Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/323830343a326231303a3a2f33382d3338203d3e203532393136.roa
File:                     323830343a326231303a3a2f33382d3338203d3e203532393136.roa (raw, json)
Hash identifier:          5LlwrcweCdnAlGGVhDkHHSPvr2Xl5L/Cy3JduooXHRw=
Subject key identifier:   F6:12:0B:F3:B4:F5:EF:BA:7F:09:B5:89:D0:31:E9:58:2C:50:5A:CA
Certificate issuer:       /CN=EF908A177FAF3EDEEAF39EF1BC3B208225302E77
Certificate serial:       5794AE0C137E858286EFC29441541B38C12FFEC4
Authority key identifier: EF:90:8A:17:7F:AF:3E:DE:EA:F3:9E:F1:BC:3B:20:82:25:30:2E:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/323830343a326231303a3a2f33382d3338203d3e203532393136.roa
Signing time:             Wed 05 Mar 2025 21:16:10 +0000
ROA not before:           Wed 05 Mar 2025 21:11:10 +0000
ROA not after:            Wed 04 Mar 2026 21:16:10 +0000
asID:                     52916
IP address blocks:        2804:2b10::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.crl
                          rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 21:22:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:94:ae:0c:13:7e:85:82:86:ef:c2:94:41:54:1b:38:c1:2f:fe:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF908A177FAF3EDEEAF39EF1BC3B208225302E77
        Validity
            Not Before: Mar  5 21:11:10 2025 GMT
            Not After : Mar  4 21:16:10 2026 GMT
        Subject: CN=F6120BF3B4F5EFBA7F09B589D031E9582C505ACA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f6:c8:51:69:66:e6:55:fe:0f:c2:10:0d:ed:
                    98:5d:e5:de:60:21:2d:ba:3b:1a:2f:3d:19:9b:25:
                    b3:82:8c:d9:4b:6c:b1:c7:d3:22:97:46:43:a7:f2:
                    1f:de:7b:99:ce:b8:c5:8b:69:b5:9f:f3:f1:2e:a0:
                    fa:37:8c:80:82:9c:5e:96:14:2d:c4:83:ed:74:d7:
                    db:2f:45:5f:1e:c9:fe:66:71:fc:60:8d:27:aa:d2:
                    5c:c4:bb:a3:b0:c2:a4:01:a7:f3:ce:c2:6a:ab:fd:
                    90:27:7c:c8:35:06:e6:ef:05:17:fa:23:f7:e4:2d:
                    fd:86:04:0c:3d:2b:59:d8:0f:3f:c7:07:7b:75:dc:
                    aa:49:18:94:8b:d3:c1:81:99:31:05:74:f3:6d:a7:
                    53:90:46:36:07:20:4b:9c:fd:f5:33:9b:5f:9e:41:
                    1a:96:3e:b9:95:94:44:0a:e0:28:6e:94:86:6b:c5:
                    c5:39:bd:e7:1c:43:0d:19:b4:83:ca:ad:43:4e:ee:
                    6a:d0:99:d7:54:e5:c7:26:a5:ad:c1:7b:12:ea:0c:
                    d7:30:62:05:78:ac:37:a7:f6:81:ee:50:e0:75:18:
                    b6:42:67:f2:27:7b:45:dd:31:e2:86:46:5d:d5:1e:
                    b6:12:b1:5d:92:53:f3:3f:77:d3:40:f6:7f:6e:e8:
                    a4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:12:0B:F3:B4:F5:EF:BA:7F:09:B5:89:D0:31:E9:58:2C:50:5A:CA
            X509v3 Authority Key Identifier:
                keyid:EF:90:8A:17:7F:AF:3E:DE:EA:F3:9E:F1:BC:3B:20:82:25:30:2E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/323830343a326231303a3a2f33382d3338203d3e203532393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b10::/38

    Signature Algorithm: sha256WithRSAEncryption
         91:71:90:7f:ac:1f:0f:93:34:c5:9a:ba:3e:c2:1f:5a:dd:b7:
         a7:09:41:8e:c2:c5:8f:1f:f5:9e:df:70:17:46:42:cb:2d:34:
         ff:eb:16:0a:46:41:36:eb:0d:04:ea:8c:29:15:25:9f:2f:b4:
         33:e5:be:fb:ec:6d:57:8d:cd:6b:92:3f:a2:6e:ff:b0:5d:a2:
         f9:bd:3c:f9:2d:d3:1c:07:92:f9:96:bd:08:d9:9e:c2:02:7f:
         a2:9a:6e:57:ad:bb:49:1d:4b:0c:92:68:bc:af:38:f1:15:43:
         f3:40:ac:ee:62:72:06:17:2d:88:92:b8:03:5f:12:5e:fc:95:
         30:5a:b8:0f:02:7c:65:ca:58:45:7d:12:9c:24:3a:82:15:48:
         4b:2e:b0:51:f9:db:2f:34:39:01:b5:8d:91:a8:5e:7b:c5:c7:
         28:1e:c0:5e:62:ea:7c:31:73:1e:14:9d:aa:37:92:4c:b3:04:
         2e:04:60:8b:85:54:d3:ec:8e:56:67:5c:b1:33:52:4b:27:00:
         03:96:e7:c2:e9:22:6a:eb:17:a8:75:0e:25:4b:35:e5:d7:85:
         9f:60:ad:a9:78:94:b3:a0:ea:c8:59:d9:44:38:a8:14:bc:ef:
         34:75:09:db:9c:4b:4d:03:89:44:0f:e4:17:e5:e2:b3:f5:50:
         e8:c5:8f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:05:00 2025 by rpki-client