Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E9oyEp4tb4o919JSuBJDqKMhG9Eb95VdAiUBY5si6eMd/0/323830343a323630633a3a2f33332d3333203d3e20323634333230.roa
File:                     323830343a323630633a3a2f33332d3333203d3e20323634333230.roa (raw, json)
Hash identifier:          tev7RfNLNyPN5CjMBxvobz9igyzu/KkBGTEHuBuFcYw=
Subject key identifier:   A0:B1:4C:70:CE:11:CE:47:E9:C5:C9:5D:1A:09:DB:57:26:F5:D1:79
Certificate issuer:       /CN=4EEF1755CA1280766B487C66444CFF2032B2AE77
Certificate serial:       5746E130978B35D0BFE6E200AEC5BD9B541A96F8
Authority key identifier: 4E:EF:17:55:CA:12:80:76:6B:48:7C:66:44:4C:FF:20:32:B2:AE:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EEF1755CA1280766B487C66444CFF2032B2AE77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E9oyEp4tb4o919JSuBJDqKMhG9Eb95VdAiUBY5si6eMd/0/323830343a323630633a3a2f33332d3333203d3e20323634333230.roa
Signing time:             Mon 18 Nov 2024 19:18:31 +0000
ROA not before:           Mon 18 Nov 2024 19:13:31 +0000
ROA not after:            Mon 17 Nov 2025 19:18:31 +0000
asID:                     264320
IP address blocks:        2804:260c::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E9oyEp4tb4o919JSuBJDqKMhG9Eb95VdAiUBY5si6eMd/0/4EEF1755CA1280766B487C66444CFF2032B2AE77.crl
                          rsync://rpki-repo.registro.br/repo/E9oyEp4tb4o919JSuBJDqKMhG9Eb95VdAiUBY5si6eMd/0/4EEF1755CA1280766B487C66444CFF2032B2AE77.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EEF1755CA1280766B487C66444CFF2032B2AE77.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 12:35:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:46:e1:30:97:8b:35:d0:bf:e6:e2:00:ae:c5:bd:9b:54:1a:96:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EEF1755CA1280766B487C66444CFF2032B2AE77
        Validity
            Not Before: Nov 18 19:13:31 2024 GMT
            Not After : Nov 17 19:18:31 2025 GMT
        Subject: CN=A0B14C70CE11CE47E9C5C95D1A09DB5726F5D179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:d4:9b:e7:8a:22:1b:4d:cb:01:ca:5d:ae:42:
                    2b:d2:1a:7f:0e:ab:3c:81:d8:94:23:22:21:fd:27:
                    ae:25:94:4a:c0:6c:ad:ae:76:46:4e:c9:96:77:16:
                    92:4d:c2:25:d0:a8:09:86:11:0f:02:35:5d:cf:b0:
                    0a:9d:69:85:2e:3f:e8:fc:db:f6:77:32:3f:06:6c:
                    db:04:3c:25:eb:c8:bc:a5:e5:40:98:c1:9c:6a:27:
                    7d:43:96:4f:6c:14:4f:24:72:c8:25:46:75:4e:18:
                    d0:79:c9:c4:27:f9:dd:f2:d5:0a:02:48:3c:43:0e:
                    50:4b:df:25:70:26:1c:58:ec:09:a1:81:8a:88:c1:
                    74:29:5e:8f:91:eb:cf:56:11:be:98:9c:6b:b0:45:
                    14:2b:2a:84:7e:c2:e7:27:1b:d2:ee:22:42:e0:87:
                    f4:d5:80:52:25:92:6a:3e:d5:21:34:92:cd:a4:c5:
                    8b:19:6a:8e:2f:47:49:e4:c6:2b:e5:67:fc:4a:60:
                    38:28:7c:5f:72:bc:7a:d7:19:1b:6a:e6:c6:86:c3:
                    91:7a:7e:a6:1f:62:1c:ab:df:e7:d9:a0:4f:f0:2e:
                    b2:04:52:8b:18:76:32:c7:f1:cd:f3:21:d1:3f:df:
                    14:49:b3:b3:ad:af:a1:05:22:94:92:12:ce:c5:c8:
                    c8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:B1:4C:70:CE:11:CE:47:E9:C5:C9:5D:1A:09:DB:57:26:F5:D1:79
            X509v3 Authority Key Identifier:
                keyid:4E:EF:17:55:CA:12:80:76:6B:48:7C:66:44:4C:FF:20:32:B2:AE:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E9oyEp4tb4o919JSuBJDqKMhG9Eb95VdAiUBY5si6eMd/0/4EEF1755CA1280766B487C66444CFF2032B2AE77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EEF1755CA1280766B487C66444CFF2032B2AE77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E9oyEp4tb4o919JSuBJDqKMhG9Eb95VdAiUBY5si6eMd/0/323830343a323630633a3a2f33332d3333203d3e20323634333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:260c::/33

    Signature Algorithm: sha256WithRSAEncryption
         36:82:a8:67:94:9d:55:29:a4:2a:f4:dd:62:f7:56:95:bd:25:
         77:40:38:95:16:63:a5:fb:1c:eb:45:02:41:02:6f:f4:68:79:
         be:d4:17:c4:c0:ba:74:fd:a8:a6:9e:b6:6b:94:a6:ae:95:b8:
         3a:13:65:ed:ee:5a:f5:78:32:d2:e8:a9:b9:54:24:07:a1:04:
         76:ad:92:86:29:f7:c3:7d:e7:d0:56:01:cf:98:b9:b7:37:07:
         ba:ec:f6:6e:bd:b1:45:cd:57:a6:94:b4:2a:9f:e1:38:b6:4e:
         a0:9d:15:6b:9d:68:40:5a:a4:32:bb:0b:b1:14:24:21:24:89:
         e0:b3:8f:2f:04:31:b0:36:56:a3:0a:34:f9:86:e4:d9:03:e5:
         52:86:91:99:19:7e:86:d2:3c:27:ee:95:22:f2:e8:45:e7:95:
         ff:20:81:19:b7:28:7f:ba:c9:7f:29:1f:0e:8b:61:85:6b:0f:
         6c:a1:62:7d:68:f0:9e:56:aa:ed:a6:c2:7d:53:5b:4f:25:bf:
         57:6c:10:c7:7f:3d:fc:9a:e1:4a:82:4f:f5:76:d9:55:cd:3c:
         e4:82:4c:55:03:10:2f:f5:64:e4:6d:1d:86:d4:d5:d9:69:5d:
         f2:19:f8:61:91:23:34:0e:45:e6:29:81:35:28:e9:4d:45:99:
         9f:7f:4b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:39:10 2025 by rpki-client