Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/323830343a363434343a3a2f33322d3335203d3e20323639343137.roa
File:                     323830343a363434343a3a2f33322d3335203d3e20323639343137.roa (raw, json)
Hash identifier:          bDb4dVQcBZVBx9uL0MyyTFV/v0nE78VY1/qkbazUFyc=
Subject key identifier:   D4:FF:CA:CB:0D:1F:93:30:CB:8C:1D:7A:BB:0F:9E:12:74:74:00:D5
Certificate issuer:       /CN=582517B9105955B7B839FB60DC59AE677C6B4DED
Certificate serial:       4F73BD29DD5C5FAD23DCA775462F2B084F210FEB
Authority key identifier: 58:25:17:B9:10:59:55:B7:B8:39:FB:60:DC:59:AE:67:7C:6B:4D:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/582517B9105955B7B839FB60DC59AE677C6B4DED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/323830343a363434343a3a2f33322d3335203d3e20323639343137.roa
Signing time:             Fri 05 Apr 2024 03:18:11 +0000
ROA not before:           Fri 05 Apr 2024 03:13:11 +0000
ROA not after:            Fri 04 Apr 2025 03:18:11 +0000
asID:                     269417
IP address blocks:        2804:6444::/32 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/582517B9105955B7B839FB60DC59AE677C6B4DED.crl
                          rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/582517B9105955B7B839FB60DC59AE677C6B4DED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/582517B9105955B7B839FB60DC59AE677C6B4DED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:20:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:73:bd:29:dd:5c:5f:ad:23:dc:a7:75:46:2f:2b:08:4f:21:0f:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=582517B9105955B7B839FB60DC59AE677C6B4DED
        Validity
            Not Before: Apr  5 03:13:11 2024 GMT
            Not After : Apr  4 03:18:11 2025 GMT
        Subject: CN=D4FFCACB0D1F9330CB8C1D7ABB0F9E12747400D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:41:c6:3d:7d:cd:3f:25:48:9b:1b:e7:c1:b5:
                    24:01:2d:2c:27:c9:07:55:20:39:15:37:9f:04:ac:
                    c7:8b:ed:dd:ca:7d:84:fc:df:6f:c3:2e:db:9f:09:
                    73:ec:83:5d:65:df:6e:42:0e:5d:ff:59:bc:68:5f:
                    97:17:b8:ae:aa:91:42:69:67:ae:8f:cb:44:0c:0c:
                    3d:88:58:47:09:52:86:36:62:de:49:fa:89:f2:e4:
                    03:ef:49:ef:47:5a:41:ac:de:2a:71:76:ed:64:bc:
                    70:75:cf:d8:c8:ad:5c:9b:ac:58:79:74:75:24:33:
                    90:4d:17:0e:60:dc:ef:4c:a3:00:63:ee:1e:31:d9:
                    c8:2d:8f:cc:9c:5e:e5:fd:52:76:91:ba:2f:63:06:
                    b4:de:20:8a:b8:75:63:69:6b:4d:52:5f:8c:75:48:
                    f2:6e:50:03:a6:b2:3c:c8:06:77:61:26:ec:a4:38:
                    98:88:4d:07:76:a4:86:80:b4:ca:a7:8a:24:80:98:
                    9b:e9:78:1f:3b:8d:d8:48:93:33:27:33:38:8b:75:
                    c3:a4:d3:3a:26:5f:ef:f8:c1:61:2a:2f:08:8a:3d:
                    f2:af:3f:c9:83:3e:e1:aa:f3:95:f2:6e:e4:d3:49:
                    0f:02:5e:59:f4:af:3d:cd:7c:19:33:dd:55:cf:05:
                    13:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:FF:CA:CB:0D:1F:93:30:CB:8C:1D:7A:BB:0F:9E:12:74:74:00:D5
            X509v3 Authority Key Identifier:
                keyid:58:25:17:B9:10:59:55:B7:B8:39:FB:60:DC:59:AE:67:7C:6B:4D:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/582517B9105955B7B839FB60DC59AE677C6B4DED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/582517B9105955B7B839FB60DC59AE677C6B4DED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/323830343a363434343a3a2f33322d3335203d3e20323639343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6444::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:a3:0d:7d:c8:60:41:13:77:ec:08:cb:ac:2c:67:b9:16:19:
         08:e8:e5:f7:64:a3:b4:fb:e1:dd:bf:9d:b3:70:8b:86:c0:8e:
         b9:bf:99:a2:82:46:0a:39:c4:56:2a:89:0b:6d:22:f8:a2:33:
         e8:c0:ae:77:76:77:1f:01:07:6e:c5:4f:9d:88:d6:a4:33:a3:
         69:8a:a6:5c:2c:54:5e:24:06:8d:ae:fe:fb:4a:60:9a:cc:57:
         c0:09:ef:cd:9a:d0:b0:39:1b:b3:b8:e2:00:bd:1c:b4:17:df:
         8d:5d:64:d2:f0:38:60:3e:99:22:e4:8c:9c:df:9d:80:c5:7b:
         21:26:84:af:f5:a2:18:5e:df:c4:59:d5:b8:15:b9:e6:c5:e2:
         4d:ee:e6:af:b1:90:5d:6e:5d:c1:26:ed:72:97:75:62:80:27:
         90:94:b9:a3:82:9e:cc:29:ed:cb:5c:02:d3:0d:f8:d8:78:90:
         ee:79:a0:c4:b1:f4:54:2b:e5:0d:ab:39:81:e1:a3:ae:4c:39:
         a3:45:05:61:7e:94:98:f7:a9:5e:29:0e:6a:a2:0e:8f:bf:e0:
         73:f9:68:cd:22:ac:12:94:20:87:ff:a2:ac:1c:a0:88:9d:d0:
         a0:28:25:c9:f9:ef:15:6a:24:54:c4:02:c7:40:68:8c:25:b7:
         c3:39:1e:b7
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUT3O9Kd1cX60j3Kd1Ri8rCE8hD+swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTgyNTE3QjkxMDU5NTVCN0I4MzlGQjYwREM1OUFFNjc3
QzZCNERFRDAeFw0yNDA0MDUwMzEzMTFaFw0yNTA0MDQwMzE4MTFaMDMxMTAvBgNV
BAMTKEQ0RkZDQUNCMEQxRjkzMzBDQjhDMUQ3QUJCMEY5RTEyNzQ3NDAwRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSQcY9fc0/JUibG+fBtSQBLSwn
yQdVIDkVN58ErMeL7d3KfYT832/DLtufCXPsg11l325CDl3/WbxoX5cXuK6qkUJp
Z66Py0QMDD2IWEcJUoY2Yt5J+ony5APvSe9HWkGs3ipxdu1kvHB1z9jIrVybrFh5
dHUkM5BNFw5g3O9MowBj7h4x2cgtj8ycXuX9UnaRui9jBrTeIIq4dWNpa01SX4x1
SPJuUAOmsjzIBndhJuykOJiITQd2pIaAtMqniiSAmJvpeB87jdhIkzMnMziLdcOk
0zomX+/4wWEqLwiKPfKvP8mDPuGq85XybuTTSQ8CXln0rz3NfBkz3VXPBRPZAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU1P/Kyw0fkzDLjB16uw+eEnR0ANUwHwYDVR0j
BBgwFoAUWCUXuRBZVbe4Oftg3FmuZ3xrTe0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXJQNUdXR0pTNWhGUUs3ZjV2UVNIVmRRWmJOYWlKNFdrV3BBeG1iYmVx
NUQvMS81ODI1MTdCOTEwNTk1NUI3QjgzOUZCNjBEQzU5QUU2NzdDNkI0REVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU4MjUxN0I5MTA1OTU1QjdC
ODM5RkI2MERDNTlBRTY3N0M2QjRERUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlyUDVHV0dKUzVoRlFLN2Y1dlFTSFZkUVpiTmFpSjRXa1dwQXhtYmJlcTVELzEv
MzIzODMwMzQzYTM2MzQzNDM0M2EzYTJmMzMzMjJkMzMzNTIwM2QzZTIwMzIzNjM5
MzQzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARkRDANBgkqhkiG9w0BAQsFAAOCAQEATqMNfchg
QRN37AjLrCxnuRYZCOjl92SjtPvh3b+ds3CLhsCOub+ZooJGCjnEViqJC20i+KIz
6MCud3Z3HwEHbsVPnYjWpDOjaYqmXCxUXiQGja7++0pgmsxXwAnvzZrQsDkbs7ji
AL0ctBffjV1k0vA4YD6ZIuSMnN+dgMV7ISaEr/WiGF7fxFnVuBW55sXiTe7mr7GQ
XW5dwSbtcpd1YoAnkJS5o4KezCnty1wC0w342HiQ7nmgxLH0VCvlDas5geGjrkw5
o0UFYX6UmPepXikOaqIOj7/gc/lozSKsEpQgh/+irBygiJ3QoCglyfnvFWokVMQC
x0BojCW3wzketw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:35 2024 by rpki-client on console-fra.rpki-client.org