Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/1/323830343a383937383a3a2f33342d3334203d3e20323733363036.roa
File:                     323830343a383937383a3a2f33342d3334203d3e20323733363036.roa (raw, json)
Hash identifier:          e+elPptAmC8nFO8bzG0w4vskA8u9R/h30rEN4QhG8LM=
Subject key identifier:   0B:01:19:C7:91:41:29:C6:1E:80:26:87:F0:AF:04:4B:1C:35:7A:8A
Certificate issuer:       /CN=391294F0484586F9131E6D65BFFAE01A3E7BDCC4
Certificate serial:       192DB84BF242337DF55CCA0FC99B4EBC2C266341
Authority key identifier: 39:12:94:F0:48:45:86:F9:13:1E:6D:65:BF:FA:E0:1A:3E:7B:DC:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/391294F0484586F9131E6D65BFFAE01A3E7BDCC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/1/323830343a383937383a3a2f33342d3334203d3e20323733363036.roa
Signing time:             Mon 08 Apr 2024 20:38:50 +0000
ROA not before:           Mon 08 Apr 2024 20:33:50 +0000
ROA not after:            Mon 07 Apr 2025 20:38:50 +0000
asID:                     273606
IP address blocks:        2804:8978::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/1/391294F0484586F9131E6D65BFFAE01A3E7BDCC4.crl
                          rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/1/391294F0484586F9131E6D65BFFAE01A3E7BDCC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/391294F0484586F9131E6D65BFFAE01A3E7BDCC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 05:54:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:2d:b8:4b:f2:42:33:7d:f5:5c:ca:0f:c9:9b:4e:bc:2c:26:63:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391294F0484586F9131E6D65BFFAE01A3E7BDCC4
        Validity
            Not Before: Apr  8 20:33:50 2024 GMT
            Not After : Apr  7 20:38:50 2025 GMT
        Subject: CN=0B0119C7914129C61E802687F0AF044B1C357A8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f8:33:68:7a:6b:00:48:51:83:d4:dc:b4:9d:
                    70:45:86:23:69:5c:58:97:c3:ec:39:2e:df:e1:8b:
                    42:43:cc:a7:e5:00:a8:2b:5e:7e:ee:a4:48:78:ca:
                    53:c6:2f:3f:9b:2c:e4:27:5f:1d:9f:f1:b1:8a:72:
                    d8:9f:f6:a6:dc:cd:82:42:ba:77:7d:5e:4a:8d:f3:
                    a7:99:8b:29:a9:6a:65:70:bf:ce:d1:2b:b6:dc:a3:
                    33:b3:00:a5:2b:df:d9:df:98:f4:c3:4f:c8:d1:cc:
                    1f:4b:48:43:f2:77:c2:37:4a:c4:5e:9f:11:1d:8f:
                    bb:d3:44:5e:e8:c5:b4:6f:fe:f4:1c:4d:ee:c8:1f:
                    fa:bc:77:2f:23:96:bf:ff:95:8a:b7:af:e6:f2:9a:
                    70:a4:e8:7f:36:79:b6:62:41:33:16:77:8c:a8:af:
                    9a:1a:76:21:51:2d:5e:99:66:09:25:9b:02:8b:24:
                    d3:1d:76:2e:13:24:2f:c8:83:11:60:b4:2e:3d:b8:
                    a9:76:9c:aa:8b:ec:60:28:d4:5b:cf:d9:18:b5:c3:
                    f5:69:9e:7f:a2:e3:be:40:2a:7f:c7:e8:1e:16:dc:
                    5b:39:33:32:c1:ed:de:7c:f4:93:42:44:11:10:e7:
                    56:86:24:e3:9f:fc:38:13:c3:83:68:74:dd:33:74:
                    12:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:01:19:C7:91:41:29:C6:1E:80:26:87:F0:AF:04:4B:1C:35:7A:8A
            X509v3 Authority Key Identifier:
                keyid:39:12:94:F0:48:45:86:F9:13:1E:6D:65:BF:FA:E0:1A:3E:7B:DC:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/1/391294F0484586F9131E6D65BFFAE01A3E7BDCC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/391294F0484586F9131E6D65BFFAE01A3E7BDCC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/1/323830343a383937383a3a2f33342d3334203d3e20323733363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8978::/34

    Signature Algorithm: sha256WithRSAEncryption
         56:b5:6b:ad:ce:32:8f:fc:f4:30:53:b3:6f:f7:89:e3:3f:8c:
         0a:0d:8e:4b:99:84:41:ce:70:5f:05:0d:85:0d:5b:9e:4d:cb:
         28:7b:e1:94:54:22:e7:8f:e3:25:bb:61:11:03:09:7b:56:58:
         81:3b:21:76:e0:8a:0a:da:23:d5:dc:7c:7d:2b:a2:c6:39:cb:
         61:0d:1a:60:72:17:bd:4f:d6:f6:e1:99:83:14:d8:85:85:75:
         da:aa:00:80:e6:b0:f3:75:c9:71:c5:67:a9:78:4a:fc:61:a5:
         23:c4:58:7c:09:d6:39:48:b6:4e:0e:3f:0d:ac:96:23:48:01:
         1d:30:e8:13:22:e4:e6:21:30:b8:ee:34:35:48:6b:34:e9:6a:
         b3:20:d4:e4:8f:fa:5e:a6:b6:2a:a4:df:58:9e:db:d2:c5:dd:
         e6:b4:91:62:38:83:96:1d:69:23:9e:2e:f0:37:7f:d3:f4:64:
         57:a1:e4:ec:e2:26:5c:f3:6b:a5:4c:c0:98:61:d1:b1:3b:f6:
         ac:0d:83:6e:6a:a9:3a:c1:46:5c:66:41:40:57:38:c8:87:fc:
         76:49:ad:85:28:48:58:88:6f:3c:26:e5:94:17:de:6a:96:30:
         8e:0a:4e:1b:bc:cf:2e:cd:31:88:a8:e5:b3:a7:4c:48:ed:48:
         c3:b9:08:c2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGS24S/JCM331XMoPyZtOvCwmY0EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzkxMjk0RjA0ODQ1ODZGOTEzMUU2RDY1QkZGQUUwMUEz
RTdCRENDNDAeFw0yNDA0MDgyMDMzNTBaFw0yNTA0MDcyMDM4NTBaMDMxMTAvBgNV
BAMTKDBCMDExOUM3OTE0MTI5QzYxRTgwMjY4N0YwQUYwNDRCMUMzNTdBOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf+DNoemsASFGD1Ny0nXBFhiNp
XFiXw+w5Lt/hi0JDzKflAKgrXn7upEh4ylPGLz+bLOQnXx2f8bGKctif9qbczYJC
und9XkqN86eZiympamVwv87RK7bcozOzAKUr39nfmPTDT8jRzB9LSEPyd8I3SsRe
nxEdj7vTRF7oxbRv/vQcTe7IH/q8dy8jlr//lYq3r+bymnCk6H82ebZiQTMWd4yo
r5oadiFRLV6ZZgklmwKLJNMddi4TJC/IgxFgtC49uKl2nKqL7GAo1FvP2Ri1w/Vp
nn+i475AKn/H6B4W3Fs5MzLB7d589JNCRBEQ51aGJOOf/DgTw4NodN0zdBJ7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUCwEZx5FBKcYegCaH8K8ESxw1eoowHwYDVR0j
BBgwFoAUORKU8EhFhvkTHm1lv/rgGj573MQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHNwV1hBaTF4NmpMd3pORWVTNmVzVGZDejZTb0dZajRzdjZKTERjMncz
Y2EvMS8zOTEyOTRGMDQ4NDU4NkY5MTMxRTZENjVCRkZBRTAxQTNFN0JEQ0M0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM5MTI5NEYwNDg0NTg2Rjkx
MzFFNkQ2NUJGRkFFMDFBM0U3QkRDQzQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RzcFdYQWkxeDZqTHd6TkVlUzZlc1RmQ3o2U29HWWo0c3Y2SkxEYzJ3M2NhLzEv
MzIzODMwMzQzYTM4MzkzNzM4M2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNzMz
MzYzMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKASJeAAwDQYJKoZIhvcNAQELBQADggEBAFa1a63O
Mo/89DBTs2/3ieM/jAoNjkuZhEHOcF8FDYUNW55Nyyh74ZRUIueP4yW7YREDCXtW
WIE7IXbgigraI9XcfH0rosY5y2ENGmByF71P1vbhmYMU2IWFddqqAIDmsPN1yXHF
Z6l4SvxhpSPEWHwJ1jlItk4OPw2sliNIAR0w6BMi5OYhMLjuNDVIazTparMg1OSP
+l6mtiqk31ie29LF3ea0kWI4g5YdaSOeLvA3f9P0ZFeh5OziJlzza6VMwJhh0bE7
9qwNg25qqTrBRlxmQUBXOMiH/HZJrYUoSFiIbzwm5ZQX3mqWMI4KThu8zy7NMYio
5bOnTEjtSMO5CMI=
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:34:10 2024 by rpki-client on console-ams.rpki-client.org