Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/323830343a326437303a38303a3a2f34312d3431203d3e20323635323832.roa
File:                     323830343a326437303a38303a3a2f34312d3431203d3e20323635323832.roa (raw, json)
Hash identifier:          eBtsdDY81NfMBsgLEmJXeXJKkUKD+uNzTdp7rZYUx2M=
Subject key identifier:   CC:B4:6E:6C:37:E3:6C:DF:06:60:DC:30:CB:93:1B:A9:69:D2:77:6D
Certificate issuer:       /CN=9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC
Certificate serial:       74C95C3A06DA37E50666296B6E8BA6CBFEF42F21
Authority key identifier: 9C:B6:D5:EC:53:00:D1:A3:6F:F8:93:C6:0F:39:0D:64:BF:00:F1:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/323830343a326437303a38303a3a2f34312d3431203d3e20323635323832.roa
Signing time:             Mon 14 Oct 2024 13:20:27 +0000
ROA not before:           Mon 14 Oct 2024 13:15:27 +0000
ROA not after:            Mon 13 Oct 2025 13:20:27 +0000
asID:                     265282
IP address blocks:        2804:2d70:80::/41 maxlen: 41

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.crl
                          rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 03:20:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:c9:5c:3a:06:da:37:e5:06:66:29:6b:6e:8b:a6:cb:fe:f4:2f:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC
        Validity
            Not Before: Oct 14 13:15:27 2024 GMT
            Not After : Oct 13 13:20:27 2025 GMT
        Subject: CN=CCB46E6C37E36CDF0660DC30CB931BA969D2776D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ba:f9:1b:b3:d9:a2:22:5b:a7:65:67:0f:e0:
                    7a:79:86:fd:8d:6c:39:17:d4:ba:c9:c4:e8:0c:16:
                    d7:8c:3f:7e:76:2f:5b:79:2d:c8:70:34:26:4d:a0:
                    03:6e:78:f4:46:5f:09:2f:46:c5:a6:ec:01:2b:6e:
                    fd:47:58:6e:16:ef:67:c7:ba:9e:18:02:9f:da:b6:
                    0d:1f:6b:44:85:79:93:dc:e0:88:cc:e6:51:ef:b4:
                    34:d2:2d:ea:c7:cf:79:75:a6:fc:67:7a:ad:09:52:
                    2a:3f:21:72:b6:e9:e5:15:39:5c:63:7f:8c:4a:f7:
                    e5:43:af:14:fb:d8:82:b3:29:03:d2:da:8e:26:87:
                    58:f7:0e:5d:84:14:23:ba:af:c6:9d:17:f5:76:5f:
                    dd:e4:43:ea:aa:02:30:25:c0:08:9a:b2:fa:2c:60:
                    33:c6:85:bf:8b:12:43:e8:06:ea:3e:ff:b0:24:0b:
                    d6:8d:58:1b:48:23:1f:d0:f1:e9:99:14:89:bf:82:
                    b1:72:5c:70:fc:a4:2b:3f:09:fe:9a:b4:75:d9:80:
                    7f:9c:bb:8b:b7:4e:22:a5:97:5d:c9:92:84:c5:66:
                    33:4d:f3:13:30:03:0e:69:ff:42:31:0e:5a:d1:a3:
                    80:33:1a:d1:b8:0e:61:d9:d5:63:04:2c:94:59:6c:
                    bd:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:B4:6E:6C:37:E3:6C:DF:06:60:DC:30:CB:93:1B:A9:69:D2:77:6D
            X509v3 Authority Key Identifier:
                keyid:9C:B6:D5:EC:53:00:D1:A3:6F:F8:93:C6:0F:39:0D:64:BF:00:F1:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/323830343a326437303a38303a3a2f34312d3431203d3e20323635323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d70:80::/41

