Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/323830343a6266383a343030303a3a2f33362d3336203d3e203532363533.roa
File:                     323830343a6266383a343030303a3a2f33362d3336203d3e203532363533.roa (raw, json)
Hash identifier:          4ryhWYYeVp+2mGH/BOPVlO0so7Rng+rTNeeJN5mRw2c=
Subject key identifier:   E5:32:80:8D:D3:F2:63:90:6D:F0:19:A2:BD:2F:8A:B2:8B:64:AA:F0
Certificate issuer:       /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial:       4AF476ACA1FEFF857C7A3F263E44B2A570221A80
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/323830343a6266383a343030303a3a2f33362d3336203d3e203532363533.roa
Signing time:             Wed 03 Apr 2024 23:22:54 +0000
ROA not before:           Wed 03 Apr 2024 23:17:54 +0000
ROA not after:            Wed 02 Apr 2025 23:22:54 +0000
asID:                     52653
IP address blocks:        2804:bf8:4000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl
                          rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:46:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:f4:76:ac:a1:fe:ff:85:7c:7a:3f:26:3e:44:b2:a5:70:22:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
        Validity
            Not Before: Apr  3 23:17:54 2024 GMT
            Not After : Apr  2 23:22:54 2025 GMT
        Subject: CN=E532808DD3F263906DF019A2BD2F8AB28B64AAF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:51:3c:5a:aa:5f:dd:b1:bb:e6:bd:7b:29:df:
                    50:23:de:66:80:04:42:b2:ec:a3:de:4f:4b:eb:5f:
                    f2:ee:4f:3e:50:4d:a1:6b:6f:a2:c4:1c:90:53:ab:
                    b8:39:f9:d2:26:58:f9:4c:e4:15:6a:68:f5:2d:00:
                    24:89:6c:9c:e7:bc:0f:55:e1:4e:65:ca:65:1e:df:
                    5a:43:4b:d0:1e:2f:92:a5:1b:02:02:22:42:cb:87:
                    8d:9d:6c:bd:d2:85:8e:e6:64:66:d0:55:f0:ea:c1:
                    6e:04:72:71:3f:ef:32:39:9e:a1:a4:cf:f2:48:fb:
                    7d:d4:27:20:91:92:50:f7:43:16:9b:4d:7e:36:ce:
                    e7:bb:de:58:b8:7d:9c:ba:d8:95:07:b8:ee:a0:4e:
                    c6:c7:f9:9c:e8:cf:1f:19:7a:77:9c:6a:46:be:cc:
                    96:d3:4f:64:ff:a1:3d:a0:09:8c:05:bf:1e:18:70:
                    3e:c8:55:6d:f1:ee:e8:27:31:ed:d5:21:50:be:35:
                    1a:ad:d8:44:ab:05:71:d6:d1:58:a1:3a:79:75:34:
                    a6:40:26:49:ec:56:2e:ce:08:5b:d6:e7:02:0f:c1:
                    5d:d6:3e:8b:58:86:2f:f8:43:3c:e7:30:97:26:97:
                    c4:b0:63:09:38:aa:b7:14:43:fb:c5:1c:55:91:04:
                    cf:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:32:80:8D:D3:F2:63:90:6D:F0:19:A2:BD:2F:8A:B2:8B:64:AA:F0
            X509v3 Authority Key Identifier:
                keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/323830343a6266383a343030303a3a2f33362d3336203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:bf8:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         02:61:69:66:47:fc:65:e5:08:45:92:61:5e:9e:80:c9:33:70:
         78:ac:d1:6c:ac:77:f1:52:2b:5a:97:e5:f9:75:3a:86:5e:1c:
         69:d0:f8:3f:b7:67:c5:e3:b9:aa:fa:43:48:6d:fa:6c:59:62:
         45:f6:27:29:cd:dc:b0:fd:6f:d5:8a:99:68:29:fa:da:6e:88:
         05:dd:3a:2c:57:b6:80:74:6f:96:a0:2f:0e:09:0e:f8:31:53:
         ae:00:a8:b4:f7:eb:d4:c9:c0:cf:c4:bd:f1:6b:f8:90:ad:54:
         d1:c2:81:d4:08:1b:69:52:43:ef:03:7e:dc:3f:fc:f5:3a:c9:
         91:c9:b2:69:91:d3:db:c0:cc:96:88:76:ab:a7:8e:f8:bc:00:
         18:00:b8:d3:b3:1e:92:0b:c4:8c:f5:42:ed:69:22:9c:11:2e:
         2e:2a:ed:b0:cb:18:bb:4c:e4:98:9c:9c:aa:a2:3a:46:0e:92:
         19:97:a0:bd:e5:d0:78:57:53:f9:eb:da:b3:26:77:f1:24:0a:
         43:aa:97:2e:f9:f1:3a:cb:5a:a2:de:3c:a2:82:58:a3:7c:f5:
         cd:0b:00:c3:24:6e:fe:02:a7:7f:1f:98:6a:e3:59:77:85:b0:
         a5:09:f0:5e:9c:84:c4:51:4a:a4:20:9f:75:53:64:f2:68:68:
         4b:79:d3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:40 2024 by rpki-client on console-fra.rpki-client.org