Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A92rSfS48eq3y879gTR343BJ4qJooPpqXoDWJwfSYV6s/1/323830343a383062633a383030303a3a2f33332d3333203d3e20323731373730.roa
File:                     323830343a383062633a383030303a3a2f33332d3333203d3e20323731373730.roa (raw, json)
Hash identifier:          kXgSFufLWsrUif/USO326QW4UuW0+1TU65rGeRIEYx0=
Subject key identifier:   D2:B3:DF:66:B0:40:78:16:5F:3B:13:C5:7A:AE:D3:B6:A4:99:C2:F3
Certificate issuer:       /CN=EFB048E3392805E6F983E13D03B2FDEC67F98ADC
Certificate serial:       2D12435C4F3567B45D309F135CFD8991082DAE94
Authority key identifier: EF:B0:48:E3:39:28:05:E6:F9:83:E1:3D:03:B2:FD:EC:67:F9:8A:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFB048E3392805E6F983E13D03B2FDEC67F98ADC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A92rSfS48eq3y879gTR343BJ4qJooPpqXoDWJwfSYV6s/1/323830343a383062633a383030303a3a2f33332d3333203d3e20323731373730.roa
Signing time:             Fri 07 Mar 2025 02:01:23 +0000
ROA not before:           Fri 07 Mar 2025 01:56:23 +0000
ROA not after:            Fri 06 Mar 2026 02:01:23 +0000
asID:                     271770
IP address blocks:        2804:80bc:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A92rSfS48eq3y879gTR343BJ4qJooPpqXoDWJwfSYV6s/1/EFB048E3392805E6F983E13D03B2FDEC67F98ADC.crl
                          rsync://rpki-repo.registro.br/repo/A92rSfS48eq3y879gTR343BJ4qJooPpqXoDWJwfSYV6s/1/EFB048E3392805E6F983E13D03B2FDEC67F98ADC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFB048E3392805E6F983E13D03B2FDEC67F98ADC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 00:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:12:43:5c:4f:35:67:b4:5d:30:9f:13:5c:fd:89:91:08:2d:ae:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFB048E3392805E6F983E13D03B2FDEC67F98ADC
        Validity
            Not Before: Mar  7 01:56:23 2025 GMT
            Not After : Mar  6 02:01:23 2026 GMT
        Subject: CN=D2B3DF66B04078165F3B13C57AAED3B6A499C2F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:85:cf:5f:95:b5:85:06:21:84:4b:87:96:bc:
                    02:6c:2e:c5:5b:21:53:cb:16:5f:d2:4d:3a:56:00:
                    f8:49:2d:93:2d:00:83:77:06:e4:67:00:cb:10:c3:
                    d9:fd:42:8f:c1:6a:cd:31:14:ba:98:a3:93:9a:db:
                    0d:a3:8f:69:5a:90:78:1b:c6:d7:8b:3c:a3:34:36:
                    33:45:15:09:f2:af:80:25:f5:2b:74:7c:64:21:7f:
                    2e:54:c8:ed:ba:63:73:ff:69:87:7f:1e:80:ce:19:
                    e5:bd:88:d1:89:d3:4d:11:e7:96:61:d9:6c:bc:84:
                    89:dc:bd:88:38:f0:49:c2:14:5e:2a:77:35:35:ca:
                    1b:d9:33:64:d1:04:dd:f8:30:15:01:c9:71:85:f2:
                    9c:66:55:54:2e:34:dc:87:cd:23:54:a9:e0:10:98:
                    ad:01:4f:d1:49:5e:d1:23:53:e6:79:0f:75:60:9b:
                    99:9d:b3:43:60:11:34:77:44:92:38:2f:81:ae:1c:
                    eb:17:5c:7b:8c:c9:90:7d:7a:77:d1:3e:f6:21:b1:
                    a4:9d:f4:71:ba:ce:f8:1b:4d:8b:02:c3:99:35:7e:
                    94:ab:3e:f6:61:b2:97:de:c3:54:6c:1c:17:94:2c:
                    cb:36:38:82:05:25:66:8a:af:19:2f:d7:ae:32:74:
                    89:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B3:DF:66:B0:40:78:16:5F:3B:13:C5:7A:AE:D3:B6:A4:99:C2:F3
            X509v3 Authority Key Identifier:
                keyid:EF:B0:48:E3:39:28:05:E6:F9:83:E1:3D:03:B2:FD:EC:67:F9:8A:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A92rSfS48eq3y879gTR343BJ4qJooPpqXoDWJwfSYV6s/1/EFB048E3392805E6F983E13D03B2FDEC67F98ADC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFB048E3392805E6F983E13D03B2FDEC67F98ADC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A92rSfS48eq3y879gTR343BJ4qJooPpqXoDWJwfSYV6s/1/323830343a383062633a383030303a3a2f33332d3333203d3e20323731373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:80bc:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         5f:63:3f:79:75:f3:53:1a:2e:d1:4a:f3:13:d6:33:73:2c:c6:
         e3:de:c8:27:4f:ba:84:c8:b6:43:05:3b:b4:27:81:ba:cf:77:
         be:c8:89:bb:0f:2c:f2:7a:16:0e:cd:c4:60:25:18:e8:b9:21:
         64:2a:55:c5:3e:da:5e:7b:ce:33:1f:ac:1f:12:90:5b:70:56:
         69:82:c5:07:71:23:ed:72:51:09:c3:27:2c:0a:b3:62:2f:b6:
         07:91:54:49:f4:56:3d:11:6b:99:23:e6:bb:b8:13:43:66:ef:
         49:0e:5f:dd:ac:e0:76:2c:5e:96:b3:15:0d:dd:ce:e8:bc:ff:
         b8:f6:b0:4b:77:72:e9:b8:11:d8:c8:82:b3:ae:ef:e9:82:3c:
         b3:fa:a0:e8:96:e0:be:6c:40:fb:23:90:eb:b6:03:b4:14:13:
         45:40:20:79:7a:e6:cc:cb:88:66:87:51:b9:30:fe:07:bc:2e:
         2f:fc:51:4a:bc:eb:72:49:f4:41:a6:bf:54:ee:f0:81:63:ea:
         5f:18:a2:6b:a0:ee:0f:f0:3a:04:21:51:0c:22:94:df:1f:35:
         6f:20:c9:47:49:67:73:17:8d:6e:21:a4:b7:bc:9a:e3:5d:33:
         1b:bb:d6:2a:e9:24:61:21:32:e5:02:e5:c9:30:17:7e:2d:cc:
         09:73:b9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:29:47 2025 by rpki-client