Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/1/323830343a343062303a3a2f33322d313238203d3e20323635393735.roa
File:                     323830343a343062303a3a2f33322d313238203d3e20323635393735.roa (raw, json)
Hash identifier:          AFlW6rBDGNeKTXih4RNwGiai7BT4tDgyIHkhFOlNoUQ=
Subject key identifier:   1B:D9:B2:64:D3:FA:37:01:DF:05:AA:39:EC:C8:CC:31:82:95:FA:4A
Certificate issuer:       /CN=D123858020F0224957058CA805488D517D88F47A
Certificate serial:       022EB693498B8B7B9DB0FFF204A35BB4DA8B9C03
Authority key identifier: D1:23:85:80:20:F0:22:49:57:05:8C:A8:05:48:8D:51:7D:88:F4:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D123858020F0224957058CA805488D517D88F47A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/1/323830343a343062303a3a2f33322d313238203d3e20323635393735.roa
Signing time:             Wed 03 Apr 2024 18:27:40 +0000
ROA not before:           Wed 03 Apr 2024 18:22:40 +0000
ROA not after:            Wed 02 Apr 2025 18:27:40 +0000
asID:                     265975
IP address blocks:        2804:40b0::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/1/D123858020F0224957058CA805488D517D88F47A.crl
                          rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/1/D123858020F0224957058CA805488D517D88F47A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D123858020F0224957058CA805488D517D88F47A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 04:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:2e:b6:93:49:8b:8b:7b:9d:b0:ff:f2:04:a3:5b:b4:da:8b:9c:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D123858020F0224957058CA805488D517D88F47A
        Validity
            Not Before: Apr  3 18:22:40 2024 GMT
            Not After : Apr  2 18:27:40 2025 GMT
        Subject: CN=1BD9B264D3FA3701DF05AA39ECC8CC318295FA4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7b:9c:e7:02:08:68:bb:94:6f:a6:d7:f7:b7:
                    6b:b3:8a:0f:ca:ff:87:23:e4:ec:5e:df:b1:bf:92:
                    8d:aa:73:4c:8b:03:f5:99:a3:d2:5a:d6:3b:4b:08:
                    2b:b0:d5:24:25:0f:3b:e1:ba:20:e4:6b:78:f1:d3:
                    32:a9:67:c1:7b:10:b3:80:c3:36:7f:a0:88:df:ec:
                    70:0c:d4:24:27:19:d7:73:dd:c2:82:37:99:fe:cc:
                    4e:1e:9a:43:2f:f8:17:2a:66:c6:5e:30:66:0c:22:
                    5b:35:6a:58:67:94:72:dc:21:62:0e:6c:99:ac:6f:
                    92:c4:12:6d:01:f3:db:fb:05:4b:c3:11:b4:53:e5:
                    00:de:a0:de:d2:47:40:f1:ae:b6:ce:27:67:c4:5a:
                    03:49:58:c5:c1:97:78:7f:6a:4b:57:64:10:6e:3e:
                    75:04:3a:1f:9e:96:3c:64:b8:27:48:72:c5:73:1b:
                    1a:87:3c:38:46:e7:42:7d:59:f7:9a:49:62:9e:33:
                    40:ce:62:63:d4:da:46:ed:d4:22:7a:3a:db:cb:00:
                    7f:6c:38:7a:71:19:74:fd:e7:f6:f0:7c:cd:f0:43:
                    3f:98:29:57:47:76:5e:75:9c:30:0e:15:e4:b7:37:
                    6b:37:17:a1:ed:a6:fe:30:37:05:eb:99:7d:fb:2c:
                    5f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:D9:B2:64:D3:FA:37:01:DF:05:AA:39:EC:C8:CC:31:82:95:FA:4A
            X509v3 Authority Key Identifier:
