Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G4UU4xTfxfsq4xfs9dCN8o2kSQwY6RZGhd65bTmc8rgm/1/323830343a356432303a3a2f33322d3335203d3e20323638393532.roa
File:                     323830343a356432303a3a2f33322d3335203d3e20323638393532.roa (raw, json)
Hash identifier:          +eyUIJE167NK3Wp397T86TpuwiO3MAaCOLJu5hmd4WI=
Subject key identifier:   C0:6C:48:D0:DD:66:41:95:9C:D1:22:E5:09:04:2E:1B:EC:F4:AD:A5
Certificate issuer:       /CN=CDBBBC8A21B569B8C13657EE73CC93CA9577A026
Certificate serial:       476D46A224DE387E5ACF25436F62DC0691C8F01C
Authority key identifier: CD:BB:BC:8A:21:B5:69:B8:C1:36:57:EE:73:CC:93:CA:95:77:A0:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDBBBC8A21B569B8C13657EE73CC93CA9577A026.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4UU4xTfxfsq4xfs9dCN8o2kSQwY6RZGhd65bTmc8rgm/1/323830343a356432303a3a2f33322d3335203d3e20323638393532.roa
Signing time:             Wed 03 Apr 2024 19:00:00 +0000
ROA not before:           Wed 03 Apr 2024 18:55:00 +0000
ROA not after:            Thu 03 Apr 2025 19:00:00 +0000
asID:                     268952
IP address blocks:        2804:5d20::/32 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G4UU4xTfxfsq4xfs9dCN8o2kSQwY6RZGhd65bTmc8rgm/1/CDBBBC8A21B569B8C13657EE73CC93CA9577A026.crl
                          rsync://rpki-repo.registro.br/repo/G4UU4xTfxfsq4xfs9dCN8o2kSQwY6RZGhd65bTmc8rgm/1/CDBBBC8A21B569B8C13657EE73CC93CA9577A026.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDBBBC8A21B569B8C13657EE73CC93CA9577A026.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:6d:46:a2:24:de:38:7e:5a:cf:25:43:6f:62:dc:06:91:c8:f0:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDBBBC8A21B569B8C13657EE73CC93CA9577A026
        Validity
            Not Before: Apr  3 18:55:00 2024 GMT
            Not After : Apr  3 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:23:cd:3d:91:cb:36:90:03:69:27:7c:3f:90:
                    47:2f:40:f7:6a:7d:22:45:a2:ed:f3:0d:c9:7d:93:
                    54:7a:1b:06:56:85:ef:1c:b4:e4:4a:9c:4a:33:52:
                    5a:a1:e5:10:52:4f:16:e4:99:26:d9:89:05:f2:6f:
                    31:de:db:64:ba:bb:c1:e0:86:a8:39:4e:9d:d3:90:
                    7c:9c:46:ec:88:c4:48:6f:4c:30:d0:34:20:1e:3d:
                    a1:95:2f:72:1e:f6:dc:a6:d2:7e:7b:a7:3e:5f:8c:
                    a1:56:ca:90:72:83:7c:42:f3:6a:34:a1:56:b3:18:
                    6f:5c:03:7a:e2:9e:07:23:0c:ce:c8:7c:2a:3b:8a:
                    01:63:df:28:e0:3e:ee:43:da:42:4a:8b:96:a7:d0:
                    06:de:39:77:9e:07:e6:45:d0:73:48:b2:82:57:6b:
                    ff:86:b1:17:37:dd:72:10:fe:d1:42:93:7f:34:e6:
                    3a:ad:55:cd:29:80:5a:5b:a4:b0:0a:53:6b:e9:61:
                    e9:be:93:e0:27:9d:1a:1b:b8:2b:0e:8e:f2:d6:62:
                    8b:64:37:23:a0:6f:0e:b9:f0:9d:39:09:27:1b:00:
                    ee:cc:3e:4b:7c:2a:67:79:7c:04:48:ec:5d:8b:f4:
                    4e:db:53:29:d9:db:87:a3:c9:96:f0:72:c8:64:4a:
                    19:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:6C:48:D0:DD:66:41:95:9C:D1:22:E5:09:04:2E:1B:EC:F4:AD:A5
            X509v3 Authority Key Identifier:
                keyid:CD:BB:BC:8A:21:B5:69:B8:C1:36:57:EE:73:CC:93:CA:95:77:A0:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4UU4xTfxfsq4xfs9dCN8o2kSQwY6RZGhd65bTmc8rgm/1/CDBBBC8A21B569B8C13657EE73CC93CA9577A026.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDBBBC8A21B569B8C13657EE73CC93CA9577A026.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4UU4xTfxfsq4xfs9dCN8o2kSQwY6RZGhd65bTmc8rgm/1/323830343a356432303a3a2f33322d3335203d3e20323638393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5d20::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:00:e9:ec:b2:9a:8c:63:e5:16:37:1a:97:3c:2d:51:38:e7:
