Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/323830343a6266383a3a2f33342d3334203d3e203532363533.roa
File:                     323830343a6266383a3a2f33342d3334203d3e203532363533.roa (raw, json)
Hash identifier:          Tk1LvfeV+Qp8UXJU/zP+k1qmz6iWCs1TVL9PQIOKISQ=
Subject key identifier:   CC:A8:B2:6C:4E:A4:A0:36:B3:9D:A8:78:40:A8:A2:EE:95:14:38:D2
Certificate issuer:       /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial:       592C34A1B917CF0C75F929570462A26EE51FE53E
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/323830343a6266383a3a2f33342d3334203d3e203532363533.roa
Signing time:             Wed 03 Apr 2024 23:22:52 +0000
ROA not before:           Wed 03 Apr 2024 23:17:52 +0000
ROA not after:            Wed 02 Apr 2025 23:22:52 +0000
asID:                     52653
IP address blocks:        2804:bf8::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl
                          rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 18:25:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:2c:34:a1:b9:17:cf:0c:75:f9:29:57:04:62:a2:6e:e5:1f:e5:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
        Validity
            Not Before: Apr  3 23:17:52 2024 GMT
            Not After : Apr  2 23:22:52 2025 GMT
        Subject: CN=CCA8B26C4EA4A036B39DA87840A8A2EE951438D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3d:03:8b:5b:c7:e9:78:c9:62:87:0c:9d:06:
                    c6:e2:b7:7d:91:92:a8:58:74:a5:88:b2:a1:70:a2:
                    4c:3a:80:a3:b0:23:2b:3f:01:09:b4:d4:8d:7c:4c:
                    0f:fb:89:be:82:df:ee:d7:ec:f3:1f:1b:e9:30:b2:
                    81:28:34:3f:7b:53:5e:d6:01:f1:3c:dc:ca:59:4f:
                    48:81:69:48:f1:0f:8e:df:41:2e:6e:ce:6b:af:ff:
                    56:57:ba:16:35:19:74:c6:77:bb:8d:73:00:0c:3e:
                    22:7c:d6:ee:23:e0:f7:d0:bd:e6:a0:d4:28:fa:f5:
                    58:84:df:e5:2d:f8:3e:74:19:2b:56:e2:c1:09:79:
                    1b:16:90:83:ba:30:53:ef:7f:6d:c2:9f:fc:c2:e0:
                    12:af:00:d3:fb:28:d0:88:77:7e:47:2c:45:49:04:
                    52:d3:69:12:4b:ba:c8:6d:1f:af:dd:53:a6:c6:8d:
                    9b:af:e2:1c:22:1d:ef:aa:c6:c3:88:ff:4a:36:8f:
                    a6:50:b6:96:63:a7:fe:bc:a6:fa:28:f6:03:26:6a:
                    3a:5e:14:58:69:e5:f3:79:0c:d5:15:01:f3:de:ad:
                    74:4a:2e:07:33:2b:47:8f:aa:f2:0f:2d:0c:4f:cf:
                    bd:da:c9:89:d0:f7:11:6a:94:ab:1c:8b:47:c5:71:
                    5e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A8:B2:6C:4E:A4:A0:36:B3:9D:A8:78:40:A8:A2:EE:95:14:38:D2
            X509v3 Authority Key Identifier:
                keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/323830343a6266383a3a2f33342d3334203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:bf8::/34

