Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/323830343a333932303a343130303a3a2f34302d3430203d3e20323636303133.roa
File:                     323830343a333932303a343130303a3a2f34302d3430203d3e20323636303133.roa (raw, json)
Hash identifier:          L7PRlVXv+1TTSVI3e7IOEBq7hTC7vVfWbSfeUZAUQuo=
Subject key identifier:   66:AB:E5:AE:34:2B:61:85:15:BC:88:41:8A:43:2B:46:DB:68:03:EB
Certificate issuer:       /CN=0CF49321F81789A195BED10A6CB07A13AF657F42
Certificate serial:       1275A37A6814AE8E4994EFA68D44085D3B2FD757
Authority key identifier: 0C:F4:93:21:F8:17:89:A1:95:BE:D1:0A:6C:B0:7A:13:AF:65:7F:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF49321F81789A195BED10A6CB07A13AF657F42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/323830343a333932303a343130303a3a2f34302d3430203d3e20323636303133.roa
Signing time:             Thu 06 Mar 2025 13:27:22 +0000
ROA not before:           Thu 06 Mar 2025 13:22:22 +0000
ROA not after:            Thu 05 Mar 2026 13:27:22 +0000
asID:                     266013
IP address blocks:        2804:3920:4100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/0CF49321F81789A195BED10A6CB07A13AF657F42.crl
                          rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/0CF49321F81789A195BED10A6CB07A13AF657F42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF49321F81789A195BED10A6CB07A13AF657F42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 12:13:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:75:a3:7a:68:14:ae:8e:49:94:ef:a6:8d:44:08:5d:3b:2f:d7:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CF49321F81789A195BED10A6CB07A13AF657F42
        Validity
            Not Before: Mar  6 13:22:22 2025 GMT
            Not After : Mar  5 13:27:22 2026 GMT
        Subject: CN=66ABE5AE342B618515BC88418A432B46DB6803EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:52:fb:8e:c1:04:19:da:fb:0e:4b:06:34:c8:
                    0f:03:9a:3e:9a:4d:b2:af:80:7f:9f:8e:b7:7c:7f:
                    25:6f:e1:58:80:a1:e6:57:28:58:cb:65:a4:a9:20:
                    e3:89:47:f0:79:8b:13:c7:c7:2e:9c:81:12:cd:ce:
                    3e:33:54:a9:fb:50:01:25:3a:29:92:f5:d9:7c:fa:
                    43:ee:05:d7:9d:28:f1:f1:9e:0c:53:6a:ea:30:e0:
                    a0:39:2d:24:d2:ab:3a:35:57:6e:b9:cf:b2:2b:09:
                    4f:86:6f:25:b0:d0:37:3a:a1:3e:b1:25:89:ab:c3:
                    ac:03:d7:9c:c9:aa:a5:c6:d7:40:30:f5:7c:7b:c2:
                    b5:fb:8c:f4:8c:73:7c:c4:47:17:34:24:69:98:4f:
                    3e:83:bb:12:56:d2:cb:6d:2e:18:1d:16:e3:ec:e7:
                    90:92:3b:e9:ee:37:54:8f:99:a6:58:c7:13:47:54:
                    f1:31:64:2e:e6:9c:b1:9a:7d:70:10:c2:76:11:ff:
                    52:95:18:f7:f8:d8:e9:19:a6:fd:77:af:bd:85:e9:
                    6e:aa:1e:9e:ae:1b:f9:cf:cf:11:35:bc:48:dd:e0:
                    ba:36:53:20:2f:24:c7:0c:73:d3:ba:75:ee:85:69:
                    f9:ba:3c:c3:06:4e:97:d3:02:ff:1a:14:3c:d0:ee:
                    15:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:AB:E5:AE:34:2B:61:85:15:BC:88:41:8A:43:2B:46:DB:68:03:EB
            X509v3 Authority Key Identifier:
                keyid:0C:F4:93:21:F8:17:89:A1:95:BE:D1:0A:6C:B0:7A:13:AF:65:7F:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/0CF49321F81789A195BED10A6CB07A13AF657F42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF49321F81789A195BED10A6CB07A13AF657F42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/323830343a333932303a343130303a3a2f34302d3430203d3e20323636303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3920:4100::/40

    Signature Algorithm: sha256WithRSAEncryption
         5f:ae:66:a0:12:13:ec:f2:7c:1d:be:33:9a:1e:67:d5:b3:0a:
         5c:bc:40:a6:56:cf:14:72:2f:eb:53:90:71:b6:e1:33:42:28:
         f6:a2:41:63:83:3e:3e:14:f6:0f:c6:38:5c:60:07:47:a9:67:
         78:47:93:e6:26:8c:20:c7:42:4b:7f:40:df:78:ca:fc:a3:79:
         e4:0a:48:ed:ce:de:51:b9:35:f0:8f:29:65:ff:e3:72:2a:e0:
         95:65:60:de:a6:6c:de:17:e1:8d:6e:33:52:e2:9b:bb:ce:f2:
         22:bb:91:ea:1c:a2:58:24:47:1b:a7:42:1e:1f:b6:3b:c9:b7:
         36:cf:e9:69:78:18:1f:9a:01:be:7f:7c:a2:e2:93:3a:23:ed:
         38:73:7d:31:b0:a3:14:89:3b:75:6f:47:76:eb:0b:83:98:3a:
         dc:4d:7f:b4:7a:3f:ab:d0:91:32:26:6a:61:0f:82:a9:ab:54:
         c5:f8:67:b9:99:82:d5:66:34:aa:87:f4:c5:56:87:94:76:73:
         a1:3f:6b:08:7d:ef:34:6b:55:7d:73:c7:a1:d8:0e:2b:5a:6f:
         a5:75:d7:35:9c:31:c5:3b:b5:0a:7b:5c:36:fd:58:59:3c:47:
         2f:b6:d9:58:b5:f0:fa:ff:25:18:66:22:33:ca:ad:6c:02:c3:
         ff:7b:af:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:24:18 2025 by rpki-client