    Signature Algorithm: sha256WithRSAEncryption
         00:0c:a1:98:6e:8d:9d:09:11:9a:21:11:b0:39:79:bf:25:8a:
         b2:fc:be:53:a7:17:4e:30:a5:51:18:34:50:26:bc:97:b6:5f:
         d5:32:05:ce:61:8f:67:8b:54:8b:a5:df:cc:eb:c6:a7:e5:a2:
         49:43:ec:93:0d:c3:52:ca:38:05:10:47:ea:2c:06:94:8d:f8:
         d4:d6:e5:e5:f8:33:1b:67:40:d6:0a:e2:5f:e8:60:30:61:4f:
         35:ca:a9:9e:0f:98:bf:53:d2:b8:9f:7d:2e:82:8f:ef:c2:0e:
         60:d0:13:b9:8b:8f:30:fd:11:fb:c4:1c:d8:5f:ea:cd:8e:b3:
         4f:66:97:a0:c0:f9:dd:65:0e:ce:46:08:c5:e9:80:a2:f8:13:
         eb:0c:bd:c7:a1:b7:49:08:34:2a:2c:e4:ba:ae:dc:e3:8b:2d:
         a1:65:4f:30:13:bf:9c:c4:7a:ed:b3:cb:14:aa:33:b2:52:aa:
         29:0c:a8:1f:79:62:09:1b:72:d4:db:b9:e5:4d:61:9f:34:23:
         32:04:46:17:36:13:75:b2:35:cc:22:87:0d:0d:54:9f:0e:09:
         d4:c9:bf:86:35:14:06:a2:c2:6e:a2:8e:77:5d:e4:9a:84:08:
         be:17:60:0c:5a:68:74:37:44:3b:ee:de:71:34:f0:7f:c1:02:
         4c:5e:20:ec
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUdMlcOgbaN+UGZilrboumy/70LyEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUNCNkQ1RUM1MzAwRDFBMzZGRjg5M0M2MEYzOTBENjRC
RjAwRjFFQzAeFw0yNDEwMTQxMzE1MjdaFw0yNTEwMTMxMzIwMjdaMDMxMTAvBgNV
BAMTKENDQjQ2RTZDMzdFMzZDREYwNjYwREMzMENCOTMxQkE5NjlEMjc3NkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWuvkbs9miIlunZWcP4Hp5hv2N
bDkX1LrJxOgMFteMP352L1t5LchwNCZNoANuePRGXwkvRsWm7AErbv1HWG4W72fH
up4YAp/atg0fa0SFeZPc4IjM5lHvtDTSLerHz3l1pvxneq0JUio/IXK26eUVOVxj
f4xK9+VDrxT72IKzKQPS2o4mh1j3Dl2EFCO6r8adF/V2X93kQ+qqAjAlwAiasvos
YDPGhb+LEkPoBuo+/7AkC9aNWBtIIx/Q8emZFIm/grFyXHD8pCs/Cf6atHXZgH+c
u4u3TiKll13JkoTFZjNN8xMwAw5p/0IxDlrRo4AzGtG4DmHZ1WMELJRZbL2LAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUzLRubDfjbN8GYNwwy5MbqWnSd20wHwYDVR0j
BBgwFoAUnLbV7FMA0aNv+JPGDzkNZL8A8ewwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHZ4ZjNlSjV4MkNMeGsyTkZhVUZhUnhoR21XeFIxR28zdFdZdHREOGRF
Tk4vMC85Q0I2RDVFQzUzMDBEMUEzNkZGODkzQzYwRjM5MEQ2NEJGMDBGMUVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDQjZENUVDNTMwMEQxQTM2
RkY4OTNDNjBGMzkwRDY0QkYwMEYxRUMuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h2eGYzZUo1eDJDTHhrMk5GYVVGYVJ4aEdtV3hSMUdvM3RXWXR0RDhkRU5OLzAv
MzIzODMwMzQzYTMyNjQzNzMwM2EzODMwM2EzYTJmMzQzMTJkMzQzMTIwM2QzZTIw
MzIzNjM1MzIzODMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHKAQtcACAMA0GCSqGSIb3DQEBCwUAA4IB
AQAADKGYbo2dCRGaIRGwOXm/JYqy/L5TpxdOMKVRGDRQJryXtl/VMgXOYY9ni1SL
pd/M68an5aJJQ+yTDcNSyjgFEEfqLAaUjfjU1uXl+DMbZ0DWCuJf6GAwYU81yqme
D5i/U9K4n30ugo/vwg5g0BO5i48w/RH7xBzYX+rNjrNPZpegwPndZQ7ORgjF6YCi
+BPrDL3HobdJCDQqLOS6rtzjiy2hZU8wE7+cxHrts8sUqjOyUqopDKgfeWIJG3LU
27nlTWGfNCMyBEYXNhN1sjXMIocNDVSfDgnUyb+GNRQGosJuoo53XeSahAi+F2AM
Wmh0N0Q77t5xNPB/wQJMXiDs
-----END CERTIFICATE-----
Generated at Fri Nov 29 07:06:39 2024 by rpki-client on console-fra.rpki-client.org