Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a393730303a3a2f34302d3430203d3e20323733333039.roa
File:                     323830343a386337633a393730303a3a2f34302d3430203d3e20323733333039.roa (raw, json)
Hash identifier:          t+0v1N3Gbvnv9VwAqY+5T9y8fyP8UJbl3Z3hq9u3pl4=
Subject key identifier:   B4:32:42:BE:54:A6:01:78:81:AF:A7:99:F5:3B:AC:39:B1:DD:DE:9E
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       77C9A66746B0CE76A4AB51F396E8171927E5BFB2
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a393730303a3a2f34302d3430203d3e20323733333039.roa
Signing time:             Wed 08 May 2024 16:22:11 +0000
ROA not before:           Wed 08 May 2024 16:17:11 +0000
ROA not after:            Wed 07 May 2025 16:22:11 +0000
asID:                     273309
IP address blocks:        2804:8c7c:9700::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl
                          rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:c9:a6:67:46:b0:ce:76:a4:ab:51:f3:96:e8:17:19:27:e5:bf:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: May  8 16:17:11 2024 GMT
            Not After : May  7 16:22:11 2025 GMT
        Subject: CN=B43242BE54A6017881AFA799F53BAC39B1DDDE9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d4:19:20:3e:03:77:62:4a:6d:d3:f9:da:49:
                    93:41:6f:5a:32:87:4c:6e:15:77:d5:35:b6:cb:d6:
                    38:39:72:42:0f:d8:6d:c5:c4:de:49:6d:a6:c8:68:
                    36:9a:b9:df:4e:76:6c:4d:cc:6f:0e:23:56:48:c6:
                    a4:36:ec:55:3f:0b:d2:c8:5a:ae:d9:f8:ee:fe:b5:
                    ea:71:80:75:5c:7a:f9:d5:d6:8e:2d:f8:2e:35:69:
                    32:8e:27:15:df:0b:bc:77:2b:15:2e:d8:0e:a2:76:
                    66:b1:86:2f:1c:81:48:ce:ef:6c:39:66:d4:67:8e:
                    84:06:83:8a:d0:1a:37:8b:10:d1:eb:2b:93:96:eb:
                    68:e1:b5:d5:0f:f3:a7:9f:d5:1e:99:b3:b6:7a:19:
                    cf:94:0e:2d:9b:3d:6f:75:70:3b:01:27:00:42:d8:
                    63:94:05:f1:03:d0:4c:c3:f2:2b:4e:46:eb:eb:1b:
                    0f:c2:d6:3d:e2:92:d6:80:ed:89:8e:b6:f2:b9:a1:
                    77:26:6a:69:24:b5:aa:d5:84:c0:58:ec:15:f2:2a:
                    f4:3f:a7:85:75:e2:8d:b3:b3:ac:0d:a8:92:cd:46:
                    1c:fc:b9:1c:de:88:48:65:bf:b3:5f:02:08:8a:51:
                    76:63:d6:36:98:a9:e3:a3:93:ea:1f:5e:68:01:03:
                    1f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:32:42:BE:54:A6:01:78:81:AF:A7:99:F5:3B:AC:39:B1:DD:DE:9E
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a393730303a3a2f34302d3430203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c7c:9700::/40

    Signature Algorithm: sha256WithRSAEncryption
         6f:e3:71:4e:c5:0e:3a:07:0c:6b:c9:af:9f:d2:91:e3:23:dd:
         52:4b:68:7a:3a:b2:c2:e2:f6:68:be:84:90:82:5f:ac:94:f5:
         a3:a4:38:cc:10:31:91:f9:56:b7:63:bd:c1:f6:bd:b6:88:cd:
         06:97:2f:2a:cc:20:78:73:a7:27:36:18:1d:22:d9:21:3a:ae:
         a4:f7:7a:36:ee:f3:d9:99:56:b9:7e:13:a5:b2:c3:f3:c1:d3:
         b0:de:d4:c3:fe:8e:47:c2:e5:7b:bf:ec:82:27:31:72:e4:af:
         8f:60:4b:9d:76:c1:d3:93:f5:cb:07:a8:9e:d1:d7:ab:5a:a3:
         dc:ad:9e:fd:8d:5c:0f:95:32:d3:df:14:95:56:43:dd:2d:b4:
         9f:b5:6b:69:77:77:47:21:fe:15:4a:3b:2a:99:a8:e6:e4:6f:
         82:77:12:43:ae:dd:14:f3:80:86:7f:a6:e9:66:3a:77:ea:91:
         a6:51:61:87:7d:c9:a2:10:77:32:b9:55:21:0b:07:89:5f:f5:
         a8:c9:09:10:8c:14:a7:4f:63:4c:c0:57:80:32:45:03:1e:65:
         de:fc:8f:cc:ea:a1:aa:e6:e7:d7:b7:b9:f2:54:77:21:ba:60:
         e9:9f:35:cf:c7:6a:ce:32:02:94:d0:06:35:83:d7:e9:b3:e4:
         f4:82:d0:06
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUd8mmZ0awznakq1HzlugXGSflv7IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFDNDBBNTRBRUE4ODYyQzIzRTU4MzhCQTI4RTJFQzYz
MTdEMTExNjAeFw0yNDA1MDgxNjE3MTFaFw0yNTA1MDcxNjIyMTFaMDMxMTAvBgNV
BAMTKEI0MzI0MkJFNTRBNjAxNzg4MUFGQTc5OUY1M0JBQzM5QjFERERFOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ1BkgPgN3Ykpt0/naSZNBb1oy
h0xuFXfVNbbL1jg5ckIP2G3FxN5JbabIaDaaud9OdmxNzG8OI1ZIxqQ27FU/C9LI
Wq7Z+O7+tepxgHVcevnV1o4t+C41aTKOJxXfC7x3KxUu2A6idmaxhi8cgUjO72w5
ZtRnjoQGg4rQGjeLENHrK5OW62jhtdUP86ef1R6Zs7Z6Gc+UDi2bPW91cDsBJwBC
2GOUBfED0EzD8itORuvrGw/C1j3iktaA7YmOtvK5oXcmamkktarVhMBY7BXyKvQ/
p4V14o2zs6wNqJLNRhz8uRzeiEhlv7NfAgiKUXZj1jaYqeOjk+ofXmgBAx+/AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUtDJCvlSmAXiBr6eZ9TusObHd3p4wHwYDVR0j
BBgwFoAUEcQKVK6ohiwj5YOLoo4uxjF9ERYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFNpalBXWUY1dWNBRGg2NWl2TnNZOGV5a2VVWTdQdnQzeEZWYzFkQ0xa
R0MvMC8xMUM0MEE1NEFFQTg4NjJDMjNFNTgzOEJBMjhFMkVDNjMxN0QxMTE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzExQzQwQTU0QUVBODg2MkMy
M0U1ODM4QkEyOEUyRUM2MzE3RDExMTYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RTaWpQV1lGNXVjQURoNjVpdk5zWThleWtlVVk3UHZ0M3hGVmMxZENMWkdDLzAv
MzIzODMwMzQzYTM4NjMzNzYzM2EzOTM3MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzczMzMzMzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEjHyXMA0GCSqGSIb3DQEBCwUA
A4IBAQBv43FOxQ46Bwxrya+f0pHjI91SS2h6OrLC4vZovoSQgl+slPWjpDjMEDGR
+Va3Y73B9r22iM0Gly8qzCB4c6cnNhgdItkhOq6k93o27vPZmVa5fhOlssPzwdOw
3tTD/o5HwuV7v+yCJzFy5K+PYEuddsHTk/XLB6ie0derWqPcrZ79jVwPlTLT3xSV
VkPdLbSftWtpd3dHIf4VSjsqmajm5G+CdxJDrt0U84CGf6bpZjp36pGmUWGHfcmi
EHcyuVUhCweJX/WoyQkQjBSnT2NMwFeAMkUDHmXe/I/M6qGq5ufXt7nyVHchumDp
nzXPx2rOMgKU0AY1g9fps+T0gtAG
-----END CERTIFICATE-----
Generated at Sat Nov 23 08:42:04 2024 by rpki-client on console-fra.rpki-client.org