Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/2/323830343a313130633a383030303a3a2f33332d3333203d3e203532373030.roa
File:                     323830343a313130633a383030303a3a2f33332d3333203d3e203532373030.roa (raw, json)
Hash identifier:          EWjjzIGiE8yV37OstigbvrCBb6IEjmfxCP0f6YGlOsE=
Subject key identifier:   E4:02:2D:EE:D9:3D:75:24:2F:8F:60:92:C2:B6:11:C6:5C:5C:17:C2
Certificate issuer:       /CN=23B77CF7BD1F94F72A6C0808569C4F51A9BA389A
Certificate serial:       181B1850B03170A71AA31C7DD652471988B6CB75
Authority key identifier: 23:B7:7C:F7:BD:1F:94:F7:2A:6C:08:08:56:9C:4F:51:A9:BA:38:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/2/323830343a313130633a383030303a3a2f33332d3333203d3e203532373030.roa
Signing time:             Thu 02 Jan 2025 17:51:24 +0000
ROA not before:           Thu 02 Jan 2025 17:46:24 +0000
ROA not after:            Thu 01 Jan 2026 17:51:24 +0000
asID:                     52700
IP address blocks:        2804:110c:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/2/23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.crl
                          rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/2/23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 09:49:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:1b:18:50:b0:31:70:a7:1a:a3:1c:7d:d6:52:47:19:88:b6:cb:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23B77CF7BD1F94F72A6C0808569C4F51A9BA389A
        Validity
            Not Before: Jan  2 17:46:24 2025 GMT
            Not After : Jan  1 17:51:24 2026 GMT
        Subject: CN=E4022DEED93D75242F8F6092C2B611C65C5C17C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d9:1c:02:eb:99:cc:85:fb:12:cc:09:05:8b:
                    01:f8:f7:c2:3a:ac:01:fc:39:9b:60:30:37:4d:1f:
                    85:7b:6b:1a:0b:e5:02:cd:7b:99:23:ec:bd:2a:f6:
                    1f:aa:50:bd:bd:9c:a5:85:01:e7:ca:36:b2:47:3c:
                    4e:dd:a8:63:88:48:2e:54:8a:32:59:79:dc:1c:38:
                    7d:37:00:5b:e4:ab:fa:2c:80:1f:49:63:e3:14:54:
                    55:c0:e5:5f:49:d2:22:5e:ca:cc:5b:ba:e4:bb:55:
                    40:8b:56:f2:e9:89:28:23:4c:ae:63:07:4f:c4:42:
                    cd:70:84:fd:09:bb:cc:31:fb:4e:b7:a9:03:de:8e:
                    29:7a:6a:96:20:86:78:e8:94:56:69:d5:91:84:5c:
                    14:cb:80:93:1e:55:59:a2:28:7d:f6:3f:7f:93:45:
                    bf:81:51:0f:13:62:25:3a:ad:8e:c0:96:56:d7:0d:
                    83:b7:ae:37:33:63:d1:29:b8:35:ee:4e:76:09:a3:
                    cc:27:47:35:84:31:77:6d:70:14:0a:d7:a9:35:db:
                    df:b4:25:c1:35:7c:97:d9:c2:f2:55:40:9d:bd:fc:
                    4d:6d:22:3e:0c:29:ad:37:74:a8:a1:c0:b3:63:05:
                    c2:aa:14:a6:2b:c1:81:f7:43:5b:8f:ac:dd:1e:c0:
                    ee:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:02:2D:EE:D9:3D:75:24:2F:8F:60:92:C2:B6:11:C6:5C:5C:17:C2
            X509v3 Authority Key Identifier:
                keyid:23:B7:7C:F7:BD:1F:94:F7:2A:6C:08:08:56:9C:4F:51:A9:BA:38:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/2/23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/2/323830343a313130633a383030303a3a2f33332d3333203d3e203532373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:110c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         6c:15:d1:65:10:aa:a8:35:dd:21:0a:b6:aa:13:81:d9:8e:f4:
         16:63:d5:05:bf:4d:15:f1:80:7f:ce:ea:ce:a8:50:9b:96:fd:
         0b:62:9c:02:52:67:89:b0:85:e9:ed:4e:93:04:47:60:4a:cb:
         46:a4:5e:bc:3b:7f:21:bf:17:9c:75:d2:d5:cc:3e:19:2a:27:
         2e:99:d7:56:48:e4:8c:0b:7b:70:1c:a4:cc:ca:85:57:1c:bf:
         e8:b2:d0:f6:9d:2c:bd:44:04:f4:90:27:ce:aa:8c:1d:8b:5a:
         3c:ca:d3:09:b3:99:6c:13:bd:fd:57:3b:cb:25:61:80:22:cc:
         06:9a:f2:66:d7:d5:cc:42:53:75:c8:c5:14:8e:ad:92:03:5f:
         40:7e:b7:77:46:96:56:fb:7b:df:6d:3e:8c:d3:f3:e7:55:52:
         d3:04:f7:e3:e8:73:30:84:98:5e:19:13:e1:a6:de:1a:b8:6d:
         ad:5f:16:15:35:63:37:bf:8a:17:76:f6:82:b1:88:d9:99:a4:
         5c:0a:7e:85:4c:0d:dc:ed:98:a7:e8:0e:2a:51:37:4a:e9:ae:
         f9:f6:ac:b2:8b:f2:82:7f:c2:d5:72:95:ee:64:da:a2:af:d8:
         63:8a:d8:ce:29:e8:c5:6f:ae:a9:5f:b3:d6:93:cf:7b:3d:bc:
         0d:17:de:2c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUGBsYULAxcKcaoxx91lJHGYi2y3UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjNCNzdDRjdCRDFGOTRGNzJBNkMwODA4NTY5QzRGNTFB
OUJBMzg5QTAeFw0yNTAxMDIxNzQ2MjRaFw0yNjAxMDExNzUxMjRaMDMxMTAvBgNV
BAMTKEU0MDIyREVFRDkzRDc1MjQyRjhGNjA5MkMyQjYxMUM2NUM1QzE3QzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw2RwC65nMhfsSzAkFiwH498I6
rAH8OZtgMDdNH4V7axoL5QLNe5kj7L0q9h+qUL29nKWFAefKNrJHPE7dqGOISC5U
ijJZedwcOH03AFvkq/osgB9JY+MUVFXA5V9J0iJeysxbuuS7VUCLVvLpiSgjTK5j
B0/EQs1whP0Ju8wx+063qQPejil6apYghnjolFZp1ZGEXBTLgJMeVVmiKH32P3+T
Rb+BUQ8TYiU6rY7AllbXDYO3rjczY9EpuDXuTnYJo8wnRzWEMXdtcBQK16k129+0
JcE1fJfZwvJVQJ29/E1tIj4MKa03dKihwLNjBcKqFKYrwYH3Q1uPrN0ewO5TAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU5AIt7tk9dSQvj2CSwrYRxlxcF8IwHwYDVR0j
BBgwFoAUI7d8970flPcqbAgIVpxPUam6OJowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjlVekM5bWV1aFNnd1JoUGd5R1k0dkJKN0tZUGVValZ4VnVWdm9QSkRI
b1ovMi8yM0I3N0NGN0JEMUY5NEY3MkE2QzA4MDg1NjlDNEY1MUE5QkEzODlBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIzQjc3Q0Y3QkQxRjk0Rjcy
QTZDMDgwODU2OUM0RjUxQTlCQTM4OUEuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY5VXpDOW1ldWhTZ3dSaFBneUdZNHZCSjdLWVBlVWpWeFZ1VnZvUEpESG9aLzIv
MzIzODMwMzQzYTMxMzEzMDYzM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDM1MzIzNzMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgcoBBEMgDANBgkqhkiG9w0BAQsFAAOC
AQEAbBXRZRCqqDXdIQq2qhOB2Y70FmPVBb9NFfGAf87qzqhQm5b9C2KcAlJnibCF
6e1OkwRHYErLRqRevDt/Ib8XnHXS1cw+GSonLpnXVkjkjAt7cBykzMqFVxy/6LLQ
9p0svUQE9JAnzqqMHYtaPMrTCbOZbBO9/Vc7yyVhgCLMBpryZtfVzEJTdcjFFI6t
kgNfQH63d0aWVvt7320+jNPz51VS0wT34+hzMISYXhkT4abeGrhtrV8WFTVjN7+K
F3b2grGI2ZmkXAp+hUwN3O2Yp+gOKlE3Sumu+fassovygn/C1XKV7mTaoq/YY4rY
zinoxW+uqV+z1pPPez28DRfeLA==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:47:29 2025 by rpki-client