Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/323830343a346331343a396230303a3a2f34382d3438203d3e20323637333438.roa
File:                     323830343a346331343a396230303a3a2f34382d3438203d3e20323637333438.roa (raw, json)
Hash identifier:          8c5MKDGoAHaYJ9o1fxsiIisDp/1324peq4Ypkxdg93w=
Subject key identifier:   22:D1:0F:67:C8:D4:32:85:90:75:C1:49:BB:0F:61:84:1B:10:52:26
Certificate issuer:       /CN=BB8D12F61F027D2250EA527497904D61BD80DD58
Certificate serial:       53CF0E8BD0A1B137E14905AA123CD0BE33BCDDE7
Authority key identifier: BB:8D:12:F6:1F:02:7D:22:50:EA:52:74:97:90:4D:61:BD:80:DD:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB8D12F61F027D2250EA527497904D61BD80DD58.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/323830343a346331343a396230303a3a2f34382d3438203d3e20323637333438.roa
Signing time:             Wed 31 Jul 2024 17:47:53 +0000
ROA not before:           Wed 31 Jul 2024 17:42:53 +0000
ROA not after:            Wed 30 Jul 2025 17:47:53 +0000
asID:                     267348
IP address blocks:        2804:4c14:9b00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/BB8D12F61F027D2250EA527497904D61BD80DD58.crl
                          rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/BB8D12F61F027D2250EA527497904D61BD80DD58.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB8D12F61F027D2250EA527497904D61BD80DD58.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:cf:0e:8b:d0:a1:b1:37:e1:49:05:aa:12:3c:d0:be:33:bc:dd:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB8D12F61F027D2250EA527497904D61BD80DD58
        Validity
            Not Before: Jul 31 17:42:53 2024 GMT
            Not After : Jul 30 17:47:53 2025 GMT
        Subject: CN=22D10F67C8D432859075C149BB0F61841B105226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8c:ff:e1:fe:32:d5:a0:f4:34:87:e0:45:41:
                    48:1c:4d:b5:d4:22:bc:89:f9:2f:62:c9:6d:b4:0e:
                    c8:9b:1e:1d:92:97:d9:66:7c:77:cb:a5:3e:6b:a0:
                    31:5b:d3:96:f2:3b:19:ea:bd:39:0c:cc:d8:b2:7a:
                    6f:10:18:5d:89:80:cc:40:ab:f0:07:c6:1e:97:ab:
                    3a:ee:d2:17:5f:6f:93:9b:af:db:12:cc:8f:c2:3c:
                    c8:ca:2c:50:79:0e:e7:c6:a2:75:d4:f7:a5:a2:48:
                    d4:fc:58:0d:55:3a:45:b6:8e:e9:b6:a3:ed:4c:b8:
                    79:b0:ea:8b:2b:d5:35:9a:8a:a6:62:3c:c8:62:63:
                    f9:4d:54:94:98:e7:4f:f2:e6:e6:e0:14:bb:e5:bc:
                    fb:36:4d:ce:1a:5e:e7:41:83:93:bf:89:f2:a7:d4:
                    ae:38:a0:9f:57:14:22:04:9b:8d:30:7c:da:39:c9:
                    32:c9:cc:06:f9:61:cf:6c:8a:07:d4:72:f8:56:a9:
                    d7:fb:74:30:74:b2:bb:1d:ac:c6:d0:3f:9d:2c:31:
                    e1:48:27:30:5f:2f:e2:3f:8b:e5:62:58:73:1c:db:
                    f1:cc:40:60:c9:7d:21:e0:f6:50:2a:f4:2b:49:3a:
                    d6:71:54:f8:c9:32:b1:56:49:e5:cf:10:52:cd:83:
                    d9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D1:0F:67:C8:D4:32:85:90:75:C1:49:BB:0F:61:84:1B:10:52:26
            X509v3 Authority Key Identifier:
                keyid:BB:8D:12:F6:1F:02:7D:22:50:EA:52:74:97:90:4D:61:BD:80:DD:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/BB8D12F61F027D2250EA527497904D61BD80DD58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB8D12F61F027D2250EA527497904D61BD80DD58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/323830343a346331343a396230303a3a2f34382d3438203d3e20323637333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c14:9b00::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:eb:c6:a3:b9:32:4c:3d:88:e3:98:22:ef:96:02:03:45:46:
         3b:43:bb:c6:29:d5:95:21:c0:37:fd:10:f6:28:1a:23:7a:81:
         c5:67:92:d9:03:15:40:48:f1:50:cd:ed:43:c0:c5:a4:5c:3c:
         45:b4:86:4e:80:c1:7c:e8:4b:26:77:83:8b:bb:43:92:40:36:
         9b:89:6e:4b:67:ee:46:ed:98:79:02:bd:e2:aa:92:9c:60:65:
         5b:f7:c6:63:42:0f:79:cd:a3:63:15:d2:f8:56:0d:1f:d7:44:
         09:12:ec:3f:41:d0:10:82:e6:2e:65:4e:6a:0e:5b:7f:de:70:
         35:f2:b9:1b:c3:d4:31:d3:99:e0:ba:2f:58:32:ae:8f:53:1e:
         45:b4:39:c3:e9:fe:cc:fa:1d:aa:19:b6:72:e7:a7:15:4e:7c:
         12:3b:32:04:c6:4b:d2:97:f4:ab:ce:bd:cd:fc:26:93:83:f3:
         ef:ce:7e:9a:70:91:69:6e:3e:ed:d5:e0:00:66:e5:b9:4a:32:
         cc:01:20:33:16:39:d4:d1:76:18:99:2d:39:df:11:e6:c3:71:
         1a:3c:c9:1d:40:0f:ec:1f:28:16:05:ca:ec:09:b6:ce:8c:ae:
         fd:c3:19:01:95:e4:7f:e5:e1:60:31:19:25:18:5b:a7:21:60:
         07:7f:a2:92
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUU88Oi9ChsTfhSQWqEjzQvjO83ecwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkI4RDEyRjYxRjAyN0QyMjUwRUE1Mjc0OTc5MDRENjFC
RDgwREQ1ODAeFw0yNDA3MzExNzQyNTNaFw0yNTA3MzAxNzQ3NTNaMDMxMTAvBgNV
BAMTKDIyRDEwRjY3QzhENDMyODU5MDc1QzE0OUJCMEY2MTg0MUIxMDUyMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChjP/h/jLVoPQ0h+BFQUgcTbXU
IryJ+S9iyW20DsibHh2Sl9lmfHfLpT5roDFb05byOxnqvTkMzNiyem8QGF2JgMxA
q/AHxh6Xqzru0hdfb5Obr9sSzI/CPMjKLFB5DufGonXU96WiSNT8WA1VOkW2jum2
o+1MuHmw6osr1TWaiqZiPMhiY/lNVJSY50/y5ubgFLvlvPs2Tc4aXudBg5O/ifKn
1K44oJ9XFCIEm40wfNo5yTLJzAb5Yc9sigfUcvhWqdf7dDB0srsdrMbQP50sMeFI
JzBfL+I/i+ViWHMc2/HMQGDJfSHg9lAq9CtJOtZxVPjJMrFWSeXPEFLNg9nJAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUItEPZ8jUMoWQdcFJuw9hhBsQUiYwHwYDVR0j
BBgwFoAUu40S9h8CfSJQ6lJ0l5BNYb2A3VgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDR1ZFVqSnFISGc4UVFOQjhBZVZqYzFCU0JpQWpmQjJEdWFaeUNoemNI
Z0IvMC9CQjhEMTJGNjFGMDI3RDIyNTBFQTUyNzQ5NzkwNEQ2MUJEODBERDU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JCOEQxMkY2MUYwMjdEMjI1
MEVBNTI3NDk3OTA0RDYxQkQ4MERENTguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g0dWRVakpxSEhnOFFRTkI4QWVWamMxQlNCaUFqZkIyRHVhWnlDaHpjSGdCLzAv
MzIzODMwMzQzYTM0NjMzMTM0M2EzOTYyMzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzNzMzMzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgETBSbADANBgkqhkiG9w0BAQsF
AAOCAQEAiuvGo7kyTD2I45gi75YCA0VGO0O7xinVlSHAN/0Q9igaI3qBxWeS2QMV
QEjxUM3tQ8DFpFw8RbSGToDBfOhLJneDi7tDkkA2m4luS2fuRu2YeQK94qqSnGBl
W/fGY0IPec2jYxXS+FYNH9dECRLsP0HQEILmLmVOag5bf95wNfK5G8PUMdOZ4Lov
WDKuj1MeRbQ5w+n+zPodqhm2cuenFU58EjsyBMZL0pf0q869zfwmk4Pz785+mnCR
aW4+7dXgAGbluUoyzAEgMxY51NF2GJktOd8R5sNxGjzJHUAP7B8oFgXK7Am2zoyu
/cMZAZXkf+XhYDEZJRhbpyFgB3+ikg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 08:42:06 2024 by rpki-client on console-fra.rpki-client.org