Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/1/323830343a343837633a3a2f33322d3332203d3e20323637313234.roa
File:                     323830343a343837633a3a2f33322d3332203d3e20323637313234.roa (raw, json)
Hash identifier:          1tJguJpeE1H0BVFoGd5jSZuRS80qnDsCBITgcxMxqx4=
Subject key identifier:   EA:4A:43:78:20:68:53:26:1F:8B:99:F3:28:0C:63:63:02:19:A8:EC
Certificate issuer:       /CN=EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53
Certificate serial:       125DAE427D2BBD3E65F1289402D0CB425B2E1860
Authority key identifier: EB:B8:C0:EC:DB:83:6F:66:0F:70:CB:02:5F:2A:1D:1E:FD:6E:4A:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/1/323830343a343837633a3a2f33322d3332203d3e20323637313234.roa
Signing time:             Thu 04 Apr 2024 16:10:10 +0000
ROA not before:           Thu 04 Apr 2024 16:05:10 +0000
ROA not after:            Thu 03 Apr 2025 16:10:10 +0000
asID:                     267124
IP address blocks:        2804:487c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.crl
                          rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 20:15:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:5d:ae:42:7d:2b:bd:3e:65:f1:28:94:02:d0:cb:42:5b:2e:18:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53
        Validity
            Not Before: Apr  4 16:05:10 2024 GMT
            Not After : Apr  3 16:10:10 2025 GMT
        Subject: CN=EA4A4378206853261F8B99F3280C63630219A8EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:47:cd:78:d5:d6:fb:45:c4:a8:1c:70:db:f8:
                    e4:2d:9e:ea:ac:be:1d:a0:58:e5:df:fc:75:f2:00:
                    99:44:73:ec:06:0c:ac:e0:27:e1:c6:46:54:b4:a1:
                    57:07:b9:c3:aa:3d:1e:ce:59:72:49:5f:32:f8:d8:
                    26:89:71:9b:73:0e:f8:86:9f:d8:d7:64:ca:27:f7:
                    9b:12:f4:1b:a7:9c:fd:f4:d0:e2:30:19:86:15:7b:
                    6f:92:2e:07:a0:de:98:c5:f3:dd:5a:af:58:0b:b9:
                    65:b2:66:22:ef:23:92:bf:4c:bc:a9:55:52:f4:10:
                    ad:66:a4:77:7f:bb:8c:49:42:be:6c:dc:7f:d9:35:
                    01:5e:7e:4b:70:a9:f5:ac:ba:3b:2e:38:e1:46:0a:
                    f1:06:de:7d:69:4e:2b:9b:5d:1e:04:5d:08:b8:ff:
                    bf:01:81:6d:b7:23:0f:61:3e:e6:9d:ce:e8:55:09:
                    3f:86:b4:c0:cb:6e:5d:1b:7b:5a:43:3f:d6:ac:12:
                    ff:93:40:8b:38:18:e1:73:1c:90:99:f3:69:bb:9b:
                    b2:13:ea:78:02:81:13:ac:d7:c9:7e:e9:a9:81:3b:
                    95:5c:c2:d0:9e:62:ca:76:94:ff:ab:72:5a:b6:98:
                    b1:71:fc:f7:a5:aa:6f:02:db:f9:61:01:e1:f6:58:
                    39:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:4A:43:78:20:68:53:26:1F:8B:99:F3:28:0C:63:63:02:19:A8:EC
            X509v3 Authority Key Identifier:
