Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/1/323830343a336562303a3a2f33322d3438203d3e20323636363135.roa
File:                     323830343a336562303a3a2f33322d3438203d3e20323636363135.roa (raw, json)
Hash identifier:          chj96Tlwk7/OcIzIkrR2ozCr2hO/AkbhK8+cQFCR23Y=
Subject key identifier:   28:BA:D5:D2:14:C5:9C:38:A6:1E:91:DE:47:11:B4:7C:A4:38:76:C5
Certificate issuer:       /CN=72F69467673B0BB3A13EC651F1D0BF66BAE31FD8
Certificate serial:       031D9788DEC1BA0EBA94E371CA9E4DCECEE7D123
Authority key identifier: 72:F6:94:67:67:3B:0B:B3:A1:3E:C6:51:F1:D0:BF:66:BA:E3:1F:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/1/323830343a336562303a3a2f33322d3438203d3e20323636363135.roa
Signing time:             Thu 04 Apr 2024 09:06:57 +0000
ROA not before:           Thu 04 Apr 2024 09:01:57 +0000
ROA not after:            Thu 03 Apr 2025 09:06:57 +0000
asID:                     266615
IP address blocks:        2804:3eb0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/1/72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.crl
                          rsync://rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/1/72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 00:30:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:1d:97:88:de:c1:ba:0e:ba:94:e3:71:ca:9e:4d:ce:ce:e7:d1:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72F69467673B0BB3A13EC651F1D0BF66BAE31FD8
        Validity
            Not Before: Apr  4 09:01:57 2024 GMT
            Not After : Apr  3 09:06:57 2025 GMT
        Subject: CN=28BAD5D214C59C38A61E91DE4711B47CA43876C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a1:3f:33:59:fe:42:71:54:c3:12:18:00:97:
                    3e:4a:6a:a2:f3:07:e3:b1:d7:96:d8:a4:88:78:21:
                    2a:36:74:96:e0:64:0f:f8:c4:c0:6b:b1:ed:71:c1:
                    c6:27:21:9d:6e:6b:93:ec:4b:f1:0a:73:65:bc:91:
                    76:2e:af:70:bf:dd:bc:82:cd:a6:e3:3b:e4:3d:55:
                    52:b2:6a:e1:fc:83:4b:83:97:81:22:12:3b:63:d3:
                    d7:f5:ee:18:1a:61:9f:b1:6a:80:a6:af:7f:64:22:
                    d4:a6:a2:c8:a5:bb:c0:b5:b1:c4:5a:e6:3b:0f:1b:
                    60:35:37:33:b4:07:be:40:3d:1f:f9:4a:cd:62:91:
                    04:fc:18:b1:b0:27:6a:86:36:5e:22:96:a5:6a:17:
                    64:83:ba:b9:6d:5e:a3:19:67:41:0a:de:bb:51:b9:
                    96:c2:76:5b:ba:9a:94:5e:d8:73:7f:2a:6d:12:08:
                    7a:38:49:68:f8:42:a3:29:cf:ff:35:7d:9e:77:1c:
                    74:fa:33:41:57:b7:8b:0b:09:99:cc:61:e0:ad:e1:
                    ec:b0:a8:d7:1c:72:49:24:9b:b4:21:81:e8:d9:3e:
                    c3:a2:f0:8a:8f:9f:30:74:f2:93:fd:e8:d8:a0:c1:
                    80:be:65:1e:d5:eb:58:1a:8c:62:92:cc:83:c0:20:
                    88:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:BA:D5:D2:14:C5:9C:38:A6:1E:91:DE:47:11:B4:7C:A4:38:76:C5
            X509v3 Authority Key Identifier:
                keyid:72:F6:94:67:67:3B:0B:B3:A1:3E:C6:51:F1:D0:BF:66:BA:E3:1F:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/1/72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/1/323830343a336562303a3a2f33322d3438203d3e20323636363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3eb0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:f5:73:df:61:f1:a9:1d:94:d8:d1:4f:ea:43:af:a2:c5:c3:
         40:6b:88:da:36:5f:80:5c:bf:da:c0:2b:1d:f9:ca:2c:ee:a3:
         79:8e:39:81:c2:12:2d:0d:5e:95:0f:b3:6c:84:cf:c4:98:ae:
         08:44:74:30:98:28:8f:cb:da:85:38:24:ca:6c:0c:6f:cb:e7:
         d2:4f:34:71:4d:9c:1e:44:ea:59:33:3f:b2:b9:4e:e4:1a:ac:
         72:4f:4f:18:b3:28:73:5b:bb:9d:37:62:02:bc:44:bf:c1:a0:
         85:e5:19:81:de:b8:03:a6:91:db:a4:9a:ad:95:af:54:be:4e:
         4e:3a:7f:6d:fb:48:07:cf:86:44:42:c0:14:5a:70:fe:ab:3f:
         51:d7:c2:83:4d:17:65:b2:f8:fe:ce:0a:8d:e7:40:88:49:7c:
         f4:c6:8b:86:69:e2:e2:49:60:a1:f4:7c:0a:7d:26:6e:ae:7e:
         8c:b8:8c:b3:e0:ab:4c:a7:c3:f2:13:ed:6c:22:06:ff:c9:f5:
         d4:cc:b5:a6:b9:24:f0:de:3a:e8:7a:b9:ee:b5:e6:3b:06:ae:
         bc:26:95:f9:72:0b:3a:e4:fa:c5:d0:41:ce:d1:df:0e:73:cb:
         c8:cd:a2:d9:11:a7:28:e7:92:11:4e:db:2d:cf:d6:e7:94:22:
         7c:37:8c:a7
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUAx2XiN7Bug66lONxyp5Nzs7n0SMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzJGNjk0Njc2NzNCMEJCM0ExM0VDNjUxRjFEMEJGNjZC
QUUzMUZEODAeFw0yNDA0MDQwOTAxNTdaFw0yNTA0MDMwOTA2NTdaMDMxMTAvBgNV
BAMTKDI4QkFENUQyMTRDNTlDMzhBNjFFOTFERTQ3MTFCNDdDQTQzODc2QzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6oT8zWf5CcVTDEhgAlz5KaqLz
B+Ox15bYpIh4ISo2dJbgZA/4xMBrse1xwcYnIZ1ua5PsS/EKc2W8kXYur3C/3byC
zabjO+Q9VVKyauH8g0uDl4EiEjtj09f17hgaYZ+xaoCmr39kItSmosilu8C1scRa
5jsPG2A1NzO0B75APR/5Ss1ikQT8GLGwJ2qGNl4ilqVqF2SDurltXqMZZ0EK3rtR
uZbCdlu6mpRe2HN/Km0SCHo4SWj4QqMpz/81fZ53HHT6M0FXt4sLCZnMYeCt4eyw
qNccckkkm7QhgejZPsOi8IqPnzB08pP96NigwYC+ZR7V61gajGKSzIPAIIjXAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUKLrV0hTFnDimHpHeRxG0fKQ4dsUwHwYDVR0j
BBgwFoAUcvaUZ2c7C7OhPsZR8dC/ZrrjH9gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWdrRFZWak1RaGRqa2NzeUNDOVVaMllDNGdNdmhYa3VoZ294ZkJmVlE0
cXgvMS83MkY2OTQ2NzY3M0IwQkIzQTEzRUM2NTFGMUQwQkY2NkJBRTMxRkQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcyRjY5NDY3NjczQjBCQjNB
MTNFQzY1MUYxRDBCRjY2QkFFMzFGRDguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzlna0RWVmpNUWhkamtjc3lDQzlVWjJZQzRnTXZoWGt1aGdveGZCZlZRNHF4LzEv
MzIzODMwMzQzYTMzNjU2MjMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM2
MzYzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ+sDANBgkqhkiG9w0BAQsFAAOCAQEAjfVz32Hx
qR2U2NFP6kOvosXDQGuI2jZfgFy/2sArHfnKLO6jeY45gcISLQ1elQ+zbITPxJiu
CER0MJgoj8vahTgkymwMb8vn0k80cU2cHkTqWTM/srlO5Bqsck9PGLMoc1u7nTdi
ArxEv8GgheUZgd64A6aR26SarZWvVL5OTjp/bftIB8+GRELAFFpw/qs/UdfCg00X
ZbL4/s4KjedAiEl89MaLhmni4klgofR8Cn0mbq5+jLiMs+CrTKfD8hPtbCIG/8n1
1My1prkk8N466Hq57rXmOwauvCaV+XILOuT6xdBBztHfDnPLyM2i2RGnKOeSEU7b
Lc/W55QifDeMpw==
-----END CERTIFICATE-----
Generated at Fri Sep 27 23:38:36 2024 by rpki-client on console-ams.rpki-client.org