Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/323830343a343534633a383030303a3a2f33332d3333203d3e20323636393137.roa
File:                     323830343a343534633a383030303a3a2f33332d3333203d3e20323636393137.roa (raw, json)
Hash identifier:          6WTjWuNkHIZjmOtbujBe8A8PNFRVTrxJCovIF/GKQvw=
Subject key identifier:   53:1A:A9:57:EB:0C:5E:B5:CB:4B:27:6B:30:B1:76:BE:48:94:6C:B9
Certificate issuer:       /CN=0B8669C70E9ED5741CBEC40B6864B185977F0A18
Certificate serial:       1CE751D84667EFB3109B37FF7A775650D25E9002
Authority key identifier: 0B:86:69:C7:0E:9E:D5:74:1C:BE:C4:0B:68:64:B1:85:97:7F:0A:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B8669C70E9ED5741CBEC40B6864B185977F0A18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/323830343a343534633a383030303a3a2f33332d3333203d3e20323636393137.roa
Signing time:             Wed 02 Oct 2024 19:33:04 +0000
ROA not before:           Wed 02 Oct 2024 19:28:04 +0000
ROA not after:            Wed 01 Oct 2025 19:33:04 +0000
asID:                     266917
IP address blocks:        2804:454c:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/0B8669C70E9ED5741CBEC40B6864B185977F0A18.crl
                          rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/0B8669C70E9ED5741CBEC40B6864B185977F0A18.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B8669C70E9ED5741CBEC40B6864B185977F0A18.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 09:12:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:e7:51:d8:46:67:ef:b3:10:9b:37:ff:7a:77:56:50:d2:5e:90:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B8669C70E9ED5741CBEC40B6864B185977F0A18
        Validity
            Not Before: Oct  2 19:28:04 2024 GMT
            Not After : Oct  1 19:33:04 2025 GMT
        Subject: CN=531AA957EB0C5EB5CB4B276B30B176BE48946CB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:92:00:c8:4b:07:14:e8:65:0d:f6:e5:e9:3c:
                    4f:ed:67:d0:a1:1d:30:69:78:cc:63:8b:28:15:3a:
                    39:95:0b:42:b4:82:76:eb:38:15:90:f9:a0:6b:44:
                    81:03:3e:8c:42:68:67:2c:cf:c5:03:0a:82:67:57:
                    a0:cc:82:2c:ef:f2:7c:19:92:ac:05:1c:20:b1:fc:
                    f0:ff:52:25:ee:f4:c0:89:20:c5:51:ae:ab:3f:15:
                    54:26:5b:2f:03:2e:2c:f4:38:3b:62:f4:19:30:1d:
                    96:de:ad:b8:dd:4f:da:05:8d:9b:7d:4d:91:c5:4d:
                    16:9f:07:ba:bd:c3:9e:d9:54:4e:e2:9c:a8:af:e1:
                    80:6c:32:b8:fc:86:e3:09:36:44:ce:14:38:f7:13:
                    c1:25:23:f8:15:35:d0:61:8e:56:a5:89:0f:f2:bb:
                    5d:c2:9a:5b:49:5b:8a:e2:7e:ae:d2:ea:92:2d:0b:
                    5c:6c:36:b4:bf:04:4d:db:d1:e9:f9:88:da:00:87:
                    af:52:d5:dd:6b:39:47:6c:f0:5d:46:fe:5f:57:49:
                    0e:f7:11:03:26:4a:17:4f:b2:e8:ab:19:df:73:80:
                    12:a5:6c:68:1a:b8:56:c3:b6:04:a8:0e:76:be:de:
                    75:01:fe:13:51:a5:af:e1:c8:d3:af:5a:23:13:58:
                    eb:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:1A:A9:57:EB:0C:5E:B5:CB:4B:27:6B:30:B1:76:BE:48:94:6C:B9
            X509v3 Authority Key Identifier:
                keyid:0B:86:69:C7:0E:9E:D5:74:1C:BE:C4:0B:68:64:B1:85:97:7F:0A:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/0B8669C70E9ED5741CBEC40B6864B185977F0A18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B8669C70E9ED5741CBEC40B6864B185977F0A18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/323830343a343534633a383030303a3a2f33332d3333203d3e20323636393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:454c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         47:3f:bf:ee:ec:a0:31:10:45:3a:f2:a7:67:8e:1c:0f:1d:b6:
         6a:06:06:29:4c:9a:7a:6c:9d:16:5a:2b:5d:82:fd:43:43:b6:
         12:e3:f2:00:b4:40:83:32:28:40:25:bc:27:1b:06:77:07:dc:
         01:51:cd:e8:2e:06:d4:a6:4c:d8:6b:65:7c:e9:1a:a1:d0:0f:
         79:61:fc:cc:a4:37:c2:f7:01:73:59:01:5c:ca:41:c2:8f:49:
         73:cc:69:f3:80:b9:df:38:41:62:e9:7c:c9:dd:5c:6f:37:25:
         7d:59:84:e6:35:dd:23:71:70:69:74:d5:38:99:cd:ce:ba:69:
         eb:fd:cb:05:3a:02:34:27:a3:3b:6f:84:58:78:33:26:f8:64:
         85:81:19:ed:d6:b1:dc:69:5a:5d:2c:e9:2c:ef:c0:bb:60:75:
         61:bb:72:02:0e:0d:75:ee:af:f1:89:85:a7:ad:75:0f:f5:e0:
         48:3a:68:29:64:f4:eb:de:f8:02:d7:65:5d:10:88:cc:a4:f5:
         26:8e:5d:09:e6:34:72:60:a2:66:71:63:c5:82:95:6d:68:a6:
         bb:43:35:8d:5a:23:04:16:0d:65:f2:78:f6:af:ef:a5:9a:f2:
         bf:ad:45:d8:42:a4:ed:e5:e8:86:b8:28:a8:8b:91:5b:a7:90:
         e8:49:e3:20
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUHOdR2EZn77MQmzf/endWUNJekAIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEI4NjY5QzcwRTlFRDU3NDFDQkVDNDBCNjg2NEIxODU5
NzdGMEExODAeFw0yNDEwMDIxOTI4MDRaFw0yNTEwMDExOTMzMDRaMDMxMTAvBgNV
BAMTKDUzMUFBOTU3RUIwQzVFQjVDQjRCMjc2QjMwQjE3NkJFNDg5NDZDQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIkgDISwcU6GUN9uXpPE/tZ9Ch
HTBpeMxjiygVOjmVC0K0gnbrOBWQ+aBrRIEDPoxCaGcsz8UDCoJnV6DMgizv8nwZ
kqwFHCCx/PD/UiXu9MCJIMVRrqs/FVQmWy8DLiz0ODti9BkwHZberbjdT9oFjZt9
TZHFTRafB7q9w57ZVE7inKiv4YBsMrj8huMJNkTOFDj3E8ElI/gVNdBhjlaliQ/y
u13CmltJW4rifq7S6pItC1xsNrS/BE3b0en5iNoAh69S1d1rOUds8F1G/l9XSQ73
EQMmShdPsuirGd9zgBKlbGgauFbDtgSoDna+3nUB/hNRpa/hyNOvWiMTWOuJAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUUxqpV+sMXrXLSydrMLF2vkiUbLkwHwYDVR0j
BBgwFoAUC4Zpxw6e1XQcvsQLaGSxhZd/ChgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1hmTXl5dUdYSjZ6dnFEYVNEWHdOQ0M4a2U2UVFKYlJTcWNpNlJmRkdt
bk4vMC8wQjg2NjlDNzBFOUVENTc0MUNCRUM0MEI2ODY0QjE4NTk3N0YwQTE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBCODY2OUM3MEU5RUQ1NzQx
Q0JFQzQwQjY4NjRCMTg1OTc3RjBBMTguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNYZk15eXVHWEo2enZxRGFTRFh3TkNDOGtlNlFRSmJSU3FjaTZSZkZHbW5OLzAv
MzIzODMwMzQzYTM0MzUzNDYzM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzNjM5MzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygERUyAMA0GCSqGSIb3DQEBCwUA
A4IBAQBHP7/u7KAxEEU68qdnjhwPHbZqBgYpTJp6bJ0WWitdgv1DQ7YS4/IAtECD
MihAJbwnGwZ3B9wBUc3oLgbUpkzYa2V86Rqh0A95YfzMpDfC9wFzWQFcykHCj0lz
zGnzgLnfOEFi6XzJ3VxvNyV9WYTmNd0jcXBpdNU4mc3Oumnr/csFOgI0J6M7b4RY
eDMm+GSFgRnt1rHcaVpdLOks78C7YHVhu3ICDg117q/xiYWnrXUP9eBIOmgpZPTr
3vgC12VdEIjMpPUmjl0J5jRyYKJmcWPFgpVtaKa7QzWNWiMEFg1l8nj2r++lmvK/
rUXYQqTt5eiGuCioi5Fbp5DoSeMg
-----END CERTIFICATE-----
Generated at Mon Feb 17 02:22:01 2025 by rpki-client