Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/323830343a336235343a3a2f33322d3332203d3e20323636313432.roa
File:                     323830343a336235343a3a2f33322d3332203d3e20323636313432.roa (raw, json)
Hash identifier:          A4Abh7SxpLVOTuTTTFFU5rH0eYhTbo9LvRO8HOn0i6w=
Subject key identifier:   CB:DC:80:AD:F4:75:28:3F:CA:30:12:7E:A6:C5:ED:35:3A:E8:21:8E
Certificate issuer:       /CN=04778BF6BF9D6A3D1CD052DA33657397CC555E41
Certificate serial:       32E91A7C677D5C808E6E0D53F5F05B67315791FF
Authority key identifier: 04:77:8B:F6:BF:9D:6A:3D:1C:D0:52:DA:33:65:73:97:CC:55:5E:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/323830343a336235343a3a2f33322d3332203d3e20323636313432.roa
Signing time:             Thu 04 Apr 2024 19:43:15 +0000
ROA not before:           Thu 04 Apr 2024 19:38:15 +0000
ROA not after:            Thu 03 Apr 2025 19:43:15 +0000
asID:                     266142
IP address blocks:        2804:3b54::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.crl
                          rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:e9:1a:7c:67:7d:5c:80:8e:6e:0d:53:f5:f0:5b:67:31:57:91:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04778BF6BF9D6A3D1CD052DA33657397CC555E41
        Validity
            Not Before: Apr  4 19:38:15 2024 GMT
            Not After : Apr  3 19:43:15 2025 GMT
        Subject: CN=CBDC80ADF475283FCA30127EA6C5ED353AE8218E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:36:71:ec:0e:df:c0:6c:4f:52:0b:4f:b7:9d:
                    37:b2:52:35:f0:62:90:16:22:eb:ae:d5:d5:c2:12:
                    cd:8f:71:cd:c2:99:60:6d:35:f2:47:4c:c1:0c:c4:
                    22:b5:ca:7c:49:8a:2a:a4:34:fe:12:9f:b7:f8:ac:
                    7f:d4:88:6f:83:82:01:43:8f:4a:fd:b5:3a:72:ee:
                    4d:c1:33:22:30:03:07:fb:81:57:1b:17:43:e1:eb:
                    f4:ed:73:06:1f:33:49:04:bc:41:04:5c:b8:97:5e:
                    93:c9:c9:fa:f7:a9:57:07:5f:9e:68:7f:54:c4:c2:
                    8e:b9:47:80:16:9f:5b:c8:94:aa:6d:12:10:26:aa:
                    f3:95:69:aa:8d:1b:6a:e8:da:36:56:d5:af:77:85:
                    4d:d4:30:2e:30:93:ab:00:33:c5:da:c1:48:21:86:
                    de:61:be:52:36:46:59:14:af:ff:74:4a:89:2e:6d:
                    b4:b9:00:f4:3e:00:b4:3f:f5:a0:72:d5:80:5b:5a:
                    ca:8d:38:18:e9:4e:7a:ca:00:6b:63:1c:e7:19:98:
                    2b:a3:bb:ca:bb:52:bf:71:c7:3e:4b:af:f3:72:11:
                    35:04:a0:dc:9d:71:90:9e:6a:fe:03:c6:19:a2:bf:
                    a8:06:36:5c:40:12:cb:f9:1e:46:54:a8:52:77:ec:
                    29:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:DC:80:AD:F4:75:28:3F:CA:30:12:7E:A6:C5:ED:35:3A:E8:21:8E
            X509v3 Authority Key Identifier:
