Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9SPuevDRqkn9bvQviMcDGXwxRyK7KBCNoavhEfogZVt5/2/323830343a333838383a3a2f33322d3332203d3e20323636343834.roa
File:                     323830343a333838383a3a2f33322d3332203d3e20323636343834.roa (raw, json)
Hash identifier:          qlR2HdcvQ9/zOuo/YKDRb1Yer9ihRVGrsCofBra/0yU=
Subject key identifier:   55:5B:5C:87:1A:E5:4E:DE:CF:78:C7:6A:2D:61:EC:31:D3:E2:0A:DF
Certificate issuer:       /CN=1844D4ED4AC2671A7742257A35431ED55286D36F
Certificate serial:       5329638F7DAE32DA57CA3BDCEE11FB2FC63F1DED
Authority key identifier: 18:44:D4:ED:4A:C2:67:1A:77:42:25:7A:35:43:1E:D5:52:86:D3:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1844D4ED4AC2671A7742257A35431ED55286D36F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SPuevDRqkn9bvQviMcDGXwxRyK7KBCNoavhEfogZVt5/2/323830343a333838383a3a2f33322d3332203d3e20323636343834.roa
Signing time:             Thu 04 Apr 2024 17:58:56 +0000
ROA not before:           Thu 04 Apr 2024 17:53:56 +0000
ROA not after:            Thu 03 Apr 2025 17:58:56 +0000
asID:                     266484
IP address blocks:        2804:3888::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9SPuevDRqkn9bvQviMcDGXwxRyK7KBCNoavhEfogZVt5/2/1844D4ED4AC2671A7742257A35431ED55286D36F.crl
                          rsync://rpki-repo.registro.br/repo/9SPuevDRqkn9bvQviMcDGXwxRyK7KBCNoavhEfogZVt5/2/1844D4ED4AC2671A7742257A35431ED55286D36F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1844D4ED4AC2671A7742257A35431ED55286D36F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:49:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:29:63:8f:7d:ae:32:da:57:ca:3b:dc:ee:11:fb:2f:c6:3f:1d:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1844D4ED4AC2671A7742257A35431ED55286D36F
        Validity
            Not Before: Apr  4 17:53:56 2024 GMT
            Not After : Apr  3 17:58:56 2025 GMT
        Subject: CN=555B5C871AE54EDECF78C76A2D61EC31D3E20ADF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:06:4b:64:b4:30:59:5e:dd:3f:87:0b:3d:4b:
                    48:c7:58:9c:dd:00:fd:11:88:f9:b4:e7:15:a6:d3:
                    a4:1b:9b:b8:9a:4b:7e:32:51:b9:01:73:fa:37:31:
                    46:bb:30:70:9d:12:80:b3:8f:18:e2:54:20:27:74:
                    a6:76:4c:1f:c0:3d:6f:b6:91:6e:18:fe:33:32:45:
                    e9:a9:7a:e3:0c:d1:bf:0e:bf:7a:3a:61:b4:ff:85:
                    24:3e:ef:ef:10:28:22:4e:ac:74:9a:3f:3f:61:72:
                    62:e1:af:f5:43:7b:54:04:b9:c0:91:e6:9e:5b:6d:
                    9a:fe:62:a5:23:f9:d4:0f:40:6d:56:84:05:37:52:
                    d1:29:a0:c6:49:1e:90:2b:e3:9d:cc:dc:3e:e3:fe:
                    71:1e:b7:af:bf:62:53:2a:f0:b9:34:49:4c:0e:c1:
                    d6:ae:f3:18:01:fb:6f:4c:f1:e1:27:ff:4b:bc:4d:
                    8b:7d:37:d1:6e:24:62:06:8a:e2:4a:84:eb:34:56:
                    5c:18:30:e4:68:79:32:5c:b6:9c:c7:ad:09:95:6c:
                    58:3b:78:ed:d9:b1:c8:59:cb:b3:ed:38:1f:1d:eb:
                    2f:6a:83:0d:e6:7c:d8:e1:c2:72:8f:99:f1:1b:68:
                    2d:cf:dd:44:25:b4:b3:32:85:c0:27:13:35:bc:28:
                    de:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:5B:5C:87:1A:E5:4E:DE:CF:78:C7:6A:2D:61:EC:31:D3:E2:0A:DF
            X509v3 Authority Key Identifier:
                keyid:18:44:D4:ED:4A:C2:67:1A:77:42:25:7A:35:43:1E:D5:52:86:D3:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SPuevDRqkn9bvQviMcDGXwxRyK7KBCNoavhEfogZVt5/2/1844D4ED4AC2671A7742257A35431ED55286D36F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1844D4ED4AC2671A7742257A35431ED55286D36F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SPuevDRqkn9bvQviMcDGXwxRyK7KBCNoavhEfogZVt5/2/323830343a333838383a3a2f33322d3332203d3e20323636343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3888::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:f1:a7:ab:96:b6:d3:6d:20:95:92:a8:fa:9f:66:a5:ad:19:
         d4:04:d9:e2:c1:e4:3c:11:6a:ae:17:7c:13:5b:45:90:c0:81:
         d5:0d:38:64:58:9b:25:c3:85:a0:95:34:74:f4:3d:d3:de:c5:
         ca:30:9e:22:96:28:c3:5c:29:c7:cc:92:9d:4f:3d:36:af:02:
         a9:31:5a:a1:8b:e6:f9:5b:cf:6f:13:57:c1:56:d7:85:28:75:
         5a:0b:f2:b8:9d:18:37:db:23:91:a9:aa:e5:b6:4f:1e:d1:5b:
         7d:25:78:99:49:31:d1:72:10:9d:3d:93:ef:d7:93:50:f7:40:
         0d:54:d6:77:7a:6f:28:5d:39:50:a5:2f:9c:7a:23:52:d0:90:
         15:4c:6a:6a:48:b1:ce:f0:a1:9a:75:81:af:99:f9:c1:f9:d9:
         39:c4:46:1b:6a:38:d1:cb:eb:07:24:68:d4:5b:c1:b6:c7:58:
         0f:ab:e8:80:6f:b3:3a:8d:78:23:de:72:47:56:31:c3:90:ef:
         27:91:af:52:0b:80:e6:29:1a:06:ee:a2:cc:6e:5b:4d:9b:a7:
         87:b2:bb:a8:2a:7c:6a:d5:a3:85:e6:ca:72:39:f8:ec:25:e2:
         68:53:11:de:0d:16:da:45:39:f7:a3:e7:9f:6e:6a:c7:65:2a:
         e6:95:8e:8b
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUUyljj32uMtpXyjvc7hH7L8Y/He0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTg0NEQ0RUQ0QUMyNjcxQTc3NDIyNTdBMzU0MzFFRDU1
Mjg2RDM2RjAeFw0yNDA0MDQxNzUzNTZaFw0yNTA0MDMxNzU4NTZaMDMxMTAvBgNV
BAMTKDU1NUI1Qzg3MUFFNTRFREVDRjc4Qzc2QTJENjFFQzMxRDNFMjBBREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3BktktDBZXt0/hws9S0jHWJzd
AP0RiPm05xWm06Qbm7iaS34yUbkBc/o3MUa7MHCdEoCzjxjiVCAndKZ2TB/APW+2
kW4Y/jMyRempeuMM0b8Ov3o6YbT/hSQ+7+8QKCJOrHSaPz9hcmLhr/VDe1QEucCR
5p5bbZr+YqUj+dQPQG1WhAU3UtEpoMZJHpAr453M3D7j/nEet6+/YlMq8Lk0SUwO
wdau8xgB+29M8eEn/0u8TYt9N9FuJGIGiuJKhOs0VlwYMORoeTJctpzHrQmVbFg7
eO3ZschZy7PtOB8d6y9qgw3mfNjhwnKPmfEbaC3P3UQltLMyhcAnEzW8KN5fAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUVVtchxrlTt7PeMdqLWHsMdPiCt8wHwYDVR0j
BBgwFoAUGETU7UrCZxp3QiV6NUMe1VKG028wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVNQdWV2RFJxa245YnZRdmlNY0RHWHd4UnlLN0tCQ05vYXZoRWZvZ1pW
dDUvMi8xODQ0RDRFRDRBQzI2NzFBNzc0MjI1N0EzNTQzMUVENTUyODZEMzZGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE4NDRENEVENEFDMjY3MUE3
NzQyMjU3QTM1NDMxRUQ1NTI4NkQzNkYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlTUHVldkRScWtuOWJ2UXZpTWNER1h3eFJ5SzdLQkNOb2F2aEVmb2daVnQ1LzIv
MzIzODMwMzQzYTMzMzgzODM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM2
MzQzODM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ4iDANBgkqhkiG9w0BAQsFAAOCAQEAGfGnq5a2
020glZKo+p9mpa0Z1ATZ4sHkPBFqrhd8E1tFkMCB1Q04ZFibJcOFoJU0dPQ9097F
yjCeIpYow1wpx8ySnU89Nq8CqTFaoYvm+VvPbxNXwVbXhSh1WgvyuJ0YN9sjkamq
5bZPHtFbfSV4mUkx0XIQnT2T79eTUPdADVTWd3pvKF05UKUvnHojUtCQFUxqakix
zvChmnWBr5n5wfnZOcRGG2o40cvrByRo1FvBtsdYD6vogG+zOo14I95yR1Yxw5Dv
J5GvUguA5ikaBu6izG5bTZunh7K7qCp8atWjhebKcjn47CXiaFMR3g0W2kU596Pn
n25qx2Uq5pWOiw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:40 2024 by rpki-client on console-ams.rpki-client.org