Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D4URka6FBw8ZiJaYzgTdQLmRuMrPuvarBidVL8R3fgbW/0/323830343a336633343a3a2f33322d3334203d3e20323632333531.roa
File:                     323830343a336633343a3a2f33322d3334203d3e20323632333531.roa (raw, json)
Hash identifier:          6mwW4niPFX3y2/pPl0BGJ/rxVslWKHIPREwaIG5eOdU=
Subject key identifier:   DB:22:5D:C1:13:11:59:3F:47:C2:B5:59:11:C5:E9:29:1C:46:F2:CA
Certificate issuer:       /CN=4D839483977D78702BA754AB330D5B6AE6DB3FF1
Certificate serial:       4B37E5484BBEF7D82E74A7DFF4C97D73730325EF
Authority key identifier: 4D:83:94:83:97:7D:78:70:2B:A7:54:AB:33:0D:5B:6A:E6:DB:3F:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D839483977D78702BA754AB330D5B6AE6DB3FF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4URka6FBw8ZiJaYzgTdQLmRuMrPuvarBidVL8R3fgbW/0/323830343a336633343a3a2f33322d3334203d3e20323632333531.roa
Signing time:             Mon 15 Jul 2024 14:16:41 +0000
ROA not before:           Mon 15 Jul 2024 14:11:41 +0000
ROA not after:            Mon 14 Jul 2025 14:16:41 +0000
asID:                     262351
IP address blocks:        2804:3f34::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D4URka6FBw8ZiJaYzgTdQLmRuMrPuvarBidVL8R3fgbW/0/4D839483977D78702BA754AB330D5B6AE6DB3FF1.crl
                          rsync://rpki-repo.registro.br/repo/D4URka6FBw8ZiJaYzgTdQLmRuMrPuvarBidVL8R3fgbW/0/4D839483977D78702BA754AB330D5B6AE6DB3FF1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D839483977D78702BA754AB330D5B6AE6DB3FF1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:37:e5:48:4b:be:f7:d8:2e:74:a7:df:f4:c9:7d:73:73:03:25:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D839483977D78702BA754AB330D5B6AE6DB3FF1
        Validity
            Not Before: Jul 15 14:11:41 2024 GMT
            Not After : Jul 14 14:16:41 2025 GMT
        Subject: CN=DB225DC11311593F47C2B55911C5E9291C46F2CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:dd:76:45:ee:70:a2:63:9f:f7:70:89:d6:27:
                    ee:77:2d:a5:2c:17:14:3f:62:70:20:e1:2f:f5:7b:
                    99:9b:e0:5d:0d:95:29:f2:a8:67:11:3c:c4:2a:9b:
                    f7:25:ac:f5:58:5d:10:ad:98:50:b5:31:a7:25:98:
                    92:c7:3f:5e:8a:14:f5:41:ce:e1:cf:0b:1b:07:e9:
                    fb:66:90:70:78:4f:78:de:52:d2:56:62:65:bd:36:
                    07:1a:c3:7c:13:71:77:77:e1:3c:ea:fb:04:71:3d:
                    d3:d7:9d:b4:a5:1a:c0:b0:84:9a:3b:b1:5d:ad:cf:
                    ce:53:4b:78:09:ce:5a:04:8e:20:54:e9:6b:0f:2b:
                    34:4c:29:27:d5:5e:d9:96:05:d7:9b:ef:bc:f7:00:
                    db:65:52:71:ac:ea:ee:d1:2d:0e:70:23:80:06:67:
                    a4:df:fc:79:5c:2b:cf:8b:43:b9:94:18:02:6b:77:
                    f5:97:9f:95:85:f4:3a:f6:c3:44:0f:24:b6:62:5c:
                    2d:5e:d9:5c:c0:53:32:3b:26:b8:d5:c2:ef:73:bc:
                    b6:08:18:be:7f:8f:03:c0:87:b5:86:27:e5:69:4e:
                    b2:fb:db:52:8d:7d:20:fe:05:ec:c7:55:b8:44:0c:
                    df:cb:03:90:13:b1:ef:67:85:1a:65:fa:18:d4:00:
                    c2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:22:5D:C1:13:11:59:3F:47:C2:B5:59:11:C5:E9:29:1C:46:F2:CA
            X509v3 Authority Key Identifier:
