Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/323830343a6266383a343030303a3a2f33342d3334203d3e203532363533.roa
File:                     323830343a6266383a343030303a3a2f33342d3334203d3e203532363533.roa (raw, json)
Hash identifier:          X/E6KBBSq7MjVRjCZGMLO2h6B1ZajBfTvC5XidQVvmo=
Subject key identifier:   1B:AF:A5:E2:87:38:5F:DD:DF:2E:AD:0F:17:BA:F4:B2:BD:A9:D2:80
Certificate issuer:       /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial:       7EE752730FD880A2C81E99537ECF57921D04FBE1
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/323830343a6266383a343030303a3a2f33342d3334203d3e203532363533.roa
Signing time:             Wed 03 Apr 2024 23:22:51 +0000
ROA not before:           Wed 03 Apr 2024 23:17:51 +0000
ROA not after:            Wed 02 Apr 2025 23:22:51 +0000
asID:                     52653
IP address blocks:        2804:bf8:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl
                          rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:46:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:e7:52:73:0f:d8:80:a2:c8:1e:99:53:7e:cf:57:92:1d:04:fb:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
        Validity
            Not Before: Apr  3 23:17:51 2024 GMT
            Not After : Apr  2 23:22:51 2025 GMT
        Subject: CN=1BAFA5E287385FDDDF2EAD0F17BAF4B2BDA9D280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0f:b1:9b:c8:3f:4f:46:3b:dc:37:db:9b:4f:
                    cc:65:ef:d1:61:6c:f3:c7:0f:ba:aa:5a:70:b5:b3:
                    86:ed:9f:1e:31:7d:49:70:19:5f:fe:4b:55:34:59:
                    ba:f4:86:47:15:07:a0:21:42:24:25:3c:2f:24:d4:
                    13:30:d5:c9:41:4d:59:8f:c6:bd:c1:92:e0:25:31:
                    62:8b:7e:26:ad:ac:cc:47:69:e9:7b:3a:25:eb:d0:
                    af:80:5a:6e:93:fb:45:3d:d4:22:72:61:36:55:fd:
                    aa:54:74:f2:5f:6d:7d:ff:e7:3d:ce:26:70:b1:3d:
                    60:d1:0f:a9:2f:5c:f6:32:60:4f:77:89:ba:cc:05:
                    eb:16:81:45:e3:77:af:92:af:55:83:c0:9d:2b:db:
                    80:b0:05:ce:ab:91:25:ff:1a:06:74:7e:a6:5e:69:
                    97:92:92:63:5a:33:cd:00:a4:2c:40:af:74:b0:80:
                    a8:ff:83:39:21:6a:13:09:f8:99:51:b0:ed:01:c7:
                    e4:87:bc:3a:9a:74:f3:03:8c:d2:40:f8:fe:ee:fa:
                    44:3e:39:e7:1b:70:0e:a9:9e:89:a8:fd:e2:3e:a0:
                    f9:fb:bb:98:f7:56:8d:ea:52:a4:ec:85:44:11:19:
                    52:ee:8d:a4:bc:b0:ca:ca:97:5d:c8:d6:00:18:0b:
                    25:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:AF:A5:E2:87:38:5F:DD:DF:2E:AD:0F:17:BA:F4:B2:BD:A9:D2:80
            X509v3 Authority Key Identifier:
                keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/323830343a6266383a343030303a3a2f33342d3334203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:bf8:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         b7:65:90:c6:3a:45:19:91:7a:45:44:a6:06:4a:f3:d7:1f:4b:
         d8:58:7f:2a:d9:5b:ac:a3:ce:43:d9:cf:13:e5:e4:11:94:b8:
         05:2a:9e:d5:09:59:92:9b:e1:53:49:56:9c:77:5a:ac:4d:9f:
         54:2f:66:03:64:2c:0c:33:f1:c5:8e:8e:53:8b:06:b1:91:23:
         2b:e7:34:d0:53:51:7c:de:22:d1:70:ad:ae:25:a9:81:63:5f:
         1d:7b:4c:13:22:c0:82:72:bf:c6:03:c3:d6:aa:c1:90:66:32:
         15:f3:a0:df:7c:14:6e:23:be:cc:ce:98:7a:d7:9d:6b:10:d4:
         c0:69:21:41:69:ab:f2:86:ce:fa:f3:3f:f0:ed:7c:0a:34:df:
         a0:41:cd:c4:0f:43:88:d4:83:43:26:ff:fb:b3:e5:d1:05:98:
         5b:66:66:85:49:7f:46:53:f7:f7:f3:4f:c1:44:2b:b4:3a:21:
         bc:21:15:99:bc:56:e7:fa:ea:4a:56:69:2b:52:3b:b7:6d:39:
         6c:23:18:c2:47:07:c1:e4:b4:01:09:fb:72:a4:86:31:83:c6:
         39:fd:02:84:79:b8:b7:e1:7f:4b:c5:33:90:b3:6a:d7:5a:47:
         af:db:5c:a4:4e:f1:10:a5:62:dd:14:f1:f7:95:7c:fc:dc:ac:
         5d:3e:4d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:40 2024 by rpki-client on console-fra.rpki-client.org