Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/323830343a336262303a633030303a3a2f33342d3334203d3e20323636313635.roa
File:                     323830343a336262303a633030303a3a2f33342d3334203d3e20323636313635.roa (raw, json)
Hash identifier:          Q1NrmnHv2sXVudKP6WtPZRlKnTiFcLl0/wU7uusu/GU=
Subject key identifier:   80:64:63:BD:06:4A:47:BB:5E:59:03:04:EC:11:12:DC:B9:B6:C1:EE
Certificate issuer:       /CN=103266039FE0E42654222D6D1D326D5613C32C2E
Certificate serial:       56CA61DB289EE3EEC29A1530256500E1C081BC1B
Authority key identifier: 10:32:66:03:9F:E0:E4:26:54:22:2D:6D:1D:32:6D:56:13:C3:2C:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/103266039FE0E42654222D6D1D326D5613C32C2E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/323830343a336262303a633030303a3a2f33342d3334203d3e20323636313635.roa
Signing time:             Wed 31 Jul 2024 02:02:14 +0000
ROA not before:           Wed 31 Jul 2024 01:57:14 +0000
ROA not after:            Wed 30 Jul 2025 02:02:14 +0000
asID:                     266165
IP address blocks:        2804:3bb0:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/103266039FE0E42654222D6D1D326D5613C32C2E.crl
                          rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/103266039FE0E42654222D6D1D326D5613C32C2E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/103266039FE0E42654222D6D1D326D5613C32C2E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:ca:61:db:28:9e:e3:ee:c2:9a:15:30:25:65:00:e1:c0:81:bc:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=103266039FE0E42654222D6D1D326D5613C32C2E
        Validity
            Not Before: Jul 31 01:57:14 2024 GMT
            Not After : Jul 30 02:02:14 2025 GMT
        Subject: CN=806463BD064A47BB5E590304EC1112DCB9B6C1EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:05:b5:6b:ce:01:f5:ac:08:b0:10:30:7e:af:
                    19:28:f0:dc:b6:e2:46:eb:90:30:98:e2:25:84:5b:
                    4e:70:33:db:7b:d1:76:6a:b8:12:5f:2f:f8:a0:d2:
                    ac:bd:c5:ee:7c:81:a3:58:96:01:89:f7:a0:ad:41:
                    3b:df:57:48:85:dd:3b:fa:ba:04:ac:71:a5:ea:7b:
                    0e:87:fb:2a:58:87:cd:28:af:1e:c2:31:23:dd:75:
                    e4:e1:f5:d8:cf:ea:09:8e:0c:73:10:98:08:7d:73:
                    e5:f0:42:72:25:32:b1:e7:3b:61:d2:0c:36:45:2f:
                    c0:cc:ec:c5:b2:94:d7:18:25:cd:03:d4:95:28:c3:
                    13:1e:39:c1:37:22:db:15:58:b7:a7:96:fa:e3:12:
                    d9:05:1f:04:fb:c7:9c:57:6c:74:01:80:44:4b:33:
                    6d:16:fd:77:cc:1f:17:bb:d5:99:be:3f:9a:e3:64:
                    e6:1c:c8:98:cf:6e:70:2d:eb:f7:f3:09:50:69:dc:
                    26:91:c7:fe:6d:98:9a:fb:f4:dd:af:ee:6a:75:44:
                    b2:20:1f:a5:2f:cb:99:8b:14:37:fb:53:4e:5d:80:
                    b0:a6:37:1b:86:56:62:03:68:d9:bb:cb:3a:23:73:
                    d3:20:ff:70:5c:28:fb:2b:d6:dc:96:27:a9:56:6e:
                    f7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:64:63:BD:06:4A:47:BB:5E:59:03:04:EC:11:12:DC:B9:B6:C1:EE
            X509v3 Authority Key Identifier:
                keyid:10:32:66:03:9F:E0:E4:26:54:22:2D:6D:1D:32:6D:56:13:C3:2C:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/103266039FE0E42654222D6D1D326D5613C32C2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/103266039FE0E42654222D6D1D326D5613C32C2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/323830343a336262303a633030303a3a2f33342d3334203d3e20323636313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3bb0:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7d:36:d8:88:c7:d7:3e:5a:3c:4e:c3:24:4d:1a:06:c0:77:0b:
         48:61:13:d3:91:fe:f6:aa:29:13:f7:56:78:8d:f9:5d:1f:33:
         d7:55:f8:95:4f:e0:1f:02:cb:5b:e0:f0:9d:29:46:e6:21:05:
         e5:88:1e:d0:2d:e4:cf:56:a0:40:20:e4:b4:ed:37:e9:b3:09:
         5f:83:a9:2b:7a:55:d1:e0:e8:32:52:d4:63:f1:7e:8d:3d:85:
         3e:de:f1:b5:08:a3:a7:79:0e:eb:6a:4a:6c:07:00:d1:c3:29:
         56:17:5f:ea:7c:c8:d1:e8:2a:79:da:de:a8:66:d2:ab:2a:44:
         dd:2c:51:82:15:63:55:9e:eb:0b:e2:04:cb:47:6c:69:af:8c:
         c3:be:09:86:ee:de:91:04:4b:de:09:63:1d:3e:54:0e:0c:8d:
         ff:d6:88:20:cc:d8:99:d9:41:64:df:47:15:58:5b:73:a4:fd:
         1d:1f:9f:b2:22:77:3a:76:45:16:db:e5:c9:ef:d3:07:86:d2:
         2e:af:eb:57:b0:08:c6:ca:0c:31:4e:d5:6c:b2:e8:11:d8:13:
         d8:e8:87:f6:72:45:03:26:a9:15:e0:92:c9:60:38:00:83:2c:
         42:b7:14:eb:f3:bc:ae:08:52:cb:06:b6:8f:30:d3:61:8d:ad:
         93:71:5a:52
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUVsph2yie4+7CmhUwJWUA4cCBvBswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTAzMjY2MDM5RkUwRTQyNjU0MjIyRDZEMUQzMjZENTYx
M0MzMkMyRTAeFw0yNDA3MzEwMTU3MTRaFw0yNTA3MzAwMjAyMTRaMDMxMTAvBgNV
BAMTKDgwNjQ2M0JEMDY0QTQ3QkI1RTU5MDMwNEVDMTExMkRDQjlCNkMxRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClBbVrzgH1rAiwEDB+rxko8Ny2
4kbrkDCY4iWEW05wM9t70XZquBJfL/ig0qy9xe58gaNYlgGJ96CtQTvfV0iF3Tv6
ugSscaXqew6H+ypYh80orx7CMSPddeTh9djP6gmODHMQmAh9c+XwQnIlMrHnO2HS
DDZFL8DM7MWylNcYJc0D1JUowxMeOcE3ItsVWLenlvrjEtkFHwT7x5xXbHQBgERL
M20W/XfMHxe71Zm+P5rjZOYcyJjPbnAt6/fzCVBp3CaRx/5tmJr79N2v7mp1RLIg
H6Uvy5mLFDf7U05dgLCmNxuGVmIDaNm7yzojc9Mg/3BcKPsr1tyWJ6lWbveTAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUgGRjvQZKR7teWQME7BES3Lm2we4wHwYDVR0j
BBgwFoAUEDJmA5/g5CZUIi1tHTJtVhPDLC4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjRoc1VnUkg4bW9jWERBNUJ3U0gyVFRwRHZzQmR3cVNUNDNCRUJKZ0Vx
ajIvMC8xMDMyNjYwMzlGRTBFNDI2NTQyMjJENkQxRDMyNkQ1NjEzQzMyQzJFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEwMzI2NjAzOUZFMEU0MjY1
NDIyMkQ2RDFEMzI2RDU2MTNDMzJDMkUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o0aHNVZ1JIOG1vY1hEQTVCd1NIMlRUcER2c0Jkd3FTVDQzQkVCSmdFcWoyLzAv
MzIzODMwMzQzYTMzNjI2MjMwM2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNjMxMzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEO7DAMA0GCSqGSIb3DQEBCwUA
A4IBAQB9NtiIx9c+WjxOwyRNGgbAdwtIYRPTkf72qikT91Z4jfldHzPXVfiVT+Af
Astb4PCdKUbmIQXliB7QLeTPVqBAIOS07Tfpswlfg6krelXR4OgyUtRj8X6NPYU+
3vG1CKOneQ7rakpsBwDRwylWF1/qfMjR6Cp52t6oZtKrKkTdLFGCFWNVnusL4gTL
R2xpr4zDvgmG7t6RBEveCWMdPlQODI3/1oggzNiZ2UFk30cVWFtzpP0dH5+yInc6
dkUW2+XJ79MHhtIur+tXsAjGygwxTtVssugR2BPY6If2ckUDJqkV4JLJYDgAgyxC
txTr87yuCFLLBraPMNNhja2TcVpS
-----END CERTIFICATE-----
Generated at Sat Nov 23 14:45:02 2024 by rpki-client on console-ams.rpki-client.org