Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/323830343a333932303a343430303a3a2f34302d3430203d3e20323636303133.roa
File:                     323830343a333932303a343430303a3a2f34302d3430203d3e20323636303133.roa (raw, json)
Hash identifier:          V6If2sdydpJgyJGzqvPmxfHlPNxYYo8jUqU6Sq0Oa60=
Subject key identifier:   59:87:0C:14:74:78:D0:F2:AA:44:40:E5:4D:BC:47:F8:3C:8C:17:89
Certificate issuer:       /CN=0CF49321F81789A195BED10A6CB07A13AF657F42
Certificate serial:       66B2A473415D920CD0E85A70D1F7AAF4DE8EB05A
Authority key identifier: 0C:F4:93:21:F8:17:89:A1:95:BE:D1:0A:6C:B0:7A:13:AF:65:7F:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF49321F81789A195BED10A6CB07A13AF657F42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/323830343a333932303a343430303a3a2f34302d3430203d3e20323636303133.roa
Signing time:             Thu 04 Apr 2024 12:52:45 +0000
ROA not before:           Thu 04 Apr 2024 12:47:45 +0000
ROA not after:            Thu 03 Apr 2025 12:52:45 +0000
asID:                     266013
IP address blocks:        2804:3920:4400::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/0CF49321F81789A195BED10A6CB07A13AF657F42.crl
                          rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/0CF49321F81789A195BED10A6CB07A13AF657F42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF49321F81789A195BED10A6CB07A13AF657F42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:20:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:b2:a4:73:41:5d:92:0c:d0:e8:5a:70:d1:f7:aa:f4:de:8e:b0:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CF49321F81789A195BED10A6CB07A13AF657F42
        Validity
            Not Before: Apr  4 12:47:45 2024 GMT
            Not After : Apr  3 12:52:45 2025 GMT
        Subject: CN=59870C147478D0F2AA4440E54DBC47F83C8C1789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:32:80:9e:79:00:b5:ff:45:a2:4e:17:7c:e4:
                    0f:13:f7:4b:90:4e:e1:9c:ae:0a:3d:22:c2:75:ab:
                    a7:dc:ad:1c:9a:79:f8:c4:45:13:16:82:fc:e2:78:
                    f7:c8:f4:87:a2:60:e5:c0:8e:d9:51:ae:2b:04:25:
                    21:09:dd:57:ef:42:d1:14:26:a6:78:a1:4d:07:6b:
                    1f:92:2b:46:56:f0:31:8f:b6:94:fa:0e:0f:68:f5:
                    c0:57:f7:3d:8b:43:91:e4:f7:b9:1c:33:7a:43:b9:
                    a4:64:48:50:71:ec:3d:d3:b5:bf:6d:39:6c:f4:a9:
                    bf:e2:de:a6:8a:d3:b3:58:b5:e3:a0:ca:ed:8b:05:
                    28:bd:fd:12:cb:30:2d:b5:37:b4:b8:25:e6:b0:de:
                    75:92:a7:5d:f1:f9:41:eb:9a:ea:ba:11:54:5e:e3:
                    07:c9:9d:74:00:95:6c:2a:e9:6d:6a:19:98:db:52:
                    24:05:ba:80:b9:df:14:5c:c8:df:04:79:e7:e2:e1:
                    8f:b5:bf:83:8f:af:dc:24:c0:38:73:2f:fe:b4:4c:
                    1c:73:1c:e1:f7:cd:bf:79:04:22:11:d1:87:40:fa:
                    81:28:ce:03:42:d8:7b:63:1d:76:0a:7f:0c:7b:38:
                    b9:c5:79:cc:38:a8:79:a5:82:18:8b:0a:b4:f4:b3:
                    87:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:87:0C:14:74:78:D0:F2:AA:44:40:E5:4D:BC:47:F8:3C:8C:17:89
            X509v3 Authority Key Identifier:
                keyid:0C:F4:93:21:F8:17:89:A1:95:BE:D1:0A:6C:B0:7A:13:AF:65:7F:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/0CF49321F81789A195BED10A6CB07A13AF657F42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF49321F81789A195BED10A6CB07A13AF657F42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/323830343a333932303a343430303a3a2f34302d3430203d3e20323636303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3920:4400::/40

    Signature Algorithm: sha256WithRSAEncryption
         a7:ac:05:ad:b6:b6:65:b5:b1:61:e1:f4:fe:f5:83:bb:27:d9:
         0c:da:02:85:97:0c:3b:49:15:f1:0a:5b:02:19:07:3c:62:c3:
         fa:f7:13:19:81:40:73:3c:7d:ae:80:4c:30:15:57:63:f5:7a:
         45:2c:b6:f9:3f:13:1a:f5:bd:32:55:a2:38:9c:a4:f4:c3:4f:
         c7:ab:60:7b:58:80:4b:7d:c0:b9:a6:25:fa:52:72:95:66:ba:
         e2:97:fd:8a:cb:03:93:91:74:a5:de:34:5a:15:ba:a0:70:f1:
         5a:d8:83:35:91:47:32:dd:70:2a:dc:91:e9:5f:08:59:cc:ca:
         5d:69:b5:fd:27:d3:4c:6d:67:5c:d2:e9:7a:89:60:97:b7:73:
         fb:63:2e:50:23:85:b5:68:98:b9:64:93:b3:de:3a:5d:0f:17:
         1e:1b:de:56:a0:32:51:f9:ed:51:25:51:29:f5:21:44:c9:21:
         46:0b:f2:d5:1e:6d:a3:22:04:23:1f:78:99:aa:ae:32:0e:bf:
         d0:c9:f0:94:fb:42:44:f1:82:51:53:c1:57:51:27:75:ab:9a:
         f2:9f:62:5d:80:62:60:71:ea:3a:b0:d3:70:c7:8e:a4:ad:5b:
         7e:54:f5:af:cd:e0:b1:59:c8:a8:ac:41:cf:00:57:67:26:65:
         d5:94:34:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:07 2024 by rpki-client on console-ams.rpki-client.org