Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/323830343a333932303a343130303a3a2f34302d3430203d3e20323636303133.roa
File:                     323830343a333932303a343130303a3a2f34302d3430203d3e20323636303133.roa (raw, json)
Hash identifier:          0hvD5+pQ8a3eLmN7YFpCyyIigbnYdu/0kduTzLfeUNM=
Subject key identifier:   0A:E4:F6:1B:5B:DD:69:6B:6D:61:35:20:EC:40:25:B5:2C:DF:48:D1
Certificate issuer:       /CN=0CF49321F81789A195BED10A6CB07A13AF657F42
Certificate serial:       3DDCA1E4CE35F99E16F64C76851767384458E9F0
Authority key identifier: 0C:F4:93:21:F8:17:89:A1:95:BE:D1:0A:6C:B0:7A:13:AF:65:7F:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF49321F81789A195BED10A6CB07A13AF657F42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/323830343a333932303a343130303a3a2f34302d3430203d3e20323636303133.roa
Signing time:             Thu 04 Apr 2024 12:52:45 +0000
ROA not before:           Thu 04 Apr 2024 12:47:45 +0000
ROA not after:            Thu 03 Apr 2025 12:52:45 +0000
asID:                     266013
IP address blocks:        2804:3920:4100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/0CF49321F81789A195BED10A6CB07A13AF657F42.crl
                          rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/0CF49321F81789A195BED10A6CB07A13AF657F42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF49321F81789A195BED10A6CB07A13AF657F42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:20:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:dc:a1:e4:ce:35:f9:9e:16:f6:4c:76:85:17:67:38:44:58:e9:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CF49321F81789A195BED10A6CB07A13AF657F42
        Validity
            Not Before: Apr  4 12:47:45 2024 GMT
            Not After : Apr  3 12:52:45 2025 GMT
        Subject: CN=0AE4F61B5BDD696B6D613520EC4025B52CDF48D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b7:73:f7:5f:7c:63:c6:9a:4d:9a:ec:c5:25:
                    3c:18:43:a1:fa:21:35:18:6e:e7:f8:a5:db:cc:9a:
                    e9:04:52:17:3d:6c:ba:37:cd:d5:2f:f2:75:60:f1:
                    0d:ba:21:c9:cb:3e:77:49:c1:38:f2:12:b7:52:d1:
                    e4:0d:5a:1b:a9:15:af:c2:fd:fa:c1:06:83:cc:ee:
                    ee:9f:c1:80:e5:8e:57:29:6a:17:cb:05:ab:93:10:
                    d2:20:3d:e3:17:f3:93:4b:d2:96:00:f1:30:f9:a8:
                    d4:2a:8a:fe:24:bf:04:1d:e9:27:cc:33:a9:71:5e:
                    ac:74:8c:43:7b:d1:e4:89:00:6c:92:c8:85:5d:a4:
                    e0:8f:84:2a:2b:1a:d8:22:43:8a:17:2d:a5:24:b4:
                    61:8b:4d:76:ad:68:15:44:c2:a1:fd:0a:ef:c7:1c:
                    e8:b7:9e:44:a1:b9:e9:75:e8:ee:70:ce:2a:20:70:
                    b5:e7:46:ef:65:8d:7c:8e:6c:54:e9:28:18:12:d8:
                    45:7f:aa:8d:c4:0b:d7:15:e9:3e:8f:c3:ed:d9:06:
                    04:cf:c5:d3:2e:6c:13:2c:cd:a8:c4:cc:d3:d8:0d:
                    c5:a7:43:4f:89:93:5d:e4:39:83:b0:b5:c7:60:95:
                    af:30:d7:ea:48:59:db:66:7a:81:48:f2:30:d3:2c:
                    06:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E4:F6:1B:5B:DD:69:6B:6D:61:35:20:EC:40:25:B5:2C:DF:48:D1
            X509v3 Authority Key Identifier:
                keyid:0C:F4:93:21:F8:17:89:A1:95:BE:D1:0A:6C:B0:7A:13:AF:65:7F:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/0CF49321F81789A195BED10A6CB07A13AF657F42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF49321F81789A195BED10A6CB07A13AF657F42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/323830343a333932303a343130303a3a2f34302d3430203d3e20323636303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3920:4100::/40

    Signature Algorithm: sha256WithRSAEncryption
         59:66:9f:f9:d8:3f:af:c8:34:5e:07:d8:96:88:bf:55:41:29:
         b7:70:e8:4c:84:d9:a6:18:54:a7:52:26:24:8e:de:2f:ef:03:
         c8:c8:fb:56:13:64:f6:2a:6d:eb:5b:08:2e:9d:cf:f1:46:08:
         69:6a:13:6f:c7:d7:97:15:68:94:66:8f:88:cf:cd:74:27:c4:
         f5:15:ae:70:6e:9d:83:66:5b:ff:b0:45:62:f0:a9:23:7a:45:
         24:33:5d:05:64:f3:3d:5b:56:79:b0:89:60:c2:ce:87:e6:d5:
         a0:b1:9f:8b:bf:90:77:72:a6:e0:41:b6:36:1d:28:66:81:44:
         d9:60:66:09:17:50:7d:5c:20:16:f4:c9:64:25:3f:c7:a4:cd:
         86:d1:bc:82:c7:c2:28:b4:f8:77:60:86:de:e7:dc:45:1f:61:
         20:da:76:ce:7f:88:76:a6:c6:d9:8f:64:85:f3:3f:51:f9:a1:
         fe:3c:05:b2:c7:42:f0:7a:ae:f6:11:2f:05:36:0b:b4:3c:ef:
         34:ed:88:45:32:90:45:ba:a2:86:a5:f8:10:0f:94:8a:2c:f4:
         3d:49:a3:71:cf:51:6d:00:a1:50:ea:00:75:a8:32:bc:f3:6b:
         87:a7:07:e7:a6:d8:76:39:b4:fa:8e:3e:38:a6:83:d2:02:d8:
         9f:3e:7f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:07 2024 by rpki-client on console-ams.rpki-client.org