLzAv
MzIzODMwMzQzYTMxMzkzNDMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzYzMTM3
MzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEGUAwDQYJKoZIhvcNAQELBQADggEBAIUfvHNDi5sn
XiQVBXf+PMuWpzT5CqounpS2nblwK5sM9f1rL37QaOuJSisBPskALlU0HIhofT16
AQ80hR4U5ny38Q8H1tvGzTGrPEmL1/P/MCrJGrmpmnPOBBZOEaeazjsYaFBUiF8Z
+WX7KPYONoMmqYCrre7oO4CgXUyhBDZ8i88OQXOsmduaUkzXtLEjIt3uzjbc49L8
wrsz3RneUfCHUfzDeF/N8zLODzufWPaUpvQD9z7WLZ3+tElaOzwNYQwAxzOhsA34
8Vm3iDjO/UfxyKVLLXe8B99H+hK7eUA2cYO99nMdL0ixUg32+ANEc1c4ynJ4q1dM
6Bc8A/E1TR4=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:16 2024 by rpki-client on console-fra.rpki-client.org