Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/1/323830343a356131303a343030303a3a2f33342d3334203d3e20323638373436.roa
File:                     323830343a356131303a343030303a3a2f33342d3334203d3e20323638373436.roa (raw, json)
Hash identifier:          QgVvx1khW/RYtGngXb4HUzovfUZOGWsiSTgwFMlUFlU=
Subject key identifier:   55:1D:9A:59:AB:41:05:50:D2:9C:E0:EF:A2:CC:AB:6D:DD:BB:7B:7C
Certificate issuer:       /CN=D1EC0A157E4745C6E2C4ACCE96C0A92EDE9F8B47
Certificate serial:       31BDF7EA1A620B8E9FECA6EBEA2086F160578743
Authority key identifier: D1:EC:0A:15:7E:47:45:C6:E2:C4:AC:CE:96:C0:A9:2E:DE:9F:8B:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1EC0A157E4745C6E2C4ACCE96C0A92EDE9F8B47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/1/323830343a356131303a343030303a3a2f33342d3334203d3e20323638373436.roa
Signing time:             Thu 04 Apr 2024 00:02:22 +0000
ROA not before:           Wed 03 Apr 2024 23:57:22 +0000
ROA not after:            Thu 03 Apr 2025 00:02:22 +0000
asID:                     268746
IP address blocks:        2804:5a10:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/1/D1EC0A157E4745C6E2C4ACCE96C0A92EDE9F8B47.crl
                          rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/1/D1EC0A157E4745C6E2C4ACCE96C0A92EDE9F8B47.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1EC0A157E4745C6E2C4ACCE96C0A92EDE9F8B47.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:bd:f7:ea:1a:62:0b:8e:9f:ec:a6:eb:ea:20:86:f1:60:57:87:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1EC0A157E4745C6E2C4ACCE96C0A92EDE9F8B47
        Validity
            Not Before: Apr  3 23:57:22 2024 GMT
            Not After : Apr  3 00:02:22 2025 GMT
        Subject: CN=551D9A59AB410550D29CE0EFA2CCAB6DDDBB7B7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:56:6d:b1:f8:ed:4b:70:3e:ff:6c:e5:30:bf:
                    5d:09:10:ca:0c:67:2d:20:2e:7c:bd:5f:6a:ab:14:
                    b1:a7:7e:d6:61:58:b2:44:69:5a:27:cf:43:50:32:
                    a4:25:5a:2e:eb:5b:8c:b8:fe:ea:10:75:0f:25:a6:
                    17:af:27:a1:9a:98:8d:92:7f:81:52:48:48:76:a1:
                    a0:02:92:f1:99:44:98:79:d0:29:11:80:7a:b0:1c:
                    a3:93:f2:71:0c:1c:94:62:ae:65:37:de:67:90:6a:
                    3a:29:3e:87:fe:09:46:2e:c6:12:89:26:c2:5a:40:
                    c9:10:32:62:ab:ad:c6:7c:5b:bf:d2:72:96:07:6a:
                    8c:38:73:85:6e:c7:f6:30:4b:91:b1:85:8a:90:d1:
                    75:c6:1f:2a:49:c7:6d:bf:1f:3b:b6:61:85:c7:d8:
                    41:95:49:6a:8f:d6:d6:34:d6:06:18:23:32:6e:5a:
                    02:a0:4f:75:b1:77:39:25:21:c5:2f:8d:df:d7:43:
                    24:39:46:85:56:f4:2a:58:4d:77:ed:38:e1:07:36:
                    a1:32:9d:28:34:b0:11:7a:d5:ff:c8:8a:d2:51:4c:
                    53:93:fc:89:77:62:36:5a:a5:32:6d:bc:c0:e9:f3:
                    d0:43:4b:39:e5:c1:17:d1:27:c9:0a:bf:54:ad:e6:
                    6d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:1D:9A:59:AB:41:05:50:D2:9C:E0:EF:A2:CC:AB:6D:DD:BB:7B:7C
            X509v3 Authority Key Identifier:
                keyid:D1:EC:0A:15:7E:47:45:C6:E2:C4:AC:CE:96:C0:A9:2E:DE:9F:8B:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/1/D1EC0A157E4745C6E2C4ACCE96C0A92EDE9F8B47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1EC0A157E4745C6E2C4ACCE96C0A92EDE9F8B47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/1/323830343a356131303a343030303a3a2f33342d3334203d3e20323638373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5a10:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         02:8a:28:bc:f6:20:7f:3f:79:94:3e:32:b5:f6:96:7d:20:a3:
         fa:91:db:5a:94:4e:ad:c9:60:38:66:bc:b7:cd:b9:2f:5e:69:
         dc:53:d7:2e:cd:0d:7d:d8:fa:79:81:b2:03:84:cf:27:9d:02:
         95:bb:ff:18:ef:f4:7f:c5:ed:84:11:e6:eb:af:0c:c6:14:9e:
         6f:4d:13:26:cc:69:1f:4f:f8:9d:c7:bf:08:9f:94:57:ab:45:
         60:f9:da:1d:ff:77:77:2e:3b:36:5c:44:d0:d9:69:9b:4d:06:
         01:25:dc:58:3a:d5:90:93:5a:3f:69:9a:de:07:e8:21:7b:87:
         00:bf:d5:92:4b:2a:ce:a4:3c:ad:8d:9e:7f:c2:09:7c:0d:dc:
         ba:0d:e3:16:56:b9:10:a7:de:eb:5a:a7:e9:3f:38:3a:34:54:
         be:d6:57:65:d7:b4:77:c1:3a:8f:9f:88:14:a2:cf:7d:0b:b0:
         e1:54:7e:be:2b:98:a3:33:96:6a:bb:95:2a:d1:ab:1a:17:c6:
         68:12:1b:88:8c:c9:7d:ce:8f:ff:04:d1:07:d1:d2:ed:8b:a4:
         47:11:d1:02:5a:e3:6b:13:a2:5e:c0:ff:83:58:95:97:e7:89:
         bb:22:98:87:ec:1f:48:53:66:2e:80:a6:6f:ac:23:ef:35:52:
         45:ea:81:52
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUMb336hpiC46f7Kbr6iCG8WBXh0MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDFFQzBBMTU3RTQ3NDVDNkUyQzRBQ0NFOTZDMEE5MkVE
RTlGOEI0NzAeFw0yNDA0MDMyMzU3MjJaFw0yNTA0MDMwMDAyMjJaMDMxMTAvBgNV
BAMTKDU1MUQ5QTU5QUI0MTA1NTBEMjlDRTBFRkEyQ0NBQjZERERCQjdCN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaVm2x+O1LcD7/bOUwv10JEMoM
Zy0gLny9X2qrFLGnftZhWLJEaVonz0NQMqQlWi7rW4y4/uoQdQ8lphevJ6GamI2S
f4FSSEh2oaACkvGZRJh50CkRgHqwHKOT8nEMHJRirmU33meQajopPof+CUYuxhKJ
JsJaQMkQMmKrrcZ8W7/ScpYHaow4c4Vux/YwS5GxhYqQ0XXGHypJx22/Hzu2YYXH
2EGVSWqP1tY01gYYIzJuWgKgT3WxdzklIcUvjd/XQyQ5RoVW9CpYTXftOOEHNqEy
nSg0sBF61f/IitJRTFOT/Il3YjZapTJtvMDp89BDSznlwRfRJ8kKv1St5m0JAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUVR2aWatBBVDSnODvosyrbd27e3wwHwYDVR0j
BBgwFoAU0ewKFX5HRcbixKzOlsCpLt6fi0cwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9zUW9WWEQzdndQaEhFVGZEbTNSNlozS3BFRmVWTjhGV3Bud2FwaUFLQ3lz
LzEvRDFFQzBBMTU3RTQ3NDVDNkUyQzRBQ0NFOTZDMEE5MkVERTlGOEI0Ny5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9EMUVDMEExNTdFNDc0NUM2RTJD
NEFDQ0U5NkMwQTkyRURFOUY4QjQ3LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIG
CCsGAQUFBzALhoGVcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9z
UW9WWEQzdndQaEhFVGZEbTNSNlozS3BFRmVWTjhGV3Bud2FwaUFLQ3lzLzEvMzIz
ODMwMzQzYTM1NjEzMTMwM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNkM2Uy
MDMyMzYzODM3MzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEWhBAMA0GCSqGSIb3DQEBCwUAA4IB
AQACiii89iB/P3mUPjK19pZ9IKP6kdtalE6tyWA4Zry3zbkvXmncU9cuzQ192Pp5
gbIDhM8nnQKVu/8Y7/R/xe2EEebrrwzGFJ5vTRMmzGkfT/idx78In5RXq0Vg+dod
/3d3Ljs2XETQ2WmbTQYBJdxYOtWQk1o/aZreB+ghe4cAv9WSSyrOpDytjZ5/wgl8
Ddy6DeMWVrkQp97rWqfpPzg6NFS+1ldl17R3wTqPn4gUos99C7DhVH6+K5ijM5Zq
u5Uq0asaF8ZoEhuIjMl9zo//BNEH0dLti6RHEdECWuNrE6JewP+DWJWX54m7IpiH
7B9IU2YugKZvrCPvNVJF6oFS
-----END CERTIFICATE-----
Generated at Fri Nov 22 21:03:45 2024 by rpki-client on console-fra.rpki-client.org