Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/MYsWh1JBtSpAcrURcKsAu1Rk8ho3RMdaHGJrPUg4V1Q/1/323830343a343436303a3a2f33322d313238203d3e20323637363239.roa
File:                     323830343a343436303a3a2f33322d313238203d3e20323637363239.roa (raw, json)
Hash identifier:          5FV+lZrkZipo3AQsC84mEcZoHKmVR3ZII1MsV0y4cvk=
Subject key identifier:   E9:5A:25:9F:39:C9:3A:55:AE:1D:0D:E3:E6:77:31:95:88:C5:60:8A
Certificate issuer:       /CN=A5AD03985B5804EFACADF9D490164F54BBE0D71C
Certificate serial:       017ACD89F9E3955E0D977B95805C16F502E1BB55
Authority key identifier: A5:AD:03:98:5B:58:04:EF:AC:AD:F9:D4:90:16:4F:54:BB:E0:D7:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5AD03985B5804EFACADF9D490164F54BBE0D71C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/MYsWh1JBtSpAcrURcKsAu1Rk8ho3RMdaHGJrPUg4V1Q/1/323830343a343436303a3a2f33322d313238203d3e20323637363239.roa
Signing time:             Thu 04 Apr 2024 03:16:02 +0000
ROA not before:           Thu 04 Apr 2024 03:11:02 +0000
ROA not after:            Thu 03 Apr 2025 03:16:02 +0000
asID:                     267629
IP address blocks:        2804:4460::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/MYsWh1JBtSpAcrURcKsAu1Rk8ho3RMdaHGJrPUg4V1Q/1/A5AD03985B5804EFACADF9D490164F54BBE0D71C.crl
                          rsync://rpki-repo.registro.br/repo/MYsWh1JBtSpAcrURcKsAu1Rk8ho3RMdaHGJrPUg4V1Q/1/A5AD03985B5804EFACADF9D490164F54BBE0D71C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5AD03985B5804EFACADF9D490164F54BBE0D71C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 03:08:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:7a:cd:89:f9:e3:95:5e:0d:97:7b:95:80:5c:16:f5:02:e1:bb:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5AD03985B5804EFACADF9D490164F54BBE0D71C
        Validity
            Not Before: Apr  4 03:11:02 2024 GMT
            Not After : Apr  3 03:16:02 2025 GMT
        Subject: CN=E95A259F39C93A55AE1D0DE3E677319588C5608A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:99:56:b8:12:fb:36:f8:e2:8f:07:0a:31:cc:
                    c1:af:91:22:38:52:54:52:b1:fd:6d:a1:84:e9:4b:
                    30:31:cf:09:75:9c:19:e3:3b:78:be:ab:71:a5:99:
                    9b:7c:b1:2e:b1:4f:27:8d:2d:53:6f:8c:71:a9:a6:
                    36:06:e8:13:16:8e:41:98:e9:f6:33:37:bb:bf:3e:
                    36:92:c0:26:3c:ec:68:8f:5f:9a:50:90:c1:e8:2e:
                    8e:1d:40:cf:5a:b4:73:a7:74:fd:b1:66:6f:34:f4:
                    0c:bb:ad:6d:83:f7:9c:f5:14:23:29:22:bd:93:cb:
                    50:09:02:6c:b5:9f:8c:62:86:f8:e2:74:16:b5:97:
                    25:de:4d:2c:e8:7c:ee:ec:d9:78:3c:13:73:f0:00:
                    9b:9a:31:bf:6a:e4:ab:c9:18:d5:a4:02:00:6a:0e:
                    dd:19:5f:16:7b:a8:70:36:d7:6e:7d:d4:fd:7b:fa:
                    db:86:0e:a0:e8:2a:c8:fa:6a:f4:7b:48:2f:a0:96:
                    45:fd:c9:cc:c3:1a:54:fc:85:45:b9:60:23:b4:45:
                    47:31:7e:82:1e:c6:95:ab:2f:94:f1:31:5f:ef:ad:
                    ca:d7:4f:3b:51:d8:8d:c1:9a:8e:ec:9a:6f:a4:46:
                    54:26:62:8b:96:bf:97:fa:42:13:23:4c:6a:58:57:
                    33:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:5A:25:9F:39:C9:3A:55:AE:1D:0D:E3:E6:77:31:95:88:C5:60:8A
            X509v3 Authority Key Identifier:
                keyid:A5:AD:03:98:5B:58:04:EF:AC:AD:F9:D4:90:16:4F:54:BB:E0:D7:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/MYsWh1JBtSpAcrURcKsAu1Rk8ho3RMdaHGJrPUg4V1Q/1/A5AD03985B5804EFACADF9D490164F54BBE0D71C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5AD03985B5804EFACADF9D490164F54BBE0D71C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/MYsWh1JBtSpAcrURcKsAu1Rk8ho3RMdaHGJrPUg4V1Q/1/323830343a343436303a3a2f33322d313238203d3e20323637363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4460::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:e2:05:52:4c:33:dc:d3:a2:21:71:c0:95:bd:ef:bf:98:ad:
         37:8f:db:ba:9d:f3:31:7b:e0:49:1e:76:93:87:f9:3e:63:93:
         e5:ac:46:02:5c:07:57:cb:a4:df:2f:ee:66:c9:7c:c5:dd:f2:
         3d:65:5f:90:ee:74:ff:92:7b:cc:4b:60:78:43:7e:be:22:ce:
         02:44:64:c8:2b:ea:bb:a3:bc:d2:10:e1:3d:f2:a9:2b:d6:64:
         59:7d:7a:0c:0e:e6:63:72:ef:c5:9a:bf:85:90:95:5b:67:7f:
         c5:5e:98:1b:a0:21:6f:8a:a0:6c:e0:c0:bd:37:fc:a8:5f:9a:
         75:f1:8e:72:30:ec:4a:81:0b:19:76:e2:a9:04:6f:7d:9a:7e:
         70:06:bc:c6:31:6c:e5:8a:e8:f5:07:b9:34:24:1d:04:a6:7b:
         0c:38:82:e8:58:dc:2f:e4:b3:ed:24:48:d9:aa:37:74:54:bc:
         e2:76:1c:9d:64:f5:fb:3f:dc:36:97:c4:70:8d:35:39:58:d1:
         ed:67:c7:7e:d3:8d:38:7e:06:e1:eb:be:b3:74:30:76:93:a6:
         3b:60:6c:e0:f8:ab:b8:ee:7b:ea:9d:ce:72:98:01:fb:4d:af:
         d6:95:f3:3c:5b:2e:9a:41:86:a6:05:b6:4f:93:24:a4:2b:6a:
         79:35:3a:42
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUAXrNifnjlV4Nl3uVgFwW9QLhu1UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTVBRDAzOTg1QjU4MDRFRkFDQURGOUQ0OTAxNjRGNTRC
QkUwRDcxQzAeFw0yNDA0MDQwMzExMDJaFw0yNTA0MDMwMzE2MDJaMDMxMTAvBgNV
BAMTKEU5NUEyNTlGMzlDOTNBNTVBRTFEMERFM0U2NzczMTk1ODhDNTYwOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDomVa4Evs2+OKPBwoxzMGvkSI4
UlRSsf1toYTpSzAxzwl1nBnjO3i+q3GlmZt8sS6xTyeNLVNvjHGppjYG6BMWjkGY
6fYzN7u/PjaSwCY87GiPX5pQkMHoLo4dQM9atHOndP2xZm809Ay7rW2D95z1FCMp
Ir2Ty1AJAmy1n4xihvjidBa1lyXeTSzofO7s2Xg8E3PwAJuaMb9q5KvJGNWkAgBq
Dt0ZXxZ7qHA212591P17+tuGDqDoKsj6avR7SC+glkX9yczDGlT8hUW5YCO0RUcx
foIexpWrL5TxMV/vrcrXTztR2I3Bmo7smm+kRlQmYouWv5f6QhMjTGpYVzPRAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU6VolnznJOlWuHQ3j5ncxlYjFYIowHwYDVR0j
BBgwFoAUpa0DmFtYBO+srfnUkBZPVLvg1xwwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9NWXNXaDFKQnRTcEFjclVSY0tzQXUxUms4aG8zUk1kYUhHSnJQVWc0VjFR
LzEvQTVBRDAzOTg1QjU4MDRFRkFDQURGOUQ0OTAxNjRGNTRCQkUwRDcxQy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9BNUFEMDM5ODVCNTgwNEVGQUNB
REY5RDQ5MDE2NEY1NEJCRTBENzFDLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9N
WXNXaDFKQnRTcEFjclVSY0tzQXUxUms4aG8zUk1kYUhHSnJQVWc0VjFRLzEvMzIz
ODMwMzQzYTM0MzQzNjMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2Mzcz
NjMyMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcB
Af8EETAPMA0EAgACMAcDBQAoBERgMA0GCSqGSIb3DQEBCwUAA4IBAQA64gVSTDPc
06IhccCVve+/mK03j9u6nfMxe+BJHnaTh/k+Y5PlrEYCXAdXy6TfL+5myXzF3fI9
ZV+Q7nT/knvMS2B4Q36+Is4CRGTIK+q7o7zSEOE98qkr1mRZfXoMDuZjcu/Fmr+F
kJVbZ3/FXpgboCFviqBs4MC9N/yoX5p18Y5yMOxKgQsZduKpBG99mn5wBrzGMWzl
iuj1B7k0JB0EpnsMOILoWNwv5LPtJEjZqjd0VLzidhydZPX7P9w2l8RwjTU5WNHt
Z8d+0404fgbh676zdDB2k6Y7YGzg+Ku47nvqnc5ymAH7Ta/WlfM8Wy6aQYamBbZP
kySkK2p5NTpC
-----END CERTIFICATE-----
Generated at Sat Jun 29 03:15:05 2024 by rpki-client on console-fra.rpki-client.org