Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/323830343a346531383a3a2f33322d3438203d3e20323638323339.roa
File:                     323830343a346531383a3a2f33322d3438203d3e20323638323339.roa (raw, json)
Hash identifier:          6b4aeUC83dae1eovjxZwcx3YdG1I1uSyyCOQesx8Lxw=
Subject key identifier:   27:AE:69:26:59:E9:0E:0B:67:BC:03:48:78:25:FC:52:94:AC:C6:2A
Certificate issuer:       /CN=020AFECF727CE88A459FCBC17D694507CE9ADE22
Certificate serial:       5C91304AF8CDF2E02902F8E626FA8FD17811C2F9
Authority key identifier: 02:0A:FE:CF:72:7C:E8:8A:45:9F:CB:C1:7D:69:45:07:CE:9A:DE:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/020AFECF727CE88A459FCBC17D694507CE9ADE22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/323830343a346531383a3a2f33322d3438203d3e20323638323339.roa
Signing time:             Thu 19 Dec 2024 20:12:20 +0000
ROA not before:           Thu 19 Dec 2024 20:07:20 +0000
ROA not after:            Thu 18 Dec 2025 20:12:20 +0000
asID:                     268239
IP address blocks:        2804:4e18::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/020AFECF727CE88A459FCBC17D694507CE9ADE22.crl
                          rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/020AFECF727CE88A459FCBC17D694507CE9ADE22.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/020AFECF727CE88A459FCBC17D694507CE9ADE22.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 23:47:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:91:30:4a:f8:cd:f2:e0:29:02:f8:e6:26:fa:8f:d1:78:11:c2:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=020AFECF727CE88A459FCBC17D694507CE9ADE22
        Validity
            Not Before: Dec 19 20:07:20 2024 GMT
            Not After : Dec 18 20:12:20 2025 GMT
        Subject: CN=27AE692659E90E0B67BC03487825FC5294ACC62A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0f:ff:78:04:a2:85:8a:82:1d:d9:15:43:27:
                    7f:56:83:cd:1f:a5:c2:f3:03:75:99:7c:fb:22:aa:
                    03:a8:68:42:ba:2f:af:f9:65:5b:6c:b3:60:71:69:
                    21:03:66:ce:94:7e:7b:a1:5d:af:32:97:6b:52:87:
                    56:ee:86:df:02:7d:6a:07:b9:ce:c4:e6:5d:4c:d1:
                    1e:8d:cb:00:54:f1:a6:da:64:61:2f:e7:95:88:8f:
                    8b:10:38:7d:c4:28:5d:25:c8:d5:c6:fb:27:a9:60:
                    ca:b8:0b:68:0e:a0:83:c0:d7:55:bf:d1:05:79:aa:
                    a5:b2:b2:ed:a6:a0:60:80:5d:c7:fb:87:44:79:34:
                    1f:bd:d3:1e:88:b1:ee:b4:65:60:16:b7:f8:10:9b:
                    41:d7:92:4b:68:14:03:4f:e2:de:89:f4:3c:27:72:
                    9b:55:7d:59:8d:4f:ad:ca:07:10:25:11:47:70:2e:
                    53:d4:4a:ec:dc:2f:e4:ca:3f:ba:01:3f:79:b1:31:
                    a5:f2:3b:8e:7b:84:d9:0b:90:4a:a0:5c:f2:13:57:
                    fe:a6:a8:e5:dc:4a:9b:62:5d:91:8b:32:0a:39:05:
                    20:d6:85:f6:c7:26:90:ed:a4:33:28:03:a1:1b:35:
                    de:15:b1:a2:10:6a:b5:af:57:8b:e4:c3:e8:d3:49:
                    34:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:AE:69:26:59:E9:0E:0B:67:BC:03:48:78:25:FC:52:94:AC:C6:2A
            X509v3 Authority Key Identifier:
                keyid:02:0A:FE:CF:72:7C:E8:8A:45:9F:CB:C1:7D:69:45:07:CE:9A:DE:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/020AFECF727CE88A459FCBC17D694507CE9ADE22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/020AFECF727CE88A459FCBC17D694507CE9ADE22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/323830343a346531383a3a2f33322d3438203d3e20323638323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e18::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:5e:d9:87:ba:bd:32:9c:6a:90:e1:20:a6:dd:bb:d0:53:1c:
         fa:af:c1:86:9c:df:49:be:3e:ca:67:82:ba:32:f7:e2:ba:52:
         c9:54:56:0f:05:79:2c:49:43:33:cd:d2:58:b8:1d:6e:9a:87:
         c8:a6:6a:d5:d2:ac:09:67:7a:b6:ce:6a:de:04:b2:0b:bb:0e:
         e2:6c:5a:3e:a1:70:ea:a0:b4:ca:e2:40:16:9e:4a:80:a5:62:
         84:90:51:2d:b6:b2:a8:4e:94:10:f6:9a:7f:89:f9:be:c3:42:
         d4:ca:ba:d8:b2:b5:df:00:78:9f:b2:bf:e0:ba:96:c2:27:96:
         17:d7:7e:6d:76:82:0b:b1:d9:13:d1:ad:94:e9:2b:a9:4e:2a:
         4c:4b:15:05:0d:8d:60:33:8e:e8:bd:b1:b9:8a:1f:0a:bc:d0:
         22:c5:bc:71:b9:15:20:90:3d:50:ed:1d:7a:e9:29:30:a5:fe:
         27:ed:d5:e0:a1:b9:4b:70:29:2e:ba:f0:6b:f7:24:cf:bc:ca:
         16:86:06:2f:79:6c:44:13:0c:77:5d:3b:8f:59:dd:e6:80:2b:
         5d:ec:51:79:1c:2c:b5:e2:17:e1:91:b4:92:94:c6:df:41:3b:
         94:12:05:5f:29:5e:6f:4e:ca:46:00:2d:6b:c9:de:56:8a:fe:
         23:81:12:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:04:04 2025 by rpki-client