Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3JLhzfJmGgVkZd4hkCYsuuzU9AeoPSzXLBg26z7rNS8o/0/323830343a363433343a3a2f33322d313238203d3e20323639343133.roa
File:                     323830343a363433343a3a2f33322d313238203d3e20323639343133.roa (raw, json)
Hash identifier:          nMJJYPA3WqnOzRMt5cBVC9XsUJNRNuWX1gh013emNx0=
Subject key identifier:   FB:2C:1B:E3:2A:7E:32:06:43:D9:63:5A:C8:26:6F:F3:12:A8:8B:AD
Certificate issuer:       /CN=45E43D2A72EEC89D0C8D648BE1C5D85B009EB216
Certificate serial:       0C6EF9998D41014AE0BEE9E9A4A6ED1B03D5E2C5
Authority key identifier: 45:E4:3D:2A:72:EE:C8:9D:0C:8D:64:8B:E1:C5:D8:5B:00:9E:B2:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45E43D2A72EEC89D0C8D648BE1C5D85B009EB216.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JLhzfJmGgVkZd4hkCYsuuzU9AeoPSzXLBg26z7rNS8o/0/323830343a363433343a3a2f33322d313238203d3e20323639343133.roa
Signing time:             Wed 29 May 2024 13:21:08 +0000
ROA not before:           Wed 29 May 2024 13:16:08 +0000
ROA not after:            Wed 28 May 2025 13:21:08 +0000
asID:                     269413
IP address blocks:        2804:6434::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3JLhzfJmGgVkZd4hkCYsuuzU9AeoPSzXLBg26z7rNS8o/0/45E43D2A72EEC89D0C8D648BE1C5D85B009EB216.crl
                          rsync://rpki-repo.registro.br/repo/3JLhzfJmGgVkZd4hkCYsuuzU9AeoPSzXLBg26z7rNS8o/0/45E43D2A72EEC89D0C8D648BE1C5D85B009EB216.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45E43D2A72EEC89D0C8D648BE1C5D85B009EB216.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 10:50:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:6e:f9:99:8d:41:01:4a:e0:be:e9:e9:a4:a6:ed:1b:03:d5:e2:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45E43D2A72EEC89D0C8D648BE1C5D85B009EB216
        Validity
            Not Before: May 29 13:16:08 2024 GMT
            Not After : May 28 13:21:08 2025 GMT
        Subject: CN=FB2C1BE32A7E320643D9635AC8266FF312A88BAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:18:6e:95:09:4f:f1:68:a4:94:de:49:4c:66:
                    76:16:74:a5:98:b6:81:4c:f0:63:b6:fc:5d:4e:41:
                    de:98:43:72:a0:35:8f:bd:40:c4:cf:28:69:ed:81:
                    a1:e3:4f:4d:c4:06:54:73:6d:c2:74:7f:d7:4d:d7:
                    49:d5:90:f3:49:0e:b0:de:1b:51:c2:d9:88:12:16:
                    ad:ce:f1:8e:5b:90:7b:c2:c5:8a:c0:21:c5:71:00:
                    b3:d4:4e:14:ff:dc:25:16:71:a8:66:10:f3:ce:47:
                    b9:9e:56:49:34:7d:89:72:a8:8b:73:f2:ed:67:9e:
                    61:1c:92:ee:06:6b:c7:03:aa:3c:8f:f7:03:5c:24:
                    f1:ed:54:ee:74:18:e3:64:0f:b2:f8:0e:9f:01:62:
                    a9:00:ed:a1:67:df:72:3d:f2:45:0b:89:6b:b7:1b:
                    e2:75:62:c8:b7:bc:58:12:cb:96:d3:b4:1e:7b:6e:
                    e5:a9:0a:8f:99:b3:9c:f9:ff:4e:9b:4c:61:51:08:
                    6c:c7:0c:2f:e5:11:82:49:3f:21:6a:7e:8b:b3:78:
                    c5:33:8a:27:65:3a:78:3d:6b:cc:c2:a8:d6:d0:12:
                    8f:53:d4:e2:41:a1:8e:95:f8:4d:38:b9:f6:8d:94:
                    18:39:1e:d7:84:7d:6f:3d:95:eb:9c:70:02:6a:06:
                    7a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:2C:1B:E3:2A:7E:32:06:43:D9:63:5A:C8:26:6F:F3:12:A8:8B:AD
            X509v3 Authority Key Identifier:
                keyid:45:E4:3D:2A:72:EE:C8:9D:0C:8D:64:8B:E1:C5:D8:5B:00:9E:B2:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JLhzfJmGgVkZd4hkCYsuuzU9AeoPSzXLBg26z7rNS8o/0/45E43D2A72EEC89D0C8D648BE1C5D85B009EB216.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45E43D2A72EEC89D0C8D648BE1C5D85B009EB216.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JLhzfJmGgVkZd4hkCYsuuzU9AeoPSzXLBg26z7rNS8o/0/323830343a363433343a3a2f33322d313238203d3e20323639343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6434::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:7d:a9:31:c2:66:75:1f:77:d3:0a:29:da:ae:76:3a:e7:d4:
         d1:bd:53:5c:0b:36:7f:16:bd:4e:ed:30:5e:f4:ef:9b:22:f0:
         d4:fa:d4:0c:a4:cc:60:af:4c:04:b5:6e:54:12:7a:3a:39:4b:
         61:92:dd:a3:ef:f4:df:fd:b8:5c:21:7d:27:b5:2f:ea:ec:fd:
         30:c0:91:81:b1:b3:b3:48:9a:db:0c:82:c9:f8:37:d9:b1:84:
         f2:f0:05:c8:a8:6d:98:7a:c3:24:82:94:d1:a8:80:6f:e8:6d:
         8b:b3:85:33:3f:a6:0a:f2:3b:51:39:01:7f:a4:8e:44:c2:e0:
         07:4d:71:13:66:85:cd:a7:76:4d:5e:13:af:86:fe:32:32:52:
         bb:86:59:a3:7c:a7:f3:43:30:6d:b4:f3:51:8a:50:e9:b5:41:
         6a:fd:16:9b:a5:24:c8:7c:7f:3e:41:f1:93:52:9a:81:0e:06:
         24:32:4d:b7:83:43:df:66:9f:6b:59:dc:f2:e1:f8:66:f7:3a:
         92:09:ed:0c:1f:59:64:c7:8a:8b:4d:7a:ce:5b:c0:1c:4f:fc:
         75:a5:7e:60:ce:88:a5:95:50:28:8e:8e:ad:3c:d7:e3:c7:7a:
         e6:03:d6:57:d8:60:cd:38:da:39:43:e7:8a:88:ec:0d:fb:ee:
         6a:1e:4c:f8
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUDG75mY1BAUrgvunppKbtGwPV4sUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDVFNDNEMkE3MkVFQzg5RDBDOEQ2NDhCRTFDNUQ4NUIw
MDlFQjIxNjAeFw0yNDA1MjkxMzE2MDhaFw0yNTA1MjgxMzIxMDhaMDMxMTAvBgNV
BAMTKEZCMkMxQkUzMkE3RTMyMDY0M0Q5NjM1QUM4MjY2RkYzMTJBODhCQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9GG6VCU/xaKSU3klMZnYWdKWY
toFM8GO2/F1OQd6YQ3KgNY+9QMTPKGntgaHjT03EBlRzbcJ0f9dN10nVkPNJDrDe
G1HC2YgSFq3O8Y5bkHvCxYrAIcVxALPUThT/3CUWcahmEPPOR7meVkk0fYlyqItz
8u1nnmEcku4Ga8cDqjyP9wNcJPHtVO50GONkD7L4Dp8BYqkA7aFn33I98kULiWu3
G+J1Ysi3vFgSy5bTtB57buWpCo+Zs5z5/06bTGFRCGzHDC/lEYJJPyFqfouzeMUz
iidlOng9a8zCqNbQEo9T1OJBoY6V+E04ufaNlBg5HteEfW89leuccAJqBnphAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU+ywb4yp+MgZD2WNayCZv8xKoi60wHwYDVR0j
BBgwFoAUReQ9KnLuyJ0MjWSL4cXYWwCeshYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0pMaHpmSm1HZ1ZrWmQ0aGtDWXN1dXpVOUFlb1BTelhMQmcyNno3ck5T
OG8vMC80NUU0M0QyQTcyRUVDODlEMEM4RDY0OEJFMUM1RDg1QjAwOUVCMjE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ1RTQzRDJBNzJFRUM4OUQw
QzhENjQ4QkUxQzVEODVCMDA5RUIyMTYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNKTGh6ZkptR2dWa1pkNGhrQ1lzdXV6VTlBZW9QU3pYTEJnMjZ6N3JOUzhvLzAv
MzIzODMwMzQzYTM2MzQzMzM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzkzNDMxMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBGQ0MA0GCSqGSIb3DQEBCwUAA4IBAQBCfakx
wmZ1H3fTCinarnY659TRvVNcCzZ/Fr1O7TBe9O+bIvDU+tQMpMxgr0wEtW5UEno6
OUthkt2j7/Tf/bhcIX0ntS/q7P0wwJGBsbOzSJrbDILJ+DfZsYTy8AXIqG2YesMk
gpTRqIBv6G2Ls4UzP6YK8jtROQF/pI5EwuAHTXETZoXNp3ZNXhOvhv4yMlK7hlmj
fKfzQzBttPNRilDptUFq/RabpSTIfH8+QfGTUpqBDgYkMk23g0PfZp9rWdzy4fhm
9zqSCe0MH1lkx4qLTXrOW8AcT/x1pX5gzoillVAojo6tPNfjx3rmA9ZX2GDNONo5
Q+eKiOwN++5qHkz4
-----END CERTIFICATE-----
Generated at Fri Nov 29 10:38:34 2024 by rpki-client on console-fra.rpki-client.org