Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/323830343a343564343a3a2f33322d3332203d3e20323636393532.roa
File:                     323830343a343564343a3a2f33322d3332203d3e20323636393532.roa (raw, json)
Hash identifier:          kX0MDpRR0fPKlny/IKJd2lMTWruTNsq4t67SfJdPtps=
Subject key identifier:   32:69:08:1D:45:F3:6A:DB:C9:DD:35:4E:6A:7A:92:6C:AD:4E:D0:69
Certificate issuer:       /CN=F8017B5E805C4A715B0DA978F817ABB4B74EEB52
Certificate serial:       6B8B582918E19BA44CE98239A4A4BD47FCA5D8C5
Authority key identifier: F8:01:7B:5E:80:5C:4A:71:5B:0D:A9:78:F8:17:AB:B4:B7:4E:EB:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8017B5E805C4A715B0DA978F817ABB4B74EEB52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/323830343a343564343a3a2f33322d3332203d3e20323636393532.roa
Signing time:             Mon 08 Apr 2024 16:22:38 +0000
ROA not before:           Mon 08 Apr 2024 16:17:38 +0000
ROA not after:            Mon 07 Apr 2025 16:22:38 +0000
asID:                     266952
IP address blocks:        2804:45d4::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/F8017B5E805C4A715B0DA978F817ABB4B74EEB52.crl
                          rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/F8017B5E805C4A715B0DA978F817ABB4B74EEB52.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8017B5E805C4A715B0DA978F817ABB4B74EEB52.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:8b:58:29:18:e1:9b:a4:4c:e9:82:39:a4:a4:bd:47:fc:a5:d8:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8017B5E805C4A715B0DA978F817ABB4B74EEB52
        Validity
            Not Before: Apr  8 16:17:38 2024 GMT
            Not After : Apr  7 16:22:38 2025 GMT
        Subject: CN=3269081D45F36ADBC9DD354E6A7A926CAD4ED069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:92:86:71:33:7a:d7:7d:73:3c:85:b5:7f:8c:
                    58:c6:6f:be:01:4f:c7:0f:56:94:cd:35:4e:40:b7:
                    2d:66:ec:f0:ca:ad:06:85:b2:9c:c3:e2:e5:18:25:
                    33:ff:34:28:12:be:eb:ad:10:ad:b3:56:88:8c:09:
                    88:1b:5d:74:a8:bf:04:08:d1:fd:76:92:88:73:c1:
                    c2:b5:72:54:5d:a5:02:c8:5d:c0:20:76:b8:8d:fc:
                    c2:7f:0d:ce:04:d9:4f:ba:54:f6:cb:8d:98:fc:ee:
                    9d:5d:88:04:2d:df:f5:1d:bf:13:6d:b7:b8:34:13:
                    26:9b:ef:9f:3c:e9:c6:bb:ae:45:2b:86:46:83:0e:
                    2b:79:f8:72:70:7f:c6:b9:91:15:4f:80:3d:49:82:
                    20:a9:40:f7:f6:71:03:a8:4d:8d:d1:3f:ba:c2:dc:
                    a3:d5:5d:ca:20:3b:69:e6:56:69:ed:83:ba:06:6b:
                    bc:73:8a:01:fb:d7:6c:41:aa:5c:16:e7:b5:2a:45:
                    d0:a3:f2:bb:c1:1c:4e:46:c2:68:53:23:b4:1c:54:
                    41:f9:4f:12:f0:b1:48:c0:1f:f6:bb:52:7d:a3:a1:
                    75:5e:a3:7e:e4:8f:3e:b0:57:65:c0:03:04:18:1d:
                    c6:73:e3:25:9f:25:a7:e6:44:5b:40:7c:8d:8f:95:
                    4e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:69:08:1D:45:F3:6A:DB:C9:DD:35:4E:6A:7A:92:6C:AD:4E:D0:69
            X509v3 Authority Key Identifier:
