Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/dbQ8tMNmgPq6NXP5Uqw3rprcibbBwA1VAT7vDzjgiZG/1/323830343a363636343a383030303a3a2f33332d3333203d3e20323639353535.roa
File:                     323830343a363636343a383030303a3a2f33332d3333203d3e20323639353535.roa (raw, json)
Hash identifier:          R/KaSVwGXXh5T1E7YX4kgDJpY90a5FOQThOU0H63w18=
Subject key identifier:   0C:CD:F8:37:1C:4F:B7:B9:3E:AE:48:D0:6E:A0:A4:97:26:17:3B:58
Certificate issuer:       /CN=41FAEE4FB242061F96FA0AC747E9DAAF65360241
Certificate serial:       6D59D947336D805F4AA366015EB1DE5BF241B35B
Authority key identifier: 41:FA:EE:4F:B2:42:06:1F:96:FA:0A:C7:47:E9:DA:AF:65:36:02:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41FAEE4FB242061F96FA0AC747E9DAAF65360241.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dbQ8tMNmgPq6NXP5Uqw3rprcibbBwA1VAT7vDzjgiZG/1/323830343a363636343a383030303a3a2f33332d3333203d3e20323639353535.roa
Signing time:             Wed 03 Apr 2024 21:03:47 +0000
ROA not before:           Wed 03 Apr 2024 20:58:47 +0000
ROA not after:            Wed 02 Apr 2025 21:03:47 +0000
asID:                     269555
IP address blocks:        2804:6664:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/dbQ8tMNmgPq6NXP5Uqw3rprcibbBwA1VAT7vDzjgiZG/1/41FAEE4FB242061F96FA0AC747E9DAAF65360241.crl
                          rsync://rpki-repo.registro.br/repo/dbQ8tMNmgPq6NXP5Uqw3rprcibbBwA1VAT7vDzjgiZG/1/41FAEE4FB242061F96FA0AC747E9DAAF65360241.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41FAEE4FB242061F96FA0AC747E9DAAF65360241.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 21:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:59:d9:47:33:6d:80:5f:4a:a3:66:01:5e:b1:de:5b:f2:41:b3:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41FAEE4FB242061F96FA0AC747E9DAAF65360241
        Validity
            Not Before: Apr  3 20:58:47 2024 GMT
            Not After : Apr  2 21:03:47 2025 GMT
        Subject: CN=0CCDF8371C4FB7B93EAE48D06EA0A49726173B58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:05:aa:eb:ce:c6:9d:ca:8e:a0:22:60:34:0b:
                    66:0a:c3:5a:4a:a9:74:23:ff:bb:98:7f:b6:96:9b:
                    bf:15:8d:b3:45:60:6d:a9:b4:4a:8d:77:98:93:d7:
                    8d:a3:a4:bc:33:bd:0c:68:93:0b:c1:d1:c7:cd:c3:
                    c1:18:e1:c2:18:7d:b1:b5:82:0a:87:87:02:c6:74:
                    59:a4:60:3f:fa:43:9d:93:a3:0c:1f:10:ad:3a:d2:
                    18:72:19:9b:d9:6b:99:71:fd:5d:af:6b:f2:a1:d5:
                    c1:67:e7:b6:9f:e8:29:ad:11:f2:f8:ba:0d:c5:76:
                    de:64:62:c6:d6:d7:9f:de:02:df:fb:f1:f2:29:f3:
                    8f:89:42:2d:ba:7c:26:00:40:8a:83:70:82:5d:be:
                    17:02:f2:28:2f:ba:63:dd:e3:3c:d7:c5:f7:13:2f:
                    91:b5:6d:3d:fa:48:22:3d:6b:46:66:85:e7:e4:b4:
                    6e:19:08:4d:7b:a9:77:0f:35:79:42:75:be:7f:0d:
                    eb:8a:07:b0:dc:3a:2f:a2:10:0b:6a:ef:78:e0:e6:
                    e4:c7:d2:34:6b:f6:07:6e:dc:8b:52:0d:3f:95:8f:
                    af:2a:c6:81:9a:aa:74:5e:ad:c2:f4:cf:0e:13:80:
                    f8:97:e4:fa:f2:74:3f:cc:24:ea:3e:65:ac:65:69:
                    d3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:CD:F8:37:1C:4F:B7:B9:3E:AE:48:D0:6E:A0:A4:97:26:17:3B:58
            X509v3 Authority Key Identifier:
                keyid:41:FA:EE:4F:B2:42:06:1F:96:FA:0A:C7:47:E9:DA:AF:65:36:02:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dbQ8tMNmgPq6NXP5Uqw3rprcibbBwA1VAT7vDzjgiZG/1/41FAEE4FB242061F96FA0AC747E9DAAF65360241.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41FAEE4FB242061F96FA0AC747E9DAAF65360241.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dbQ8tMNmgPq6NXP5Uqw3rprcibbBwA1VAT7vDzjgiZG/1/323830343a363636343a383030303a3a2f33332d3333203d3e20323639353535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6664:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         b2:33:23:ab:02:74:f3:29:1b:fb:6d:a9:27:77:71:3a:a0:38:
         9b:a4:2d:15:3a:fc:bd:82:90:36:b4:aa:31:fb:8c:4b:ac:0d:
         92:dc:30:b0:db:6e:64:ac:a4:f5:1a:40:f1:4e:56:da:d4:6d:
         e5:da:d7:c9:eb:ed:b4:c8:92:79:9f:52:ec:ff:65:dd:01:0b:
         45:bb:e7:dd:21:a4:2b:ef:c2:65:33:d9:7f:cf:98:be:a0:61:
         50:c0:41:48:02:2a:6c:6b:3f:f5:aa:a8:23:6d:7b:bc:63:0c:
         24:b3:d7:c4:7e:03:23:9a:ee:11:dd:b7:68:d8:17:5d:cd:b0:
         d8:f3:76:05:f2:23:72:4d:2f:6f:4b:f7:4f:81:72:4f:87:91:
         70:e2:ae:c0:9c:69:74:bd:cf:2a:71:63:0e:35:a3:4e:f9:37:
         b9:75:ab:65:0e:1e:cb:e6:39:18:46:b3:7d:5e:fd:e2:d0:df:
         4b:f5:b2:4f:2a:eb:58:41:fa:b5:75:96:28:0d:c0:77:67:bc:
         38:80:5b:45:15:f4:8b:c3:db:19:bf:0c:e2:28:a4:70:ba:e1:
         55:34:8f:ed:38:f0:b2:ae:b3:1e:e7:d1:98:ce:78:22:0a:19:
         31:ae:10:85:17:3e:39:f9:40:9e:ec:f1:4e:fc:1f:1f:61:42:
         11:e5:23:c4
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUbVnZRzNtgF9Ko2YBXrHeW/JBs1swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDFGQUVFNEZCMjQyMDYxRjk2RkEwQUM3NDdFOURBQUY2
NTM2MDI0MTAeFw0yNDA0MDMyMDU4NDdaFw0yNTA0MDIyMTAzNDdaMDMxMTAvBgNV
BAMTKDBDQ0RGODM3MUM0RkI3QjkzRUFFNDhEMDZFQTBBNDk3MjYxNzNCNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDABarrzsadyo6gImA0C2YKw1pK
qXQj/7uYf7aWm78VjbNFYG2ptEqNd5iT142jpLwzvQxokwvB0cfNw8EY4cIYfbG1
ggqHhwLGdFmkYD/6Q52TowwfEK060hhyGZvZa5lx/V2va/Kh1cFn57af6CmtEfL4
ug3Fdt5kYsbW15/eAt/78fIp84+JQi26fCYAQIqDcIJdvhcC8igvumPd4zzXxfcT
L5G1bT36SCI9a0ZmhefktG4ZCE17qXcPNXlCdb5/DeuKB7DcOi+iEAtq73jg5uTH
0jRr9gdu3ItSDT+Vj68qxoGaqnRercL0zw4TgPiX5PrydD/MJOo+ZaxladOfAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUDM34NxxPt7k+rkjQbqCklyYXO1gwHwYDVR0j
BBgwFoAUQfruT7JCBh+W+grHR+nar2U2AkEwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9kYlE4dE1ObWdQcTZOWFA1VXF3M3JwcmNpYmJCd0ExVkFUN3ZEempnaVpH
LzEvNDFGQUVFNEZCMjQyMDYxRjk2RkEwQUM3NDdFOURBQUY2NTM2MDI0MS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS80MUZBRUU0RkIyNDIwNjFGOTZG
QTBBQzc0N0U5REFBRjY1MzYwMjQxLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIG
CCsGAQUFBzALhoGVcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9k
YlE4dE1ObWdQcTZOWFA1VXF3M3JwcmNpYmJCd0ExVkFUN3ZEempnaVpHLzEvMzIz
ODMwMzQzYTM2MzYzNjM0M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNkM2Uy
MDMyMzYzOTM1MzUzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEZmSAMA0GCSqGSIb3DQEBCwUAA4IB
AQCyMyOrAnTzKRv7baknd3E6oDibpC0VOvy9gpA2tKox+4xLrA2S3DCw225krKT1
GkDxTlba1G3l2tfJ6+20yJJ5n1Ls/2XdAQtFu+fdIaQr78JlM9l/z5i+oGFQwEFI
Aipsaz/1qqgjbXu8Ywwks9fEfgMjmu4R3bdo2BddzbDY83YF8iNyTS9vS/dPgXJP
h5Fw4q7AnGl0vc8qcWMONaNO+Te5datlDh7L5jkYRrN9Xv3i0N9L9bJPKutYQfq1
dZYoDcB3Z7w4gFtFFfSLw9sZvwziKKRwuuFVNI/tOPCyrrMe59GYzngiChkxrhCF
Fz45+UCe7PFO/B8fYUIR5SPE
-----END CERTIFICATE-----
Generated at Sat Sep 28 21:52:42 2024 by rpki-client on console-fra.rpki-client.org