         93:7e:7b:39:29:4c:17:6a:13:1c:4d:84:3c:0c:10:a1:f6:b0:
         b0:7d:eb:ec:15:a2:f0:64:a3:01:d5:3b:17:35:23:85:35:f0:
         17:1a:4f:48:d5:57:05:48:e9:f1:3f:fc:12:f1:e2:9a:7e:f8:
         c9:86:14:33:23:be:a6:de:cf:d2:67:74:cd:0f:91:d9:19:d1:
         a6:85:97:4c:10:73:d5:b5:62:d5:c2:c0:2a:a2:50:cc:1b:ad:
         61:21:50:2e:1b:23:21:aa:5c:f9:3d:65:57:cc:94:94:f9:39:
         f5:8c:7b:c6:7c:59:f1:5d:f6:cd:ac:64:32:1e:0b:9b:a2:c7:
         1a:ec:84:61:a4:7f:98:d6:cd:fd:6e:b0:00:51:44:21:88:2e:
         df:85:4d:eb:ec:8c:ca:4e:bf:31:52:20:5e:6e:b5:86:0e:5f:
         51:8d:20:11:03:93:c9:9b:5b:c1:f5:15:d3:b7:1a:b5:c4:c6:
         93:eb:e8:02:c2:28:4c:59:eb:df:bc:b3:b7:eb:09:3a:c5:94:
         db:8a:82:0f:ea:63:8e:a9:13:e6:5f:a8:d5:3f:1e:7a:e9:5f:
         36:d1:49:3b:ce:90:07:93:a7:2c:de:b2:8b:35:cb:22:cc:16:
         79:e5:27:58
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUR21GoiTeOH5azyVDb2LcBpHI8BwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0RCQkJDOEEyMUI1NjlCOEMxMzY1N0VFNzNDQzkzQ0E5
NTc3QTAyNjAeFw0yNDA0MDMxODU1MDBaFw0yNTA0MDMxOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjYyM0NEM0Q5MUNCMzY5MDAz
NjkyNzdDM0Y5MDQ3MkY0MEY3NkE3RDIyNDVBMkVERjMwREM5N0Q5MzU0N0ExQjA2
NTY4NUVGMUNCNEU0NEE5QzRBMzM1MjVBQTFFNTEwNTI0RjE2RTQ5OTI2RDk4OTA1
RjI2RjMxREVEQjY0QkFCQkMxRTA4NkE4Mzk0RTlERDM5MDdDOUM0NkVDODhDNDQ4
NkY0QzMwRDAzNDIwMUUzREExOTUyRjcyMUVGNkRDQTZEMjdFN0JBNzNFNUY4Q0Ex
NTZDQTkwNzI4MzdDNDJGMzZBMzRBMTU2QjMxODZGNUMwMzdBRTI5RTA3MjMwQ0NF
Qzg3QzJBM0I4QTAxNjNERjI4RTAzRUVFNDNEQTQyNEE4Qjk2QTdEMDA2REUzOTc3
OUUwN0U2NDVEMDczNDhCMjgyNTc2QkZGODZCMTE3MzdERDcyMTBGRUQxNDI5MzdG
MzRFNjNBQUQ1NUNEMjk4MDVBNUJBNEIwMEE1MzZCRTk2MUU5QkU5M0UwMjc5RDFB
MUJCODJCMEU4RUYyRDY2MjhCNjQzNzIzQTA2RjBFQjlGMDlEMzkwOTI3MUIwMEVF
Q0MzRTRCN0MyQTY3Nzk3QzA0NDhFQzVEOEJGNDRFREI1MzI5RDlEQjg3QTNDOTk2
RjA3MkM4NjQ0QTE5NDUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtiPNPZHLNpADaSd8P5BHL0D3an0iRaLt8w3JfZNUehsGVoXvHLTk
SpxKM1JaoeUQUk8W5Jkm2YkF8m8x3ttkurvB4IaoOU6d05B8nEbsiMRIb0ww0DQg
Hj2hlS9yHvbcptJ+e6c+X4yhVsqQcoN8QvNqNKFWsxhvXAN64p4HIwzOyHwqO4oB
Y98o4D7uQ9pCSouWp9AG3jl3ngfmRdBzSLKCV2v/hrEXN91yEP7RQpN/NOY6rVXN
KYBaW6SwClNr6WHpvpPgJ50aG7grDo7y1mKLZDcjoG8OufCdOQknGwDuzD5LfCpn
eXwESOxdi/RO21Mp2duHo8mW8HLIZEoZRQIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FMBsSNDdZkGVnNEi5QkELhvs9K2lMB8GA1UdIwQYMBaAFM27vIohtWm4wTZX7nPM
k8qVd6AmMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0c0VVU0eFRmeGZzcTR4
ZnM5ZENOOG8ya1NRd1k2UlpHaGQ2NWJUbWM4cmdtLzEvQ0RCQkJDOEEyMUI1NjlC
OEMxMzY1N0VFNzNDQzkzQ0E5NTc3QTAyNi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9DREJCQkM4QTIxQjU2OUI4QzEzNjU3RUU3M0NDOTNDQTk1NzdB
MDI2LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HNFVVNHhUZnhmc3E0eGZzOWRD
TjhvMmtTUXdZNlJaR2hkNjViVG1jOHJnbS8xLzMyMzgzMDM0M2EzNTY0MzIzMDNh
M2EyZjMzMzIyZDMzMzUyMDNkM2UyMDMyMzYzODM5MzUzMi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
XSAwDQYJKoZIhvcNAQELBQADggEBAC4A6eyymoxj5RY3Gpc8LVE455N+ezkpTBdq
ExxNhDwMEKH2sLB96+wVovBkowHVOxc1I4U18BcaT0jVVwVI6fE//BLx4pp++MmG
FDMjvqbez9JndM0PkdkZ0aaFl0wQc9W1YtXCwCqiUMwbrWEhUC4bIyGqXPk9ZVfM
lJT5OfWMe8Z8WfFd9s2sZDIeC5uixxrshGGkf5jWzf1usABRRCGILt+FTevsjMpO
vzFSIF5utYYOX1GNIBEDk8mbW8H1FdO3GrXExpPr6ALCKExZ69+8s7frCTrFlNuK
gg/qY46pE+ZfqNU/HnrpXzbRSTvOkAeTpyzesos1yyLMFnnlJ1g=
-----END CERTIFICATE-----
Generated at Sat Jun 29 12:43:26 2024 by rpki-client on console-fra.rpki-client.org