Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/89YA5URBwzcfU7YpR6MXYz7UEWdJFmcqQFJJaMW5BSUg/0/323830343a373066303a383030303a3a2f33332d3333203d3e20323730373537.roa
File:                     323830343a373066303a383030303a3a2f33332d3333203d3e20323730373537.roa (raw, json)
Hash identifier:          ENuYH0w3IALkpaL1EqRZGmTz8muakt1RKbeAER9pj0s=
Subject key identifier:   44:F5:9D:9A:52:3E:BE:AE:E4:76:D0:E6:17:6D:EC:D9:25:12:CD:7B
Certificate issuer:       /CN=E8B8CDA5314C0516CAAAB451F88C47B629DC4500
Certificate serial:       336E19713E7D9C97A5D80B3C3A74A1199198A562
Authority key identifier: E8:B8:CD:A5:31:4C:05:16:CA:AA:B4:51:F8:8C:47:B6:29:DC:45:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8B8CDA5314C0516CAAAB451F88C47B629DC4500.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/89YA5URBwzcfU7YpR6MXYz7UEWdJFmcqQFJJaMW5BSUg/0/323830343a373066303a383030303a3a2f33332d3333203d3e20323730373537.roa
Signing time:             Fri 14 Feb 2025 16:55:04 +0000
ROA not before:           Fri 14 Feb 2025 16:50:04 +0000
ROA not after:            Fri 13 Feb 2026 16:55:04 +0000
asID:                     270757
IP address blocks:        2804:70f0:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/89YA5URBwzcfU7YpR6MXYz7UEWdJFmcqQFJJaMW5BSUg/0/E8B8CDA5314C0516CAAAB451F88C47B629DC4500.crl
                          rsync://rpki-repo.registro.br/repo/89YA5URBwzcfU7YpR6MXYz7UEWdJFmcqQFJJaMW5BSUg/0/E8B8CDA5314C0516CAAAB451F88C47B629DC4500.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8B8CDA5314C0516CAAAB451F88C47B629DC4500.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 10:28:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:6e:19:71:3e:7d:9c:97:a5:d8:0b:3c:3a:74:a1:19:91:98:a5:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8B8CDA5314C0516CAAAB451F88C47B629DC4500
        Validity
            Not Before: Feb 14 16:50:04 2025 GMT
            Not After : Feb 13 16:55:04 2026 GMT
        Subject: CN=44F59D9A523EBEAEE476D0E6176DECD92512CD7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:73:04:f1:34:6c:e2:7c:d4:19:4f:60:df:c2:
                    25:32:be:3c:a6:ed:38:3c:0e:5b:ee:af:d4:a4:e2:
                    93:f4:6a:64:82:7b:99:ce:f3:4f:ca:78:36:cd:db:
                    69:24:e5:0d:fc:5e:9e:72:c1:86:da:a8:72:82:d0:
                    05:51:1d:16:a7:3b:e4:3d:dd:7a:1f:31:d8:9d:e3:
                    55:80:09:ae:50:42:85:ea:36:a5:7f:06:3d:80:6e:
                    d7:0b:96:90:96:a0:62:08:26:8b:da:58:94:39:46:
                    ae:9b:c1:a3:5e:75:fa:26:e8:9d:8d:28:e3:9e:d7:
                    f5:53:ea:4c:48:9f:a1:39:21:ee:ff:cf:bd:f8:b1:
                    3f:92:88:5e:06:42:8c:cd:a3:0a:08:8b:f6:36:88:
                    7d:e5:69:94:bf:b1:16:20:f1:bd:75:86:80:ba:d6:
                    7d:7f:d1:eb:98:c6:ff:74:8a:9d:3d:8f:03:37:be:
                    bd:62:eb:45:d3:f6:b4:c6:be:88:81:25:1d:14:1f:
                    57:98:fd:dc:49:a6:64:f5:c6:cb:e9:73:69:05:7a:
                    ad:ba:e7:39:13:ae:16:5f:f1:0a:be:44:d5:b1:90:
                    4d:b4:ea:a8:08:4f:47:11:ab:f3:32:47:8e:7d:37:
                    3a:46:85:99:28:44:b6:ec:4d:29:02:6b:83:a8:d5:
                    6d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F5:9D:9A:52:3E:BE:AE:E4:76:D0:E6:17:6D:EC:D9:25:12:CD:7B
            X509v3 Authority Key Identifier:
                keyid:E8:B8:CD:A5:31:4C:05:16:CA:AA:B4:51:F8:8C:47:B6:29:DC:45:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/89YA5URBwzcfU7YpR6MXYz7UEWdJFmcqQFJJaMW5BSUg/0/E8B8CDA5314C0516CAAAB451F88C47B629DC4500.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8B8CDA5314C0516CAAAB451F88C47B629DC4500.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/89YA5URBwzcfU7YpR6MXYz7UEWdJFmcqQFJJaMW5BSUg/0/323830343a373066303a383030303a3a2f33332d3333203d3e20323730373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:70f0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         a6:2e:df:31:0b:cc:30:63:94:09:67:b7:ba:ce:21:6b:fc:f8:
         46:85:7b:b9:be:8b:27:ea:aa:9e:b9:84:45:7f:51:ed:25:8e:
         99:04:1f:59:00:c5:a1:59:8f:d4:5e:51:4b:dc:b5:ef:22:80:
         6a:dd:ad:3a:cb:09:0a:9b:ae:89:c1:9a:28:10:51:e5:c7:cc:
         a2:64:e8:36:46:9a:1f:f4:b5:54:71:4b:f7:54:33:03:0b:1c:
         7c:a5:e0:6e:e9:be:c9:b8:a2:11:7a:85:be:f3:ab:64:eb:cd:
         07:4f:35:81:09:c2:fd:14:d1:d7:71:0c:57:fd:4e:ee:6d:6f:
         a8:93:0b:1a:0d:e2:5a:e0:0c:77:10:eb:14:ad:80:f7:9e:ae:
         2d:64:89:6e:98:c2:43:60:25:bd:c9:c3:ec:98:a7:4f:7a:74:
         bd:ae:5c:74:27:ad:1f:49:83:91:bb:02:7d:83:1e:6a:c3:cb:
         c5:ba:00:f1:51:25:ba:ca:fb:2e:d2:2f:63:e0:8e:96:07:25:
         97:b1:34:27:f5:9b:f1:76:22:b8:eb:b5:53:b4:4d:e3:9d:bb:
         e6:54:dd:42:9d:33:4b:c8:d1:b1:e0:76:92:86:74:93:cb:5d:
         4c:fc:42:93:59:94:c2:fc:7a:0d:0b:5b:07:4c:64:6b:47:c4:
         ed:ad:b3:cd
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUM24ZcT59nJel2As8OnShGZGYpWIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRThCOENEQTUzMTRDMDUxNkNBQUFCNDUxRjg4QzQ3QjYy
OURDNDUwMDAeFw0yNTAyMTQxNjUwMDRaFw0yNjAyMTMxNjU1MDRaMDMxMTAvBgNV
BAMTKDQ0RjU5RDlBNTIzRUJFQUVFNDc2RDBFNjE3NkRFQ0Q5MjUxMkNEN0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdcwTxNGzifNQZT2DfwiUyvjym
7Tg8Dlvur9Sk4pP0amSCe5nO80/KeDbN22kk5Q38Xp5ywYbaqHKC0AVRHRanO+Q9
3XofMdid41WACa5QQoXqNqV/Bj2AbtcLlpCWoGIIJovaWJQ5Rq6bwaNedfom6J2N
KOOe1/VT6kxIn6E5Ie7/z734sT+SiF4GQozNowoIi/Y2iH3laZS/sRYg8b11hoC6
1n1/0euYxv90ip09jwM3vr1i60XT9rTGvoiBJR0UH1eY/dxJpmT1xsvpc2kFeq26
5zkTrhZf8Qq+RNWxkE206qgIT0cRq/MyR459NzpGhZkoRLbsTSkCa4Oo1W0lAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQURPWdmlI+vq7kdtDmF23s2SUSzXswHwYDVR0j
BBgwFoAU6LjNpTFMBRbKqrRR+IxHtincRQAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODlZQTVVUkJ3emNmVTdZcFI2TVhZejdVRVdkSkZtY3FRRkpKYU1XNUJT
VWcvMC9FOEI4Q0RBNTMxNEMwNTE2Q0FBQUI0NTFGODhDNDdCNjI5REM0NTAwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U4QjhDREE1MzE0QzA1MTZD
QUFBQjQ1MUY4OEM0N0I2MjlEQzQ1MDAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg5WUE1VVJCd3pjZlU3WXBSNk1YWXo3VUVXZEpGbWNxUUZKSmFNVzVCU1VnLzAv
MzIzODMwMzQzYTM3MzA2NjMwM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzczMDM3MzUzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEcPCAMA0GCSqGSIb3DQEBCwUA
A4IBAQCmLt8xC8wwY5QJZ7e6ziFr/PhGhXu5vosn6qqeuYRFf1HtJY6ZBB9ZAMWh
WY/UXlFL3LXvIoBq3a06ywkKm66JwZooEFHlx8yiZOg2Rpof9LVUcUv3VDMDCxx8
peBu6b7JuKIReoW+86tk680HTzWBCcL9FNHXcQxX/U7ubW+okwsaDeJa4Ax3EOsU
rYD3nq4tZIlumMJDYCW9ycPsmKdPenS9rlx0J60fSYORuwJ9gx5qw8vFugDxUSW6
yvsu0i9j4I6WByWXsTQn9ZvxdiK467VTtE3jnbvmVN1CnTNLyNGx4HaShnSTy11M
/EKTWZTC/HoNC1sHTGRrR8TtrbPN
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:56 2025 by rpki-client