Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DutVSU7o9b7W5WpVai2jabeFLi1sDK35sN3KNWaUw7ef/1/323830343a6639303a3a2f33322d3336203d3e20323633353932.roa
File:                     323830343a6639303a3a2f33322d3336203d3e20323633353932.roa (raw, json)
Hash identifier:          nPfhVyzVoysLhIkZhHMqPlR91I5vMPP1TXKlDTJ1V+4=
Subject key identifier:   40:83:D1:5F:27:D7:BC:AF:01:25:D2:B4:73:37:38:03:6D:F6:CE:92
Certificate issuer:       /CN=922FBF2159E6A28EFC093AE51E0BFF8F351A6C53
Certificate serial:       0B00F13C7170AF24D6B5EB577F1D0863D666E1B2
Authority key identifier: 92:2F:BF:21:59:E6:A2:8E:FC:09:3A:E5:1E:0B:FF:8F:35:1A:6C:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/922FBF2159E6A28EFC093AE51E0BFF8F351A6C53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DutVSU7o9b7W5WpVai2jabeFLi1sDK35sN3KNWaUw7ef/1/323830343a6639303a3a2f33322d3336203d3e20323633353932.roa
Signing time:             Thu 04 Apr 2024 10:21:51 +0000
ROA not before:           Thu 04 Apr 2024 10:16:51 +0000
ROA not after:            Thu 03 Apr 2025 10:21:51 +0000
asID:                     263592
IP address blocks:        2804:f90::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DutVSU7o9b7W5WpVai2jabeFLi1sDK35sN3KNWaUw7ef/1/922FBF2159E6A28EFC093AE51E0BFF8F351A6C53.crl
                          rsync://rpki-repo.registro.br/repo/DutVSU7o9b7W5WpVai2jabeFLi1sDK35sN3KNWaUw7ef/1/922FBF2159E6A28EFC093AE51E0BFF8F351A6C53.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/922FBF2159E6A28EFC093AE51E0BFF8F351A6C53.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 10:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:00:f1:3c:71:70:af:24:d6:b5:eb:57:7f:1d:08:63:d6:66:e1:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=922FBF2159E6A28EFC093AE51E0BFF8F351A6C53
        Validity
            Not Before: Apr  4 10:16:51 2024 GMT
            Not After : Apr  3 10:21:51 2025 GMT
        Subject: CN=4083D15F27D7BCAF0125D2B4733738036DF6CE92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:55:04:31:3e:24:12:ee:d3:fa:30:de:ae:6c:
                    14:b2:bb:18:1b:99:65:af:96:11:b2:87:64:38:3a:
                    4d:39:b1:be:9b:0c:af:d1:dc:3a:6e:e2:49:24:2f:
                    b2:01:1c:6e:f4:a7:c3:89:98:d5:f8:c0:41:b8:cb:
                    ff:34:ed:c2:27:a4:37:8c:91:6f:f6:d8:a5:a4:b9:
                    88:d0:b4:8a:80:3a:c8:0d:7c:ec:7a:df:98:a6:f3:
                    17:73:22:81:61:ca:6b:e8:25:52:dc:c3:4a:62:8e:
                    17:64:be:47:6d:60:82:3e:6a:49:45:89:be:92:39:
                    6b:43:a9:23:83:f0:c6:2d:ac:c1:a6:37:bc:1a:5b:
                    eb:31:2b:74:c7:23:0c:b5:79:37:18:46:c1:69:30:
                    83:7a:74:fb:0b:09:96:85:fa:ad:43:a4:59:05:27:
                    db:ce:d0:76:44:d7:5b:24:65:20:23:3d:81:5a:21:
                    69:83:55:19:ff:e9:41:03:03:a9:92:b1:f6:6d:f1:
                    18:15:29:5b:50:80:98:70:f8:fb:d6:b7:61:6d:19:
                    97:2f:19:8c:fb:d8:3c:98:c0:fb:92:b7:69:25:25:
                    94:0e:28:84:f7:43:2c:2c:87:4c:a0:51:d9:af:3b:
                    24:a5:e5:fb:2e:6f:5e:f1:29:36:6e:32:7a:29:bb:
                    49:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:83:D1:5F:27:D7:BC:AF:01:25:D2:B4:73:37:38:03:6D:F6:CE:92
            X509v3 Authority Key Identifier:
                keyid:92:2F:BF:21:59:E6:A2:8E:FC:09:3A:E5:1E:0B:FF:8F:35:1A:6C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DutVSU7o9b7W5WpVai2jabeFLi1sDK35sN3KNWaUw7ef/1/922FBF2159E6A28EFC093AE51E0BFF8F351A6C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/922FBF2159E6A28EFC093AE51E0BFF8F351A6C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DutVSU7o9b7W5WpVai2jabeFLi1sDK35sN3KNWaUw7ef/1/323830343a6639303a3a2f33322d3336203d3e20323633353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f90::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:8d:e7:b2:41:92:26:d4:5e:8b:fa:18:c8:19:ac:5f:b4:24:
         9c:3b:04:cb:5e:be:20:eb:fe:ed:6f:c6:6d:5a:9a:0f:44:73:
         7a:f9:28:84:c7:f7:6d:8c:78:49:d3:37:fa:a2:c6:59:ba:35:
         c3:47:fa:94:34:20:e8:dc:0d:2e:d0:8f:70:dd:5a:ae:c3:29:
         63:07:5d:03:ef:f1:4b:5b:51:b0:0f:b6:80:6a:82:05:37:92:
         13:88:fc:a7:49:b9:82:45:84:78:22:f6:b4:64:e4:8e:e1:e7:
         c5:81:90:e3:a2:2c:61:0c:4d:97:7d:8f:ac:60:d5:1c:b9:26:
         93:d0:98:e4:c2:14:4d:0d:2a:4b:e1:47:37:33:0a:9b:2c:d1:
         9d:58:f6:74:d3:cc:89:a5:c6:24:cf:38:28:fa:3c:a0:3f:d4:
         d8:eb:bb:fc:f1:8e:96:7c:fa:88:e5:53:2c:24:0b:e8:51:31:
         fc:ab:44:1a:9d:c4:e1:fc:dc:77:49:6e:9b:30:44:f7:01:32:
         68:92:dc:e9:b8:c2:af:40:33:7b:a8:46:9c:db:4a:3a:69:b6:
         af:1c:f2:cf:c1:95:73:c4:a5:c0:37:01:24:ec:11:cb:4d:d3:
         b8:90:e4:fc:38:44:9f:52:66:1a:0c:f1:3b:ae:6d:fe:45:96:
         fe:93:34:1a
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUCwDxPHFwryTWtetXfx0IY9Zm4bIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTIyRkJGMjE1OUU2QTI4RUZDMDkzQUU1MUUwQkZGOEYz
NTFBNkM1MzAeFw0yNDA0MDQxMDE2NTFaFw0yNTA0MDMxMDIxNTFaMDMxMTAvBgNV
BAMTKDQwODNEMTVGMjdEN0JDQUYwMTI1RDJCNDczMzczODAzNkRGNkNFOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1VQQxPiQS7tP6MN6ubBSyuxgb
mWWvlhGyh2Q4Ok05sb6bDK/R3Dpu4kkkL7IBHG70p8OJmNX4wEG4y/807cInpDeM
kW/22KWkuYjQtIqAOsgNfOx635im8xdzIoFhymvoJVLcw0pijhdkvkdtYII+aklF
ib6SOWtDqSOD8MYtrMGmN7waW+sxK3THIwy1eTcYRsFpMIN6dPsLCZaF+q1DpFkF
J9vO0HZE11skZSAjPYFaIWmDVRn/6UEDA6mSsfZt8RgVKVtQgJhw+PvWt2FtGZcv
GYz72DyYwPuSt2klJZQOKIT3Qywsh0ygUdmvOySl5fsub17xKTZuMnopu0mPAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUQIPRXyfXvK8BJdK0czc4A232zpIwHwYDVR0j
BBgwFoAUki+/IVnmoo78CTrlHgv/jzUabFMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHV0VlNVN285YjdXNVdwVmFpMmphYmVGTGkxc0RLMzVzTjNLTldhVXc3
ZWYvMS85MjJGQkYyMTU5RTZBMjhFRkMwOTNBRTUxRTBCRkY4RjM1MUE2QzUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkyMkZCRjIxNTlFNkEyOEVG
QzA5M0FFNTFFMEJGRjhGMzUxQTZDNTMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0R1dFZTVTdvOWI3VzVXcFZhaTJqYWJlRkxpMXNESzM1c04zS05XYVV3N2VmLzEv
MzIzODMwMzQzYTY2MzkzMDNhM2EyZjMzMzIyZDMzMzYyMDNkM2UyMDMyMzYzMzM1
MzkzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgED5AwDQYJKoZIhvcNAQELBQADggEBADyN57JBkibU
Xov6GMgZrF+0JJw7BMteviDr/u1vxm1amg9Ec3r5KITH922MeEnTN/qixlm6NcNH
+pQ0IOjcDS7Qj3DdWq7DKWMHXQPv8UtbUbAPtoBqggU3khOI/KdJuYJFhHgi9rRk
5I7h58WBkOOiLGEMTZd9j6xg1Ry5JpPQmOTCFE0NKkvhRzczCpss0Z1Y9nTTzIml
xiTPOCj6PKA/1Njru/zxjpZ8+ojlUywkC+hRMfyrRBqdxOH83HdJbpswRPcBMmiS
3Om4wq9AM3uoRpzbSjpptq8c8s/BlXPEpcA3ASTsEctN07iQ5Pw4RJ9SZhoM8Tuu
bf5Flv6TNBo=
-----END CERTIFICATE-----
Generated at Sat Sep 28 10:27:37 2024 by rpki-client on console-ams.rpki-client.org