Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9kcvRxCXa8YweSa3xkWdhPejhZBxh7oUpTiGrUg3rbR5/0/323830343a323136303a6566303a3a2f34342d3434203d3e20323634353531.roa
File:                     323830343a323136303a6566303a3a2f34342d3434203d3e20323634353531.roa (raw, json)
Hash identifier:          VRV1mByffCLsjtLdYsRpBLeka9/EAXzqGu59SOh7j40=
Subject key identifier:   3B:3B:A9:79:16:64:BD:EE:CA:F9:7E:26:72:0D:D6:D2:B7:B8:A4:9E
Certificate issuer:       /CN=4C9DD3B6BEC385CE953FCF51F19349CEE8A079E9
Certificate serial:       2AB7DE660B7E614E74901BB42BDC20D7AB6991E8
Authority key identifier: 4C:9D:D3:B6:BE:C3:85:CE:95:3F:CF:51:F1:93:49:CE:E8:A0:79:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C9DD3B6BEC385CE953FCF51F19349CEE8A079E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9kcvRxCXa8YweSa3xkWdhPejhZBxh7oUpTiGrUg3rbR5/0/323830343a323136303a6566303a3a2f34342d3434203d3e20323634353531.roa
Signing time:             Fri 16 Aug 2024 18:50:30 +0000
ROA not before:           Fri 16 Aug 2024 18:45:30 +0000
ROA not after:            Fri 15 Aug 2025 18:50:30 +0000
asID:                     264551
IP address blocks:        2804:2160:ef0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9kcvRxCXa8YweSa3xkWdhPejhZBxh7oUpTiGrUg3rbR5/0/4C9DD3B6BEC385CE953FCF51F19349CEE8A079E9.crl
                          rsync://rpki-repo.registro.br/repo/9kcvRxCXa8YweSa3xkWdhPejhZBxh7oUpTiGrUg3rbR5/0/4C9DD3B6BEC385CE953FCF51F19349CEE8A079E9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C9DD3B6BEC385CE953FCF51F19349CEE8A079E9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 12:46:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:b7:de:66:0b:7e:61:4e:74:90:1b:b4:2b:dc:20:d7:ab:69:91:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C9DD3B6BEC385CE953FCF51F19349CEE8A079E9
        Validity
            Not Before: Aug 16 18:45:30 2024 GMT
            Not After : Aug 15 18:50:30 2025 GMT
        Subject: CN=3B3BA9791664BDEECAF97E26720DD6D2B7B8A49E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a5:58:0f:87:18:2a:eb:f3:fb:c8:a5:67:b7:
                    06:ca:dd:e6:4d:39:53:2c:c4:2c:d8:10:1f:57:f4:
                    9f:b5:55:3c:56:fe:06:7f:20:63:93:2a:14:a9:52:
                    0f:a2:2e:8a:0f:3b:a2:b7:7a:06:a6:ed:65:af:2e:
                    ef:94:ee:8d:11:a6:8c:1c:e6:95:02:61:42:9f:4b:
                    9e:89:ef:b8:5c:35:51:35:12:77:a1:52:66:cd:08:
                    8c:71:c7:36:de:04:ec:51:b5:5f:37:b2:42:0c:d3:
                    28:b4:6c:ac:bd:3c:60:09:5a:f6:fa:68:e5:58:69:
                    7f:cd:66:2f:21:5f:aa:27:77:ec:b6:e6:17:b7:1d:
                    1d:3e:38:0d:79:64:4e:3e:0d:97:59:7b:90:78:74:
                    f2:bc:ec:78:82:32:45:f4:25:4b:b1:52:7b:52:53:
                    da:2d:71:ec:0e:4e:26:e1:9f:b2:d3:58:01:b7:17:
                    ce:51:7f:1c:8a:38:3f:c2:24:43:a6:b2:90:40:09:
                    5c:2e:21:11:2d:ee:84:79:44:78:28:7a:d3:3e:b3:
                    4a:01:b0:91:14:01:64:37:4e:84:ff:36:ec:3d:6d:
                    c0:89:1f:ce:1e:78:e4:ab:e3:c0:49:f6:7a:f6:d6:
                    bf:1b:52:18:68:02:98:ae:31:81:0b:56:1a:fd:aa:
                    cc:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:3B:A9:79:16:64:BD:EE:CA:F9:7E:26:72:0D:D6:D2:B7:B8:A4:9E
            X509v3 Authority Key Identifier:
                keyid:4C:9D:D3:B6:BE:C3:85:CE:95:3F:CF:51:F1:93:49:CE:E8:A0:79:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9kcvRxCXa8YweSa3xkWdhPejhZBxh7oUpTiGrUg3rbR5/0/4C9DD3B6BEC385CE953FCF51F19349CEE8A079E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C9DD3B6BEC385CE953FCF51F19349CEE8A079E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9kcvRxCXa8YweSa3xkWdhPejhZBxh7oUpTiGrUg3rbR5/0/323830343a323136303a6566303a3a2f34342d3434203d3e20323634353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2160:ef0::/44

    Signature Algorithm: sha256WithRSAEncryption
         9a:e4:6e:5d:15:f4:bc:55:26:89:1d:a4:35:92:06:a3:fe:b3:
         96:eb:73:44:24:7e:21:65:bc:db:73:15:0e:4e:f8:07:4f:59:
         49:ee:6d:6f:2a:ea:60:ea:d9:01:e0:6b:ea:4d:5d:f1:e9:bc:
         f7:9c:d5:12:4a:d3:50:aa:42:c1:93:66:9e:6c:c9:62:a4:0a:
         48:d5:44:b4:d7:cf:a7:ab:bf:33:b2:19:da:ab:43:b1:7f:27:
         ce:78:d2:23:c3:dd:7a:36:3b:e4:c0:08:43:6d:1b:fa:1f:f1:
         37:c1:17:9c:e4:03:67:d8:ae:2c:01:9b:96:54:39:a0:4b:86:
         ec:a1:44:5c:c8:5c:84:ef:1f:04:4e:e8:8a:b7:3e:96:ac:f5:
         4c:92:5e:12:1b:e5:02:e9:e2:08:9f:fa:c0:f5:58:3e:54:a3:
         98:fd:2d:5c:5f:0a:66:ee:0f:35:c5:1e:f4:ed:dd:0c:6d:5d:
         8a:67:a5:a8:95:b2:85:34:be:21:a0:24:49:70:32:e1:c6:fb:
         14:43:b5:83:1f:08:7a:7c:e4:fa:92:cf:ec:e2:a6:b5:fe:d3:
         ce:e6:8a:bf:00:dc:d7:43:5a:0c:f3:fa:99:d0:64:20:d4:bd:
         81:63:a5:53:26:ff:5c:ee:0d:e4:38:7f:07:1e:e9:5f:6c:fe:
         99:ef:d4:9e
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUKrfeZgt+YU50kBu0K9wg16tpkegwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEM5REQzQjZCRUMzODVDRTk1M0ZDRjUxRjE5MzQ5Q0VF
OEEwNzlFOTAeFw0yNDA4MTYxODQ1MzBaFw0yNTA4MTUxODUwMzBaMDMxMTAvBgNV
BAMTKDNCM0JBOTc5MTY2NEJERUVDQUY5N0UyNjcyMERENkQyQjdCOEE0OUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrpVgPhxgq6/P7yKVntwbK3eZN
OVMsxCzYEB9X9J+1VTxW/gZ/IGOTKhSpUg+iLooPO6K3egam7WWvLu+U7o0Rpowc
5pUCYUKfS56J77hcNVE1EnehUmbNCIxxxzbeBOxRtV83skIM0yi0bKy9PGAJWvb6
aOVYaX/NZi8hX6ond+y25he3HR0+OA15ZE4+DZdZe5B4dPK87HiCMkX0JUuxUntS
U9otcewOTibhn7LTWAG3F85RfxyKOD/CJEOmspBACVwuIREt7oR5RHgoetM+s0oB
sJEUAWQ3ToT/Nuw9bcCJH84eeOSr48BJ9nr21r8bUhhoApiuMYELVhr9qsyrAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUOzupeRZkve7K+X4mcg3W0re4pJ4wHwYDVR0j
BBgwFoAUTJ3Ttr7Dhc6VP89R8ZNJzuigeekwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWtjdlJ4Q1hhOFl3ZVNhM3hrV2RoUGVqaFpCeGg3b1VwVGlHclVnM3Ji
UjUvMC80QzlERDNCNkJFQzM4NUNFOTUzRkNGNTFGMTkzNDlDRUU4QTA3OUU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDOUREM0I2QkVDMzg1Q0U5
NTNGQ0Y1MUYxOTM0OUNFRThBMDc5RTkuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlrY3ZSeENYYThZd2VTYTN4a1dkaFBlamhaQnhoN29VcFRpR3JVZzNyYlI1LzAv
MzIzODMwMzQzYTMyMzEzNjMwM2E2NTY2MzAzYTNhMmYzNDM0MmQzNDM0MjAzZDNl
MjAzMjM2MzQzNTM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQoBCFgDvAwDQYJKoZIhvcNAQELBQAD
ggEBAJrkbl0V9LxVJokdpDWSBqP+s5brc0QkfiFlvNtzFQ5O+AdPWUnubW8q6mDq
2QHga+pNXfHpvPec1RJK01CqQsGTZp5syWKkCkjVRLTXz6ervzOyGdqrQ7F/J854
0iPD3Xo2O+TACENtG/of8TfBF5zkA2fYriwBm5ZUOaBLhuyhRFzIXITvHwRO6Iq3
Ppas9UySXhIb5QLp4gif+sD1WD5Uo5j9LVxfCmbuDzXFHvTt3QxtXYpnpaiVsoU0
viGgJElwMuHG+xRDtYMfCHp85PqSz+ziprX+087mir8A3NdDWgzz+pnQZCDUvYFj
pVMm/1zuDeQ4fwce6V9s/pnv1J4=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:35:18 2025 by rpki-client