Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/323830343a353838633a3a2f33322d3438203d3e20323638313335.roa
File:                     323830343a353838633a3a2f33322d3438203d3e20323638313335.roa (raw, json)
Hash identifier:          iLebMxqmfT+hy6rljPUl+VgOazovwP/j0/SZv28JxO8=
Subject key identifier:   1B:91:06:92:A0:AB:88:CC:03:FB:DA:AA:6F:F6:9F:97:09:28:0F:3D
Certificate issuer:       /CN=F34586E5FEADD624205CA9CAA175D3DCA59D32B3
Certificate serial:       52CC5D56E7D01B07773AC4EC5AB25BFD19326A00
Authority key identifier: F3:45:86:E5:FE:AD:D6:24:20:5C:A9:CA:A1:75:D3:DC:A5:9D:32:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/323830343a353838633a3a2f33322d3438203d3e20323638313335.roa
Signing time:             Wed 03 Apr 2024 21:26:04 +0000
ROA not before:           Wed 03 Apr 2024 21:21:04 +0000
ROA not after:            Wed 02 Apr 2025 21:26:04 +0000
asID:                     268135
IP address blocks:        2804:588c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.crl
                          rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 22:44:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:cc:5d:56:e7:d0:1b:07:77:3a:c4:ec:5a:b2:5b:fd:19:32:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F34586E5FEADD624205CA9CAA175D3DCA59D32B3
        Validity
            Not Before: Apr  3 21:21:04 2024 GMT
            Not After : Apr  2 21:26:04 2025 GMT
        Subject: CN=1B910692A0AB88CC03FBDAAA6FF69F9709280F3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:68:46:34:b6:2b:2b:ba:26:e5:3f:56:f0:59:
                    b2:eb:ce:a7:62:e2:79:f0:60:05:b2:59:6e:a8:2f:
                    45:93:54:f6:b9:0e:5f:66:e7:e3:0e:3f:4c:a1:1d:
                    13:86:ee:7e:59:72:90:75:ca:fc:af:4f:0b:d0:88:
                    97:46:99:ad:5e:4d:52:c5:63:07:8d:49:df:43:6a:
                    3a:76:cd:81:8b:68:62:20:a7:35:cb:32:a3:b4:4d:
                    14:94:12:0b:d5:ca:0f:30:78:da:b6:17:08:ea:fb:
                    02:25:33:a6:45:68:b1:74:db:d6:25:83:61:f1:72:
                    f0:d3:b8:ed:d3:bc:b6:80:cb:7c:97:0a:1a:fa:1a:
                    38:1f:d1:18:42:e6:3a:44:36:dc:35:66:b0:d7:18:
                    b0:ba:18:0d:c3:70:cc:ef:b4:ec:cc:6f:4a:41:b3:
                    5b:f6:83:df:df:fc:e0:9e:76:c0:31:a2:94:b0:4c:
                    40:42:f8:a6:a9:51:d9:c0:fa:be:74:d9:a1:f7:b7:
                    90:68:1d:71:78:d6:4d:84:a9:c3:1e:f4:49:c9:80:
                    4e:a2:5b:e5:9f:65:63:49:e6:41:36:c4:f3:5d:bd:
                    ea:cc:25:bf:08:fc:cd:ca:33:de:5d:29:61:a9:08:
                    bf:bb:18:6a:94:65:1c:38:c7:b7:1a:a7:d3:35:b3:
                    21:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:91:06:92:A0:AB:88:CC:03:FB:DA:AA:6F:F6:9F:97:09:28:0F:3D
            X509v3 Authority Key Identifier:
                keyid:F3:45:86:E5:FE:AD:D6:24:20:5C:A9:CA:A1:75:D3:DC:A5:9D:32:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/323830343a353838633a3a2f33322d3438203d3e20323638313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:588c::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:55:7a:87:94:48:4f:d9:ca:48:2d:28:fb:0e:20:34:6b:da:
         45:43:30:b6:a4:11:17:6c:f8:53:d8:80:ef:d2:f4:5b:56:c8:
         29:20:4c:5a:04:31:95:dc:46:e0:f9:68:d5:64:da:79:1a:bc:
         89:0a:dc:65:68:0d:d9:38:f2:6e:2e:46:be:5d:96:6a:a1:ea:
         47:27:dc:52:0b:16:93:13:49:10:31:4f:05:5d:d6:9d:36:12:
         43:be:6c:ec:7a:b0:18:ee:67:83:66:d5:86:fe:c9:9d:56:4b:
         01:12:5f:dd:22:ea:11:f5:4c:cd:d8:56:a5:ad:7c:50:1d:af:
         d1:23:05:92:5a:81:31:ab:ce:d8:ff:d2:1e:e1:d7:cb:3d:2c:
         e2:67:ec:e6:54:4f:3d:f6:9a:6b:90:8d:09:ba:dc:47:cc:87:
         23:2d:5f:dc:0a:2f:15:f5:90:18:7c:87:47:e8:44:72:ee:9a:
         8b:9e:16:26:4d:9b:ed:3e:e4:c8:6c:5b:72:ea:a0:f1:11:17:
         11:43:3f:23:ea:fa:40:c9:0b:87:6a:eb:74:d3:cd:46:7f:a8:
         46:4f:01:4b:e7:a2:e4:c7:f0:2d:a3:d4:4b:37:73:e3:85:46:
         e9:a4:a8:35:3d:43:66:4f:cb:e6:a2:76:dd:09:89:cc:34:49:
         86:8f:91:3e
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUUsxdVufQGwd3OsTsWrJb/RkyagAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM0NTg2RTVGRUFERDYyNDIwNUNBOUNBQTE3NUQzRENB
NTlEMzJCMzAeFw0yNDA0MDMyMTIxMDRaFw0yNTA0MDIyMTI2MDRaMDMxMTAvBgNV
BAMTKDFCOTEwNjkyQTBBQjg4Q0MwM0ZCREFBQTZGRjY5Rjk3MDkyODBGM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEaEY0tisruiblP1bwWbLrzqdi
4nnwYAWyWW6oL0WTVPa5Dl9m5+MOP0yhHROG7n5ZcpB1yvyvTwvQiJdGma1eTVLF
YweNSd9Dajp2zYGLaGIgpzXLMqO0TRSUEgvVyg8weNq2Fwjq+wIlM6ZFaLF029Yl
g2HxcvDTuO3TvLaAy3yXChr6Gjgf0RhC5jpENtw1ZrDXGLC6GA3DcMzvtOzMb0pB
s1v2g9/f/OCedsAxopSwTEBC+KapUdnA+r502aH3t5BoHXF41k2EqcMe9EnJgE6i
W+WfZWNJ5kE2xPNdverMJb8I/M3KM95dKWGpCL+7GGqUZRw4x7cap9M1syGdAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUG5EGkqCriMwD+9qqb/aflwkoDz0wHwYDVR0j
BBgwFoAU80WG5f6t1iQgXKnKoXXT3KWdMrMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNG91czRVTVhzcG5IU3o1NE5NOUM1Tm1nRUxueUhIbXVUMXFTcENFWWdC
TDQvMS9GMzQ1ODZFNUZFQURENjI0MjA1Q0E5Q0FBMTc1RDNEQ0E1OUQzMkIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YzNDU4NkU1RkVBREQ2MjQy
MDVDQTlDQUExNzVEM0RDQTU5RDMyQjMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRvdXM0VU1Yc3BuSFN6NTROTTlDNU5tZ0VMbnlISG11VDFxU3BDRVlnQkw0LzEv
MzIzODMwMzQzYTM1MzgzODYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM4
MzEzMzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARYjDANBgkqhkiG9w0BAQsFAAOCAQEAcVV6h5RI
T9nKSC0o+w4gNGvaRUMwtqQRF2z4U9iA79L0W1bIKSBMWgQxldxG4Plo1WTaeRq8
iQrcZWgN2Tjybi5Gvl2WaqHqRyfcUgsWkxNJEDFPBV3WnTYSQ75s7HqwGO5ng2bV
hv7JnVZLARJf3SLqEfVMzdhWpa18UB2v0SMFklqBMavO2P/SHuHXyz0s4mfs5lRP
Pfaaa5CNCbrcR8yHIy1f3AovFfWQGHyHR+hEcu6ai54WJk2b7T7kyGxbcuqg8REX
EUM/I+r6QMkLh2rrdNPNRn+oRk8BS+ei5MfwLaPUSzdz44VG6aSoNT1DZk/L5qJ2
3QmJzDRJho+RPg==
-----END CERTIFICATE-----
Generated at Fri Sep 27 19:50:11 2024 by rpki-client on console-fra.rpki-client.org