    Signature Algorithm: sha256WithRSAEncryption
         9a:54:fc:44:82:08:6e:88:00:53:bf:43:01:e2:be:ec:2b:f5:
         08:ff:d5:d3:15:26:62:5d:4b:2d:62:85:2d:eb:71:57:33:c6:
         fa:35:74:45:a8:d9:bc:d4:13:a6:bf:d3:4a:d7:4d:16:f6:81:
         c8:28:bd:64:47:41:d0:16:4d:a3:43:43:e6:46:29:27:4a:fd:
         5d:ca:99:02:f7:2d:74:92:b0:47:6a:de:52:29:56:67:ee:a0:
         54:ce:c6:d5:09:52:c0:c1:08:21:ac:62:d2:8a:fb:f8:20:f7:
         aa:dd:0a:77:74:eb:c5:2c:7d:03:5a:fb:96:5b:ef:22:cf:cd:
         7f:b8:f4:df:d3:7c:45:f2:46:ae:d2:20:8f:54:8a:06:e9:79:
         a8:d5:ef:f1:34:b4:48:42:d5:b2:64:75:2f:d7:ce:3a:1f:43:
         63:68:e7:87:46:63:46:e4:be:c8:d4:9a:5c:fe:09:60:4c:b7:
         bd:da:f3:22:f1:b4:36:08:66:b5:c3:3a:af:aa:ef:e4:0d:08:
         c3:d8:77:da:86:3b:8b:a1:93:3b:76:d6:c1:9a:3c:8c:c7:b9:
         74:20:ed:48:60:1b:22:fb:6d:61:3c:2e:df:ce:68:69:07:36:
         a0:41:2c:d9:2f:a5:a9:c5:8c:1c:52:97:df:74:82:93:9d:47:
         ec:64:79:83
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUWSw0obkXzwx1+SlXBGKibuUf5T4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDM3NDg0NDFEOUNDN0VFMkE5M0UxNjBCQUIyNzI0REFF
Qjc5OUYzQjAeFw0yNDA0MDMyMzE3NTJaFw0yNTA0MDIyMzIyNTJaMDMxMTAvBgNV
BAMTKENDQThCMjZDNEVBNEEwMzZCMzlEQTg3ODQwQThBMkVFOTUxNDM4RDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnPQOLW8fpeMlihwydBsbit32R
kqhYdKWIsqFwokw6gKOwIys/AQm01I18TA/7ib6C3+7X7PMfG+kwsoEoND97U17W
AfE83MpZT0iBaUjxD47fQS5uzmuv/1ZXuhY1GXTGd7uNcwAMPiJ81u4j4PfQveag
1Cj69ViE3+Ut+D50GStW4sEJeRsWkIO6MFPvf23Cn/zC4BKvANP7KNCId35HLEVJ
BFLTaRJLushtH6/dU6bGjZuv4hwiHe+qxsOI/0o2j6ZQtpZjp/68pvoo9gMmajpe
FFhp5fN5DNUVAfPerXRKLgczK0ePqvIPLQxPz73ayYnQ9xFqlKsci0fFcV4dAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUzKiybE6koDaznah4QKii7pUUONIwHwYDVR0j
BBgwFoAUA3SEQdnMfuKpPhYLqyck2ut5nzswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDRUVVJnQnFtWUp5b1N2QWFDTnh3YzJNZHVuWHF0SGVtNlBwS0RpVzF6
SjYvMS8wMzc0ODQ0MUQ5Q0M3RUUyQTkzRTE2MEJBQjI3MjREQUVCNzk5RjNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzNzQ4NDQxRDlDQzdFRTJB
OTNFMTYwQkFCMjcyNERBRUI3OTlGM0IuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ0VFVSZ0JxbVlKeW9TdkFhQ054d2MyTWR1blhxdEhlbTZQcEtEaVcxeko2LzEv
MzIzODMwMzQzYTYyNjYzODNhM2EyZjMzMzQyZDMzMzQyMDNkM2UyMDM1MzIzNjM1
MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E
EjAQMA4EAgACMAgDBgYoBAv4ADANBgkqhkiG9w0BAQsFAAOCAQEAmlT8RIIIbogA
U79DAeK+7Cv1CP/V0xUmYl1LLWKFLetxVzPG+jV0RajZvNQTpr/TStdNFvaByCi9
ZEdB0BZNo0ND5kYpJ0r9XcqZAvctdJKwR2reUilWZ+6gVM7G1QlSwMEIIaxi0or7
+CD3qt0Kd3TrxSx9A1r7llvvIs/Nf7j039N8RfJGrtIgj1SKBul5qNXv8TS0SELV
smR1L9fOOh9DY2jnh0ZjRuS+yNSaXP4JYEy3vdrzIvG0NghmtcM6r6rv5A0Iw9h3
2oY7i6GTO3bWwZo8jMe5dCDtSGAbIvttYTwu385oaQc2oEEs2S+lqcWMHFKX33SC
k51H7GR5gw==
-----END CERTIFICATE-----
Generated at Sat Sep 28 17:27:43 2024 by rpki-client on console-fra.rpki-client.org