Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/2/323830343a313130633a3a2f33322d3332203d3e203532373030.roa
File:                     323830343a313130633a3a2f33322d3332203d3e203532373030.roa (raw, json)
Hash identifier:          XL7uzIpwTVCz+L1UzIc0OjE4QULX7pIxfQoJqKo9nPg=
Subject key identifier:   80:AF:CE:64:7D:E7:F1:A6:75:26:A1:02:47:35:88:5D:FD:75:C9:8F
Certificate issuer:       /CN=23B77CF7BD1F94F72A6C0808569C4F51A9BA389A
Certificate serial:       0821F6B3F9716625A5CD9A8AEEDAB3C336374DFD
Authority key identifier: 23:B7:7C:F7:BD:1F:94:F7:2A:6C:08:08:56:9C:4F:51:A9:BA:38:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/2/323830343a313130633a3a2f33322d3332203d3e203532373030.roa
Signing time:             Thu 02 Jan 2025 17:10:00 +0000
ROA not before:           Thu 02 Jan 2025 17:05:00 +0000
ROA not after:            Thu 01 Jan 2026 17:10:00 +0000
asID:                     52700
IP address blocks:        2804:110c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/2/23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.crl
                          rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/2/23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 15:29:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:21:f6:b3:f9:71:66:25:a5:cd:9a:8a:ee:da:b3:c3:36:37:4d:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23B77CF7BD1F94F72A6C0808569C4F51A9BA389A
        Validity
            Not Before: Jan  2 17:05:00 2025 GMT
            Not After : Jan  1 17:10:00 2026 GMT
        Subject: CN=80AFCE647DE7F1A67526A1024735885DFD75C98F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:40:5e:06:33:ca:0b:85:a1:2b:c1:86:1d:fc:
                    85:06:d2:21:68:63:be:72:62:54:59:64:e4:5f:c7:
                    3e:ef:df:1c:37:80:93:ba:0a:d3:da:75:d5:be:82:
                    99:74:7b:08:fe:99:d1:20:b5:86:42:3d:09:4b:e6:
                    8a:61:5d:42:60:74:62:87:99:47:72:fa:a7:05:a9:
                    7e:f5:9d:a2:89:f2:1f:e5:23:c6:a0:64:2c:ff:f5:
                    3f:2e:65:3e:6d:de:77:05:74:bf:00:cb:b7:2c:a8:
                    45:e4:99:44:5b:2c:8f:5e:83:fe:12:88:1f:79:4f:
                    16:72:ac:f1:6e:ee:8c:7b:94:bd:e3:ab:88:b7:97:
                    f2:5a:d8:54:2d:57:e4:31:ac:e9:24:90:9b:2d:4b:
                    90:61:0b:14:c8:e2:38:5c:32:3e:89:09:34:1e:1f:
                    c8:66:68:2c:1f:a1:a7:a7:81:48:a8:5d:19:3f:54:
                    48:90:65:58:fe:fa:06:69:9e:a9:4c:aa:b7:c7:45:
                    ae:dd:97:77:1a:1b:14:0c:3f:b3:63:a1:30:3c:a7:
                    81:cd:3f:b3:ee:7f:8a:84:db:84:50:a9:da:58:b0:
                    73:48:78:5d:9b:99:37:a2:f2:67:5c:07:ca:da:0f:
                    a4:76:62:d1:03:90:e3:3f:dc:9c:be:bf:30:a3:32:
                    66:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:AF:CE:64:7D:E7:F1:A6:75:26:A1:02:47:35:88:5D:FD:75:C9:8F
            X509v3 Authority Key Identifier:
                keyid:23:B7:7C:F7:BD:1F:94:F7:2A:6C:08:08:56:9C:4F:51:A9:BA:38:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/2/23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/2/323830343a313130633a3a2f33322d3332203d3e203532373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:110c::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:fa:1c:db:88:4f:1c:28:11:a7:2b:3e:3a:fe:62:00:29:d5:
         0a:8a:b4:9f:62:8b:ef:e4:85:40:23:36:66:7c:25:ba:33:b0:
         c7:10:f2:64:9c:49:26:a7:15:5a:05:63:89:d3:d5:da:31:e4:
         85:1c:6c:a7:57:21:fd:e3:b0:87:8e:bd:36:48:ea:05:24:cd:
         16:57:2e:7d:60:cd:58:d2:6f:fe:c9:20:8b:fb:0e:3a:08:a1:
         75:86:86:13:c6:7a:6e:27:ed:75:12:7c:99:52:11:45:84:2d:
         fa:5e:d9:c1:b0:bc:62:e9:46:10:0b:62:52:ae:97:f0:ab:1e:
         b8:e8:72:06:47:bf:b7:92:c4:45:84:31:e2:34:f3:5e:a9:0e:
         42:6d:b2:6a:7d:bb:55:66:45:b0:f2:8f:24:90:79:4a:2a:2b:
         da:1f:ff:e4:30:ba:35:18:fe:b9:f6:ac:0d:79:6b:29:0d:21:
         28:b9:c8:50:d9:96:c9:e7:f4:bd:85:37:30:36:77:5b:e0:63:
         47:a1:62:f6:04:4f:87:73:ec:43:64:c4:8a:55:0f:2d:f4:98:
         f3:8f:2e:81:0c:77:54:68:e5:ba:d2:51:97:5d:6e:95:f2:1a:
         26:da:24:86:d5:72:2b:b9:38:be:59:3d:ad:0c:01:0f:2c:74:
         0e:87:33:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:52:21 2025 by rpki-client