Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/323830343a3332383a3a2f33332d3333203d3e20323632383638.roa
File:                     323830343a3332383a3a2f33332d3333203d3e20323632383638.roa (raw, json)
Hash identifier:          XcnKHD5ye6C9oyVj0cJzYMJHcwD9XdG083dtDxxGeiU=
Subject key identifier:   C2:64:D1:E1:FA:93:BC:C0:EB:C3:49:D4:4F:C2:C5:3A:56:22:8C:5F
Certificate issuer:       /CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
Certificate serial:       02D7A1AACDFBF64B9DC534A4B025F5973877FBB4
Authority key identifier: BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/323830343a3332383a3a2f33332d3333203d3e20323632383638.roa
Signing time:             Thu 04 Apr 2024 11:06:56 +0000
ROA not before:           Thu 04 Apr 2024 11:01:56 +0000
ROA not after:            Thu 03 Apr 2025 11:06:56 +0000
asID:                     262868
IP address blocks:        2804:328::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.crl
                          rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:d7:a1:aa:cd:fb:f6:4b:9d:c5:34:a4:b0:25:f5:97:38:77:fb:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
        Validity
            Not Before: Apr  4 11:01:56 2024 GMT
            Not After : Apr  3 11:06:56 2025 GMT
        Subject: CN=C264D1E1FA93BCC0EBC349D44FC2C53A56228C5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e3:4e:9a:93:af:f3:98:ec:da:a2:8d:be:e9:
                    89:cf:e8:f0:a4:10:79:4c:3e:49:4c:89:b9:88:c8:
                    d2:d3:22:4d:6a:78:0e:dd:b5:d1:2a:b2:a5:ca:0c:
                    e4:b2:ea:98:a5:ed:00:f7:55:e4:bd:00:97:1c:ff:
                    7a:34:2e:0a:d1:f5:ea:64:c5:2d:0b:97:c8:e5:cd:
                    cc:e2:65:42:f1:e4:b8:54:ae:25:0b:d6:67:32:b7:
                    04:84:61:97:e2:46:e3:fd:9a:47:5a:19:41:b1:e7:
                    79:8f:69:a9:92:e6:68:3a:d6:7f:f3:72:6d:55:f2:
                    81:c2:30:9e:ab:b9:70:15:65:df:6f:7c:4d:78:da:
                    ee:e2:f0:0c:0b:f2:20:60:b6:bb:4f:c0:f7:eb:ef:
                    50:b0:7c:8e:49:28:5e:84:1e:6f:d1:31:4e:42:9a:
                    3b:9f:7f:b0:94:97:60:b0:56:9c:44:1a:d7:4b:a8:
                    40:5e:6b:e6:d3:fb:3f:ba:6a:c0:51:62:0e:2c:de:
                    5d:71:bc:53:23:0e:03:00:d2:12:18:51:df:a1:31:
                    75:98:f9:b9:d3:41:21:42:7e:09:a0:bf:a5:c5:06:
                    3a:41:f0:1c:39:03:cd:b5:05:94:fd:c7:ec:05:3a:
                    bd:5e:28:00:65:5d:38:7f:26:af:b5:a9:30:3e:21:
                    7f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:64:D1:E1:FA:93:BC:C0:EB:C3:49:D4:4F:C2:C5:3A:56:22:8C:5F
            X509v3 Authority Key Identifier:
                keyid:BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/323830343a3332383a3a2f33332d3333203d3e20323632383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:328::/33