                keyid:F8:01:7B:5E:80:5C:4A:71:5B:0D:A9:78:F8:17:AB:B4:B7:4E:EB:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/F8017B5E805C4A715B0DA978F817ABB4B74EEB52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8017B5E805C4A715B0DA978F817ABB4B74EEB52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/323830343a343564343a3a2f33322d3332203d3e20323636393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:45d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:4f:6c:f3:3e:5f:ea:d5:5a:72:5f:72:67:5f:ad:0b:c1:fc:
         20:e2:cd:4a:ae:bb:d9:60:2b:cd:06:25:e4:e6:ac:a1:94:7b:
         09:eb:b3:ba:97:db:6c:96:1f:7c:0f:42:e5:53:21:c5:45:6e:
         dc:63:10:73:68:66:61:97:ba:7d:f2:a2:6f:78:31:61:cd:10:
         8f:bf:d3:84:4a:07:22:57:06:be:eb:60:3a:0f:f2:48:ab:57:
         ec:5c:4a:8b:9f:c4:5e:a0:4a:54:cf:02:fa:b4:ec:5b:a5:03:
         53:be:ba:f5:c7:25:80:34:ed:3f:cf:f4:37:97:1a:b9:47:bd:
         87:37:ff:8e:2c:aa:df:7f:38:4e:2a:cf:30:d3:4f:89:7f:f5:
         d2:dd:a3:53:72:2f:5d:27:8c:2e:65:96:1b:39:22:ee:84:86:
         be:6d:58:7c:95:91:5a:15:9c:4d:f1:0b:79:f5:8f:76:bd:b6:
         40:64:ca:5b:19:7b:38:e3:91:f0:b5:2a:bb:d5:98:79:79:df:
         20:74:a7:eb:4d:d3:8a:da:4c:c6:d5:31:10:c8:56:a0:69:64:
         b7:9f:fb:6d:5f:95:2d:94:55:f1:29:39:03:87:4e:dc:a7:fe:
         bb:4d:84:8d:3b:47:e2:86:ef:48:fd:39:ba:8e:5d:6f:47:a3:
         cc:99:83:6a
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUa4tYKRjhm6RM6YI5pKS9R/yl2MUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjgwMTdCNUU4MDVDNEE3MTVCMERBOTc4RjgxN0FCQjRC
NzRFRUI1MjAeFw0yNDA0MDgxNjE3MzhaFw0yNTA0MDcxNjIyMzhaMDMxMTAvBgNV
BAMTKDMyNjkwODFENDVGMzZBREJDOUREMzU0RTZBN0E5MjZDQUQ0RUQwNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7koZxM3rXfXM8hbV/jFjGb74B
T8cPVpTNNU5Aty1m7PDKrQaFspzD4uUYJTP/NCgSvuutEK2zVoiMCYgbXXSovwQI
0f12kohzwcK1clRdpQLIXcAgdriN/MJ/Dc4E2U+6VPbLjZj87p1diAQt3/UdvxNt
t7g0Eyab75886ca7rkUrhkaDDit5+HJwf8a5kRVPgD1JgiCpQPf2cQOoTY3RP7rC
3KPVXcogO2nmVmntg7oGa7xzigH712xBqlwW57UqRdCj8rvBHE5GwmhTI7QcVEH5
TxLwsUjAH/a7Un2joXVeo37kjz6wV2XAAwQYHcZz4yWfJafmRFtAfI2PlU4FAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUMmkIHUXzatvJ3TVOanqSbK1O0GkwHwYDVR0j
BBgwFoAU+AF7XoBcSnFbDal4+BertLdO61IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGcyVFN3dFRuNGdpQ2ZzUThKWldGU0RkNE1ac3E1NjRyVkZDZnRtUEI0
Y1QvMC9GODAxN0I1RTgwNUM0QTcxNUIwREE5NzhGODE3QUJCNEI3NEVFQjUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y4MDE3QjVFODA1QzRBNzE1
QjBEQTk3OEY4MTdBQkI0Qjc0RUVCNTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RnMlRTd3RUbjRnaUNmc1E4SlpXRlNEZDRNWnNxNTY0clZGQ2Z0bVBCNGNULzAv
MzIzODMwMzQzYTM0MzU2NDM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM2
MzkzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARF1DANBgkqhkiG9w0BAQsFAAOCAQEAPE9s8z5f
6tVacl9yZ1+tC8H8IOLNSq672WArzQYl5OasoZR7CeuzupfbbJYffA9C5VMhxUVu
3GMQc2hmYZe6ffKib3gxYc0Qj7/ThEoHIlcGvutgOg/ySKtX7FxKi5/EXqBKVM8C
+rTsW6UDU7669cclgDTtP8/0N5cauUe9hzf/jiyq3384TirPMNNPiX/10t2jU3Iv
XSeMLmWWGzki7oSGvm1YfJWRWhWcTfELefWPdr22QGTKWxl7OOOR8LUqu9WYeXnf
IHSn603TitpMxtUxEMhWoGlkt5/7bV+VLZRV8Sk5A4dO3Kf+u02EjTtH4obvSP05
uo5db0ejzJmDag==
-----END CERTIFICATE-----
Generated at Sat Jun 29 03:28:44 2024 by rpki-client on console-ams.rpki-client.org