                keyid:04:77:8B:F6:BF:9D:6A:3D:1C:D0:52:DA:33:65:73:97:CC:55:5E:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/323830343a336235343a3a2f33322d3332203d3e20323636313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b54::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:83:cf:c0:46:6f:00:f9:d3:63:df:ce:f9:40:54:48:da:3b:
         16:c2:ae:9c:7a:28:e1:58:16:b0:85:48:ec:fc:69:30:ca:20:
         86:88:ad:16:10:4f:8e:fb:c4:8a:f4:1d:f5:e4:92:3b:a9:25:
         89:fb:44:6d:dc:60:4c:ba:66:1a:4f:8a:e2:52:ec:89:1b:8f:
         57:7b:1f:78:6c:77:a9:d7:a8:fc:bc:36:6a:79:8f:01:ab:99:
         c9:9d:44:92:66:5d:92:57:54:87:ac:fb:25:d8:32:ce:dd:17:
         40:bf:40:59:6b:ea:e1:7a:b5:1e:29:bc:a6:1c:2c:00:c7:88:
         82:1b:83:e2:90:e0:58:76:24:b0:da:e1:61:99:6f:d9:43:4e:
         41:9d:c3:9a:ac:8f:0b:af:a2:2c:15:8f:5a:31:f5:ae:9e:c3:
         90:ea:a4:9d:2c:07:f8:0a:30:26:f3:4e:13:72:4d:bd:ff:c4:
         1a:69:98:41:fe:52:fa:17:2b:80:39:b6:31:2e:3d:22:4b:10:
         1f:73:64:13:33:84:36:1f:7e:42:64:28:c0:df:3d:71:b8:25:
         9a:80:0e:f7:b3:8e:50:ab:6d:5e:d5:fb:8e:ce:a9:bb:dd:55:
         92:bd:5e:37:81:26:7e:ee:db:e1:fa:54:de:0a:33:fc:69:bc:
         a0:6e:57:ca
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUMukafGd9XICObg1T9fBbZzFXkf8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ3NzhCRjZCRjlENkEzRDFDRDA1MkRBMzM2NTczOTdD
QzU1NUU0MTAeFw0yNDA0MDQxOTM4MTVaFw0yNTA0MDMxOTQzMTVaMDMxMTAvBgNV
BAMTKENCREM4MEFERjQ3NTI4M0ZDQTMwMTI3RUE2QzVFRDM1M0FFODIxOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFNnHsDt/AbE9SC0+3nTeyUjXw
YpAWIuuu1dXCEs2Pcc3CmWBtNfJHTMEMxCK1ynxJiiqkNP4Sn7f4rH/UiG+DggFD
j0r9tTpy7k3BMyIwAwf7gVcbF0Ph6/TtcwYfM0kEvEEEXLiXXpPJyfr3qVcHX55o
f1TEwo65R4AWn1vIlKptEhAmqvOVaaqNG2ro2jZW1a93hU3UMC4wk6sAM8XawUgh
ht5hvlI2RlkUr/90SokubbS5APQ+ALQ/9aBy1YBbWsqNOBjpTnrKAGtjHOcZmCuj
u8q7Ur9xxz5Lr/NyETUEoNydcZCeav4Dxhmiv6gGNlxAEsv5HkZUqFJ37CmhAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUy9yArfR1KD/KMBJ+psXtNTroIY4wHwYDVR0j
BBgwFoAUBHeL9r+daj0c0FLaM2Vzl8xVXkEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDRCTWJIRHJ5Z2JVVjZaeE05bXFwNnAySFJuQktHYWZDNDVORldZVlV6
V0MvMS8wNDc3OEJGNkJGOUQ2QTNEMUNEMDUyREEzMzY1NzM5N0NDNTU1RTQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA0Nzc4QkY2QkY5RDZBM0Qx
Q0QwNTJEQTMzNjU3Mzk3Q0M1NTVFNDEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ0Qk1iSERyeWdiVVY2WnhNOW1xcDZwMkhSbkJLR2FmQzQ1TkZXWVZVeldDLzEv
MzIzODMwMzQzYTMzNjIzNTM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM2
MzEzNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ7VDANBgkqhkiG9w0BAQsFAAOCAQEAeIPPwEZv
APnTY9/O+UBUSNo7FsKunHoo4VgWsIVI7PxpMMoghoitFhBPjvvEivQd9eSSO6kl
iftEbdxgTLpmGk+K4lLsiRuPV3sfeGx3qdeo/Lw2anmPAauZyZ1EkmZdkldUh6z7
Jdgyzt0XQL9AWWvq4Xq1Him8phwsAMeIghuD4pDgWHYksNrhYZlv2UNOQZ3DmqyP
C6+iLBWPWjH1rp7DkOqknSwH+AowJvNOE3JNvf/EGmmYQf5S+hcrgDm2MS49IksQ
H3NkEzOENh9+QmQowN89cbglmoAO97OOUKttXtX7js6pu91Vkr1eN4Emfu7b4fpU
3goz/Gm8oG5Xyg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:15 2024 by rpki-client on console-fra.rpki-client.org