Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/323830343a6266383a383030303a3a2f33342d3334203d3e203532363533.roa
File:                     323830343a6266383a383030303a3a2f33342d3334203d3e203532363533.roa (raw, json)
Hash identifier:          lguBPQax4IGXyLLPw4soeadg6hVVpxC6r0q7KDtjJvg=
Subject key identifier:   8D:AE:7D:4B:3A:27:43:F5:9D:CA:D5:9A:52:D9:63:B0:FB:17:24:D5
Certificate issuer:       /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial:       1D991FE64C9DFA24C2F115E629276041DCC2F64F
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/323830343a6266383a383030303a3a2f33342d3334203d3e203532363533.roa
Signing time:             Wed 03 Apr 2024 23:22:57 +0000
ROA not before:           Wed 03 Apr 2024 23:17:57 +0000
ROA not after:            Wed 02 Apr 2025 23:22:57 +0000
asID:                     52653
IP address blocks:        2804:bf8:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl
                          rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:46:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:99:1f:e6:4c:9d:fa:24:c2:f1:15:e6:29:27:60:41:dc:c2:f6:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
        Validity
            Not Before: Apr  3 23:17:57 2024 GMT
            Not After : Apr  2 23:22:57 2025 GMT
        Subject: CN=8DAE7D4B3A2743F59DCAD59A52D963B0FB1724D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1f:0f:6a:e9:f0:0c:9e:51:ff:69:38:61:6f:
                    cf:68:59:be:7d:d1:28:81:02:61:70:ee:72:18:fd:
                    41:86:d2:4d:4e:c9:a7:a6:dc:49:11:24:b9:04:23:
                    a5:d6:08:db:96:05:57:03:27:a0:82:e6:f3:54:3b:
                    27:c6:4e:e4:3d:05:a1:b4:23:98:9b:13:fe:46:53:
                    b3:30:cc:63:03:e2:88:79:d6:40:d9:94:33:6d:d6:
                    e7:98:e0:e2:96:43:b2:ab:40:2c:21:e4:7d:d5:16:
                    7a:74:62:69:99:de:68:f1:ce:45:56:2d:cc:67:79:
                    70:fb:4f:3f:4e:d9:4a:e9:d4:e3:65:7e:88:55:40:
                    e2:93:ac:5f:85:b6:35:84:db:c2:f3:e5:30:60:97:
                    42:24:da:06:29:99:2d:4b:50:a9:12:f5:0d:c7:46:
                    21:b0:ed:f9:42:9c:47:63:8e:87:0d:16:12:1d:7d:
                    ea:12:7c:69:05:67:01:0c:5a:af:10:3b:22:76:fe:
                    77:40:bb:49:1d:78:9c:c9:37:82:21:a6:6e:bf:0a:
                    9d:a2:2f:28:c9:98:5a:f9:5f:48:a4:bc:24:d9:5b:
                    fb:97:1f:ff:11:9a:1e:f3:58:fd:ce:38:7d:fe:91:
                    e5:01:bf:92:0b:a0:c3:28:ee:cf:ae:a2:e3:63:1b:
                    19:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:AE:7D:4B:3A:27:43:F5:9D:CA:D5:9A:52:D9:63:B0:FB:17:24:D5
            X509v3 Authority Key Identifier:
                keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/323830343a6266383a383030303a3a2f33342d3334203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:bf8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         03:6c:39:01:ed:8d:04:e8:ae:a5:ba:55:e1:ac:b2:09:d2:14:
         d2:c6:76:69:b8:34:98:fe:30:b9:fa:6d:bc:ae:93:0c:6b:86:
         30:a4:ac:83:18:0e:ff:ae:17:1f:0b:e9:d5:e2:90:ab:3d:61:
         c8:f3:23:57:12:7e:98:11:0f:af:29:b3:5b:bc:b8:d5:05:6b:
         ae:0c:a2:ea:8b:1b:62:ab:ae:fb:66:28:11:1b:cb:e2:df:ae:
         bb:ca:2f:4c:32:8f:97:98:61:5c:1c:5a:44:1c:1c:ab:99:16:
         c1:df:18:6b:2d:d4:9a:5b:c9:57:56:e7:03:13:c0:29:7e:04:
         d8:04:0e:99:eb:29:b0:45:09:fa:d2:d8:ce:bf:fb:d0:c9:ef:
         0a:d2:b9:85:b5:df:b0:e2:fc:49:db:fd:9a:0c:52:f3:3a:55:
         10:75:03:d9:f1:c4:26:fb:20:bb:ac:91:36:d1:e3:8d:f9:a1:
         0a:92:13:95:3e:9c:32:0b:1e:1e:b5:4d:c8:fa:9b:ec:94:7f:
         c3:ee:52:82:f9:ba:03:0f:25:75:4c:4f:30:13:14:96:98:c1:
         ca:9f:68:3b:c7:d6:5e:fb:1f:23:64:63:fe:91:f9:3e:be:c3:
         71:7a:b2:cd:f0:b6:01:34:72:4a:9c:01:65:8b:be:3c:6e:db:
         f9:2d:ca:88
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgIUHZkf5kyd+iTC8RXmKSdgQdzC9k8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDM3NDg0NDFEOUNDN0VFMkE5M0UxNjBCQUIyNzI0REFF
Qjc5OUYzQjAeFw0yNDA0MDMyMzE3NTdaFw0yNTA0MDIyMzIyNTdaMDMxMTAvBgNV
BAMTKDhEQUU3RDRCM0EyNzQzRjU5RENBRDU5QTUyRDk2M0IwRkIxNzI0RDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWHw9q6fAMnlH/aThhb89oWb59
0SiBAmFw7nIY/UGG0k1Oyaem3EkRJLkEI6XWCNuWBVcDJ6CC5vNUOyfGTuQ9BaG0
I5ibE/5GU7MwzGMD4oh51kDZlDNt1ueY4OKWQ7KrQCwh5H3VFnp0YmmZ3mjxzkVW
LcxneXD7Tz9O2Urp1ONlfohVQOKTrF+FtjWE28Lz5TBgl0Ik2gYpmS1LUKkS9Q3H
RiGw7flCnEdjjocNFhIdfeoSfGkFZwEMWq8QOyJ2/ndAu0kdeJzJN4Ihpm6/Cp2i
LyjJmFr5X0ikvCTZW/uXH/8Rmh7zWP3OOH3+keUBv5ILoMMo7s+uouNjGxlBAgMB
AAGjggJXMIICUzAdBgNVHQ4EFgQUja59SzonQ/WdytWaUtljsPsXJNUwHwYDVR0j
BBgwFoAUA3SEQdnMfuKpPhYLqyck2ut5nzswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDRUVVJnQnFtWUp5b1N2QWFDTnh3YzJNZHVuWHF0SGVtNlBwS0RpVzF6
SjYvMS8wMzc0ODQ0MUQ5Q0M3RUUyQTkzRTE2MEJBQjI3MjREQUVCNzk5RjNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzNzQ4NDQxRDlDQzdFRTJB
OTNFMTYwQkFCMjcyNERBRUI3OTlGM0IuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ0VFVSZ0JxbVlKeW9TdkFhQ054d2MyTWR1blhxdEhlbTZQcEtEaVcxeko2LzEv
MzIzODMwMzQzYTYyNjYzODNhMzgzMDMwMzAzYTNhMmYzMzM0MmQzMzM0MjAzZDNl
MjAzNTMyMzYzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG
AQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGKAQL+IAwDQYJKoZIhvcNAQELBQADggEB
AANsOQHtjQTorqW6VeGssgnSFNLGdmm4NJj+MLn6bbyukwxrhjCkrIMYDv+uFx8L
6dXikKs9YcjzI1cSfpgRD68ps1u8uNUFa64MouqLG2KrrvtmKBEby+LfrrvKL0wy
j5eYYVwcWkQcHKuZFsHfGGst1JpbyVdW5wMTwCl+BNgEDpnrKbBFCfrS2M6/+9DJ
7wrSuYW137Di/Enb/ZoMUvM6VRB1A9nxxCb7ILuskTbR4435oQqSE5U+nDILHh61
Tcj6m+yUf8PuUoL5ugMPJXVMTzATFJaYwcqfaDvH1l77HyNkY/6R+T6+w3F6ss3w
tgE0ckqcAWWLvjxu2/ktyog=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:06 2024 by rpki-client on console-ams.rpki-client.org