Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/323830343a323362383a3a2f33322d313238203d3e203631353834.roa
File:                     323830343a323362383a3a2f33322d313238203d3e203631353834.roa (raw, json)
Hash identifier:          iqgwQDiyWAUExbH8AllLkFs6BKeC0LUld0nfvSimDUc=
Subject key identifier:   10:1C:D8:47:45:66:A9:0C:18:61:05:89:64:35:EC:8E:7C:82:F1:83
Certificate issuer:       /CN=BC0D4A1BCFB262F6328BE43F0BFE09C371068EF7
Certificate serial:       48393F81C10182E361E758922B2209FA2B3D7B88
Authority key identifier: BC:0D:4A:1B:CF:B2:62:F6:32:8B:E4:3F:0B:FE:09:C3:71:06:8E:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC0D4A1BCFB262F6328BE43F0BFE09C371068EF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/323830343a323362383a3a2f33322d313238203d3e203631353834.roa
Signing time:             Fri 01 Nov 2024 13:19:42 +0000
ROA not before:           Fri 01 Nov 2024 13:14:42 +0000
ROA not after:            Fri 31 Oct 2025 13:19:42 +0000
asID:                     61584
IP address blocks:        2804:23b8::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/BC0D4A1BCFB262F6328BE43F0BFE09C371068EF7.crl
                          rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/BC0D4A1BCFB262F6328BE43F0BFE09C371068EF7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC0D4A1BCFB262F6328BE43F0BFE09C371068EF7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:39:3f:81:c1:01:82:e3:61:e7:58:92:2b:22:09:fa:2b:3d:7b:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC0D4A1BCFB262F6328BE43F0BFE09C371068EF7
        Validity
            Not Before: Nov  1 13:14:42 2024 GMT
            Not After : Oct 31 13:19:42 2025 GMT
        Subject: CN=101CD8474566A90C186105896435EC8E7C82F183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ad:92:b0:9a:a8:ee:c7:3e:85:bd:28:b3:67:
                    32:93:0d:0c:fd:7f:7d:4e:64:c4:1a:11:60:6f:5b:
                    d1:35:4e:c8:9f:c2:85:20:e3:8d:81:80:f8:fe:34:
                    0b:d2:bb:19:bc:ca:93:a2:7c:0b:65:6e:18:04:34:
                    01:de:cc:34:38:fb:22:28:b4:27:f2:45:76:46:01:
                    9f:c1:3d:3f:5e:3f:47:86:a3:a2:e4:0d:3b:1f:7b:
                    3c:b4:b5:12:88:68:f1:f2:9f:a9:be:a0:8a:f3:8e:
                    12:c0:d3:72:9e:e3:34:93:d5:15:77:52:89:22:13:
                    a4:8a:fa:70:43:35:45:73:82:b3:95:81:ec:24:9e:
                    b0:20:15:f8:4f:a6:52:c8:d1:47:5d:f6:02:4e:24:
                    01:45:b2:61:b4:08:50:da:13:cb:a5:b8:32:63:12:
                    eb:c5:27:5c:32:d7:b5:c2:88:ba:69:d6:b0:8a:a5:
                    b1:57:64:5f:1f:48:88:21:86:49:24:2e:de:0b:64:
                    cf:f8:89:38:df:97:34:4d:54:06:b1:0a:54:27:28:
                    18:32:19:84:34:f6:fd:23:f4:54:5c:53:be:d7:87:
                    90:eb:86:fe:d4:a0:82:d9:a5:7f:f8:32:ec:c5:d6:
                    2f:9d:a4:04:5d:34:c4:fc:80:24:72:95:ac:95:02:
                    60:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:1C:D8:47:45:66:A9:0C:18:61:05:89:64:35:EC:8E:7C:82:F1:83
            X509v3 Authority Key Identifier:
                keyid:BC:0D:4A:1B:CF:B2:62:F6:32:8B:E4:3F:0B:FE:09:C3:71:06:8E:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/BC0D4A1BCFB262F6328BE43F0BFE09C371068EF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC0D4A1BCFB262F6328BE43F0BFE09C371068EF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/323830343a323362383a3a2f33322d313238203d3e203631353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:23b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:85:ff:72:b7:93:69:68:69:b3:12:a7:8f:66:85:4e:90:1a:
         74:30:dc:e9:cf:0e:d4:15:68:86:96:23:4a:55:3a:40:a6:89:
         fa:f6:32:ef:38:7a:e1:16:da:b5:de:24:3e:4d:f8:10:17:19:
         26:8f:bc:87:30:48:9f:c3:40:99:38:ed:80:c2:47:70:35:bd:
         12:e5:1b:39:df:61:c6:5b:28:1e:e4:76:9e:75:fa:8a:10:ab:
         4b:21:5b:ec:f9:30:61:b5:2b:9a:2a:5b:02:5b:72:72:7a:ee:
         aa:3f:2b:2e:25:89:43:2b:ae:bf:56:36:9f:ac:a7:e7:d5:c6:
         9c:73:44:7d:34:55:f9:f2:9c:f7:2e:35:f7:a1:03:ba:d8:d5:
         be:7f:1b:34:a3:98:4a:c1:c5:7c:30:60:70:87:5c:49:10:18:
         a0:f6:ed:62:c5:1b:a0:2e:7c:51:04:08:b4:c1:2e:dc:25:53:
         77:31:d2:19:d5:59:8e:e8:bb:8b:b1:10:96:d0:9d:a0:15:df:
         95:9a:60:f9:f2:b7:c3:c9:5d:3b:cd:09:4d:9a:60:b9:fc:9a:
         a8:a4:72:1d:22:ea:c4:9e:ab:32:8d:0e:fe:02:d6:74:16:68:
         f3:3b:37:03:73:1d:95:4f:50:cb:98:c8:dc:b9:40:93:86:00:
         3e:b3:b9:77
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUSDk/gcEBguNh51iSKyIJ+is9e4gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkMwRDRBMUJDRkIyNjJGNjMyOEJFNDNGMEJGRTA5QzM3
MTA2OEVGNzAeFw0yNDExMDExMzE0NDJaFw0yNTEwMzExMzE5NDJaMDMxMTAvBgNV
BAMTKDEwMUNEODQ3NDU2NkE5MEMxODYxMDU4OTY0MzVFQzhFN0M4MkYxODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNrZKwmqjuxz6FvSizZzKTDQz9
f31OZMQaEWBvW9E1TsifwoUg442BgPj+NAvSuxm8ypOifAtlbhgENAHezDQ4+yIo
tCfyRXZGAZ/BPT9eP0eGo6LkDTsfezy0tRKIaPHyn6m+oIrzjhLA03Ke4zST1RV3
UokiE6SK+nBDNUVzgrOVgewknrAgFfhPplLI0Udd9gJOJAFFsmG0CFDaE8uluDJj
EuvFJ1wy17XCiLpp1rCKpbFXZF8fSIghhkkkLt4LZM/4iTjflzRNVAaxClQnKBgy
GYQ09v0j9FRcU77Xh5Drhv7UoILZpX/4MuzF1i+dpARdNMT8gCRylayVAmCnAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUEBzYR0VmqQwYYQWJZDXsjnyC8YMwHwYDVR0j
BBgwFoAUvA1KG8+yYvYyi+Q/C/4Jw3EGjvcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9kak1YM2VyaUJtUUJtNmNGV3JydVlpbVlzUzdjeXE0enN4QW84dFVCRVR1
LzAvQkMwRDRBMUJDRkIyNjJGNjMyOEJFNDNGMEJGRTA5QzM3MTA2OEVGNy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9CQzBENEExQkNGQjI2MkY2MzI4
QkU0M0YwQkZFMDlDMzcxMDY4RUY3LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9k
ak1YM2VyaUJtUUJtNmNGV3JydVlpbVlzUzdjeXE0enN4QW84dFVCRVR1LzAvMzIz
ODMwMzQzYTMyMzM2MjM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzNjMxMzUz
ODM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKAQjuDANBgkqhkiG9w0BAQsFAAOCAQEAT4X/creTaWhp
sxKnj2aFTpAadDDc6c8O1BVohpYjSlU6QKaJ+vYy7zh64Rbatd4kPk34EBcZJo+8
hzBIn8NAmTjtgMJHcDW9EuUbOd9hxlsoHuR2nnX6ihCrSyFb7PkwYbUrmipbAlty
cnruqj8rLiWJQyuuv1Y2n6yn59XGnHNEfTRV+fKc9y4196EDutjVvn8bNKOYSsHF
fDBgcIdcSRAYoPbtYsUboC58UQQItMEu3CVTdzHSGdVZjui7i7EQltCdoBXflZpg
+fK3w8ldO80JTZpgufyaqKRyHSLqxJ6rMo0O/gLWdBZo8zs3A3MdlU9Qy5jI3LlA
k4YAPrO5dw==
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:00 2024 by rpki-client on console-fra.rpki-client.org