Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DV9LSaaW6h116m925RuEXAqko9mUrLs4gP5p79JaVhE8/1/323830343a333135383a3a2f33322d3332203d3e20323635303038.roa
File:                     323830343a333135383a3a2f33322d3332203d3e20323635303038.roa (raw, json)
Hash identifier:          VufdkiggSqgqXon/XTVukYGYNRjhVOzlnQy5aGvQT7g=
Subject key identifier:   C6:AA:DE:E4:4A:4C:02:07:12:B2:1D:11:E2:CA:0B:94:8E:08:7F:9B
Certificate issuer:       /CN=0911F3F0D22D3DF877B191C4EAD82C266C7FABED
Certificate serial:       189DFC841E7AC480B23A27F57CA36E24A598F5AD
Authority key identifier: 09:11:F3:F0:D2:2D:3D:F8:77:B1:91:C4:EA:D8:2C:26:6C:7F:AB:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0911F3F0D22D3DF877B191C4EAD82C266C7FABED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DV9LSaaW6h116m925RuEXAqko9mUrLs4gP5p79JaVhE8/1/323830343a333135383a3a2f33322d3332203d3e20323635303038.roa
Signing time:             Thu 04 Apr 2024 10:02:24 +0000
ROA not before:           Thu 04 Apr 2024 09:57:24 +0000
ROA not after:            Thu 03 Apr 2025 10:02:24 +0000
asID:                     265008
IP address blocks:        2804:3158::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DV9LSaaW6h116m925RuEXAqko9mUrLs4gP5p79JaVhE8/1/0911F3F0D22D3DF877B191C4EAD82C266C7FABED.crl
                          rsync://rpki-repo.registro.br/repo/DV9LSaaW6h116m925RuEXAqko9mUrLs4gP5p79JaVhE8/1/0911F3F0D22D3DF877B191C4EAD82C266C7FABED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0911F3F0D22D3DF877B191C4EAD82C266C7FABED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:42:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:9d:fc:84:1e:7a:c4:80:b2:3a:27:f5:7c:a3:6e:24:a5:98:f5:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0911F3F0D22D3DF877B191C4EAD82C266C7FABED
        Validity
            Not Before: Apr  4 09:57:24 2024 GMT
            Not After : Apr  3 10:02:24 2025 GMT
        Subject: CN=C6AADEE44A4C020712B21D11E2CA0B948E087F9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:91:29:16:10:50:f3:4a:d6:8c:b3:f2:b1:f0:
                    c4:ba:ce:ff:0c:f1:e1:65:a6:f3:99:60:32:f5:90:
                    ce:75:2a:e5:b2:6e:2c:30:c9:59:92:8c:8d:4d:68:
                    fd:d0:f6:49:fc:d3:f1:8c:34:b0:6b:76:4d:d8:68:
                    dc:cc:5a:98:b5:e9:73:3a:d5:c9:81:5a:09:31:fa:
                    83:e5:2e:8e:2d:d3:0b:84:73:38:e7:3a:af:7a:00:
                    2d:0d:e8:b2:25:30:39:89:81:e1:a5:d0:c9:df:06:
                    3b:40:ad:2a:6d:89:9b:1c:ec:11:42:26:e9:ce:69:
                    c2:bc:3f:90:76:66:19:0d:cd:75:60:2a:1d:5a:9f:
                    6a:cd:56:4a:48:b3:ed:77:c9:c7:f0:75:df:a5:f5:
                    33:b6:8a:15:80:51:7c:ce:48:24:cf:d3:2c:a5:37:
                    15:da:cb:fa:f5:61:3e:e6:ad:3f:fa:9d:70:54:ef:
                    37:ef:dd:c4:4e:f1:da:c8:0f:43:30:74:ee:a2:f1:
                    ff:4e:41:9e:09:8b:0c:88:38:2f:5f:c1:a9:7e:12:
                    8a:bc:77:c3:8b:c7:2c:7e:01:c7:21:d4:73:7f:be:
                    a0:53:fa:75:3a:97:3b:6a:fe:68:77:80:c2:fd:72:
                    d6:74:e2:e2:09:63:cf:4e:06:e9:97:1d:5d:af:ca:
                    bb:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:AA:DE:E4:4A:4C:02:07:12:B2:1D:11:E2:CA:0B:94:8E:08:7F:9B
            X509v3 Authority Key Identifier:
                keyid:09:11:F3:F0:D2:2D:3D:F8:77:B1:91:C4:EA:D8:2C:26:6C:7F:AB:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DV9LSaaW6h116m925RuEXAqko9mUrLs4gP5p79JaVhE8/1/0911F3F0D22D3DF877B191C4EAD82C266C7FABED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0911F3F0D22D3DF877B191C4EAD82C266C7FABED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DV9LSaaW6h116m925RuEXAqko9mUrLs4gP5p79JaVhE8/1/323830343a333135383a3a2f33322d3332203d3e20323635303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3158::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:78:ac:c3:da:39:3d:67:4b:fc:05:6b:bf:3d:f6:18:08:82:
         53:e7:77:1e:fe:43:fb:61:a2:b3:a6:ef:9c:d7:3a:9f:40:7e:
         cb:e2:98:dc:f6:9c:0e:f1:a6:26:48:7a:b2:3d:eb:b4:3e:bb:
         17:c9:21:b0:63:67:99:45:10:1e:53:de:81:5d:85:65:58:c7:
         ac:8f:d6:68:98:65:5d:82:78:02:9b:b2:ef:7b:03:b3:2f:77:
         d0:0f:07:6d:65:4c:f2:2a:2d:bf:d3:5b:65:63:d0:c9:b7:3a:
         65:90:bc:41:71:34:43:33:1b:fd:70:13:a7:53:42:54:a6:aa:
         8e:1d:69:9e:14:62:4a:06:2c:56:a7:f3:57:37:e9:f5:2c:8b:
         fe:d4:be:1b:3b:88:38:f7:9c:a2:61:b0:eb:47:6d:4b:f9:16:
         4e:81:86:8e:19:c1:36:c3:f5:49:03:80:43:51:fe:d0:8b:74:
         d8:c0:96:f3:a0:0b:81:19:30:7c:ee:b7:40:c1:41:09:d2:ed:
         2d:ce:a2:15:7e:6a:ca:13:1f:e1:a8:dc:ec:ac:f3:ee:bd:59:
         7a:fa:1c:97:97:90:cb:2e:b0:61:d3:3c:99:cd:bc:1f:4a:49:
         25:e7:50:f6:a3:27:be:12:4a:20:7c:1b:24:5d:db:5e:e4:e0:
         54:34:db:e7
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUGJ38hB56xICyOif1fKNuJKWY9a0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDkxMUYzRjBEMjJEM0RGODc3QjE5MUM0RUFEODJDMjY2
QzdGQUJFRDAeFw0yNDA0MDQwOTU3MjRaFw0yNTA0MDMxMDAyMjRaMDMxMTAvBgNV
BAMTKEM2QUFERUU0NEE0QzAyMDcxMkIyMUQxMUUyQ0EwQjk0OEUwODdGOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwkSkWEFDzStaMs/Kx8MS6zv8M
8eFlpvOZYDL1kM51KuWybiwwyVmSjI1NaP3Q9kn80/GMNLBrdk3YaNzMWpi16XM6
1cmBWgkx+oPlLo4t0wuEczjnOq96AC0N6LIlMDmJgeGl0MnfBjtArSptiZsc7BFC
JunOacK8P5B2ZhkNzXVgKh1an2rNVkpIs+13ycfwdd+l9TO2ihWAUXzOSCTP0yyl
NxXay/r1YT7mrT/6nXBU7zfv3cRO8drID0MwdO6i8f9OQZ4JiwyIOC9fwal+Eoq8
d8OLxyx+Acch1HN/vqBT+nU6lztq/mh3gML9ctZ04uIJY89OBumXHV2vyrsTAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUxqre5EpMAgcSsh0R4soLlI4If5swHwYDVR0j
BBgwFoAUCRHz8NItPfh3sZHE6tgsJmx/q+0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFY5TFNhYVc2aDExNm05MjVSdUVYQXFrbzltVXJMczRnUDVwNzlKYVZo
RTgvMS8wOTExRjNGMEQyMkQzREY4NzdCMTkxQzRFQUQ4MkMyNjZDN0ZBQkVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA5MTFGM0YwRDIyRDNERjg3
N0IxOTFDNEVBRDgyQzI2NkM3RkFCRUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RWOUxTYWFXNmgxMTZtOTI1UnVFWEFxa285bVVyTHM0Z1A1cDc5SmFWaEU4LzEv
MzIzODMwMzQzYTMzMzEzNTM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM1
MzAzMDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQxWDANBgkqhkiG9w0BAQsFAAOCAQEAVHisw9o5
PWdL/AVrvz32GAiCU+d3Hv5D+2Gis6bvnNc6n0B+y+KY3PacDvGmJkh6sj3rtD67
F8khsGNnmUUQHlPegV2FZVjHrI/WaJhlXYJ4Apuy73sDsy930A8HbWVM8iotv9Nb
ZWPQybc6ZZC8QXE0QzMb/XATp1NCVKaqjh1pnhRiSgYsVqfzVzfp9SyL/tS+GzuI
OPecomGw60dtS/kWToGGjhnBNsP1SQOAQ1H+0It02MCW86ALgRkwfO63QMFBCdLt
Lc6iFX5qyhMf4ajc7Kzz7r1Zevocl5eQyy6wYdM8mc28H0pJJedQ9qMnvhJKIHwb
JF3bXuTgVDTb5w==
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:06 2024 by rpki-client on console-ams.rpki-client.org