Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/323830343a316361303a3230303a3a2f34302d3430203d3e203631363636.roa
File:                     323830343a316361303a3230303a3a2f34302d3430203d3e203631363636.roa (raw, json)
Hash identifier:          DQhU9pJO6lyxw/eR3WSzEFecM68sCzuSk+z77RPJbBA=
Subject key identifier:   97:97:18:6C:04:73:80:2B:37:58:C5:0B:91:AF:C0:5E:19:14:4D:86
Certificate issuer:       /CN=DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D
Certificate serial:       3EFE42C6EDF2C200B55BBEE4A841A0B0EFF9A6DA
Authority key identifier: DC:E5:95:51:AB:4F:B4:A6:7B:6C:AF:5A:C4:75:5F:89:D4:5A:FB:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/323830343a316361303a3230303a3a2f34302d3430203d3e203631363636.roa
Signing time:             Wed 03 Apr 2024 20:24:07 +0000
ROA not before:           Wed 03 Apr 2024 20:19:07 +0000
ROA not after:            Wed 02 Apr 2025 20:24:07 +0000
asID:                     61666
IP address blocks:        2804:1ca0:200::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.crl
                          rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:fe:42:c6:ed:f2:c2:00:b5:5b:be:e4:a8:41:a0:b0:ef:f9:a6:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D
        Validity
            Not Before: Apr  3 20:19:07 2024 GMT
            Not After : Apr  2 20:24:07 2025 GMT
        Subject: CN=9797186C0473802B3758C50B91AFC05E19144D86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a1:6f:c3:45:9b:d8:68:70:86:26:4a:e0:ca:
                    12:7e:f6:45:73:22:7a:6d:2b:78:af:a4:71:57:03:
                    c5:b8:bf:6a:d9:66:ba:7f:5d:51:c7:a8:0f:ac:f6:
                    49:df:13:ec:2e:31:9b:36:35:6c:f8:83:1a:f3:73:
                    69:7e:d9:0b:1d:d2:43:c3:ff:15:6c:64:ef:47:f1:
                    a9:5a:c3:c1:fa:56:95:a8:09:bd:83:7f:d0:d2:0c:
                    45:0b:e2:de:ee:46:35:42:29:32:af:d6:a9:10:7f:
                    b3:4d:da:a2:f4:dd:61:3c:ce:f4:db:e2:f5:46:62:
                    51:e8:bb:24:2b:dd:c5:6f:d4:98:ea:5c:2e:8c:5f:
                    72:3a:0d:ce:bb:f7:dc:c1:f5:83:4f:22:0b:88:7e:
                    ae:c7:1b:2d:15:01:3d:fa:5d:ec:89:9d:57:60:58:
                    8a:b7:08:17:7a:46:1f:6b:a4:0e:96:c4:0b:25:2b:
                    30:0a:2d:dc:5e:70:6f:b8:45:fc:5c:3a:51:86:7d:
                    53:a6:45:12:48:f4:43:e5:fc:62:9e:2d:91:a1:4f:
                    e2:84:27:cb:0a:0f:b2:47:99:8b:94:50:60:10:eb:
                    0b:b9:4e:6e:f3:1b:8e:0c:da:f6:c0:3c:31:1b:20:
                    52:89:bf:4f:cb:0e:9d:78:32:9f:f4:e4:7b:54:b6:
                    0b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:97:18:6C:04:73:80:2B:37:58:C5:0B:91:AF:C0:5E:19:14:4D:86
            X509v3 Authority Key Identifier:
                keyid:DC:E5:95:51:AB:4F:B4:A6:7B:6C:AF:5A:C4:75:5F:89:D4:5A:FB:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/323830343a316361303a3230303a3a2f34302d3430203d3e203631363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1ca0:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         b5:fe:11:f3:cd:59:d3:9c:0e:35:7a:ac:f5:60:91:f0:f5:5d:
         8a:c4:66:ce:90:f7:5e:d2:5e:c6:67:22:8e:e7:83:a7:6b:6e:
         6d:c3:3f:81:31:95:dc:c9:19:e3:51:0f:af:fd:85:16:b2:1a:
         3f:38:cf:30:70:26:d7:bd:18:9c:20:d7:20:e7:24:0e:43:58:
         7b:94:10:bd:8f:a6:14:50:56:93:ef:ab:ff:14:42:a2:c8:41:
         6a:d5:3e:7e:01:fa:c3:76:07:74:93:43:48:b3:03:3f:51:8d:
         93:24:d0:e9:02:d7:63:67:91:33:7c:c9:4f:c8:79:d1:ba:07:
         b8:36:62:e0:97:d7:e6:01:48:f5:1a:82:3a:82:c5:40:9f:00:
         44:c7:19:d8:28:45:ad:87:13:38:06:5f:0c:2e:f6:83:83:0c:
         b7:39:89:14:56:ed:41:de:fb:83:08:82:4f:5c:3c:93:f8:42:
         86:53:b9:ba:7b:b5:c6:f7:27:cf:f3:94:55:d2:dd:01:c2:ab:
         da:95:30:75:3e:83:70:f7:44:46:ae:87:7a:b7:32:96:d8:8a:
         ba:53:4f:08:98:8e:4f:3c:44:e1:e8:63:01:a6:fb:58:7b:fd:
         60:3f:1f:2d:f9:fe:5e:1d:d5:77:b6:59:54:57:b8:3f:77:bf:
         d2:ab:0a:d5
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgIUPv5Cxu3ywgC1W77kqEGgsO/5ptowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENFNTk1NTFBQjRGQjRBNjdCNkNBRjVBQzQ3NTVGODlE
NDVBRkIyRDAeFw0yNDA0MDMyMDE5MDdaFw0yNTA0MDIyMDI0MDdaMDMxMTAvBgNV
BAMTKDk3OTcxODZDMDQ3MzgwMkIzNzU4QzUwQjkxQUZDMDVFMTkxNDREODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNoW/DRZvYaHCGJkrgyhJ+9kVz
InptK3ivpHFXA8W4v2rZZrp/XVHHqA+s9knfE+wuMZs2NWz4gxrzc2l+2Qsd0kPD
/xVsZO9H8alaw8H6VpWoCb2Df9DSDEUL4t7uRjVCKTKv1qkQf7NN2qL03WE8zvTb
4vVGYlHouyQr3cVv1JjqXC6MX3I6Dc6799zB9YNPIguIfq7HGy0VAT36XeyJnVdg
WIq3CBd6Rh9rpA6WxAslKzAKLdxecG+4RfxcOlGGfVOmRRJI9EPl/GKeLZGhT+KE
J8sKD7JHmYuUUGAQ6wu5Tm7zG44M2vbAPDEbIFKJv0/LDp14Mp/05HtUtgvbAgMB
AAGjggJXMIICUzAdBgNVHQ4EFgQUl5cYbARzgCs3WMULka/AXhkUTYYwHwYDVR0j
BBgwFoAU3OWVUatPtKZ7bK9axHVfidRa+y0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVByamp6b0FVbmV5NENpdlk1eGYzZmY4b1k3WGV1Sms1VWFMYnNiOVRp
R20vMS9EQ0U1OTU1MUFCNEZCNEE2N0I2Q0FGNUFDNDc1NUY4OUQ0NUFGQjJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDRTU5NTUxQUI0RkI0QTY3
QjZDQUY1QUM0NzU1Rjg5RDQ1QUZCMkQuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVQcmpqem9BVW5leTRDaXZZNXhmM2ZmOG9ZN1hldUprNVVhTGJzYjlUaUdtLzEv
MzIzODMwMzQzYTMxNjM2MTMwM2EzMjMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl
MjAzNjMxMzYzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG
AQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKAQcoAIwDQYJKoZIhvcNAQELBQADggEB
ALX+EfPNWdOcDjV6rPVgkfD1XYrEZs6Q917SXsZnIo7ng6drbm3DP4ExldzJGeNR
D6/9hRayGj84zzBwJte9GJwg1yDnJA5DWHuUEL2PphRQVpPvq/8UQqLIQWrVPn4B
+sN2B3STQ0izAz9RjZMk0OkC12NnkTN8yU/IedG6B7g2YuCX1+YBSPUagjqCxUCf
AETHGdgoRa2HEzgGXwwu9oODDLc5iRRW7UHe+4MIgk9cPJP4QoZTubp7tcb3J8/z
lFXS3QHCq9qVMHU+g3D3REauh3q3MpbYirpTTwiYjk88ROHoYwGm+1h7/WA/Hy35
/l4d1Xe2WVRXuD93v9KrCtU=
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:06 2024 by rpki-client on console-fra.rpki-client.org