                keyid:4D:83:94:83:97:7D:78:70:2B:A7:54:AB:33:0D:5B:6A:E6:DB:3F:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4URka6FBw8ZiJaYzgTdQLmRuMrPuvarBidVL8R3fgbW/0/4D839483977D78702BA754AB330D5B6AE6DB3FF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D839483977D78702BA754AB330D5B6AE6DB3FF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4URka6FBw8ZiJaYzgTdQLmRuMrPuvarBidVL8R3fgbW/0/323830343a336633343a3a2f33322d3334203d3e20323632333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f34::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:da:b3:6b:60:08:4d:3b:a2:f1:3a:f1:14:f9:94:95:cc:ad:
         87:77:db:d2:03:23:e1:b5:7a:52:bc:df:dd:41:26:f1:c9:39:
         63:df:2b:93:c9:1e:5a:05:3d:5d:85:d1:95:c6:d8:ca:20:2b:
         38:87:ec:20:c4:ec:43:3f:e8:fc:b4:46:11:c5:9f:86:02:e9:
         3b:fb:91:05:67:92:0a:fe:0e:cb:18:25:70:67:01:8e:89:37:
         07:24:16:17:84:55:54:60:cb:3d:1d:21:d2:53:cf:28:3e:f3:
         93:d0:60:9e:5e:9a:a5:69:0f:48:b6:9a:ef:bd:2c:a7:97:0e:
         1b:62:e2:39:3b:15:30:48:86:02:1f:2a:a3:21:3c:c5:ec:e7:
         69:4e:03:df:b0:a9:f4:e8:35:61:4f:39:8f:31:8b:a9:94:10:
         f0:b5:34:32:bc:79:51:44:07:ec:42:b7:5a:48:7b:62:0c:c1:
         d7:a9:33:48:39:66:6c:f9:9d:e6:c5:b9:09:e7:80:f0:3d:d5:
         1a:ec:6a:84:46:1a:20:db:a5:a4:02:a2:8f:9b:2e:15:57:b6:
         fa:51:e6:ea:27:03:90:05:1f:47:00:72:bd:a2:ba:b1:77:e0:
         73:0c:0b:eb:b6:64:00:1c:65:2c:ca:cf:8a:a5:38:e7:a4:27:
         16:f3:03:94
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUSzflSEu+99gudKff9Ml9c3MDJe8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQ4Mzk0ODM5NzdENzg3MDJCQTc1NEFCMzMwRDVCNkFF
NkRCM0ZGMTAeFw0yNDA3MTUxNDExNDFaFw0yNTA3MTQxNDE2NDFaMDMxMTAvBgNV
BAMTKERCMjI1REMxMTMxMTU5M0Y0N0MyQjU1OTExQzVFOTI5MUM0NkYyQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM3XZF7nCiY5/3cInWJ+53LaUs
FxQ/YnAg4S/1e5mb4F0NlSnyqGcRPMQqm/clrPVYXRCtmFC1MaclmJLHP16KFPVB
zuHPCxsH6ftmkHB4T3jeUtJWYmW9Ngcaw3wTcXd34Tzq+wRxPdPXnbSlGsCwhJo7
sV2tz85TS3gJzloEjiBU6WsPKzRMKSfVXtmWBdeb77z3ANtlUnGs6u7RLQ5wI4AG
Z6Tf/HlcK8+LQ7mUGAJrd/WXn5WF9Dr2w0QPJLZiXC1e2VzAUzI7JrjVwu9zvLYI
GL5/jwPAh7WGJ+VpTrL721KNfSD+BezHVbhEDN/LA5ATse9nhRpl+hjUAMIPAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU2yJdwRMRWT9HwrVZEcXpKRxG8sowHwYDVR0j
BBgwFoAUTYOUg5d9eHArp1SrMw1baubbP/EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDRVUmthNkZCdzhaaUphWXpnVGRRTG1SdU1yUHV2YXJCaWRWTDhSM2Zn
YlcvMC80RDgzOTQ4Mzk3N0Q3ODcwMkJBNzU0QUIzMzBENUI2QUU2REIzRkYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzREODM5NDgzOTc3RDc4NzAy
QkE3NTRBQjMzMEQ1QjZBRTZEQjNGRjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q0VVJrYTZGQnc4WmlKYVl6Z1RkUUxtUnVNclB1dmFyQmlkVkw4UjNmZ2JXLzAv
MzIzODMwMzQzYTMzNjYzMzM0M2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjMy
MzMzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ/NDANBgkqhkiG9w0BAQsFAAOCAQEAk9qza2AI
TTui8TrxFPmUlcyth3fb0gMj4bV6Urzf3UEm8ck5Y98rk8keWgU9XYXRlcbYyiAr
OIfsIMTsQz/o/LRGEcWfhgLpO/uRBWeSCv4OyxglcGcBjok3ByQWF4RVVGDLPR0h
0lPPKD7zk9Bgnl6apWkPSLaa770sp5cOG2LiOTsVMEiGAh8qoyE8xeznaU4D37Cp
9Og1YU85jzGLqZQQ8LU0Mrx5UUQH7EK3Wkh7YgzB16kzSDlmbPmd5sW5CeeA8D3V
GuxqhEYaINulpAKij5suFVe2+lHm6icDkAUfRwByvaK6sXfgcwwL67ZkABxlLMrP
iqU456QnFvMDlA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:08 2024 by rpki-client on console-ams.rpki-client.org