Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/323830343a313734303a3a2f33322d3438203d3e203533313037.roa
File:                     323830343a313734303a3a2f33322d3438203d3e203533313037.roa (raw, json)
Hash identifier:          shXnUVU+/N1KccWtJwb5zPPHZ229nseDXhLPR0JI4mk=
Subject key identifier:   3D:0E:FF:DB:11:E4:4C:96:41:84:3F:42:A6:23:62:CD:C1:68:F5:EA
Certificate issuer:       /CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
Certificate serial:       08C1A96B07A779F82803BFD0A52CD91C2B66F0FE
Authority key identifier: 1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/323830343a313734303a3a2f33322d3438203d3e203533313037.roa
Signing time:             Tue 06 Aug 2024 00:18:39 +0000
ROA not before:           Tue 06 Aug 2024 00:13:39 +0000
ROA not after:            Tue 05 Aug 2025 00:18:39 +0000
asID:                     53107
IP address blocks:        2804:1740::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl
                          rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 15:58:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:c1:a9:6b:07:a7:79:f8:28:03:bf:d0:a5:2c:d9:1c:2b:66:f0:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
        Validity
            Not Before: Aug  6 00:13:39 2024 GMT
            Not After : Aug  5 00:18:39 2025 GMT
        Subject: CN=3D0EFFDB11E44C9641843F42A62362CDC168F5EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:03:45:0c:34:70:0a:f8:9f:6f:93:55:47:08:
                    0f:0d:5c:ed:1e:b1:cf:d8:de:1a:e2:e5:97:25:28:
                    d4:36:10:89:f8:f5:0b:c5:54:c9:72:96:14:b8:72:
                    aa:0d:4f:b6:9e:8c:84:65:3c:5a:53:12:fb:12:58:
                    3e:90:21:eb:1e:b1:ff:4e:9f:f2:20:ee:1d:c3:ab:
                    84:00:6e:91:e8:65:9d:37:3f:7e:9e:a4:e9:ed:6c:
                    c6:93:61:ac:a6:18:e8:60:ab:87:1b:39:37:fe:68:
                    a1:7a:37:4d:21:76:75:16:0b:1f:9a:a0:6a:55:4b:
                    75:66:aa:0d:9d:39:bd:c8:27:20:30:20:d4:d5:6f:
                    81:2e:df:8c:71:93:a1:75:7c:26:39:e3:8d:63:b8:
                    87:cc:84:c2:c5:ea:03:b6:d5:f6:ca:e0:3a:c0:9f:
                    80:bd:5c:db:9a:0b:18:4a:95:16:c1:5c:d1:f0:df:
                    13:ca:5f:01:14:a8:91:87:18:e6:02:80:38:41:40:
                    68:c6:78:84:7a:60:c8:e1:0f:93:de:29:5a:d0:7c:
                    5c:ae:c4:59:5c:f7:03:86:99:e8:82:c8:8d:f9:cd:
                    d6:c1:6a:af:e2:e7:03:43:95:a8:cf:6f:42:41:25:
                    8b:33:b6:e6:8b:99:62:96:1d:47:5e:f1:8c:d7:36:
                    81:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:0E:FF:DB:11:E4:4C:96:41:84:3F:42:A6:23:62:CD:C1:68:F5:EA
            X509v3 Authority Key Identifier:
                keyid:1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/323830343a313734303a3a2f33322d3438203d3e203533313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1740::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:6f:00:b1:98:1f:f4:ee:d5:52:39:da:c4:90:4c:0f:f2:9f:
         8a:56:c6:09:ea:d9:2d:cf:dd:33:2f:e1:51:f1:48:41:2b:de:
         d9:73:0a:ca:a0:5c:13:6b:0d:82:db:d2:b1:27:17:41:09:92:
         9d:f3:76:59:68:c3:20:e2:0d:7c:fe:69:84:c6:28:6f:af:37:
         af:51:e6:c7:6f:dc:58:62:39:d6:44:84:b9:da:c3:a9:d9:cf:
         c7:58:d5:77:0d:c6:72:ce:77:04:48:ba:e1:c6:25:f1:84:8c:
         93:16:9a:57:56:72:a1:d9:27:74:92:23:49:35:d0:49:2d:92:
         46:6d:4e:fb:01:e1:40:b5:da:dc:48:fd:a2:be:f0:be:ca:7d:
         57:23:39:8b:57:d8:d9:c8:2b:5a:6b:be:68:52:99:b1:f7:fe:
         5c:43:c5:d6:a6:0c:cb:32:38:17:44:3e:53:8f:fb:e5:6e:b2:
         43:26:d3:cf:c7:d4:2e:6f:ef:b4:de:bd:08:17:2a:9d:bb:3e:
         59:38:da:06:1d:6f:f6:9f:f3:15:82:fc:d2:8f:c5:3d:68:36:
         15:f1:5b:a1:4f:9f:85:c1:e3:3f:db:d3:f4:e8:c0:ee:8d:f8:
         0a:49:06:58:d3:42:f8:e0:d5:42:de:d4:bf:45:d5:74:4e:59:
         ae:d3:61:db
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUCMGpawenefgoA7/QpSzZHCtm8P4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUUzREI3Q0VCNzRDQjA0QzU5N0JCNTBCMDUwREUwRTc4
NUNGQTFBNTAeFw0yNDA4MDYwMDEzMzlaFw0yNTA4MDUwMDE4MzlaMDMxMTAvBgNV
BAMTKDNEMEVGRkRCMTFFNDRDOTY0MTg0M0Y0MkE2MjM2MkNEQzE2OEY1RUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUA0UMNHAK+J9vk1VHCA8NXO0e
sc/Y3hri5ZclKNQ2EIn49QvFVMlylhS4cqoNT7aejIRlPFpTEvsSWD6QIesesf9O
n/Ig7h3Dq4QAbpHoZZ03P36epOntbMaTYaymGOhgq4cbOTf+aKF6N00hdnUWCx+a
oGpVS3Vmqg2dOb3IJyAwINTVb4Eu34xxk6F1fCY5441juIfMhMLF6gO21fbK4DrA
n4C9XNuaCxhKlRbBXNHw3xPKXwEUqJGHGOYCgDhBQGjGeIR6YMjhD5PeKVrQfFyu
xFlc9wOGmeiCyI35zdbBaq/i5wNDlajPb0JBJYsztuaLmWKWHUde8YzXNoHfAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUPQ7/2xHkTJZBhD9CpiNizcFo9eowHwYDVR0j
BBgwFoAUHj23zrdMsExZe7ULBQ3g54XPoaUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDZTQ3VQNHNiNjR4c3JzQnU0d29BZXFWM21GNFhrdHdKUlBaRVQ2UDU0
TXUvMC8xRTNEQjdDRUI3NENCMDRDNTk3QkI1MEIwNTBERTBFNzg1Q0ZBMUE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFFM0RCN0NFQjc0Q0IwNEM1
OTdCQjUwQjA1MERFMEU3ODVDRkExQTUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g2U0N1UDRzYjY0eHNyc0J1NHdvQWVxVjNtRjRYa3R3SlJQWkVUNlA1NE11LzAv
MzIzODMwMzQzYTMxMzczNDMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzUzMzMx
MzAzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEF0AwDQYJKoZIhvcNAQELBQADggEBAIZvALGYH/Tu
1VI52sSQTA/yn4pWxgnq2S3P3TMv4VHxSEEr3tlzCsqgXBNrDYLb0rEnF0EJkp3z
dllowyDiDXz+aYTGKG+vN69R5sdv3FhiOdZEhLnaw6nZz8dY1XcNxnLOdwRIuuHG
JfGEjJMWmldWcqHZJ3SSI0k10EktkkZtTvsB4UC12txI/aK+8L7KfVcjOYtX2NnI
K1prvmhSmbH3/lxDxdamDMsyOBdEPlOP++VuskMm08/H1C5v77TevQgXKp27Plk4
2gYdb/af8xWC/NKPxT1oNhXxW6FPn4XB4z/b0/TowO6N+ApJBljTQvjg1ULe1L9F
1XROWa7TYds=
-----END CERTIFICATE-----
Generated at Mon Nov 25 15:50:07 2024 by rpki-client on console-ams.rpki-client.org