Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a353a3a2f34382d3438203d3e20323632363137.roa
File:                     323830343a3930633a353a3a2f34382d3438203d3e20323632363137.roa (raw, json)
Hash identifier:          HrAIpPxATwfxQWwuni9ktwJOEXDBTG+hwcgWvcQPyOA=
Subject key identifier:   88:DF:D2:BF:D4:5B:E0:77:FB:1A:6F:19:B2:73:B0:99:65:D2:E7:69
Certificate issuer:       /CN=00078D2B578982663EFE91FC4B5397C48403E2E4
Certificate serial:       4C7FDDA91B1A45F858C5909918B605B14A7AB7FF
Authority key identifier: 00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a353a3a2f34382d3438203d3e20323632363137.roa
Signing time:             Wed 03 Apr 2024 19:48:20 +0000
ROA not before:           Wed 03 Apr 2024 19:43:20 +0000
ROA not after:            Wed 02 Apr 2025 19:48:20 +0000
asID:                     262617
IP address blocks:        2804:90c:5::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl
                          rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:7f:dd:a9:1b:1a:45:f8:58:c5:90:99:18:b6:05:b1:4a:7a:b7:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00078D2B578982663EFE91FC4B5397C48403E2E4
        Validity
            Not Before: Apr  3 19:43:20 2024 GMT
            Not After : Apr  2 19:48:20 2025 GMT
        Subject: CN=88DFD2BFD45BE077FB1A6F19B273B09965D2E769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fb:e7:a4:6f:de:8d:ef:78:fd:58:09:32:66:
                    f4:c2:69:f8:2e:fe:a3:45:62:12:7d:86:66:98:0c:
                    61:0f:90:c9:0e:73:6a:b3:ac:7c:03:a5:e4:93:58:
                    fa:0a:ee:23:d5:94:42:04:44:c4:8a:cb:80:9d:e8:
                    b4:83:76:f4:43:13:be:ba:b7:47:28:25:ba:ad:60:
                    7b:7e:42:a9:b1:8c:a9:fa:ab:b9:f4:83:3d:d1:9d:
                    f7:64:a8:be:df:f3:6d:1e:6e:49:02:2c:3a:80:ef:
                    90:73:01:22:52:11:1e:75:f2:2a:e5:13:d9:77:e9:
                    35:c7:fc:72:91:bd:28:51:21:75:14:3a:5d:aa:48:
                    95:e9:ba:b6:52:53:78:89:83:ee:fe:a4:11:a2:d3:
                    c6:4c:b0:83:04:b2:db:70:df:ec:79:ff:0f:92:e0:
                    be:6c:42:eb:bb:9a:53:01:62:c5:ec:c7:f9:7c:d9:
                    28:9f:ef:f2:a7:64:c0:62:4d:81:1c:d3:9f:2a:bd:
                    c8:a6:3a:aa:a7:ea:43:c7:9c:77:95:2a:ac:05:71:
                    fd:62:36:f1:77:94:51:91:a2:5a:ab:6b:1a:7a:ba:
                    d3:22:19:6e:0b:f8:e8:96:7c:af:98:69:c5:d8:e3:
                    ff:85:5c:e4:c1:4b:e5:94:fd:d4:7b:49:8e:62:2c:
                    70:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:DF:D2:BF:D4:5B:E0:77:FB:1A:6F:19:B2:73:B0:99:65:D2:E7:69
            X509v3 Authority Key Identifier:
                keyid:00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a353a3a2f34382d3438203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:90c:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:c9:81:27:89:fa:9a:14:8d:07:2d:30:c2:d2:28:eb:d5:f8:
         d6:e7:e8:f3:3f:49:a1:be:4a:2a:3f:2b:3b:bb:1d:4c:f0:13:
         b9:09:7c:1e:ef:96:5c:a0:b1:4b:bd:d9:13:72:05:d8:f7:42:
         04:92:71:18:1b:9b:dd:71:00:44:71:9a:f3:00:eb:61:fa:3c:
         77:c3:44:34:fa:5f:ff:9d:25:4f:c1:75:63:6a:59:d1:62:d2:
         00:a7:1c:f9:4c:d8:f8:13:85:b6:7e:0d:ef:d8:ea:e7:fd:51:
         fa:f2:27:1a:d8:32:18:88:26:bd:82:3a:4c:66:d4:b7:47:2f:
         00:9b:49:fe:40:13:78:d9:1c:3f:1a:c0:42:24:41:2c:6a:dc:
         52:10:58:03:ef:9e:ed:a7:8c:fb:c8:1e:d7:cd:38:a1:14:d6:
         15:c3:e6:29:a2:ad:1c:a8:60:77:08:42:5c:a1:05:8e:18:93:
         3f:6a:5d:0e:f3:62:21:c7:0e:d6:44:75:0e:2e:e6:2b:c6:c2:
         ea:3e:c3:c2:72:06:cc:bf:31:99:9e:45:70:ca:7c:ba:11:cb:
         09:19:7c:57:d6:27:86:f9:25:64:69:6e:a2:86:52:84:e5:ff:
         42:49:9e:2c:de:e2:b5:06:96:50:bb:ee:ce:97:ee:fe:79:f9:
         90:11:5f:60
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgIUTH/dqRsaRfhYxZCZGLYFsUp6t/8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDAwNzhEMkI1Nzg5ODI2NjNFRkU5MUZDNEI1Mzk3QzQ4
NDAzRTJFNDAeFw0yNDA0MDMxOTQzMjBaFw0yNTA0MDIxOTQ4MjBaMDMxMTAvBgNV
BAMTKDg4REZEMkJGRDQ1QkUwNzdGQjFBNkYxOUIyNzNCMDk5NjVEMkU3NjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd++ekb96N73j9WAkyZvTCafgu
/qNFYhJ9hmaYDGEPkMkOc2qzrHwDpeSTWPoK7iPVlEIERMSKy4Cd6LSDdvRDE766
t0coJbqtYHt+QqmxjKn6q7n0gz3RnfdkqL7f820ebkkCLDqA75BzASJSER518irl
E9l36TXH/HKRvShRIXUUOl2qSJXpurZSU3iJg+7+pBGi08ZMsIMEsttw3+x5/w+S
4L5sQuu7mlMBYsXsx/l82Sif7/KnZMBiTYEc058qvcimOqqn6kPHnHeVKqwFcf1i
NvF3lFGRolqraxp6utMiGW4L+OiWfK+YacXY4/+FXOTBS+WU/dR7SY5iLHANAgMB
AAGjggJUMIICUDAdBgNVHQ4EFgQUiN/Sv9Rb4Hf7Gm8ZsnOwmWXS52kwHwYDVR0j
BBgwFoAUAAeNK1eJgmY+/pH8S1OXxIQD4uQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGtRRXQ3OHc0dldEUFpXQkp0WXFKdzZ3NGJTWFA0ekM4S2lnZDFwb2NI
azUvMS8wMDA3OEQyQjU3ODk4MjY2M0VGRTkxRkM0QjUzOTdDNDg0MDNFMkU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAwMDc4RDJCNTc4OTgyNjYz
RUZFOTFGQzRCNTM5N0M0ODQwM0UyRTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RrUUV0Nzh3NHZXRFBaV0JKdFlxSnc2dzRiU1hQNHpDOEtpZ2QxcG9jSGs1LzEv
MzIzODMwMzQzYTM5MzA2MzNhMzUzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM2
MzIzNjMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH
AQcBAf8EEzARMA8EAgACMAkDBwAoBAkMAAUwDQYJKoZIhvcNAQELBQADggEBAJ/J
gSeJ+poUjQctMMLSKOvV+Nbn6PM/SaG+Sio/Kzu7HUzwE7kJfB7vllygsUu92RNy
Bdj3QgSScRgbm91xAERxmvMA62H6PHfDRDT6X/+dJU/BdWNqWdFi0gCnHPlM2PgT
hbZ+De/Y6uf9UfryJxrYMhiIJr2COkxm1LdHLwCbSf5AE3jZHD8awEIkQSxq3FIQ
WAPvnu2njPvIHtfNOKEU1hXD5imirRyoYHcIQlyhBY4Ykz9qXQ7zYiHHDtZEdQ4u
5ivGwuo+w8JyBsy/MZmeRXDKfLoRywkZfFfWJ4b5JWRpbqKGUoTl/0JJnize4rUG
llC77s6X7v55+ZARX2A=
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:19 2024 by rpki-client on console-fra.rpki-client.org