Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/323830343a393137383a3a2f33322d3438203d3e20323734363433.roa
File:                     323830343a393137383a3a2f33322d3438203d3e20323734363433.roa (raw, json)
Hash identifier:          8Z0mEGf8ry/iktZG/M8sacsKDiNwKk/AAVvls14ThQY=
Subject key identifier:   CE:6A:BF:B0:93:63:C8:B5:B3:4E:96:BA:B5:B9:8C:08:29:D7:6F:82
Certificate issuer:       /CN=D92133A080AA62F6B797FAD0AB6A6FD3074170E1
Certificate serial:       3CF7CEAEB27C1561E921CD13BCDF77B0245A08FD
Authority key identifier: D9:21:33:A0:80:AA:62:F6:B7:97:FA:D0:AB:6A:6F:D3:07:41:70:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D92133A080AA62F6B797FAD0AB6A6FD3074170E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/323830343a393137383a3a2f33322d3438203d3e20323734363433.roa
Signing time:             Thu 17 Oct 2024 12:37:56 +0000
ROA not before:           Thu 17 Oct 2024 12:32:56 +0000
ROA not after:            Thu 16 Oct 2025 12:37:56 +0000
asID:                     274643
IP address blocks:        2804:9178::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/D92133A080AA62F6B797FAD0AB6A6FD3074170E1.crl
                          rsync://rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/D92133A080AA62F6B797FAD0AB6A6FD3074170E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D92133A080AA62F6B797FAD0AB6A6FD3074170E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 20:54:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:f7:ce:ae:b2:7c:15:61:e9:21:cd:13:bc:df:77:b0:24:5a:08:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D92133A080AA62F6B797FAD0AB6A6FD3074170E1
        Validity
            Not Before: Oct 17 12:32:56 2024 GMT
            Not After : Oct 16 12:37:56 2025 GMT
        Subject: CN=CE6ABFB09363C8B5B34E96BAB5B98C0829D76F82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b5:69:b7:a4:28:e8:ad:db:3b:15:e0:33:a0:
                    58:db:6c:f3:90:c4:20:ec:e4:fa:26:4d:bb:6b:cf:
                    83:5f:27:95:a6:f8:6d:c6:ec:9d:c0:bc:ee:9d:c4:
                    ef:a5:f9:16:f8:86:9b:c2:66:4c:c0:c1:db:56:30:
                    e3:ca:d4:9b:4e:8f:63:e2:1a:97:52:c1:4c:a2:49:
                    26:fa:1b:18:24:11:5c:a7:7f:3c:cd:eb:24:a1:fd:
                    81:9e:7d:b0:17:95:e9:ca:41:46:eb:0f:88:5c:59:
                    bd:be:15:c5:df:76:8f:bf:5a:8f:6c:b1:76:a2:ed:
                    9d:4c:75:30:1a:40:f6:13:72:93:7b:91:7f:79:20:
                    b7:2a:09:13:3c:aa:62:e9:de:3e:e0:b5:5b:f0:cf:
                    c4:b9:bc:b5:a5:66:ca:30:4f:f7:5b:d0:26:1f:6c:
                    d9:be:ad:84:22:2c:80:8f:06:56:3c:c5:0c:4d:fc:
                    c0:5d:e2:1e:32:bb:06:0d:c7:40:5c:54:f1:30:9f:
                    22:18:18:c2:b8:a1:a4:26:32:27:f4:20:3b:05:31:
                    a6:68:b8:a5:cb:e4:06:78:b6:6b:d4:67:1f:54:90:
                    da:61:41:dc:7f:5d:3e:1d:9c:0e:d5:70:93:d3:ee:
                    d0:b4:d9:11:ae:d1:ee:38:32:a6:0d:73:b4:ed:46:
                    fc:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:6A:BF:B0:93:63:C8:B5:B3:4E:96:BA:B5:B9:8C:08:29:D7:6F:82
            X509v3 Authority Key Identifier:
