Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/323830343a3261343a3a2f33322d3438203d3e20323632383238.roa
File:                     323830343a3261343a3a2f33322d3438203d3e20323632383238.roa (raw, json)
Hash identifier:          Exic53bjSDvKQzEmLUdN6uz943GuDGr7UPbgLtys41o=
Subject key identifier:   97:A5:33:57:36:4F:5D:2E:AA:30:18:7E:20:3F:52:62:54:1B:F8:82
Certificate issuer:       /CN=2ACA27717E82C4618B8C9B8809209FD48E26847B
Certificate serial:       19B585018F766E45CB5C9B8FF8C2A566FE89D483
Authority key identifier: 2A:CA:27:71:7E:82:C4:61:8B:8C:9B:88:09:20:9F:D4:8E:26:84:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA27717E82C4618B8C9B8809209FD48E26847B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/323830343a3261343a3a2f33322d3438203d3e20323632383238.roa
Signing time:             Tue 11 Mar 2025 17:37:45 +0000
ROA not before:           Tue 11 Mar 2025 17:32:45 +0000
ROA not after:            Tue 10 Mar 2026 17:37:45 +0000
asID:                     262828
IP address blocks:        2804:2a4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/2ACA27717E82C4618B8C9B8809209FD48E26847B.crl
                          rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/2ACA27717E82C4618B8C9B8809209FD48E26847B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA27717E82C4618B8C9B8809209FD48E26847B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 04:43:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:b5:85:01:8f:76:6e:45:cb:5c:9b:8f:f8:c2:a5:66:fe:89:d4:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ACA27717E82C4618B8C9B8809209FD48E26847B
        Validity
            Not Before: Mar 11 17:32:45 2025 GMT
            Not After : Mar 10 17:37:45 2026 GMT
        Subject: CN=97A53357364F5D2EAA30187E203F5262541BF882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:be:95:46:d2:f2:fd:aa:38:a8:c5:a6:cc:b2:
                    17:06:49:21:2d:6c:ff:02:a8:81:42:2e:b9:91:43:
                    64:24:71:cc:4e:9f:83:dd:48:d8:bc:a2:aa:3b:8a:
                    14:3f:b4:74:96:2a:28:8b:2b:1f:65:26:85:2a:5e:
                    bf:29:4e:93:8a:bf:b1:43:21:fd:0a:cd:d1:2a:d1:
                    2e:62:4d:b7:0f:76:75:3d:23:d8:51:44:58:1d:d2:
                    e8:39:f1:bb:87:21:c6:7b:cf:86:d4:e1:bc:be:7c:
                    66:3e:c8:63:14:6d:63:5c:f7:28:28:e2:89:d1:ae:
                    fa:bd:75:4b:1e:0f:e2:01:2b:a3:04:6c:40:07:d9:
                    dd:47:c1:34:1f:48:73:92:2d:b1:ec:69:6d:63:ad:
                    01:06:47:b5:78:75:6a:f5:95:c9:b1:eb:89:45:a8:
                    4f:6f:c5:e8:6b:21:68:75:b6:71:f3:bd:a0:74:6c:
                    f1:79:e3:ee:0d:15:d7:e7:97:3e:85:af:ee:88:ac:
                    53:23:6d:f2:0c:ec:3b:4e:90:0f:2c:cd:9c:dc:b3:
                    7f:5f:41:29:88:8d:08:a3:49:ae:37:0d:ea:74:de:
                    17:ac:fe:18:3f:0d:a1:b1:0f:52:62:17:48:1d:73:
                    01:0a:00:f0:4d:fc:e4:2c:97:df:10:a1:16:74:cb:
                    49:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:A5:33:57:36:4F:5D:2E:AA:30:18:7E:20:3F:52:62:54:1B:F8:82
            X509v3 Authority Key Identifier:
                keyid:2A:CA:27:71:7E:82:C4:61:8B:8C:9B:88:09:20:9F:D4:8E:26:84:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/2ACA27717E82C4618B8C9B8809209FD48E26847B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA27717E82C4618B8C9B8809209FD48E26847B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/323830343a3261343a3a2f33322d3438203d3e20323632383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:3e:12:b3:e7:23:93:33:dd:c0:84:76:bf:71:48:8e:0f:2e:
         64:38:2b:91:79:ca:57:fc:d3:50:c8:e3:26:e6:c4:b1:5a:eb:
         19:fc:2c:91:84:18:d7:4b:c5:26:b3:a5:41:be:51:81:9a:ab:
         49:28:ba:58:2d:8e:4b:59:9e:1a:60:3e:97:9f:76:9d:65:0e:
         26:a6:7c:73:38:61:54:29:fe:9f:01:dc:6f:43:ed:dc:14:b2:
         23:b4:8c:7a:a4:48:a5:e1:c6:cd:36:dd:8c:56:02:71:2f:ab:
         36:28:f6:2d:0f:1b:a4:af:37:88:e4:4f:77:fd:66:4d:91:53:
         a7:0b:a8:0c:0b:0a:3d:c8:c0:72:5a:21:1c:85:e4:76:0b:7b:
         18:44:de:61:aa:f8:01:9e:9e:ad:2f:87:bd:38:e9:8a:c5:bb:
         d7:75:c7:75:48:f2:8b:d5:5c:e1:08:7d:c6:a7:17:9b:f0:e3:
         6a:4c:c6:85:fb:7d:ec:28:6e:22:a1:ed:d0:23:d2:29:a5:20:
         2e:45:70:f9:6a:15:dd:05:19:a5:41:b8:25:87:f1:79:4a:d7:
         91:00:04:8a:76:17:c4:0e:37:d9:d3:cb:90:4d:f4:01:72:d8:
         07:1c:ff:18:34:0f:6c:32:0f:8e:31:00:f4:4b:0e:5f:88:1b:
         e9:32:7d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:03:38 2025 by rpki-client