Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/2/323830343a313130633a3a2f33332d3333203d3e203532373030.roa
File:                     323830343a313130633a3a2f33332d3333203d3e203532373030.roa (raw, json)
Hash identifier:          oesUCndsgKoqRD5Jts7Iam5sflghg2DgcH3bQ/JOfjA=
Subject key identifier:   D4:23:B5:1E:88:35:19:D2:01:60:25:2E:A0:0A:CE:A4:CE:52:40:36
Certificate issuer:       /CN=23B77CF7BD1F94F72A6C0808569C4F51A9BA389A
Certificate serial:       2DE6D487594AE598C75B157084C06BE9841D4145
Authority key identifier: 23:B7:7C:F7:BD:1F:94:F7:2A:6C:08:08:56:9C:4F:51:A9:BA:38:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/2/323830343a313130633a3a2f33332d3333203d3e203532373030.roa
Signing time:             Thu 02 Jan 2025 17:51:17 +0000
ROA not before:           Thu 02 Jan 2025 17:46:17 +0000
ROA not after:            Thu 01 Jan 2026 17:51:17 +0000
asID:                     52700
IP address blocks:        2804:110c::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/2/23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.crl
                          rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/2/23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 09:49:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:e6:d4:87:59:4a:e5:98:c7:5b:15:70:84:c0:6b:e9:84:1d:41:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23B77CF7BD1F94F72A6C0808569C4F51A9BA389A
        Validity
            Not Before: Jan  2 17:46:17 2025 GMT
            Not After : Jan  1 17:51:17 2026 GMT
        Subject: CN=D423B51E883519D20160252EA00ACEA4CE524036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0c:0d:f0:48:17:e7:dd:86:aa:53:aa:51:0a:
                    86:ce:85:09:ec:4e:78:dc:b9:bc:25:a6:63:cd:3c:
                    b5:5a:93:6c:f8:9c:f7:fe:15:c2:f9:21:e6:a9:b8:
                    e1:33:e7:77:12:68:3c:38:b6:ff:5c:bc:d2:39:a0:
                    14:1a:ca:12:97:fb:11:a1:e1:f9:28:e6:f1:f9:51:
                    6b:5e:1b:d3:b0:fe:57:af:9a:51:34:64:be:2c:b5:
                    fc:ef:db:8a:4d:64:cc:39:35:5b:9b:1a:42:69:47:
                    17:1c:74:67:e7:5a:d2:14:a1:47:62:51:d7:ea:91:
                    a1:04:a5:70:c8:26:a1:d8:f8:84:34:3d:62:4f:31:
                    24:5d:9d:b6:dc:ae:8c:43:91:b9:25:66:10:85:84:
                    cc:61:ca:b6:1c:51:b7:ec:71:e2:ba:50:22:5e:20:
                    f2:e1:c6:4f:f7:5f:ff:cb:2c:92:01:27:da:75:0c:
                    2f:4e:8c:47:6d:25:af:ec:4a:3e:9b:25:56:b5:9a:
                    d2:ca:1d:19:b6:75:c3:f7:b0:f5:4b:82:8d:df:ef:
                    41:1c:e7:ec:3a:b2:af:9b:2b:36:ab:7a:30:ae:35:
                    32:fd:81:0d:94:76:1f:83:08:b2:2b:1c:02:78:d7:
                    52:f7:4f:7f:c0:0f:1a:ed:a6:9e:ee:ee:52:01:b4:
                    b5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:23:B5:1E:88:35:19:D2:01:60:25:2E:A0:0A:CE:A4:CE:52:40:36
            X509v3 Authority Key Identifier:
                keyid:23:B7:7C:F7:BD:1F:94:F7:2A:6C:08:08:56:9C:4F:51:A9:BA:38:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/2/23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/2/323830343a313130633a3a2f33332d3333203d3e203532373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:110c::/33

    Signature Algorithm: sha256WithRSAEncryption
         25:9d:2b:c7:fb:4a:e8:b0:82:fb:e5:26:48:4a:37:85:a0:32:
         62:f7:b9:7a:96:ea:6b:6e:65:67:65:e6:56:f0:9e:d8:26:d9:
         29:e3:99:25:f2:24:1b:e5:cb:28:b4:eb:0f:e2:fe:88:2d:06:
         f8:fd:66:ec:81:9f:1b:2c:d6:32:d6:f5:4a:d8:84:42:61:bb:
         d2:0e:2c:3a:7d:86:ec:9a:36:b2:16:fb:3e:63:67:23:db:04:
         be:aa:c5:ec:c6:da:e8:26:91:84:7f:26:21:b6:61:b5:f6:b9:
         45:8e:53:c3:79:e8:10:dc:6d:83:ed:ff:87:79:9b:5d:85:d5:
         17:5a:5c:76:83:99:1c:a9:8c:6e:e5:7b:f7:16:cf:fb:c7:a8:
         e9:92:74:d9:56:d6:87:e3:54:20:b3:87:ba:f5:62:28:62:80:
         6d:2a:a3:ea:11:7e:ac:28:92:03:78:ce:6a:9d:94:57:00:5c:
         ef:c4:38:91:9c:a6:90:ac:9f:2f:25:dd:05:c1:41:04:4d:2b:
         cd:d2:d1:cd:1d:7d:83:81:18:e0:04:07:5c:fe:b7:11:bb:08:
         bc:a8:fe:ab:fd:21:09:68:5b:aa:60:55:65:1e:3e:48:5d:70:
         ae:a4:01:8e:8f:58:a2:cb:20:83:fa:3d:5d:aa:29:de:6d:d7:
         26:12:89:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:32:35 2025 by rpki-client