Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/323830343a353030343a3a2f33322d313238203d3e20323638333634.roa
File:                     323830343a353030343a3a2f33322d313238203d3e20323638333634.roa (raw, json)
Hash identifier:          3+g0UCxOporaHP6jKLoImNlFQnzdruGXXECyNilCA8A=
Subject key identifier:   8A:23:86:A3:EF:25:CC:20:92:B3:AF:19:50:11:C9:D8:50:56:AA:A8
Certificate issuer:       /CN=F348AB796A84D47D293E1A4CC85A1D3B3A6C2A43
Certificate serial:       19648D1E57B9BA8ABAB454F85C898C87479A4E2E
Authority key identifier: F3:48:AB:79:6A:84:D4:7D:29:3E:1A:4C:C8:5A:1D:3B:3A:6C:2A:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F348AB796A84D47D293E1A4CC85A1D3B3A6C2A43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/323830343a353030343a3a2f33322d313238203d3e20323638333634.roa
Signing time:             Tue 16 Jul 2024 17:22:41 +0000
ROA not before:           Tue 16 Jul 2024 17:17:41 +0000
ROA not after:            Tue 15 Jul 2025 17:22:41 +0000
asID:                     268364
IP address blocks:        2804:5004::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/F348AB796A84D47D293E1A4CC85A1D3B3A6C2A43.crl
                          rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/F348AB796A84D47D293E1A4CC85A1D3B3A6C2A43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F348AB796A84D47D293E1A4CC85A1D3B3A6C2A43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 02:33:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:64:8d:1e:57:b9:ba:8a:ba:b4:54:f8:5c:89:8c:87:47:9a:4e:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F348AB796A84D47D293E1A4CC85A1D3B3A6C2A43
        Validity
            Not Before: Jul 16 17:17:41 2024 GMT
            Not After : Jul 15 17:22:41 2025 GMT
        Subject: CN=8A2386A3EF25CC2092B3AF195011C9D85056AAA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:79:c1:96:b7:6e:fe:bd:83:76:b3:da:aa:e5:
                    ec:f1:15:38:6c:50:bd:b1:4b:2b:03:4e:a1:58:97:
                    28:16:2b:b6:7b:65:fe:86:fc:9e:a1:d9:62:db:73:
                    8b:5a:6b:02:e2:42:a0:14:a3:39:e8:d9:a3:7d:ae:
                    3f:01:1e:ad:f7:5e:9f:38:cf:b5:f5:f8:8b:fd:b1:
                    a2:06:2b:3c:8e:19:ca:dd:62:e7:f6:f8:ff:9b:63:
                    03:47:41:93:33:e1:d0:56:dd:b9:b2:05:07:ad:4f:
                    5a:73:39:fe:aa:1e:f7:f7:03:9b:04:e8:23:23:0e:
                    6d:37:e0:8b:b0:87:d0:2e:2a:a9:76:fe:5e:9f:df:
                    83:34:08:0b:9d:40:76:62:9b:3f:1a:ed:4c:93:e6:
                    dd:27:41:eb:62:0a:16:cd:18:54:7d:53:cf:8c:31:
                    71:b0:02:f5:28:b3:e5:f8:b7:75:e1:64:ef:43:1f:
                    66:2d:65:37:76:89:e1:c9:05:80:0e:fc:e8:2a:de:
                    03:3b:af:7c:c5:91:6a:b3:bf:80:82:2c:f8:f6:94:
                    7f:11:aa:d1:53:80:a1:7e:fe:32:e2:de:4d:60:b2:
                    dc:6b:ff:63:78:e3:0a:54:9e:90:d2:be:57:d5:c7:
                    4b:55:7a:6e:47:b6:78:f1:06:cd:80:4d:e8:ac:65:
                    5c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:23:86:A3:EF:25:CC:20:92:B3:AF:19:50:11:C9:D8:50:56:AA:A8
            X509v3 Authority Key Identifier:
                keyid:F3:48:AB:79:6A:84:D4:7D:29:3E:1A:4C:C8:5A:1D:3B:3A:6C:2A:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/F348AB796A84D47D293E1A4CC85A1D3B3A6C2A43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F348AB796A84D47D293E1A4CC85A1D3B3A6C2A43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/323830343a353030343a3a2f33322d313238203d3e20323638333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5004::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:d7:a9:b4:6c:09:6b:04:fe:27:77:11:9c:72:3f:be:3e:43:
         83:32:74:fa:74:8f:78:e9:38:96:ea:3d:5d:e0:f4:92:f0:3e:
         45:fc:45:45:8f:dd:d3:03:6c:6f:d4:02:a8:ba:79:19:0c:ef:
         82:1f:1d:03:8b:4e:af:cd:fb:9e:cc:bc:16:92:1f:97:65:3a:
         8b:0d:38:2b:96:43:61:91:02:7b:5c:97:f5:08:c3:06:4c:73:
         86:9b:dc:9b:b7:66:f1:3c:af:fe:98:db:61:1d:f6:fb:c9:5a:
         f4:35:26:b7:43:fe:22:03:10:f9:e2:32:97:8f:53:ae:03:12:
         d8:af:27:e7:a6:fc:3c:f3:5b:1e:8d:e0:57:45:6f:62:a5:46:
         8d:8f:f3:2e:07:af:a3:ec:1a:da:6b:7e:5b:40:f8:ad:31:f8:
         1f:68:24:ac:b1:89:14:52:82:e1:11:13:fe:c1:a9:82:3a:40:
         2d:97:8b:ce:cb:74:d4:1d:c5:73:48:93:9f:56:c2:b0:5f:c0:
         08:97:61:85:f6:e0:03:84:de:8a:84:85:67:c2:7f:4a:f8:c0:
         87:65:a7:f1:38:1d:f8:03:19:bd:bd:53:9d:a2:ac:cb:51:29:
         8b:ee:fd:33:b0:65:e9:99:d7:7b:51:5d:c0:76:29:0a:f4:6e:
         f9:96:63:8a
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUGWSNHle5uoq6tFT4XImMh0eaTi4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM0OEFCNzk2QTg0RDQ3RDI5M0UxQTRDQzg1QTFEM0Iz
QTZDMkE0MzAeFw0yNDA3MTYxNzE3NDFaFw0yNTA3MTUxNzIyNDFaMDMxMTAvBgNV
BAMTKDhBMjM4NkEzRUYyNUNDMjA5MkIzQUYxOTUwMTFDOUQ4NTA1NkFBQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5ecGWt27+vYN2s9qq5ezxFThs
UL2xSysDTqFYlygWK7Z7Zf6G/J6h2WLbc4taawLiQqAUozno2aN9rj8BHq33Xp84
z7X1+Iv9saIGKzyOGcrdYuf2+P+bYwNHQZMz4dBW3bmyBQetT1pzOf6qHvf3A5sE
6CMjDm034Iuwh9AuKql2/l6f34M0CAudQHZimz8a7UyT5t0nQetiChbNGFR9U8+M
MXGwAvUos+X4t3XhZO9DH2YtZTd2ieHJBYAO/Ogq3gM7r3zFkWqzv4CCLPj2lH8R
qtFTgKF+/jLi3k1gstxr/2N44wpUnpDSvlfVx0tVem5HtnjxBs2ATeisZVw/AgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUiiOGo+8lzCCSs68ZUBHJ2FBWqqgwHwYDVR0j
BBgwFoAU80ireWqE1H0pPhpMyFodOzpsKkMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDFoRTdpeHB1dEZOa3o3VGlrTmlMZXFuV2NTRW5pb0VpR0pTa3dIWTNa
QkwvMC9GMzQ4QUI3OTZBODRENDdEMjkzRTFBNENDODVBMUQzQjNBNkMyQTQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YzNDhBQjc5NkE4NEQ0N0Qy
OTNFMUE0Q0M4NUExRDNCM0E2QzJBNDMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0gxaEU3aXhwdXRGTmt6N1Rpa05pTGVxbldjU0VuaW9FaUdKU2t3SFkzWkJMLzAv
MzIzODMwMzQzYTM1MzAzMDM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzgzMzM2MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBFAEMA0GCSqGSIb3DQEBCwUAA4IBAQCO16m0
bAlrBP4ndxGccj++PkODMnT6dI946TiW6j1d4PSS8D5F/EVFj93TA2xv1AKounkZ
DO+CHx0Di06vzfuezLwWkh+XZTqLDTgrlkNhkQJ7XJf1CMMGTHOGm9ybt2bxPK/+
mNthHfb7yVr0NSa3Q/4iAxD54jKXj1OuAxLYryfnpvw881sejeBXRW9ipUaNj/Mu
B6+j7Braa35bQPitMfgfaCSssYkUUoLhERP+wamCOkAtl4vOy3TUHcVzSJOfVsKw
X8AIl2GF9uADhN6KhIVnwn9K+MCHZafxOB34Axm9vVOdoqzLUSmL7v0zsGXpmdd7
UV3AdikK9G75lmOK
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:00:36 2024 by rpki-client on console-ams.rpki-client.org