                keyid:D1:23:85:80:20:F0:22:49:57:05:8C:A8:05:48:8D:51:7D:88:F4:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/1/D123858020F0224957058CA805488D517D88F47A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D123858020F0224957058CA805488D517D88F47A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/1/323830343a343062303a3a2f33322d313238203d3e20323635393735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:40b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:cb:cd:da:38:e5:ac:1b:99:41:3a:e3:6d:8c:30:7b:e9:5b:
         a0:7e:dd:56:8c:11:90:e0:ef:4f:a7:4b:85:54:48:88:5a:10:
         b4:f9:dc:ec:2b:50:e3:47:f7:52:88:ce:2f:8f:fb:61:7f:6f:
         eb:56:f5:24:8f:1e:03:13:d4:00:0a:14:6e:79:52:01:f1:2b:
         6a:34:9f:f2:bf:ed:c6:6c:ed:84:c1:cd:49:08:b4:8f:10:f6:
         5d:ba:b1:2b:35:ae:8b:a2:c2:b5:09:d9:38:40:41:b0:eb:d4:
         e9:1a:12:71:d2:49:20:a1:03:58:b1:32:54:10:22:81:f7:e9:
         61:31:ac:1d:ba:ae:4d:93:a8:6e:ab:03:ef:9e:56:df:58:66:
         65:01:b0:6a:17:65:74:97:4a:56:dd:c8:d5:a0:67:a4:39:e3:
         9a:40:17:cf:6c:83:a6:41:81:c1:7c:be:c7:c3:b4:ab:e6:0f:
         0b:ff:c5:a6:a4:31:a2:0b:01:fc:01:a3:7e:30:eb:28:68:f5:
         ce:0d:6b:63:b1:b1:a6:62:13:10:61:cb:e6:21:67:df:a4:e8:
         6a:81:b9:b7:6b:a8:bb:e7:78:a6:5b:30:d0:e2:df:52:b6:78:
         67:c8:63:ae:c1:96:14:20:4c:80:6e:f9:3f:ca:3c:f5:1d:44:
         e5:1f:e6:20
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUAi62k0mLi3udsP/yBKNbtNqLnAMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDEyMzg1ODAyMEYwMjI0OTU3MDU4Q0E4MDU0ODhENTE3
RDg4RjQ3QTAeFw0yNDA0MDMxODIyNDBaFw0yNTA0MDIxODI3NDBaMDMxMTAvBgNV
BAMTKDFCRDlCMjY0RDNGQTM3MDFERjA1QUEzOUVDQzhDQzMxODI5NUZBNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2e5znAghou5Rvptf3t2uzig/K
/4cj5Oxe37G/ko2qc0yLA/WZo9Ja1jtLCCuw1SQlDzvhuiDka3jx0zKpZ8F7ELOA
wzZ/oIjf7HAM1CQnGddz3cKCN5n+zE4emkMv+BcqZsZeMGYMIls1alhnlHLcIWIO
bJmsb5LEEm0B89v7BUvDEbRT5QDeoN7SR0DxrrbOJ2fEWgNJWMXBl3h/aktXZBBu
PnUEOh+eljxkuCdIcsVzGxqHPDhG50J9WfeaSWKeM0DOYmPU2kbt1CJ6OtvLAH9s
OHpxGXT95/bwfM3wQz+YKVdHdl51nDAOFeS3N2s3F6Htpv4wNwXrmX37LF8BAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUG9myZNP6NwHfBao57MjMMYKV+kowHwYDVR0j
BBgwFoAU0SOFgCDwIklXBYyoBUiNUX2I9HowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3BWclVpaFphTHh4Z1FpMWNaOEM5c0Nja1JyYXdqVW0xUXRBN3NZNjJw
ZkYvMS9EMTIzODU4MDIwRjAyMjQ5NTcwNThDQTgwNTQ4OEQ1MTdEODhGNDdBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxMjM4NTgwMjBGMDIyNDk1
NzA1OENBODA1NDg4RDUxN0Q4OEY0N0EuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dwVnJVaWhaYUx4eGdRaTFjWjhDOXNDY2tScmF3alVtMVF0QTdzWTYycGZGLzEv
MzIzODMwMzQzYTM0MzA2MjMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzUzOTM3MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBECwMA0GCSqGSIb3DQEBCwUAA4IBAQCey83a
OOWsG5lBOuNtjDB76Vugft1WjBGQ4O9Pp0uFVEiIWhC0+dzsK1DjR/dSiM4vj/th
f2/rVvUkjx4DE9QAChRueVIB8StqNJ/yv+3GbO2Ewc1JCLSPEPZdurErNa6LosK1
Cdk4QEGw69TpGhJx0kkgoQNYsTJUECKB9+lhMawduq5Nk6huqwPvnlbfWGZlAbBq
F2V0l0pW3cjVoGekOeOaQBfPbIOmQYHBfL7Hw7Sr5g8L/8WmpDGiCwH8AaN+MOso
aPXODWtjsbGmYhMQYcvmIWffpOhqgbm3a6i753imWzDQ4t9StnhnyGOuwZYUIEyA
bvk/yjz1HUTlH+Yg
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:08 2024 by rpki-client on console-fra.rpki-client.org