Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/89YA5URBwzcfU7YpR6MXYz7UEWdJFmcqQFJJaMW5BSUg/0/323830343a373066303a3a2f33332d3333203d3e20323730373537.roa
File:                     323830343a373066303a3a2f33332d3333203d3e20323730373537.roa (raw, json)
Hash identifier:          Y8j2FZ+91t0wwfz4DlUof1Myw9tm6Ud2jls7ovqUJLA=
Subject key identifier:   86:5B:56:94:5F:25:D1:2A:26:E1:5B:DA:6C:78:B6:1C:5C:37:9A:E6
Certificate issuer:       /CN=E8B8CDA5314C0516CAAAB451F88C47B629DC4500
Certificate serial:       06390B5D7BC9B3400B8E932B2A6354E1F833BBA9
Authority key identifier: E8:B8:CD:A5:31:4C:05:16:CA:AA:B4:51:F8:8C:47:B6:29:DC:45:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8B8CDA5314C0516CAAAB451F88C47B629DC4500.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/89YA5URBwzcfU7YpR6MXYz7UEWdJFmcqQFJJaMW5BSUg/0/323830343a373066303a3a2f33332d3333203d3e20323730373537.roa
Signing time:             Fri 14 Feb 2025 16:54:51 +0000
ROA not before:           Fri 14 Feb 2025 16:49:51 +0000
ROA not after:            Fri 13 Feb 2026 16:54:51 +0000
asID:                     270757
IP address blocks:        2804:70f0::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/89YA5URBwzcfU7YpR6MXYz7UEWdJFmcqQFJJaMW5BSUg/0/E8B8CDA5314C0516CAAAB451F88C47B629DC4500.crl
                          rsync://rpki-repo.registro.br/repo/89YA5URBwzcfU7YpR6MXYz7UEWdJFmcqQFJJaMW5BSUg/0/E8B8CDA5314C0516CAAAB451F88C47B629DC4500.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8B8CDA5314C0516CAAAB451F88C47B629DC4500.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 10:28:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:39:0b:5d:7b:c9:b3:40:0b:8e:93:2b:2a:63:54:e1:f8:33:bb:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8B8CDA5314C0516CAAAB451F88C47B629DC4500
        Validity
            Not Before: Feb 14 16:49:51 2025 GMT
            Not After : Feb 13 16:54:51 2026 GMT
        Subject: CN=865B56945F25D12A26E15BDA6C78B61C5C379AE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3b:3b:91:ab:32:76:b1:dc:84:87:7f:61:39:
                    e7:83:ed:40:bd:e0:86:9c:e7:32:45:51:9c:c8:b8:
                    a6:67:fc:85:f5:59:92:f6:35:7a:e7:e7:61:26:43:
                    9d:f1:70:31:43:b4:2d:83:8a:3f:b4:9a:6e:de:33:
                    02:b9:d3:63:c5:a2:4d:e3:3d:28:93:d6:f4:7c:79:
                    5c:6b:67:6a:1b:7a:f1:7a:57:88:b3:a6:54:8d:9e:
                    55:fd:82:b8:28:45:89:56:18:cf:a6:6d:1a:e6:7e:
                    1d:95:32:08:70:3b:39:ae:78:fb:70:24:04:40:fb:
                    98:53:94:9d:42:e2:5e:21:f8:5e:9f:ff:01:32:7a:
                    19:cc:26:12:b0:5a:5a:b4:90:81:f2:2c:67:e0:a9:
                    f9:74:a4:d0:46:33:d8:b9:3b:af:97:47:ec:4e:7b:
                    96:e0:9f:9e:7a:fe:3b:30:ac:86:14:11:0d:01:61:
                    4c:ea:53:55:14:3d:e0:d9:93:b5:17:71:e6:c4:06:
                    40:00:29:b7:cb:4f:de:03:a3:d0:d0:2d:c9:61:81:
                    2c:c6:a7:a1:ce:95:23:e6:40:10:d0:55:18:a4:07:
                    f1:bc:fd:17:05:35:b6:14:c0:53:2b:7c:91:f0:44:
                    3f:01:41:49:0c:93:e2:e1:e5:c3:c5:62:e7:18:40:
                    3f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:5B:56:94:5F:25:D1:2A:26:E1:5B:DA:6C:78:B6:1C:5C:37:9A:E6
            X509v3 Authority Key Identifier:
                keyid:E8:B8:CD:A5:31:4C:05:16:CA:AA:B4:51:F8:8C:47:B6:29:DC:45:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/89YA5URBwzcfU7YpR6MXYz7UEWdJFmcqQFJJaMW5BSUg/0/E8B8CDA5314C0516CAAAB451F88C47B629DC4500.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8B8CDA5314C0516CAAAB451F88C47B629DC4500.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/89YA5URBwzcfU7YpR6MXYz7UEWdJFmcqQFJJaMW5BSUg/0/323830343a373066303a3a2f33332d3333203d3e20323730373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:70f0::/33

    Signature Algorithm: sha256WithRSAEncryption
         6a:7a:76:77:e0:d4:e6:00:fe:dc:ce:c2:4d:96:4b:86:66:96:
         cd:13:2a:90:5f:07:ca:8b:97:6a:cb:9f:97:fc:ae:43:db:b4:
         7d:b3:3c:c0:03:fe:3c:74:99:36:2d:9e:11:56:b6:4e:3a:c6:
         3d:a4:77:6c:ab:84:e5:f1:b3:1a:a9:8e:93:5c:7a:dd:18:6c:
         fe:29:8a:c3:e5:22:ff:dc:cb:62:99:eb:68:ca:08:99:ac:c1:
         0f:f2:34:5a:8f:fc:2d:7f:ff:65:64:4d:cc:aa:78:11:de:f9:
         41:ce:67:e8:00:19:c4:93:12:04:76:05:a2:1d:71:39:b2:6e:
         a6:60:19:d6:fb:9a:a5:31:74:7b:a3:e3:c9:c5:13:63:e1:a5:
         7c:1f:4d:28:78:62:37:8e:44:d8:7d:f2:d0:bf:c1:a5:21:f5:
         de:e9:e4:f5:6d:dc:e6:c5:2f:cb:65:68:c6:b4:a2:91:e1:3d:
         9d:ca:8f:38:aa:b5:69:c1:80:ec:96:ed:ee:95:2b:0d:45:aa:
         ad:6e:0e:e9:0c:a0:d4:0c:fd:7f:04:3b:59:c5:53:66:21:a8:
         9f:3f:38:3c:d5:2a:41:30:dd:7a:29:66:13:f6:03:d4:c1:6f:
         56:72:d8:5e:4e:f4:73:7f:4e:7c:3e:5b:b2:67:48:59:47:a7:
         0a:d4:d2:e9
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBjkLXXvJs0ALjpMrKmNU4fgzu6kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRThCOENEQTUzMTRDMDUxNkNBQUFCNDUxRjg4QzQ3QjYy
OURDNDUwMDAeFw0yNTAyMTQxNjQ5NTFaFw0yNjAyMTMxNjU0NTFaMDMxMTAvBgNV
BAMTKDg2NUI1Njk0NUYyNUQxMkEyNkUxNUJEQTZDNzhCNjFDNUMzNzlBRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClOzuRqzJ2sdyEh39hOeeD7UC9
4Iac5zJFUZzIuKZn/IX1WZL2NXrn52EmQ53xcDFDtC2Dij+0mm7eMwK502PFok3j
PSiT1vR8eVxrZ2obevF6V4izplSNnlX9grgoRYlWGM+mbRrmfh2VMghwOzmuePtw
JARA+5hTlJ1C4l4h+F6f/wEyehnMJhKwWlq0kIHyLGfgqfl0pNBGM9i5O6+XR+xO
e5bgn556/jswrIYUEQ0BYUzqU1UUPeDZk7UXcebEBkAAKbfLT94Do9DQLclhgSzG
p6HOlSPmQBDQVRikB/G8/RcFNbYUwFMrfJHwRD8BQUkMk+Lh5cPFYucYQD/5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUhltWlF8l0Som4VvabHi2HFw3muYwHwYDVR0j
BBgwFoAU6LjNpTFMBRbKqrRR+IxHtincRQAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODlZQTVVUkJ3emNmVTdZcFI2TVhZejdVRVdkSkZtY3FRRkpKYU1XNUJT
VWcvMC9FOEI4Q0RBNTMxNEMwNTE2Q0FBQUI0NTFGODhDNDdCNjI5REM0NTAwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U4QjhDREE1MzE0QzA1MTZD
QUFBQjQ1MUY4OEM0N0I2MjlEQzQ1MDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg5WUE1VVJCd3pjZlU3WXBSNk1YWXo3VUVXZEpGbWNxUUZKSmFNVzVCU1VnLzAv
MzIzODMwMzQzYTM3MzA2NjMwM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNzMw
MzczNTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKARw8AAwDQYJKoZIhvcNAQELBQADggEBAGp6dnfg
1OYA/tzOwk2WS4Zmls0TKpBfB8qLl2rLn5f8rkPbtH2zPMAD/jx0mTYtnhFWtk46
xj2kd2yrhOXxsxqpjpNcet0YbP4pisPlIv/cy2KZ62jKCJmswQ/yNFqP/C1//2Vk
TcyqeBHe+UHOZ+gAGcSTEgR2BaIdcTmybqZgGdb7mqUxdHuj48nFE2PhpXwfTSh4
YjeORNh98tC/waUh9d7p5PVt3ObFL8tlaMa0opHhPZ3KjziqtWnBgOyW7e6VKw1F
qq1uDukMoNQM/X8EO1nFU2YhqJ8/ODzVKkEw3XopZhP2A9TBb1Zy2F5O9HN/Tnw+
W7JnSFlHpwrU0uk=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:22:18 2025 by rpki-client