                keyid:EB:B8:C0:EC:DB:83:6F:66:0F:70:CB:02:5F:2A:1D:1E:FD:6E:4A:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/1/323830343a343837633a3a2f33322d3332203d3e20323637313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:487c::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:b4:bf:06:63:d3:9e:e8:c0:1d:40:a4:94:9f:9e:af:82:cd:
         45:c1:c6:75:55:81:5c:bd:fc:e1:24:7a:cd:01:50:27:e5:ad:
         01:fc:4d:66:e7:31:36:ad:a3:a3:1a:b8:0a:63:5f:97:67:63:
         31:cc:67:7c:2c:f2:0e:f6:ec:85:63:82:c1:c9:94:36:6f:d5:
         5d:c7:90:dd:56:e2:ac:c5:db:fb:bd:1d:30:5a:b5:dd:c4:ca:
         27:ef:7e:f8:7f:c2:f7:9f:fc:b8:24:62:23:a5:16:62:bd:92:
         bf:57:d0:97:7a:35:e2:6c:23:7f:24:a6:9d:29:12:95:91:0c:
         14:56:be:f0:9c:97:1d:5c:b6:3a:f9:12:1b:b4:37:14:26:8a:
         d7:7d:61:8b:e3:a7:82:a8:14:3d:c7:b0:eb:76:0a:74:40:b0:
         b0:d1:6c:4a:a4:05:2d:7e:05:ae:ac:63:f0:01:f2:f4:53:9c:
         8b:b4:16:fb:c3:b3:06:e2:33:3c:9c:9e:3a:55:0b:70:01:a5:
         89:eb:e8:7e:43:a7:fd:37:12:51:89:fb:65:71:3f:c7:1d:3f:
         29:a0:64:4b:c3:0e:86:01:3d:1f:d7:6c:34:9c:42:d7:1e:c6:
         ec:30:cf:59:5d:3a:eb:2b:79:72:fe:73:4a:b4:91:38:5a:60:
         71:f4:dc:17
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUEl2uQn0rvT5l8SiUAtDLQlsuGGAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUJCOEMwRUNEQjgzNkY2NjBGNzBDQjAyNUYyQTFEMUVG
RDZFNEE1MzAeFw0yNDA0MDQxNjA1MTBaFw0yNTA0MDMxNjEwMTBaMDMxMTAvBgNV
BAMTKEVBNEE0Mzc4MjA2ODUzMjYxRjhCOTlGMzI4MEM2MzYzMDIxOUE4RUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLR8141db7RcSoHHDb+OQtnuqs
vh2gWOXf/HXyAJlEc+wGDKzgJ+HGRlS0oVcHucOqPR7OWXJJXzL42CaJcZtzDviG
n9jXZMon95sS9BunnP300OIwGYYVe2+SLgeg3pjF891ar1gLuWWyZiLvI5K/TLyp
VVL0EK1mpHd/u4xJQr5s3H/ZNQFefktwqfWsujsuOOFGCvEG3n1pTiubXR4EXQi4
/78BgW23Iw9hPuadzuhVCT+GtMDLbl0be1pDP9asEv+TQIs4GOFzHJCZ82m7m7IT
6ngCgROs18l+6amBO5VcwtCeYsp2lP+rclq2mLFx/Pelqm8C2/lhAeH2WDmlAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU6kpDeCBoUyYfi5nzKAxjYwIZqOwwHwYDVR0j
BBgwFoAU67jA7NuDb2YPcMsCXyodHv1uSlMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjNmWDF4amVoN1ZHUlpxU2FBWmN1N0hyaHBiblVkR1BLdzk4SDFiTldq
VzEvMS9FQkI4QzBFQ0RCODM2RjY2MEY3MENCMDI1RjJBMUQxRUZENkU0QTUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VCQjhDMEVDREI4MzZGNjYw
RjcwQ0IwMjVGMkExRDFFRkQ2RTRBNTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ozZlgxeGplaDdWR1JacVNhQVpjdTdIcmhwYm5VZEdQS3c5OEgxYk5XalcxLzEv
MzIzODMwMzQzYTM0MzgzNzYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM3
MzEzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARIfDANBgkqhkiG9w0BAQsFAAOCAQEAG7S/BmPT
nujAHUCklJ+er4LNRcHGdVWBXL384SR6zQFQJ+WtAfxNZucxNq2joxq4CmNfl2dj
McxnfCzyDvbshWOCwcmUNm/VXceQ3VbirMXb+70dMFq13cTKJ+9++H/C95/8uCRi
I6UWYr2Sv1fQl3o14mwjfySmnSkSlZEMFFa+8JyXHVy2OvkSG7Q3FCaK131hi+On
gqgUPcew63YKdECwsNFsSqQFLX4Frqxj8AHy9FOci7QW+8OzBuIzPJyeOlULcAGl
ievofkOn/TcSUYn7ZXE/xx0/KaBkS8MOhgE9H9dsNJxC1x7G7DDPWV066yt5cv5z
SrSROFpgcfTcFw==
-----END CERTIFICATE-----
Generated at Fri Jun 28 21:05:26 2024 by rpki-client on console-ams.rpki-client.org