Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5e8a8jFdmR8yv9qo6asT7BJbEek4jwo3wbbTEACthmW/1/323830343a326664303a3a2f33332d3333203d3e20323634393133.roa
File:                     323830343a326664303a3a2f33332d3333203d3e20323634393133.roa (raw, json)
Hash identifier:          MAAmxf+sWv0+Hy/enI+U1564AwIKv4fij3Gs8n71B3U=
Subject key identifier:   48:E6:0E:0D:F4:78:FA:10:76:8C:C6:6B:46:CC:99:76:99:0B:2E:30
Certificate issuer:       /CN=6FD7780130A5D3BF04E958422A80B35362959A11
Certificate serial:       6C604B0EE53C222A77DAD65671FA097D1452B93D
Authority key identifier: 6F:D7:78:01:30:A5:D3:BF:04:E9:58:42:2A:80:B3:53:62:95:9A:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FD7780130A5D3BF04E958422A80B35362959A11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5e8a8jFdmR8yv9qo6asT7BJbEek4jwo3wbbTEACthmW/1/323830343a326664303a3a2f33332d3333203d3e20323634393133.roa
Signing time:             Thu 04 Apr 2024 04:14:00 +0000
ROA not before:           Thu 04 Apr 2024 04:09:00 +0000
ROA not after:            Thu 03 Apr 2025 04:14:00 +0000
asID:                     264913
IP address blocks:        2804:2fd0::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J5e8a8jFdmR8yv9qo6asT7BJbEek4jwo3wbbTEACthmW/1/6FD7780130A5D3BF04E958422A80B35362959A11.crl
                          rsync://rpki-repo.registro.br/repo/J5e8a8jFdmR8yv9qo6asT7BJbEek4jwo3wbbTEACthmW/1/6FD7780130A5D3BF04E958422A80B35362959A11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FD7780130A5D3BF04E958422A80B35362959A11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:60:4b:0e:e5:3c:22:2a:77:da:d6:56:71:fa:09:7d:14:52:b9:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FD7780130A5D3BF04E958422A80B35362959A11
        Validity
            Not Before: Apr  4 04:09:00 2024 GMT
            Not After : Apr  3 04:14:00 2025 GMT
        Subject: CN=48E60E0DF478FA10768CC66B46CC9976990B2E30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:29:fd:09:18:55:48:b0:a0:85:8d:ae:0c:26:
                    84:af:d5:9a:f8:19:44:51:28:d3:f9:56:db:24:8d:
                    63:4f:73:6e:bc:e7:1f:ed:24:97:9e:8e:c3:52:b0:
                    4f:ed:55:b6:f5:c4:36:b8:cf:7a:85:b9:e3:7d:2d:
                    49:12:5f:7d:50:0f:e0:a7:08:3e:73:97:c1:88:fe:
                    63:2e:d1:b1:48:2b:bc:84:4c:74:29:20:d2:2a:43:
                    0c:2b:91:53:94:f1:a3:84:47:0c:d4:40:52:72:43:
                    0d:3e:fa:8d:fc:c0:74:2e:97:b2:92:9b:4b:59:7a:
                    09:e0:c1:a8:88:a9:ec:aa:c3:b0:db:40:4c:56:d5:
                    69:eb:a1:e5:1a:bd:62:e5:4a:41:49:f3:9b:70:e1:
                    bd:a1:82:91:5a:08:8a:81:b3:70:51:14:0d:3d:9e:
                    c7:42:40:a9:a5:4a:91:8b:b8:02:80:f6:61:9b:c2:
                    7a:3c:77:7c:78:36:9e:7f:c4:6f:eb:5f:28:8e:eb:
                    10:71:ec:28:11:d9:c3:54:37:af:41:44:cd:a9:e3:
                    48:22:d6:45:61:22:17:dc:dd:bd:03:4f:01:d1:f4:
                    1a:55:1b:9a:ac:a0:fa:88:ae:4a:a4:25:3d:22:95:
                    b5:82:48:9a:d5:76:c6:e6:11:1a:8f:f2:1a:30:83:
                    fb:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E6:0E:0D:F4:78:FA:10:76:8C:C6:6B:46:CC:99:76:99:0B:2E:30
            X509v3 Authority Key Identifier:
                keyid:6F:D7:78:01:30:A5:D3:BF:04:E9:58:42:2A:80:B3:53:62:95:9A:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5e8a8jFdmR8yv9qo6asT7BJbEek4jwo3wbbTEACthmW/1/6FD7780130A5D3BF04E958422A80B35362959A11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FD7780130A5D3BF04E958422A80B35362959A11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5e8a8jFdmR8yv9qo6asT7BJbEek4jwo3wbbTEACthmW/1/323830343a326664303a3a2f33332d3333203d3e20323634393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2fd0::/33

    Signature Algorithm: sha256WithRSAEncryption
         11:16:f5:67:fc:e9:4f:26:fd:46:9b:d8:da:a8:de:22:a3:83:
         8d:9f:2d:c9:69:bd:f4:10:63:c9:9b:b2:15:8f:02:80:e7:54:
         13:5d:e7:05:47:cc:cd:a0:0e:51:29:bf:b4:2f:15:9e:e8:d6:
         ab:2c:e1:53:d5:90:7a:96:de:51:a7:cb:c2:6e:ef:72:05:91:
         e0:03:83:29:6b:cd:b2:06:76:4f:2b:dd:27:71:f6:e4:bb:74:
         af:fc:0d:1d:d8:5a:e3:b9:96:a7:75:68:7a:a8:61:fa:1f:25:
         30:56:63:6b:b3:94:c4:80:aa:25:c0:49:0b:f7:bd:28:be:49:
         65:8f:52:d2:0f:b5:3d:90:f1:43:e5:87:ae:0c:12:6d:ae:fb:
         95:95:cb:a9:83:7a:07:41:1a:d9:38:f9:7c:f8:f9:80:d0:e1:
         61:54:c8:1c:97:90:3f:fe:12:5a:e0:9f:a9:80:06:bc:76:cd:
         12:db:06:32:6a:b3:59:8f:36:9e:11:5a:3a:0e:fb:ec:81:12:
         a1:86:34:86:81:f8:d4:f0:2b:8a:e4:c4:2c:e3:40:93:ad:3b:
         cc:a8:07:a2:97:79:b9:09:38:83:6d:fd:60:d3:b8:3f:f7:29:
         31:9e:ff:8f:ba:1d:b8:24:40:6e:69:b9:d8:6a:03:3f:bf:fa:
         9b:66:0e:87
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbGBLDuU8Iip32tZWcfoJfRRSuT0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkZENzc4MDEzMEE1RDNCRjA0RTk1ODQyMkE4MEIzNTM2
Mjk1OUExMTAeFw0yNDA0MDQwNDA5MDBaFw0yNTA0MDMwNDE0MDBaMDMxMTAvBgNV
BAMTKDQ4RTYwRTBERjQ3OEZBMTA3NjhDQzY2QjQ2Q0M5OTc2OTkwQjJFMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmKf0JGFVIsKCFja4MJoSv1Zr4
GURRKNP5VtskjWNPc2685x/tJJeejsNSsE/tVbb1xDa4z3qFueN9LUkSX31QD+Cn
CD5zl8GI/mMu0bFIK7yETHQpINIqQwwrkVOU8aOERwzUQFJyQw0++o38wHQul7KS
m0tZegngwaiIqeyqw7DbQExW1WnroeUavWLlSkFJ85tw4b2hgpFaCIqBs3BRFA09
nsdCQKmlSpGLuAKA9mGbwno8d3x4Np5/xG/rXyiO6xBx7CgR2cNUN69BRM2p40gi
1kVhIhfc3b0DTwHR9BpVG5qsoPqIrkqkJT0ilbWCSJrVdsbmERqP8howg/sPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUSOYODfR4+hB2jMZrRsyZdpkLLjAwHwYDVR0j
BBgwFoAUb9d4ATCl078E6VhCKoCzU2KVmhEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjVlOGE4akZkbVI4eXY5cW82YXNUN0JKYkVlazRqd28zd2JiVEVBQ3Ro
bVcvMS82RkQ3NzgwMTMwQTVEM0JGMDRFOTU4NDIyQTgwQjM1MzYyOTU5QTExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZGRDc3ODAxMzBBNUQzQkYw
NEU5NTg0MjJBODBCMzUzNjI5NTlBMTEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o1ZThhOGpGZG1SOHl2OXFvNmFzVDdCSmJFZWs0andvM3diYlRFQUN0aG1XLzEv
MzIzODMwMzQzYTMyNjY2NDMwM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM0
MzkzMTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAQv0AAwDQYJKoZIhvcNAQELBQADggEBABEW9Wf8
6U8m/Uab2Nqo3iKjg42fLclpvfQQY8mbshWPAoDnVBNd5wVHzM2gDlEpv7QvFZ7o
1qss4VPVkHqW3lGny8Ju73IFkeADgylrzbIGdk8r3Sdx9uS7dK/8DR3YWuO5lqd1
aHqoYfofJTBWY2uzlMSAqiXASQv3vSi+SWWPUtIPtT2Q8UPlh64MEm2u+5WVy6mD
egdBGtk4+Xz4+YDQ4WFUyByXkD/+Elrgn6mABrx2zRLbBjJqs1mPNp4RWjoO++yB
EqGGNIaB+NTwK4rkxCzjQJOtO8yoB6KXebkJOINt/WDTuD/3KTGe/4+6HbgkQG5p
udhqAz+/+ptmDoc=
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:14 2024 by rpki-client on console-fra.rpki-client.org