Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/323830343a6266383a633030303a3a2f33342d3334203d3e203532363533.roa
File:                     323830343a6266383a633030303a3a2f33342d3334203d3e203532363533.roa (raw, json)
Hash identifier:          DcCLaZMhpySkpOBtLiwn/6VBkdGcU/dUPdsC9P1sSrQ=
Subject key identifier:   5A:BE:75:09:65:27:C8:D3:8C:10:4A:D8:DF:9F:56:7E:B4:9C:45:9B
Certificate issuer:       /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial:       3FCF4CF926564D160D1C968D19C12AADCC441E8D
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/323830343a6266383a633030303a3a2f33342d3334203d3e203532363533.roa
Signing time:             Wed 03 Apr 2024 23:22:50 +0000
ROA not before:           Wed 03 Apr 2024 23:17:50 +0000
ROA not after:            Wed 02 Apr 2025 23:22:50 +0000
asID:                     52653
IP address blocks:        2804:bf8:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl
                          rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:46:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:cf:4c:f9:26:56:4d:16:0d:1c:96:8d:19:c1:2a:ad:cc:44:1e:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
        Validity
            Not Before: Apr  3 23:17:50 2024 GMT
            Not After : Apr  2 23:22:50 2025 GMT
        Subject: CN=5ABE75096527C8D38C104AD8DF9F567EB49C459B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:10:75:7e:1c:df:d8:e4:71:3a:bd:59:d2:02:
                    3e:8f:ad:a6:8e:d7:7d:11:49:23:31:f5:ac:ab:30:
                    3d:da:40:30:5e:4a:9a:2e:93:6c:ab:ce:9b:f0:95:
                    dd:96:d5:61:26:74:e6:ec:20:d6:4c:c4:46:2c:f4:
                    0a:21:bf:76:e1:2d:6b:5a:7c:42:06:d8:ce:af:d2:
                    93:bc:b1:fc:97:48:10:2c:84:17:ee:59:86:08:ef:
                    b1:31:68:87:e5:26:6a:87:9b:90:76:d2:9a:15:41:
                    be:7b:e1:24:a3:94:7e:76:cd:74:65:14:f6:e9:fa:
                    28:c2:2e:68:64:45:38:22:b9:17:ba:82:50:19:44:
                    18:83:38:ff:ab:4d:87:2a:5c:8a:62:a0:8c:78:55:
                    44:14:2c:ff:87:d0:41:22:71:ff:46:bc:2a:fc:28:
                    a2:80:4e:c2:dd:79:08:68:ac:18:70:c2:4e:03:3c:
                    d3:10:3f:fe:c3:00:90:eb:38:93:fe:b2:61:66:23:
                    1b:0c:4c:2d:f8:b1:77:ee:88:2b:81:ff:f1:3f:9c:
                    49:82:60:6e:74:22:29:c9:5a:7d:27:34:4c:ef:08:
                    c2:cb:2b:80:a9:9f:1e:22:b5:59:4c:17:b1:a0:81:
                    87:b7:26:56:75:b6:8f:e8:ce:3b:49:4a:bd:84:a4:
                    7e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:BE:75:09:65:27:C8:D3:8C:10:4A:D8:DF:9F:56:7E:B4:9C:45:9B
            X509v3 Authority Key Identifier:
                keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/323830343a6266383a633030303a3a2f33342d3334203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:bf8:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         28:78:cf:f2:23:9a:8c:d1:e5:20:ac:30:ff:01:e2:61:a1:52:
         be:f8:95:27:15:db:2f:63:93:43:dd:b5:db:e3:75:63:c0:d4:
         68:a4:89:70:0d:19:17:f8:1c:aa:40:c1:ad:9d:73:dc:76:92:
         22:6b:b4:d1:88:b8:f8:af:60:53:c1:c7:53:51:ff:bc:c1:72:
         59:28:0d:26:ae:ef:cf:8c:b7:b7:30:60:ee:5f:1b:c6:15:19:
         3f:67:4c:90:73:7f:15:a0:79:c7:0b:09:ff:16:f1:bd:37:12:
         33:3a:6b:46:f0:57:53:1e:7a:69:ff:9f:89:1e:e6:bd:e3:dd:
         af:f3:ee:2b:6c:c3:0a:e0:8f:c5:41:06:f0:91:e1:9e:cb:3e:
         f3:4b:d1:ba:54:8e:bc:12:9d:9b:8b:95:bf:87:98:3f:21:8c:
         d6:cd:fc:09:ec:3e:ba:b7:f5:60:f8:03:02:70:54:09:e0:07:
         dc:2d:3a:fa:75:ba:b7:c5:10:e1:db:57:8a:e2:d1:eb:fd:43:
         62:16:e4:ee:f4:ab:40:ba:c5:f8:37:33:26:d2:22:6f:d0:9f:
         bf:26:c7:47:51:9d:32:fe:b2:b6:18:a3:9c:c1:26:1b:2c:1b:
         20:6d:6a:e5:6e:c5:3c:c8:19:2c:35:60:08:b4:6f:b9:52:64:
         55:60:01:0c
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgIUP89M+SZWTRYNHJaNGcEqrcxEHo0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDM3NDg0NDFEOUNDN0VFMkE5M0UxNjBCQUIyNzI0REFF
Qjc5OUYzQjAeFw0yNDA0MDMyMzE3NTBaFw0yNTA0MDIyMzIyNTBaMDMxMTAvBgNV
BAMTKDVBQkU3NTA5NjUyN0M4RDM4QzEwNEFEOERGOUY1NjdFQjQ5QzQ1OUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWEHV+HN/Y5HE6vVnSAj6PraaO
130RSSMx9ayrMD3aQDBeSpouk2yrzpvwld2W1WEmdObsINZMxEYs9Aohv3bhLWta
fEIG2M6v0pO8sfyXSBAshBfuWYYI77ExaIflJmqHm5B20poVQb574SSjlH52zXRl
FPbp+ijCLmhkRTgiuRe6glAZRBiDOP+rTYcqXIpioIx4VUQULP+H0EEicf9GvCr8
KKKATsLdeQhorBhwwk4DPNMQP/7DAJDrOJP+smFmIxsMTC34sXfuiCuB//E/nEmC
YG50IinJWn0nNEzvCMLLK4Cpnx4itVlMF7GggYe3JlZ1to/ozjtJSr2EpH7rAgMB
AAGjggJXMIICUzAdBgNVHQ4EFgQUWr51CWUnyNOMEErY359WfrScRZswHwYDVR0j
BBgwFoAUA3SEQdnMfuKpPhYLqyck2ut5nzswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDRUVVJnQnFtWUp5b1N2QWFDTnh3YzJNZHVuWHF0SGVtNlBwS0RpVzF6
SjYvMS8wMzc0ODQ0MUQ5Q0M3RUUyQTkzRTE2MEJBQjI3MjREQUVCNzk5RjNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzNzQ4NDQxRDlDQzdFRTJB
OTNFMTYwQkFCMjcyNERBRUI3OTlGM0IuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ0VFVSZ0JxbVlKeW9TdkFhQ054d2MyTWR1blhxdEhlbTZQcEtEaVcxeko2LzEv
MzIzODMwMzQzYTYyNjYzODNhNjMzMDMwMzAzYTNhMmYzMzM0MmQzMzM0MjAzZDNl
MjAzNTMyMzYzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG
AQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGKAQL+MAwDQYJKoZIhvcNAQELBQADggEB
ACh4z/IjmozR5SCsMP8B4mGhUr74lScV2y9jk0PdtdvjdWPA1GikiXANGRf4HKpA
wa2dc9x2kiJrtNGIuPivYFPBx1NR/7zBclkoDSau78+Mt7cwYO5fG8YVGT9nTJBz
fxWgeccLCf8W8b03EjM6a0bwV1Meemn/n4ke5r3j3a/z7itswwrgj8VBBvCR4Z7L
PvNL0bpUjrwSnZuLlb+HmD8hjNbN/AnsPrq39WD4AwJwVAngB9wtOvp1urfFEOHb
V4ri0ev9Q2IW5O70q0C6xfg3MybSIm/Qn78mx0dRnTL+srYYo5zBJhssGyBtauVu
xTzIGSw1YAi0b7lSZFVgAQw=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:06 2024 by rpki-client on console-ams.rpki-client.org