Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/1/323830343a323666343a3a2f33322d3336203d3e20323633383636.roa
File:                     323830343a323666343a3a2f33322d3336203d3e20323633383636.roa (raw, json)
Hash identifier:          G1o5kHITi0xtYaT8EmnIf+1fdAklnI8Op5nQjxQzIxM=
Subject key identifier:   33:4C:EF:A7:58:26:08:8A:98:73:34:4D:F6:09:64:A6:49:FC:36:3D
Certificate issuer:       /CN=D88971C2389D950434E0E7C897ACD9D0A67EC933
Certificate serial:       246C83C81D8AA65B238ECF24FEB5A1BE6AACB9
Authority key identifier: D8:89:71:C2:38:9D:95:04:34:E0:E7:C8:97:AC:D9:D0:A6:7E:C9:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D88971C2389D950434E0E7C897ACD9D0A67EC933.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/1/323830343a323666343a3a2f33322d3336203d3e20323633383636.roa
Signing time:             Thu 04 Apr 2024 09:25:49 +0000
ROA not before:           Thu 04 Apr 2024 09:20:49 +0000
ROA not after:            Thu 03 Apr 2025 09:25:49 +0000
asID:                     263866
IP address blocks:        2804:26f4::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/1/D88971C2389D950434E0E7C897ACD9D0A67EC933.crl
                          rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/1/D88971C2389D950434E0E7C897ACD9D0A67EC933.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D88971C2389D950434E0E7C897ACD9D0A67EC933.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 03:07:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:6c:83:c8:1d:8a:a6:5b:23:8e:cf:24:fe:b5:a1:be:6a:ac:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D88971C2389D950434E0E7C897ACD9D0A67EC933
        Validity
            Not Before: Apr  4 09:20:49 2024 GMT
            Not After : Apr  3 09:25:49 2025 GMT
        Subject: CN=334CEFA75826088A9873344DF60964A649FC363D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b9:c0:6e:8c:c7:3f:69:25:b7:2b:21:91:b8:
                    8d:1a:1c:f7:96:98:0b:7a:97:1e:77:f3:96:4e:dc:
                    57:f4:6d:30:d9:4b:47:ef:b2:cc:9f:ed:b2:28:48:
                    ff:45:1f:e4:94:2a:ee:cf:09:5d:04:b8:bd:bb:81:
                    64:cd:49:92:3e:d3:d1:9d:d0:d4:71:be:81:cd:e8:
                    04:a8:2c:ed:5d:7b:26:4a:07:9c:58:6e:5a:a1:19:
                    fe:48:1c:0f:ea:0b:10:1c:09:01:98:be:e7:dd:0a:
                    0e:87:8c:5e:81:b1:ee:14:c8:e2:52:c4:24:9f:d9:
                    e4:2d:9c:db:5f:e6:c6:2e:48:9f:50:5c:dc:be:9e:
                    e9:17:01:8a:b8:fa:a3:16:75:fb:35:7d:8f:e9:d9:
                    b2:4b:e1:57:dd:5d:c8:5c:e3:3f:9c:ad:ed:dd:d9:
                    b6:df:e6:5b:00:9f:19:2f:2c:44:be:b8:84:cc:a2:
                    c3:0f:29:a0:31:74:9f:5d:7b:19:79:e9:04:6f:7d:
                    2c:d9:8d:28:45:06:9f:ba:01:d2:f4:d6:9e:8d:e0:
                    d3:51:c7:c2:34:c8:26:21:6f:7c:b2:b4:51:59:fd:
                    79:1c:7f:3f:23:fd:15:5a:4e:bb:cb:3f:cf:af:74:
                    12:b4:91:7b:60:54:23:62:70:32:ae:05:e1:31:13:
                    16:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:4C:EF:A7:58:26:08:8A:98:73:34:4D:F6:09:64:A6:49:FC:36:3D
            X509v3 Authority Key Identifier:
                keyid:D8:89:71:C2:38:9D:95:04:34:E0:E7:C8:97:AC:D9:D0:A6:7E:C9:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/1/D88971C2389D950434E0E7C897ACD9D0A67EC933.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D88971C2389D950434E0E7C897ACD9D0A67EC933.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/1/323830343a323666343a3a2f33322d3336203d3e20323633383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:26f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:55:bf:5b:2a:d5:0e:64:fd:b5:b4:c1:6b:4d:d5:22:4c:a9:
         07:30:6d:09:9d:e8:fe:d2:54:3d:05:31:a9:77:a7:cb:61:76:
         26:1d:1e:6b:e8:d6:3d:f1:6d:84:a8:e2:02:4c:2f:41:60:18:
         59:36:34:3f:e0:2f:3e:d4:41:ce:9c:96:6e:0a:d3:46:87:0d:
         a7:43:a7:30:d6:cc:c8:2d:39:0e:cb:a3:60:f5:e1:48:db:51:
         2c:64:46:4c:44:55:0b:f1:56:cd:25:ca:8e:59:9f:81:e3:87:
         e7:4d:88:ba:2f:32:ae:3d:26:cb:fc:01:88:aa:5b:f5:b7:3f:
         7d:71:3e:1b:9a:29:d5:ec:d3:65:4f:27:ba:52:a4:6c:25:0a:
         a0:b5:e5:48:7d:e8:32:b3:0a:18:70:c1:b8:18:79:b3:d6:66:
         49:df:74:4f:99:68:50:35:d4:4c:5c:23:a4:0e:10:c9:e1:cc:
         bf:59:94:58:45:95:ca:98:b5:41:c8:e0:9c:4d:1f:4d:45:54:
         58:dc:ea:89:95:a3:4a:2b:95:e1:2a:07:0e:ba:da:f7:72:82:
         ca:60:cc:bf:89:ea:1c:be:87:3e:e2:35:16:f8:38:e0:a1:b2:
         50:3b:d2:51:5c:a2:10:6d:08:1f:ae:86:d1:0e:8c:cd:f9:dc:
         6e:24:c5:c6
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgITJGyDyB2Kplsjjs8k/rWhvmqsuTANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyhEODg5NzFDMjM4OUQ5NTA0MzRFMEU3Qzg5N0FDRDlEMEE2
N0VDOTMzMB4XDTI0MDQwNDA5MjA0OVoXDTI1MDQwMzA5MjU0OVowMzExMC8GA1UE
AxMoMzM0Q0VGQTc1ODI2MDg4QTk4NzMzNDRERjYwOTY0QTY0OUZDMzYzRDCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM25wG6Mxz9pJbcrIZG4jRoc95aY
C3qXHnfzlk7cV/RtMNlLR++yzJ/tsihI/0Uf5JQq7s8JXQS4vbuBZM1Jkj7T0Z3Q
1HG+gc3oBKgs7V17JkoHnFhuWqEZ/kgcD+oLEBwJAZi+590KDoeMXoGx7hTI4lLE
JJ/Z5C2c21/mxi5In1Bc3L6e6RcBirj6oxZ1+zV9j+nZskvhV91dyFzjP5yt7d3Z
tt/mWwCfGS8sRL64hMyiww8poDF0n117GXnpBG99LNmNKEUGn7oB0vTWno3g01HH
wjTIJiFvfLK0UVn9eRx/PyP9FVpOu8s/z690ErSRe2BUI2JwMq4F4TETFoUCAwEA
AaOCAk0wggJJMB0GA1UdDgQWBBQzTO+nWCYIiphzNE32CWSmSfw2PTAfBgNVHSME
GDAWgBTYiXHCOJ2VBDTg58iXrNnQpn7JMzAOBgNVHQ8BAf8EBAMCB4AwgZIGA1Ud
HwSBijCBhzCBhKCBgaB/hn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9y
ZXBvL1FKWmpLQ202VTJBUWhQRkYyVjhxWlhlVURXVmJtams5QVk1b3FOYWVEbjkv
MS9EODg5NzFDMjM4OUQ5NTA0MzRFMEU3Qzg5N0FDRDlEMEE2N0VDOTMzLmNybDB4
BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q4ODk3MUMyMzg5RDk1MDQzNEUw
RTdDODk3QUNEOUQwQTY3RUM5MzMuY2VyMIGrBggrBgEFBQcBCwSBnjCBmzCBmAYI
KwYBBQUHMAuGgYtyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1FK
WmpLQ202VTJBUWhQRkYyVjhxWlhlVURXVmJtams5QVk1b3FOYWVEbjkvMS8zMjM4
MzAzNDNhMzIzNjY2MzQzYTNhMmYzMzMyMmQzMzM2MjAzZDNlMjAzMjM2MzMzODM2
MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBCb0MA0GCSqGSIb3DQEBCwUAA4IBAQCdVb9bKtUOZP21
tMFrTdUiTKkHMG0Jnej+0lQ9BTGpd6fLYXYmHR5r6NY98W2EqOICTC9BYBhZNjQ/
4C8+1EHOnJZuCtNGhw2nQ6cw1szILTkOy6Ng9eFI21EsZEZMRFUL8VbNJcqOWZ+B
44fnTYi6LzKuPSbL/AGIqlv1tz99cT4bminV7NNlTye6UqRsJQqgteVIfegyswoY
cMG4GHmz1mZJ33RPmWhQNdRMXCOkDhDJ4cy/WZRYRZXKmLVByOCcTR9NRVRY3OqJ
laNKK5XhKgcOutr3coLKYMy/ieocvoc+4jUW+DjgobJQO9JRXKIQbQgfrobRDozN
+dxuJMXG
-----END CERTIFICATE-----
Generated at Sat Sep 28 06:35:54 2024 by rpki-client on console-ams.rpki-client.org