Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/323830343a3838633a3a2f33322d3333203d3e203532383732.roa
File:                     323830343a3838633a3a2f33322d3333203d3e203532383732.roa (raw, json)
Hash identifier:          bYao8pKQHarWMpbHDuObdZU4x1FjhnP2z1X52xX73FA=
Subject key identifier:   E5:A2:E4:AD:01:67:7F:FE:5C:19:74:97:47:46:16:C1:E7:B2:DC:71
Certificate issuer:       /CN=57BA365DA248977C04993DB489E366A6AF739D9F
Certificate serial:       654E7802847597494132FC1AA8EDAFF4C7FDB9C1
Authority key identifier: 57:BA:36:5D:A2:48:97:7C:04:99:3D:B4:89:E3:66:A6:AF:73:9D:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57BA365DA248977C04993DB489E366A6AF739D9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/323830343a3838633a3a2f33322d3333203d3e203532383732.roa
Signing time:             Mon 28 Oct 2024 14:37:46 +0000
ROA not before:           Mon 28 Oct 2024 14:32:46 +0000
ROA not after:            Mon 27 Oct 2025 14:37:46 +0000
asID:                     52872
IP address blocks:        2804:88c::/32 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/57BA365DA248977C04993DB489E366A6AF739D9F.crl
                          rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/57BA365DA248977C04993DB489E366A6AF739D9F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57BA365DA248977C04993DB489E366A6AF739D9F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 07:11:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:4e:78:02:84:75:97:49:41:32:fc:1a:a8:ed:af:f4:c7:fd:b9:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57BA365DA248977C04993DB489E366A6AF739D9F
        Validity
            Not Before: Oct 28 14:32:46 2024 GMT
            Not After : Oct 27 14:37:46 2025 GMT
        Subject: CN=E5A2E4AD01677FFE5C197497474616C1E7B2DC71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:69:6b:ef:b4:48:64:5b:f0:09:37:73:87:23:
                    0f:45:c7:55:ce:d9:dc:7f:97:46:d6:ba:e6:4d:46:
                    b3:9e:e3:5c:30:1a:14:d9:80:b8:be:cd:4e:a4:f9:
                    e2:99:91:4e:ca:1c:f7:15:19:16:ed:2e:22:04:24:
                    87:5d:8e:e1:5f:37:9d:fe:07:6e:86:25:75:5a:74:
                    5a:a6:9a:04:a3:ac:2d:a6:e0:fc:b7:42:92:30:f6:
                    7e:32:cf:10:c8:20:16:4b:aa:df:35:fa:10:45:33:
                    17:a8:a9:29:d2:cb:26:c5:66:72:7e:89:ff:5f:a7:
                    74:6e:ea:a1:9a:1a:90:a2:f7:a0:b0:e6:5d:ec:46:
                    e4:da:b5:3f:ab:2d:cc:10:30:b1:6b:3c:13:0e:d5:
                    9e:ec:c2:81:6b:a8:ba:b4:6e:38:f1:4f:c0:80:95:
                    2b:3a:59:b2:82:90:d3:c5:33:bd:71:6e:c3:83:38:
                    ec:10:02:c8:6b:fc:ef:0f:55:8b:35:0d:83:7e:8b:
                    72:9e:cb:74:80:ca:8e:89:f3:18:84:68:02:bf:5e:
                    fc:e3:5d:1d:05:1e:36:1e:dd:d1:02:14:20:e2:df:
                    a9:b9:5c:3d:e2:e9:ba:68:e4:5d:96:55:d1:57:59:
                    86:e0:ee:ec:5c:28:18:ba:c2:2f:b7:f6:f2:b4:75:
                    be:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A2:E4:AD:01:67:7F:FE:5C:19:74:97:47:46:16:C1:E7:B2:DC:71
            X509v3 Authority Key Identifier:
                keyid:57:BA:36:5D:A2:48:97:7C:04:99:3D:B4:89:E3:66:A6:AF:73:9D:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/57BA365DA248977C04993DB489E366A6AF739D9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57BA365DA248977C04993DB489E366A6AF739D9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/323830343a3838633a3a2f33322d3333203d3e203532383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:88c::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:eb:0f:88:21:4c:08:46:dc:e5:32:fe:57:02:60:f6:a9:02:
         ed:ba:5d:06:ba:0c:00:e1:ae:2e:dd:28:29:3d:07:39:ae:1e:
         c5:0f:f5:24:3c:20:8e:d0:23:5a:8d:f4:89:a3:fd:51:6e:af:
         c4:bc:7b:71:e5:21:b0:fd:4c:f8:fa:30:b2:6d:06:d7:bc:5f:
         d4:c9:e1:28:33:69:26:ec:b9:66:7c:be:3a:d0:00:0c:1a:b7:
         b7:26:7e:c6:57:71:2c:ba:26:78:25:37:54:f0:97:75:c5:ae:
         d7:66:8a:93:67:d7:99:6f:1d:42:1f:ee:df:ba:ed:ac:e1:73:
         15:22:11:61:1a:62:e6:b3:62:70:9c:41:c0:62:a1:f5:72:e9:
         8a:ac:96:c6:65:d5:ca:d8:cf:ad:7b:df:bf:7a:b7:72:e5:43:
         d8:e9:e3:a3:12:52:71:2a:76:49:9e:79:97:28:e0:e6:14:eb:
         48:6e:4a:83:4e:67:3e:cf:f5:96:16:5f:db:ff:2f:2f:a8:e1:
         e0:a6:83:18:f8:a9:89:d3:0f:cb:4e:1e:95:6d:0e:44:dc:86:
         ca:8d:89:f3:2e:f1:28:fd:c9:b7:90:cc:84:82:f8:d9:95:1e:
         70:12:b6:db:50:7e:81:54:65:dc:a3:2f:07:98:86:33:bc:c2:
         3c:64:7d:c9
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUZU54AoR1l0lBMvwaqO2v9Mf9ucEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCQTM2NURBMjQ4OTc3QzA0OTkzREI0ODlFMzY2QTZB
RjczOUQ5RjAeFw0yNDEwMjgxNDMyNDZaFw0yNTEwMjcxNDM3NDZaMDMxMTAvBgNV
BAMTKEU1QTJFNEFEMDE2NzdGRkU1QzE5NzQ5NzQ3NDYxNkMxRTdCMkRDNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsaWvvtEhkW/AJN3OHIw9Fx1XO
2dx/l0bWuuZNRrOe41wwGhTZgLi+zU6k+eKZkU7KHPcVGRbtLiIEJIddjuFfN53+
B26GJXVadFqmmgSjrC2m4Py3QpIw9n4yzxDIIBZLqt81+hBFMxeoqSnSyybFZnJ+
if9fp3Ru6qGaGpCi96Cw5l3sRuTatT+rLcwQMLFrPBMO1Z7swoFrqLq0bjjxT8CA
lSs6WbKCkNPFM71xbsODOOwQAshr/O8PVYs1DYN+i3Key3SAyo6J8xiEaAK/Xvzj
XR0FHjYe3dECFCDi36m5XD3i6bpo5F2WVdFXWYbg7uxcKBi6wi+39vK0db4TAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQU5aLkrQFnf/5cGXSXR0YWweey3HEwHwYDVR0j
BBgwFoAUV7o2XaJIl3wEmT20ieNmpq9znZ8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHhjTFdYQzdoZFFUa0pyY2FicFRxUDV3QTFoUnBIWnZmUUdVblhLZEFH
M1cvMC81N0JBMzY1REEyNDg5NzdDMDQ5OTNEQjQ4OUUzNjZBNkFGNzM5RDlGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU3QkEzNjVEQTI0ODk3N0Mw
NDk5M0RCNDg5RTM2NkE2QUY3MzlEOUYuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzR4Y0xXWEM3aGRRVGtKcmNhYnBUcVA1d0ExaFJwSFp2ZlFHVW5YS2RBRzNXLzAv
MzIzODMwMzQzYTM4Mzg2MzNhM2EyZjMzMzIyZDMzMzMyMDNkM2UyMDM1MzIzODM3
MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBAiMMA0GCSqGSIb3DQEBCwUAA4IBAQB26w+IIUwIRtzl
Mv5XAmD2qQLtul0GugwA4a4u3SgpPQc5rh7FD/UkPCCO0CNajfSJo/1Rbq/EvHtx
5SGw/Uz4+jCybQbXvF/UyeEoM2km7LlmfL460AAMGre3Jn7GV3EsuiZ4JTdU8Jd1
xa7XZoqTZ9eZbx1CH+7fuu2s4XMVIhFhGmLms2JwnEHAYqH1cumKrJbGZdXK2M+t
e9+/erdy5UPY6eOjElJxKnZJnnmXKODmFOtIbkqDTmc+z/WWFl/b/y8vqOHgpoMY
+KmJ0w/LTh6VbQ5E3IbKjYnzLvEo/cm3kMyEgvjZlR5wErbbUH6BVGXcoy8HmIYz
vMI8ZH3J
-----END CERTIFICATE-----
Generated at Mon Nov 25 06:03:26 2024 by rpki-client on console-fra.rpki-client.org