    Signature Algorithm: sha256WithRSAEncryption
         14:f7:06:eb:f8:fd:3f:b0:4a:c6:a6:25:e0:2a:53:a2:8b:22:
         3e:bd:36:36:0c:57:60:a4:98:da:86:c9:5c:4d:63:22:1f:7d:
         0a:5f:03:7a:17:85:f3:bc:2a:4c:a4:da:b0:14:d4:7d:7e:d1:
         f6:c9:ed:49:79:48:86:16:36:13:c2:d6:d7:8b:a8:b2:87:3f:
         f0:ca:cb:89:36:f8:49:f8:56:60:21:6c:d6:5f:4a:c2:2e:09:
         e9:fe:9c:f8:bf:53:fa:2a:1e:e2:c1:cc:84:b6:0f:39:21:e8:
         a7:c5:08:c3:b2:bd:41:0f:f9:20:58:92:22:13:81:9a:7b:38:
         18:1d:da:62:f1:44:e0:1d:f4:19:2d:aa:2d:27:18:cb:de:4f:
         bd:27:25:d4:c6:7a:9e:0f:5c:26:3c:01:5f:28:a0:38:42:58:
         e6:5c:4c:7d:25:7e:da:f1:e3:49:97:2a:30:46:84:65:a7:2e:
         52:aa:40:64:80:b3:b7:65:41:53:27:c3:9b:3f:f0:c9:35:61:
         ee:23:f2:f9:7a:bb:13:d1:28:30:8e:c3:cf:5c:a0:93:fc:cc:
         95:eb:76:61:21:22:69:fd:81:38:c9:0a:76:93:28:a4:b8:53:
         d4:16:6b:4f:ea:d1:fb:7d:cc:45:da:48:58:29:9e:e9:6c:ec:
         87:e5:5d:ac
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUAtehqs379kudxTSksCX1lzh3+7QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkFFMkQ1NEQ2QzE3OTNCN0RDRDc3NDY5OTIxNkQzMTZF
OEM3NTM1MTAeFw0yNDA0MDQxMTAxNTZaFw0yNTA0MDMxMTA2NTZaMDMxMTAvBgNV
BAMTKEMyNjREMUUxRkE5M0JDQzBFQkMzNDlENDRGQzJDNTNBNTYyMjhDNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD406ak6/zmOzaoo2+6YnP6PCk
EHlMPklMibmIyNLTIk1qeA7dtdEqsqXKDOSy6pil7QD3VeS9AJcc/3o0LgrR9epk
xS0Ll8jlzcziZULx5LhUriUL1mcytwSEYZfiRuP9mkdaGUGx53mPaamS5mg61n/z
cm1V8oHCMJ6ruXAVZd9vfE142u7i8AwL8iBgtrtPwPfr71CwfI5JKF6EHm/RMU5C
mjuff7CUl2CwVpxEGtdLqEBea+bT+z+6asBRYg4s3l1xvFMjDgMA0hIYUd+hMXWY
+bnTQSFCfgmgv6XFBjpB8Bw5A821BZT9x+wFOr1eKABlXTh/Jq+1qTA+IX/BAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUwmTR4fqTvMDrw0nUT8LFOlYijF8wHwYDVR0j
BBgwFoAUuuLVTWwXk7fc13RpkhbTFujHU1EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjRUV1E4NFN3Z2k1cTg1SnQ3WGRFU0UxNlZQenZicE50dWpIVjZ5enpL
d0EvMS9CQUUyRDU0RDZDMTc5M0I3RENENzc0Njk5MjE2RDMxNkU4Qzc1MzUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBRTJENTRENkMxNzkzQjdE
Q0Q3NzQ2OTkyMTZEMzE2RThDNzUzNTEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY0VFdRODRTd2dpNXE4NUp0N1hkRVNFMTZWUHp2YnBOdHVqSFY2eXp6S3dBLzEv
MzIzODMwMzQzYTMzMzIzODNhM2EyZjMzMzMyZDMzMzMyMDNkM2UyMDMyMzYzMjM4
MzYzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwDgQCAAIwCAMGBygEAygAMA0GCSqGSIb3DQEBCwUAA4IBAQAU9wbr+P0/
sErGpiXgKlOiiyI+vTY2DFdgpJjahslcTWMiH30KXwN6F4XzvCpMpNqwFNR9ftH2
ye1JeUiGFjYTwtbXi6iyhz/wysuJNvhJ+FZgIWzWX0rCLgnp/pz4v1P6Kh7iwcyE
tg85IeinxQjDsr1BD/kgWJIiE4GaezgYHdpi8UTgHfQZLaotJxjL3k+9JyXUxnqe
D1wmPAFfKKA4QljmXEx9JX7a8eNJlyowRoRlpy5SqkBkgLO3ZUFTJ8ObP/DJNWHu
I/L5ersT0SgwjsPPXKCT/MyV63ZhISJp/YE4yQp2kyikuFPUFmtP6tH7fcxF2khY
KZ7pbOyH5V2s
-----END CERTIFICATE-----
Generated at Sat Sep 28 13:03:43 2024 by rpki-client on console-fra.rpki-client.org