                keyid:D9:21:33:A0:80:AA:62:F6:B7:97:FA:D0:AB:6A:6F:D3:07:41:70:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/D92133A080AA62F6B797FAD0AB6A6FD3074170E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D92133A080AA62F6B797FAD0AB6A6FD3074170E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/323830343a393137383a3a2f33322d3438203d3e20323734363433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9178::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:84:10:b1:c9:f9:22:a4:a6:45:41:aa:64:4c:88:d9:33:12:
         9f:c5:f7:f0:6f:31:a6:32:3a:19:48:92:d7:48:9e:dc:19:72:
         08:6f:89:1a:2e:06:b4:6c:52:51:a2:91:ab:6b:a4:6c:31:05:
         ba:b2:18:f0:7b:a8:07:45:a8:73:06:5b:1c:76:89:d8:45:82:
         19:e6:8f:3f:8d:a8:09:c6:79:63:ac:21:c1:bd:f2:5d:e4:61:
         d3:63:4f:24:fa:d5:57:fe:87:c9:98:ef:40:dc:66:a5:34:12:
         bd:50:95:41:27:4a:63:0a:e5:48:1d:9b:c0:50:42:71:b7:16:
         21:68:67:92:d4:da:cb:10:85:9a:e1:71:2e:b2:58:28:df:f4:
         e2:e7:94:60:3d:ad:38:05:52:3e:30:1a:a5:63:79:21:8e:49:
         0a:c8:f0:9c:62:5c:c2:64:92:a5:3a:cd:1f:b7:09:6f:80:fb:
         24:af:61:e5:34:52:4d:4e:cc:10:58:5f:7d:20:8e:39:89:ff:
         6b:ff:e9:d3:ef:7c:4e:2d:1d:d5:45:b1:eb:26:83:26:51:c5:
         2c:32:dd:a6:e2:e6:5a:a3:ea:e7:4e:ea:f5:8a:7e:d7:a7:bf:
         0c:f4:f4:52:8d:e7:72:63:36:37:ed:6f:e0:60:95:be:a6:43:
         21:e6:18:7b
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUPPfOrrJ8FWHpIc0TvN93sCRaCP0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDkyMTMzQTA4MEFBNjJGNkI3OTdGQUQwQUI2QTZGRDMw
NzQxNzBFMTAeFw0yNDEwMTcxMjMyNTZaFw0yNTEwMTYxMjM3NTZaMDMxMTAvBgNV
BAMTKENFNkFCRkIwOTM2M0M4QjVCMzRFOTZCQUI1Qjk4QzA4MjlENzZGODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCptWm3pCjords7FeAzoFjbbPOQ
xCDs5PomTbtrz4NfJ5Wm+G3G7J3AvO6dxO+l+Rb4hpvCZkzAwdtWMOPK1JtOj2Pi
GpdSwUyiSSb6GxgkEVynfzzN6ySh/YGefbAXlenKQUbrD4hcWb2+FcXfdo+/Wo9s
sXai7Z1MdTAaQPYTcpN7kX95ILcqCRM8qmLp3j7gtVvwz8S5vLWlZsowT/db0CYf
bNm+rYQiLICPBlY8xQxN/MBd4h4yuwYNx0BcVPEwnyIYGMK4oaQmMif0IDsFMaZo
uKXL5AZ4tmvUZx9UkNphQdx/XT4dnA7VcJPT7tC02RGu0e44MqYNc7TtRvzxAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUzmq/sJNjyLWzTpa6tbmMCCnXb4IwHwYDVR0j
BBgwFoAU2SEzoICqYva3l/rQq2pv0wdBcOEwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9QRnZUVWhCQlZ3aTQyRm1qMTFlRUhUWjFUS0FEdGdtNFozQThOR2hyRVBL
LzAvRDkyMTMzQTA4MEFBNjJGNkI3OTdGQUQwQUI2QTZGRDMwNzQxNzBFMS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9EOTIxMzNBMDgwQUE2MkY2Qjc5
N0ZBRDBBQjZBNkZEMzA3NDE3MEUxLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Q
RnZUVWhCQlZ3aTQyRm1qMTFlRUhUWjFUS0FEdGdtNFozQThOR2hyRVBLLzAvMzIz
ODMwMzQzYTM5MzEzNzM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzM0MzYz
NDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKASReDANBgkqhkiG9w0BAQsFAAOCAQEAFYQQscn5IqSm
RUGqZEyI2TMSn8X38G8xpjI6GUiS10ie3BlyCG+JGi4GtGxSUaKRq2ukbDEFurIY
8HuoB0WocwZbHHaJ2EWCGeaPP42oCcZ5Y6whwb3yXeRh02NPJPrVV/6HyZjvQNxm
pTQSvVCVQSdKYwrlSB2bwFBCcbcWIWhnktTayxCFmuFxLrJYKN/04ueUYD2tOAVS
PjAapWN5IY5JCsjwnGJcwmSSpTrNH7cJb4D7JK9h5TRSTU7MEFhffSCOOYn/a//p
0+98Ti0d1UWx6yaDJlHFLDLdpuLmWqPq507q9Yp+16e/DPT0Uo3ncmM2N+1v4GCV
vqZDIeYYew==
-----END CERTIFICATE-----
Generated at Thu Apr 10 10:36:48 2025 by rpki-client