Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/1/323830343a373165633a3a2f33322d3334203d3e20323730383230.roa
File:                     323830343a373165633a3a2f33322d3334203d3e20323730383230.roa (raw, json)
Hash identifier:          f8Y2MPiWjBZkAMBEAOsElQ7k+gCl54NnRcINYTEVANM=
Subject key identifier:   2B:0F:46:63:2D:3A:11:BE:F5:B2:10:DD:E2:16:00:AF:A4:19:54:C5
Certificate issuer:       /CN=4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D
Certificate serial:       556F4EF783F672601C76F434B9195847545F98A9
Authority key identifier: 44:13:F2:BD:E0:8D:3C:28:B7:34:73:1A:6E:80:F7:AB:4C:D6:6E:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/1/323830343a373165633a3a2f33322d3334203d3e20323730383230.roa
Signing time:             Wed 03 Apr 2024 18:32:19 +0000
ROA not before:           Wed 03 Apr 2024 18:27:19 +0000
ROA not after:            Wed 02 Apr 2025 18:32:19 +0000
asID:                     270820
IP address blocks:        2804:71ec::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.crl
                          rsync://rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:6f:4e:f7:83:f6:72:60:1c:76:f4:34:b9:19:58:47:54:5f:98:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D
        Validity
            Not Before: Apr  3 18:27:19 2024 GMT
            Not After : Apr  2 18:32:19 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:52:82:17:f6:6d:da:7e:d1:9f:3c:6e:ac:e8:
                    a3:ff:60:a7:23:00:55:e6:c1:ae:a1:b6:0c:13:de:
                    9c:ef:03:2e:b0:01:dc:5d:c6:be:5a:d3:94:66:f1:
                    5e:56:d5:30:2d:5d:c1:e2:64:5d:4c:3b:2d:04:7c:
                    ea:12:a4:ae:d3:42:e2:63:25:96:1f:a6:98:ac:dd:
                    b7:ca:c4:0a:1c:07:e3:3e:7d:17:f1:00:ca:a0:44:
                    a9:81:73:6c:fc:f7:2b:25:6a:d9:d7:45:54:f0:b3:
                    28:bf:af:f3:e4:e6:56:1e:2f:1b:2b:2e:7a:c3:bb:
                    b0:13:de:02:1f:4e:28:c6:bd:5d:40:cf:78:9a:7a:
                    af:8a:b3:b3:49:c4:b6:cd:5b:68:ce:d3:16:93:ab:
                    53:07:fb:47:9f:7a:14:3b:de:42:c1:8d:d2:eb:16:
                    b3:5a:c9:6e:55:cb:73:8d:c0:e8:77:ed:6b:a1:f1:
                    f7:ae:56:66:37:3b:33:fd:71:2a:f9:4a:5b:46:a3:
                    a2:a4:1b:f5:80:72:c8:13:93:ff:d0:39:b3:bb:6c:
                    60:86:40:12:fb:97:7a:ba:61:27:55:ad:b1:f6:f2:
                    c6:32:b2:4f:32:5d:21:b2:b0:97:98:58:d2:78:25:
                    96:96:3c:08:0a:06:22:27:c0:c3:20:b8:7b:6d:65:
                    93:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:0F:46:63:2D:3A:11:BE:F5:B2:10:DD:E2:16:00:AF:A4:19:54:C5
            X509v3 Authority Key Identifier:
                keyid:44:13:F2:BD:E0:8D:3C:28:B7:34:73:1A:6E:80:F7:AB:4C:D6:6E:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/1/323830343a373165633a3a2f33322d3334203d3e20323730383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:71ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:d3:a0:41:13:d9:11:ae:3d:d3:50:5c:2e:c3:82:ca:8d:e4:
         56:e1:f9:81:47:d4:e1:0e:cd:32:2a:48:12:6a:28:d5:ca:ff:
         75:f0:7e:88:dc:43:0d:fc:1a:65:e1:52:0e:4b:aa:13:f2:a4:
         d9:e6:40:57:35:88:ab:72:54:ea:18:11:ab:ea:61:84:fd:ee:
         4d:74:3e:8f:44:aa:61:e8:9e:a3:d0:70:eb:10:fa:2d:3f:d3:
         77:72:83:ee:a8:74:1c:08:a9:e5:71:2f:77:af:de:cb:74:6a:
         c0:26:96:1b:c0:a3:82:fb:cc:43:bb:86:06:bd:dd:42:8e:00:
         7d:63:75:56:b7:68:4a:03:da:2d:2e:bd:1f:c4:e0:70:93:54:
         ca:36:56:51:48:0f:43:a7:5c:94:86:94:d1:ed:f3:53:84:bb:
         c9:d5:26:de:91:20:d3:29:f8:2d:a6:2d:fd:89:a0:ba:28:0f:
         89:06:6b:4f:c6:c7:f4:04:26:a2:39:bc:a6:d1:98:99:b8:26:
         2e:50:c2:97:13:68:f5:25:ac:38:1f:cb:0b:1e:3e:42:09:30:
         7d:cd:fd:68:c4:46:f5:e4:b4:20:17:7b:e1:1b:0e:79:8f:c6:
         db:b4:8f:64:51:07:ed:53:e1:61:fd:23:55:6a:38:ed:91:dd:
         11:62:15:6b
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUVW9O94P2cmAcdvQ0uRlYR1RfmKkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQxM0YyQkRFMDhEM0MyOEI3MzQ3MzFBNkU4MEY3QUI0
Q0Q2NkU0RDAeFw0yNDA0MDMxODI3MTlaFw0yNTA0MDIxODMyMTlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOUI1MjgyMTdGNjZEREE3RUQx
OUYzQzZFQUNFOEEzRkY2MEE3MjMwMDU1RTZDMUFFQTFCNjBDMTNERTlDRUYwMzJF
QjAwMURDNURDNkJFNUFEMzk0NjZGMTVFNTZENTMwMkQ1REMxRTI2NDVENEMzQjJE
MDQ3Q0VBMTJBNEFFRDM0MkUyNjMyNTk2MUZBNjk4QUNEREI3Q0FDNDBBMUMwN0Uz
M0U3RDE3RjEwMENBQTA0NEE5ODE3MzZDRkNGNzJCMjU2QUQ5RDc0NTU0RjBCMzI4
QkZBRkYzRTRFNjU2MUUyRjFCMkIyRTdBQzNCQkIwMTNERTAyMUY0RTI4QzZCRDVE
NDBDRjc4OUE3QUFGOEFCM0IzNDlDNEI2Q0Q1QjY4Q0VEMzE2OTNBQjUzMDdGQjQ3
OUY3QTE0M0JERTQyQzE4REQyRUIxNkIzNUFDOTZFNTVDQjczOERDMEU4NzdFRDZC
QTFGMUY3QUU1NjY2MzczQjMzRkQ3MTJBRjk0QTVCNDZBM0EyQTQxQkY1ODA3MkM4
MTM5M0ZGRDAzOUIzQkI2QzYwODY0MDEyRkI5NzdBQkE2MTI3NTVBREIxRjZGMkM2
MzJCMjRGMzI1RDIxQjJCMDk3OTg1OEQyNzgyNTk2OTYzQzA4MEEwNjIyMjdDMEMz
MjBCODdCNkQ2NTkzMjcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAm1KCF/Zt2n7RnzxurOij/2CnIwBV5sGuobYME96c7wMusAHcXca+
WtOUZvFeVtUwLV3B4mRdTDstBHzqEqSu00LiYyWWH6aYrN23ysQKHAfjPn0X8QDK
oESpgXNs/PcrJWrZ10VU8LMov6/z5OZWHi8bKy56w7uwE94CH04oxr1dQM94mnqv
irOzScS2zVtoztMWk6tTB/tHn3oUO95CwY3S6xazWsluVctzjcDod+1rofH3rlZm
Nzsz/XEq+UpbRqOipBv1gHLIE5P/0Dmzu2xghkAS+5d6umEnVa2x9vLGMrJPMl0h
srCXmFjSeCWWljwICgYiJ8DDILh7bWWTJwIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FCsPRmMtOhG+9bIQ3eIWAK+kGVTFMB8GA1UdIwQYMBaAFEQT8r3gjTwotzRzGm6A
96tM1m5NMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JneTl1cDlmcm12QVh2
ekZoVWV3akIyWnpoUXkydTVZTmJFeW9SVnF5eld3LzEvNDQxM0YyQkRFMDhEM0My
OEI3MzQ3MzFBNkU4MEY3QUI0Q0Q2NkU0RC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS80NDEzRjJCREUwOEQzQzI4QjczNDczMUE2RTgwRjdBQjRDRDY2
RTRELmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9CZ3k5dXA5ZnJtdkFYdnpGaFVl
d2pCMlp6aFF5MnU1WU5iRXlvUlZxeXpXdy8xLzMyMzgzMDM0M2EzNzMxNjU2MzNh
M2EyZjMzMzIyZDMzMzQyMDNkM2UyMDMyMzczMDM4MzIzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
cewwDQYJKoZIhvcNAQELBQADggEBAAnToEET2RGuPdNQXC7DgsqN5Fbh+YFH1OEO
zTIqSBJqKNXK/3XwfojcQw38GmXhUg5LqhPypNnmQFc1iKtyVOoYEavqYYT97k10
Po9EqmHonqPQcOsQ+i0/03dyg+6odBwIqeVxL3ev3st0asAmlhvAo4L7zEO7hga9
3UKOAH1jdVa3aEoD2i0uvR/E4HCTVMo2VlFID0OnXJSGlNHt81OEu8nVJt6RINMp
+C2mLf2JoLooD4kGa0/Gx/QEJqI5vKbRmJm4Ji5QwpcTaPUlrDgfywsePkIJMH3N
/WjERvXktCAXe+EbDnmPxtu0j2RRB+1T4WH9I1VqOO2R3RFiFWs=
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:29 2024 by rpki-client on console-fra.rpki-client.org