Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/323830343a333932303a343230303a3a2f34302d3430203d3e20323636303133.roa
File:                     323830343a333932303a343230303a3a2f34302d3430203d3e20323636303133.roa (raw, json)
Hash identifier:          0Ax8/rqy+VP/8+AjZynh7Hs2B/K8cKaNTday0tAKKdI=
Subject key identifier:   87:DC:72:E4:42:B8:23:DF:75:F7:3A:2F:92:93:37:5A:37:6B:FA:19
Certificate issuer:       /CN=0CF49321F81789A195BED10A6CB07A13AF657F42
Certificate serial:       2A6BCA062F62555FF3CC418D94291A869F7EFD91
Authority key identifier: 0C:F4:93:21:F8:17:89:A1:95:BE:D1:0A:6C:B0:7A:13:AF:65:7F:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF49321F81789A195BED10A6CB07A13AF657F42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/323830343a333932303a343230303a3a2f34302d3430203d3e20323636303133.roa
Signing time:             Thu 06 Mar 2025 13:27:21 +0000
ROA not before:           Thu 06 Mar 2025 13:22:21 +0000
ROA not after:            Thu 05 Mar 2026 13:27:21 +0000
asID:                     266013
IP address blocks:        2804:3920:4200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/0CF49321F81789A195BED10A6CB07A13AF657F42.crl
                          rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/0CF49321F81789A195BED10A6CB07A13AF657F42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF49321F81789A195BED10A6CB07A13AF657F42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 12:13:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:6b:ca:06:2f:62:55:5f:f3:cc:41:8d:94:29:1a:86:9f:7e:fd:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CF49321F81789A195BED10A6CB07A13AF657F42
        Validity
            Not Before: Mar  6 13:22:21 2025 GMT
            Not After : Mar  5 13:27:21 2026 GMT
        Subject: CN=87DC72E442B823DF75F73A2F9293375A376BFA19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:22:92:6d:98:18:91:39:19:68:17:df:ef:a8:
                    ef:b6:f5:c8:3e:e2:81:2e:3b:09:8a:4c:3a:d2:57:
                    80:d0:06:9c:ac:dd:da:40:a3:ae:14:89:7e:d6:17:
                    0b:1f:ba:63:76:b1:9c:3d:d5:f6:db:55:61:db:ec:
                    da:0e:de:e2:a0:07:fa:67:e6:07:49:d7:10:89:be:
                    d3:b7:32:7d:58:01:4b:54:fb:01:9f:da:f2:31:f4:
                    89:cb:9e:54:68:8f:ea:d6:3b:6b:64:db:32:25:a6:
                    24:78:76:f5:96:39:0b:56:59:9b:de:8b:c3:50:d8:
                    ea:19:2c:69:94:14:30:aa:df:cb:b0:a2:3c:2b:0c:
                    3c:c1:11:f2:94:8a:50:57:8f:a1:ef:b1:11:7c:eb:
                    e5:af:71:2e:7e:cd:82:cc:89:35:57:41:25:e8:6a:
                    48:6d:4c:ba:88:ce:0f:92:80:9d:8e:ac:fb:41:a0:
                    33:6f:bb:5f:8d:29:40:54:ab:39:70:06:f4:cc:fa:
                    be:4b:cc:b1:f9:64:26:9d:84:cc:61:f1:04:c7:f2:
                    de:be:fa:83:d6:7d:b0:10:79:b7:3e:81:ca:87:7f:
                    78:94:62:a9:db:00:1b:49:ee:20:7c:3c:b4:2d:2d:
                    a0:10:1a:36:88:4e:1f:d4:7c:01:e2:43:de:e5:e0:
                    42:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:DC:72:E4:42:B8:23:DF:75:F7:3A:2F:92:93:37:5A:37:6B:FA:19
            X509v3 Authority Key Identifier:
                keyid:0C:F4:93:21:F8:17:89:A1:95:BE:D1:0A:6C:B0:7A:13:AF:65:7F:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/0CF49321F81789A195BED10A6CB07A13AF657F42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF49321F81789A195BED10A6CB07A13AF657F42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/323830343a333932303a343230303a3a2f34302d3430203d3e20323636303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3920:4200::/40

    Signature Algorithm: sha256WithRSAEncryption
         8b:35:af:2f:23:2a:3d:77:be:e3:0a:a2:e4:ef:14:8f:ea:d0:
         cd:8e:41:f1:6d:93:cd:19:9d:e2:96:55:f0:b5:ee:d7:1e:c3:
         aa:e1:93:ca:3a:e6:6c:76:78:2d:83:f7:6a:95:4c:a1:b1:6f:
         d2:11:1b:db:72:2f:aa:43:6a:f0:aa:d1:54:65:78:23:23:b6:
         c2:2b:ba:33:29:6f:a2:68:8c:d9:9e:59:6e:44:27:2c:2c:7b:
         5f:96:be:e1:9a:3f:69:fc:08:79:52:bd:9d:29:93:ff:10:d6:
         8b:68:6a:a5:41:33:e4:cf:8e:3a:0c:bf:84:41:40:f2:df:ed:
         94:35:55:63:72:12:19:68:77:44:37:d3:b4:df:45:bb:69:8f:
         8c:a6:c6:b3:31:de:53:d4:35:4d:3a:ab:64:f6:80:88:d7:7d:
         9c:26:ad:08:80:3c:f0:4c:56:de:8b:73:6a:25:84:7f:a0:87:
         20:c0:d0:89:f6:ca:10:6a:ec:d4:4e:8e:a0:40:24:8a:bf:b6:
         c8:e4:44:5e:4c:8b:ea:da:09:9d:8f:25:a3:dc:24:7d:da:af:
         22:b5:10:07:df:34:d5:93:83:ef:a6:f0:24:de:41:35:45:a2:
         cd:4b:df:cf:e0:8c:24:2c:d0:5b:09:d1:97:7d:15:e4:68:6d:
         85:a9:65:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:22:14 2025 by rpki-client