Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/1/323830343a3838633a3a2f33332d3333203d3e203532383732.roa
File:                     323830343a3838633a3a2f33332d3333203d3e203532383732.roa (raw, json)
Hash identifier:          RYoUq3YqVLjuiVsE3nYMs5NEs/HVdRgDglwZ4rbMLbs=
Subject key identifier:   A3:03:AF:08:D8:EF:B9:FB:72:F7:97:CC:F4:85:2A:2A:9B:44:88:CF
Certificate issuer:       /CN=9D94162FCA29B10C2A202C439F0AD2F480E45627
Certificate serial:       12170BC0EF5C8D94F24B8824BF61E3A393416417
Authority key identifier: 9D:94:16:2F:CA:29:B1:0C:2A:20:2C:43:9F:0A:D2:F4:80:E4:56:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D94162FCA29B10C2A202C439F0AD2F480E45627.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/1/323830343a3838633a3a2f33332d3333203d3e203532383732.roa
Signing time:             Thu 04 Apr 2024 11:23:22 +0000
ROA not before:           Thu 04 Apr 2024 11:18:22 +0000
ROA not after:            Thu 03 Apr 2025 11:23:22 +0000
asID:                     52872
IP address blocks:        2804:88c::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/1/9D94162FCA29B10C2A202C439F0AD2F480E45627.crl
                          rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/1/9D94162FCA29B10C2A202C439F0AD2F480E45627.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D94162FCA29B10C2A202C439F0AD2F480E45627.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 13:43:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:17:0b:c0:ef:5c:8d:94:f2:4b:88:24:bf:61:e3:a3:93:41:64:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D94162FCA29B10C2A202C439F0AD2F480E45627
        Validity
            Not Before: Apr  4 11:18:22 2024 GMT
            Not After : Apr  3 11:23:22 2025 GMT
        Subject: CN=A303AF08D8EFB9FB72F797CCF4852A2A9B4488CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:da:c5:76:85:7a:26:89:a9:5f:2d:5b:ed:3e:
                    ff:b4:42:85:d6:ce:58:40:c5:3d:d1:0b:7a:0a:f4:
                    10:5c:36:54:01:3f:03:b6:74:ee:08:7a:44:de:f4:
                    69:9a:56:4b:3b:94:c4:ec:4c:c4:75:0d:54:e3:09:
                    fc:42:d8:d3:ba:c8:11:45:8f:83:7e:2f:d8:3c:ab:
                    eb:d4:17:14:1b:7d:43:ee:9f:4e:c3:45:bb:c4:62:
                    3d:24:b1:0a:f1:71:ab:da:5a:f9:46:73:71:e5:04:
                    a3:8d:c3:27:6e:77:05:c0:92:6e:7e:24:a4:24:5b:
                    28:da:2b:1d:00:19:f7:e8:f8:06:b8:3c:da:ad:64:
                    0c:7a:66:a8:70:97:8d:d0:7b:ae:f0:4a:eb:d7:26:
                    3a:63:37:3a:20:57:83:69:67:d5:26:41:3c:ef:68:
                    01:c7:1b:ce:20:5d:9b:98:4e:4e:e0:6a:df:cf:fa:
                    29:25:f7:bf:a6:89:8a:92:2f:df:54:52:bc:ed:24:
                    be:5c:8e:64:b4:c6:43:f1:45:63:cf:cb:e7:91:f8:
                    d3:58:35:52:5d:06:64:5c:09:61:c4:0e:21:79:83:
                    71:2d:5e:03:1f:2e:86:0a:3b:fb:8d:33:12:8e:57:
                    8e:79:26:15:58:02:c1:27:70:da:af:91:72:c3:e2:
                    65:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:03:AF:08:D8:EF:B9:FB:72:F7:97:CC:F4:85:2A:2A:9B:44:88:CF
            X509v3 Authority Key Identifier:
                keyid:9D:94:16:2F:CA:29:B1:0C:2A:20:2C:43:9F:0A:D2:F4:80:E4:56:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/1/9D94162FCA29B10C2A202C439F0AD2F480E45627.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D94162FCA29B10C2A202C439F0AD2F480E45627.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/1/323830343a3838633a3a2f33332d3333203d3e203532383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:88c::/33

    Signature Algorithm: sha256WithRSAEncryption
         1d:7f:aa:f6:a7:92:03:db:52:49:a9:6b:f9:1f:0c:3f:b2:ef:
         a7:a3:c5:32:a4:64:62:63:5c:66:59:ce:1e:6d:77:ce:e6:4c:
         ba:e2:c3:e4:36:2c:f0:d7:cf:de:2f:e6:a1:31:2e:12:ad:79:
         67:72:f9:47:fd:a8:87:38:18:1c:03:10:0a:8a:33:05:c6:cc:
         a7:04:e6:f9:cc:9d:a6:7b:00:b5:56:3c:b2:f2:4e:6d:be:f6:
         20:72:30:dc:33:8c:13:81:9c:56:4c:5e:27:f6:de:0e:bc:b1:
         26:6c:c5:88:a5:bb:c1:9d:be:22:f5:56:ab:ee:f9:1b:40:fb:
         5a:f6:a4:aa:a8:ed:9a:67:91:0c:77:6a:ec:8a:45:2b:65:d1:
         aa:3e:80:db:71:be:01:dc:2f:fc:e7:86:89:cb:5a:aa:52:9a:
         d1:28:fa:fe:a7:23:e8:d8:25:42:f9:1f:e0:30:ab:2f:aa:73:
         2e:77:fd:7a:e2:33:08:6b:f7:11:d2:0c:6c:af:7f:04:36:25:
         cf:44:27:9e:d2:0b:2b:48:a5:1a:8d:2f:45:fd:26:35:b2:37:
         0c:9f:91:b7:46:5c:00:28:92:8c:c4:c1:ff:77:9d:a0:2e:47:
         67:90:21:1f:a6:86:4b:e1:89:05:36:46:22:a4:0a:5d:c1:82:
         c9:c2:5e:f4
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUEhcLwO9cjZTyS4gkv2Hjo5NBZBcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUQ5NDE2MkZDQTI5QjEwQzJBMjAyQzQzOUYwQUQyRjQ4
MEU0NTYyNzAeFw0yNDA0MDQxMTE4MjJaFw0yNTA0MDMxMTIzMjJaMDMxMTAvBgNV
BAMTKEEzMDNBRjA4RDhFRkI5RkI3MkY3OTdDQ0Y0ODUyQTJBOUI0NDg4Q0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx2sV2hXomialfLVvtPv+0QoXW
zlhAxT3RC3oK9BBcNlQBPwO2dO4IekTe9GmaVks7lMTsTMR1DVTjCfxC2NO6yBFF
j4N+L9g8q+vUFxQbfUPun07DRbvEYj0ksQrxcavaWvlGc3HlBKONwydudwXAkm5+
JKQkWyjaKx0AGffo+Aa4PNqtZAx6Zqhwl43Qe67wSuvXJjpjNzogV4NpZ9UmQTzv
aAHHG84gXZuYTk7gat/P+ikl97+miYqSL99UUrztJL5cjmS0xkPxRWPPy+eR+NNY
NVJdBmRcCWHEDiF5g3EtXgMfLoYKO/uNMxKOV455JhVYAsEncNqvkXLD4mWHAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUowOvCNjvufty95fM9IUqKptEiM8wHwYDVR0j
BBgwFoAUnZQWL8opsQwqICxDnwrS9IDkVicwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHhjTFdYQzdoZFFUa0pyY2FicFRxUDV3QTFoUnBIWnZmUUdVblhLZEFH
M1cvMS85RDk0MTYyRkNBMjlCMTBDMkEyMDJDNDM5RjBBRDJGNDgwRTQ1NjI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlEOTQxNjJGQ0EyOUIxMEMy
QTIwMkM0MzlGMEFEMkY0ODBFNDU2MjcuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzR4Y0xXWEM3aGRRVGtKcmNhYnBUcVA1d0ExaFJwSFp2ZlFHVW5YS2RBRzNXLzEv
MzIzODMwMzQzYTM4Mzg2MzNhM2EyZjMzMzMyZDMzMzMyMDNkM2UyMDM1MzIzODM3
MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E
EjAQMA4EAgACMAgDBgcoBAiMADANBgkqhkiG9w0BAQsFAAOCAQEAHX+q9qeSA9tS
Salr+R8MP7Lvp6PFMqRkYmNcZlnOHm13zuZMuuLD5DYs8NfP3i/moTEuEq15Z3L5
R/2ohzgYHAMQCoozBcbMpwTm+cydpnsAtVY8svJObb72IHIw3DOME4GcVkxeJ/be
DryxJmzFiKW7wZ2+IvVWq+75G0D7WvakqqjtmmeRDHdq7IpFK2XRqj6A23G+Adwv
/OeGictaqlKa0Sj6/qcj6NglQvkf4DCrL6pzLnf9euIzCGv3EdIMbK9/BDYlz0Qn
ntILK0ilGo0vRf0mNbI3DJ+Rt0ZcACiSjMTB/3edoC5HZ5AhH6aGS+GJBTZGIqQK
XcGCycJe9A==
-----END CERTIFICATE-----
Generated at Fri Jun 28 13:25:07 2024 by rpki-client on console-ams.rpki-client.org