Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a363a3a2f34382d3438203d3e20323632363137.roa
File:                     323830343a3930633a363a3a2f34382d3438203d3e20323632363137.roa (raw, json)
Hash identifier:          /iyKN5+NoupRKwX2uTO+PW0FyXxOuLzbL4jAPp2KeWw=
Subject key identifier:   3D:14:20:9C:D6:AF:81:0D:73:DE:E9:16:AC:8C:5E:C9:3C:88:08:61
Certificate issuer:       /CN=00078D2B578982663EFE91FC4B5397C48403E2E4
Certificate serial:       06B2B172412B493E2FE1110C3F8E3C0BCD7D7BE9
Authority key identifier: 00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a363a3a2f34382d3438203d3e20323632363137.roa
Signing time:             Wed 03 Apr 2024 19:48:25 +0000
ROA not before:           Wed 03 Apr 2024 19:43:25 +0000
ROA not after:            Wed 02 Apr 2025 19:48:25 +0000
asID:                     262617
IP address blocks:        2804:90c:6::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl
                          rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:b2:b1:72:41:2b:49:3e:2f:e1:11:0c:3f:8e:3c:0b:cd:7d:7b:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00078D2B578982663EFE91FC4B5397C48403E2E4
        Validity
            Not Before: Apr  3 19:43:25 2024 GMT
            Not After : Apr  2 19:48:25 2025 GMT
        Subject: CN=3D14209CD6AF810D73DEE916AC8C5EC93C880861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:18:aa:ae:5d:8d:23:4a:78:be:3f:8f:bc:db:
                    bb:e0:30:4f:04:e6:93:4d:b9:d4:39:00:59:7d:b5:
                    d8:d9:d2:44:22:50:fd:58:8c:ad:8b:b6:50:99:ea:
                    de:3b:ce:5e:6c:0f:7f:20:42:ca:77:a0:5c:c7:b1:
                    b4:65:da:c7:76:62:c5:5d:83:e8:88:4c:5a:b6:3e:
                    d0:d3:14:41:44:f8:4e:ab:13:15:38:e6:d9:87:aa:
                    67:b3:8c:55:d9:ea:6b:82:0b:b8:53:de:0d:b1:45:
                    9a:9f:66:4f:f3:b6:38:50:25:e5:81:06:77:5a:50:
                    bd:4f:d8:d7:7f:6e:20:5f:28:a5:c0:3c:a2:6b:14:
                    91:ea:74:21:1a:e3:53:b8:40:3d:40:8b:52:88:52:
                    83:4c:15:3c:0b:26:34:fb:2e:55:96:b5:b6:f8:92:
                    5b:d9:49:f2:7d:49:0b:27:08:fc:8e:67:8e:3b:2b:
                    03:33:1d:21:55:10:de:e9:4d:21:09:94:2c:58:0a:
                    c4:6f:c4:ec:b5:a5:55:82:22:6a:10:d7:5d:22:13:
                    15:13:cf:f0:7f:11:82:7a:37:95:00:46:c9:fa:e6:
                    80:cc:cd:6e:2e:2f:50:a2:76:63:44:23:c1:d3:48:
                    7c:20:f3:76:08:45:fc:99:50:63:b8:3f:21:41:b0:
                    69:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:14:20:9C:D6:AF:81:0D:73:DE:E9:16:AC:8C:5E:C9:3C:88:08:61
            X509v3 Authority Key Identifier:
                keyid:00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a363a3a2f34382d3438203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:90c:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:34:f5:59:3c:50:9a:af:f6:c5:2c:e2:10:23:15:99:5a:48:
         dc:e0:7c:df:c2:0d:4d:af:d6:6a:cf:79:2c:da:cd:11:e9:12:
         3c:63:6e:ce:32:1b:e4:57:8b:3a:1b:7d:fe:e0:0b:16:1d:5b:
         7e:4e:de:e0:f2:b8:6c:d2:3c:25:85:14:e1:16:02:3c:3f:ab:
         47:1d:87:88:f0:68:b1:00:f0:b0:b2:41:3e:84:f3:8d:8e:22:
         9e:83:77:5e:37:8e:12:d9:b3:a8:39:38:87:87:3e:fb:d4:6a:
         f9:7f:76:f0:a5:b0:11:bc:8c:06:0a:45:ad:40:03:c8:d3:90:
         0e:0c:54:cc:f0:7b:bd:92:c1:60:52:fb:bd:e6:1d:87:9a:de:
         43:a4:54:10:df:01:0e:a7:39:b7:e8:61:dc:84:41:f2:eb:e7:
         c5:df:a8:d4:af:e9:c2:6c:96:57:c7:fa:a9:a8:ea:ba:a5:85:
         8b:ed:2c:77:6f:2f:5a:a3:b5:2e:9f:84:20:85:ec:b2:1f:78:
         1a:db:57:9c:59:d3:69:f6:e5:cf:7c:05:3c:d7:8b:93:b5:67:
         54:09:73:a9:2d:c4:24:bd:77:85:6a:5b:0d:66:23:67:6f:57:
         ee:80:fa:6d:fb:50:19:d6:a0:84:ea:53:3b:fb:49:0b:fb:85:
         3c:22:9a:15
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgIUBrKxckErST4v4REMP448C819e+kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDAwNzhEMkI1Nzg5ODI2NjNFRkU5MUZDNEI1Mzk3QzQ4
NDAzRTJFNDAeFw0yNDA0MDMxOTQzMjVaFw0yNTA0MDIxOTQ4MjVaMDMxMTAvBgNV
BAMTKDNEMTQyMDlDRDZBRjgxMEQ3M0RFRTkxNkFDOEM1RUM5M0M4ODA4NjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXGKquXY0jSni+P4+827vgME8E
5pNNudQ5AFl9tdjZ0kQiUP1YjK2LtlCZ6t47zl5sD38gQsp3oFzHsbRl2sd2YsVd
g+iITFq2PtDTFEFE+E6rExU45tmHqmezjFXZ6muCC7hT3g2xRZqfZk/ztjhQJeWB
BndaUL1P2Nd/biBfKKXAPKJrFJHqdCEa41O4QD1Ai1KIUoNMFTwLJjT7LlWWtbb4
klvZSfJ9SQsnCPyOZ447KwMzHSFVEN7pTSEJlCxYCsRvxOy1pVWCImoQ110iExUT
z/B/EYJ6N5UARsn65oDMzW4uL1CidmNEI8HTSHwg83YIRfyZUGO4PyFBsGl3AgMB
AAGjggJUMIICUDAdBgNVHQ4EFgQUPRQgnNavgQ1z3ukWrIxeyTyICGEwHwYDVR0j
BBgwFoAUAAeNK1eJgmY+/pH8S1OXxIQD4uQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGtRRXQ3OHc0dldEUFpXQkp0WXFKdzZ3NGJTWFA0ekM4S2lnZDFwb2NI
azUvMS8wMDA3OEQyQjU3ODk4MjY2M0VGRTkxRkM0QjUzOTdDNDg0MDNFMkU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAwMDc4RDJCNTc4OTgyNjYz
RUZFOTFGQzRCNTM5N0M0ODQwM0UyRTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RrUUV0Nzh3NHZXRFBaV0JKdFlxSnc2dzRiU1hQNHpDOEtpZ2QxcG9jSGs1LzEv
MzIzODMwMzQzYTM5MzA2MzNhMzYzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM2
MzIzNjMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH
AQcBAf8EEzARMA8EAgACMAkDBwAoBAkMAAYwDQYJKoZIhvcNAQELBQADggEBAJc0
9Vk8UJqv9sUs4hAjFZlaSNzgfN/CDU2v1mrPeSzazRHpEjxjbs4yG+RXizobff7g
CxYdW35O3uDyuGzSPCWFFOEWAjw/q0cdh4jwaLEA8LCyQT6E842OIp6Dd143jhLZ
s6g5OIeHPvvUavl/dvClsBG8jAYKRa1AA8jTkA4MVMzwe72SwWBS+73mHYea3kOk
VBDfAQ6nObfoYdyEQfLr58XfqNSv6cJsllfH+qmo6rqlhYvtLHdvL1qjtS6fhCCF
7LIfeBrbV5xZ02n25c98BTzXi5O1Z1QJc6ktxCS9d4VqWw1mI2dvV+6A+m37UBnW
oITqUzv7SQv7hTwimhU=
-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:37 2024 by rpki-client on console-ams.rpki-client.org