Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/323830343a363563383a383030303a3a2f33342d3334203d3e20323639353134.roa
File:                     323830343a363563383a383030303a3a2f33342d3334203d3e20323639353134.roa (raw, json)
Hash identifier:          wPAyKXU8vO0oj7rc0ogHzMjMQeWKkBK61SBfe+4S1ZI=
Subject key identifier:   6B:39:FE:11:40:A4:F0:B4:25:62:E3:A3:DE:45:FC:2D:8C:42:F8:18
Certificate issuer:       /CN=05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96
Certificate serial:       5601CF0923CE184C0D6F2342C33AA2AD46566DC7
Authority key identifier: 05:A8:5F:FC:2E:60:C3:11:7B:A8:B9:EC:C5:DC:DE:E8:91:37:DF:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/323830343a363563383a383030303a3a2f33342d3334203d3e20323639353134.roa
Signing time:             Fri 08 Nov 2024 01:22:35 +0000
ROA not before:           Fri 08 Nov 2024 01:17:35 +0000
ROA not after:            Fri 07 Nov 2025 01:22:35 +0000
asID:                     269514
IP address blocks:        2804:65c8:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96.crl
                          rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 20:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:01:cf:09:23:ce:18:4c:0d:6f:23:42:c3:3a:a2:ad:46:56:6d:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96
        Validity
            Not Before: Nov  8 01:17:35 2024 GMT
            Not After : Nov  7 01:22:35 2025 GMT
        Subject: CN=6B39FE1140A4F0B42562E3A3DE45FC2D8C42F818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9c:e1:5e:9f:f8:5d:c9:74:e5:b1:6e:e2:44:
                    33:2c:51:96:39:27:73:d5:1b:d8:46:5e:14:81:33:
                    56:d8:1e:cd:e1:83:f1:f9:dc:da:65:c4:a6:6e:b2:
                    d9:52:d9:0b:04:c4:76:78:de:cf:29:ec:78:8c:bc:
                    d7:4b:8d:ad:db:f7:4e:bd:74:6e:c8:35:fe:1a:0b:
                    4e:8b:a3:dc:49:07:c0:3f:ec:43:b2:d9:4e:de:c5:
                    98:2b:7a:c2:05:64:03:f3:42:82:9d:c5:ac:48:ce:
                    9a:f9:05:5f:7d:dd:b4:8a:b4:29:f1:bf:5f:96:cb:
                    db:0b:78:b3:c7:c0:65:02:37:7d:41:3f:a7:25:3e:
                    0b:37:c3:21:b7:18:2d:b4:4f:9b:ff:8f:f5:db:65:
                    38:92:ca:de:2b:5e:01:31:76:ac:fc:77:90:76:df:
                    23:84:83:64:6c:a5:25:3f:62:25:c5:df:4f:2b:9f:
                    13:c9:15:f3:ae:a0:36:4e:32:69:93:ad:98:d7:64:
                    fb:7a:6a:ea:69:20:7f:04:47:f6:8b:d2:0d:e7:a0:
                    4a:54:58:e3:1d:bb:60:92:e4:59:75:8c:ab:ab:33:
                    5a:bc:b4:62:69:17:4d:a9:d8:20:14:ca:13:35:26:
                    83:9e:a5:b5:d5:a3:91:08:1a:9c:95:d2:bc:2b:1c:
                    81:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:39:FE:11:40:A4:F0:B4:25:62:E3:A3:DE:45:FC:2D:8C:42:F8:18
            X509v3 Authority Key Identifier:
                keyid:05:A8:5F:FC:2E:60:C3:11:7B:A8:B9:EC:C5:DC:DE:E8:91:37:DF:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/323830343a363563383a383030303a3a2f33342d3334203d3e20323639353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:65c8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         23:5d:77:1d:b0:33:cd:8d:bf:b6:6b:43:50:66:2c:de:ab:44:
         c9:71:eb:14:d2:2b:c1:fc:89:99:8a:05:05:fb:74:ca:84:fc:
         0d:60:cb:d1:4d:aa:d3:2b:f0:13:01:4a:e7:7e:7a:d9:78:d4:
         d1:a9:08:44:b0:24:91:fc:dc:4d:59:a4:11:fc:11:39:ad:81:
         c4:bd:09:7f:47:d5:68:ba:68:42:c4:71:d8:ac:0a:a7:48:d0:
         46:d8:ef:8e:cc:eb:7f:f4:e1:9c:d7:17:9d:db:fc:ad:ee:13:
         0c:97:02:8b:4c:d8:d9:36:43:c3:5c:c5:e1:28:a8:50:ef:1c:
         46:e4:17:49:b1:9f:0a:44:f1:8c:3e:d1:b0:ad:29:f0:d2:13:
         80:c3:e4:4c:ad:13:17:3b:97:02:33:cf:93:c4:60:41:8a:69:
         b7:3c:fd:3a:da:7b:3e:56:be:19:53:8b:49:f5:85:d6:24:91:
         24:5d:43:37:b5:1b:e4:5f:2f:e4:0e:20:89:c3:57:e7:ed:95:
         56:23:4f:04:02:2f:7e:2f:ab:79:17:75:38:c6:42:c7:f2:d9:
         6c:32:a0:f1:87:73:59:3a:d1:8d:ff:a0:fb:ed:80:0b:98:15:
         d1:b2:1e:1c:20:ea:05:99:88:5e:15:c4:87:7e:eb:8e:8c:35:
         aa:fa:56:73
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUVgHPCSPOGEwNbyNCwzqirUZWbccwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDVBODVGRkMyRTYwQzMxMTdCQThCOUVDQzVEQ0RFRTg5
MTM3REY5NjAeFw0yNDExMDgwMTE3MzVaFw0yNTExMDcwMTIyMzVaMDMxMTAvBgNV
BAMTKDZCMzlGRTExNDBBNEYwQjQyNTYyRTNBM0RFNDVGQzJEOEM0MkY4MTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0nOFen/hdyXTlsW7iRDMsUZY5
J3PVG9hGXhSBM1bYHs3hg/H53NplxKZustlS2QsExHZ43s8p7HiMvNdLja3b9069
dG7INf4aC06Lo9xJB8A/7EOy2U7exZgresIFZAPzQoKdxaxIzpr5BV993bSKtCnx
v1+Wy9sLeLPHwGUCN31BP6clPgs3wyG3GC20T5v/j/XbZTiSyt4rXgExdqz8d5B2
3yOEg2RspSU/YiXF308rnxPJFfOuoDZOMmmTrZjXZPt6auppIH8ER/aL0g3noEpU
WOMdu2CS5Fl1jKurM1q8tGJpF02p2CAUyhM1JoOepbXVo5EIGpyV0rwrHIEJAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUazn+EUCk8LQlYuOj3kX8LYxC+BgwHwYDVR0j
BBgwFoAUBahf/C5gwxF7qLnsxdze6JE335YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHJGZkV0TlBoanNyZ29KQUFwNzRBejU5QkZ2TWJHYWE4enl1RTRjbjRp
M1ovMC8wNUE4NUZGQzJFNjBDMzExN0JBOEI5RUNDNURDREVFODkxMzdERjk2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA1QTg1RkZDMkU2MEMzMTE3
QkE4QjlFQ0M1RENERUU4OTEzN0RGOTYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhyRmZFdE5QaGpzcmdvSkFBcDc0QXo1OUJGdk1iR2FhOHp5dUU0Y240aTNaLzAv
MzIzODMwMzQzYTM2MzU2MzM4M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzOTM1MzEzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEZciAMA0GCSqGSIb3DQEBCwUA
A4IBAQAjXXcdsDPNjb+2a0NQZizeq0TJcesU0ivB/ImZigUF+3TKhPwNYMvRTarT
K/ATAUrnfnrZeNTRqQhEsCSR/NxNWaQR/BE5rYHEvQl/R9VoumhCxHHYrAqnSNBG
2O+OzOt/9OGc1xed2/yt7hMMlwKLTNjZNkPDXMXhKKhQ7xxG5BdJsZ8KRPGMPtGw
rSnw0hOAw+RMrRMXO5cCM8+TxGBBimm3PP062ns+Vr4ZU4tJ9YXWJJEkXUM3tRvk
Xy/kDiCJw1fn7ZVWI08EAi9+L6t5F3U4xkLH8tlsMqDxh3NZOtGN/6D77YALmBXR
sh4cIOoFmYheFcSHfuuOjDWq+lZz
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:47:24 2025 by rpki-client