Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/323830343a323761383a3a2f33322d3334203d3e20323633393135.roa
File:                     323830343a323761383a3a2f33322d3334203d3e20323633393135.roa (raw, json)
Hash identifier:          l2fBaVoL9wQRrQiklGPivT4vtQCD+5xVr0FOVcyxrRo=
Subject key identifier:   3E:67:32:98:97:C2:0F:A3:DE:85:68:72:ED:30:AB:FF:EC:69:F1:D6
Certificate issuer:       /CN=C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43
Certificate serial:       1F3A438DB27A1BD9E149D8B228352D6C94F8DA44
Authority key identifier: C0:28:A9:5F:B6:F7:E9:B3:04:AB:7B:15:BA:9C:F3:7C:74:20:EE:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/323830343a323761383a3a2f33322d3334203d3e20323633393135.roa
Signing time:             Thu 04 Apr 2024 18:09:15 +0000
ROA not before:           Thu 04 Apr 2024 18:04:15 +0000
ROA not after:            Thu 03 Apr 2025 18:09:15 +0000
asID:                     263915
IP address blocks:        2804:27a8::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.crl
                          rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:3a:43:8d:b2:7a:1b:d9:e1:49:d8:b2:28:35:2d:6c:94:f8:da:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43
        Validity
            Not Before: Apr  4 18:04:15 2024 GMT
            Not After : Apr  3 18:09:15 2025 GMT
        Subject: CN=3E67329897C20FA3DE856872ED30ABFFEC69F1D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e2:c8:ec:e0:41:eb:ed:43:fe:fb:ca:e7:a6:
                    c6:f3:cd:4d:57:51:88:29:45:b1:3f:80:3b:a4:a3:
                    fe:97:96:b2:50:59:5f:00:04:b2:f3:41:a3:74:10:
                    33:5a:c2:14:ad:44:aa:48:06:f8:55:dc:e9:22:73:
                    44:e5:92:0a:23:4e:7b:49:bd:5e:7f:41:e4:ce:b9:
                    27:87:f1:6f:25:ed:e4:41:cb:40:41:14:33:2b:45:
                    65:d2:a4:f9:dd:f7:e2:72:aa:7d:23:d1:20:8f:b7:
                    25:17:1c:4a:3d:15:0c:01:61:e3:99:8e:13:01:d6:
                    dc:a2:95:7c:d0:88:81:8e:cc:07:6e:df:69:61:da:
                    1c:fb:80:b3:f9:e0:03:66:2e:02:00:02:2e:e2:ca:
                    91:22:06:43:74:d2:37:11:44:68:38:0b:07:9f:08:
                    8b:83:35:d3:4e:d9:e6:3f:4f:51:7c:8f:e1:f5:c8:
                    8b:4c:2a:8c:13:fb:6b:47:44:77:63:56:8c:a8:6e:
                    d0:5d:14:2b:22:8c:3b:3e:d5:b1:e4:de:d1:64:1d:
                    ee:ca:92:e3:f6:e7:b3:6a:67:50:39:9e:a7:b3:0e:
                    b0:51:a3:14:c9:1d:e9:a3:02:7b:25:1c:71:b2:25:
                    24:e1:c9:8d:0f:49:37:e8:34:04:89:9c:94:8c:1f:
                    a4:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:67:32:98:97:C2:0F:A3:DE:85:68:72:ED:30:AB:FF:EC:69:F1:D6
            X509v3 Authority Key Identifier:
                keyid:C0:28:A9:5F:B6:F7:E9:B3:04:AB:7B:15:BA:9C:F3:7C:74:20:EE:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/323830343a323761383a3a2f33322d3334203d3e20323633393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:62:99:b0:d0:8f:ac:bb:7d:b6:44:c3:6c:bf:f6:3c:ba:d4:
         f4:42:2d:f8:b4:c2:2e:47:5a:1e:6d:02:d8:32:49:70:78:05:
         bf:e4:27:e2:a5:76:ad:f7:f2:a4:f6:a9:dd:69:1a:30:9b:51:
         96:d9:1f:84:38:67:0d:ab:6e:72:59:1a:9e:97:91:80:f8:4c:
         05:80:25:16:cf:83:8c:10:34:36:ab:81:2f:ba:f7:33:1d:11:
         a8:fa:73:b5:b5:8f:e5:b2:ab:05:9f:eb:de:d8:85:53:a4:16:
         0d:69:85:2b:dc:b2:f6:7f:65:87:df:67:b0:ce:af:7b:38:53:
         dc:90:37:51:64:b4:c5:b3:b1:1b:9c:be:88:27:94:19:40:8c:
         87:63:c0:af:c4:c3:06:69:9b:42:51:73:ca:a2:5c:f3:73:d7:
         3d:d4:49:7c:ba:a8:a6:2f:61:19:9a:cd:3e:45:95:fb:f3:dc:
         15:42:6c:0e:40:da:3a:0b:02:a1:c1:10:a4:08:17:39:88:55:
         27:48:40:47:d9:e1:ce:53:8c:dd:a4:15:c3:bd:d8:38:44:0d:
         77:fd:f9:43:a1:7b:76:35:f3:c7:92:88:b2:1b:2c:3c:50:dc:
         ed:4a:75:cc:66:b4:a9:0f:21:34:ee:fa:3d:a7:ed:67:ac:ea:
         ba:0b:27:02
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUHzpDjbJ6G9nhSdiyKDUtbJT42kQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzAyOEE5NUZCNkY3RTlCMzA0QUI3QjE1QkE5Q0YzN0M3
NDIwRUU0MzAeFw0yNDA0MDQxODA0MTVaFw0yNTA0MDMxODA5MTVaMDMxMTAvBgNV
BAMTKDNFNjczMjk4OTdDMjBGQTNERTg1Njg3MkVEMzBBQkZGRUM2OUYxRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE4sjs4EHr7UP++8rnpsbzzU1X
UYgpRbE/gDuko/6XlrJQWV8ABLLzQaN0EDNawhStRKpIBvhV3Okic0TlkgojTntJ
vV5/QeTOuSeH8W8l7eRBy0BBFDMrRWXSpPnd9+Jyqn0j0SCPtyUXHEo9FQwBYeOZ
jhMB1tyilXzQiIGOzAdu32lh2hz7gLP54ANmLgIAAi7iypEiBkN00jcRRGg4Cwef
CIuDNdNO2eY/T1F8j+H1yItMKowT+2tHRHdjVoyobtBdFCsijDs+1bHk3tFkHe7K
kuP257NqZ1A5nqezDrBRoxTJHemjAnslHHGyJSThyY0PSTfoNASJnJSMH6TNAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUPmcymJfCD6PehWhy7TCr/+xp8dYwHwYDVR0j
BBgwFoAUwCipX7b36bMEq3sVupzzfHQg7kMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2J0aXdGWmNhbXg4enJBbXlxVWVwaDZ4ZERWWnVIWHN4ZTY4dVFMZnhF
R3gvMS9DMDI4QTk1RkI2RjdFOUIzMDRBQjdCMTVCQTlDRjM3Qzc0MjBFRTQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MwMjhBOTVGQjZGN0U5QjMw
NEFCN0IxNUJBOUNGMzdDNzQyMEVFNDMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNidGl3RlpjYW14OHpyQW15cVVlcGg2eGREVlp1SFhzeGU2OHVRTGZ4RUd4LzEv
MzIzODMwMzQzYTMyMzc2MTM4M2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjMz
MzkzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQnqDANBgkqhkiG9w0BAQsFAAOCAQEAZ2KZsNCP
rLt9tkTDbL/2PLrU9EIt+LTCLkdaHm0C2DJJcHgFv+Qn4qV2rffypPap3WkaMJtR
ltkfhDhnDatuclkanpeRgPhMBYAlFs+DjBA0NquBL7r3Mx0RqPpztbWP5bKrBZ/r
3tiFU6QWDWmFK9yy9n9lh99nsM6vezhT3JA3UWS0xbOxG5y+iCeUGUCMh2PAr8TD
BmmbQlFzyqJc83PXPdRJfLqopi9hGZrNPkWV+/PcFUJsDkDaOgsCocEQpAgXOYhV
J0hAR9nhzlOM3aQVw73YOEQNd/35Q6F7djXzx5KIshssPFDc7Up1zGa0qQ8hNO76
PaftZ6zqugsnAg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:35 2024 by rpki-client on console-ams.rpki-client.org