Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/323830343a333932303a343830303a3a2f34302d3430203d3e20323636303133.roa
File:                     323830343a333932303a343830303a3a2f34302d3430203d3e20323636303133.roa (raw, json)
Hash identifier:          qxkY1+4peXBcwl4K9E7eeQwFdNrU8cRf46M103q2188=
Subject key identifier:   D8:76:B0:F4:EC:74:AE:BA:8D:AD:B9:3D:00:67:CE:BC:26:A6:F1:44
Certificate issuer:       /CN=0CF49321F81789A195BED10A6CB07A13AF657F42
Certificate serial:       278ABD89610A963F2B5C52A96DBE35640F830B5A
Authority key identifier: 0C:F4:93:21:F8:17:89:A1:95:BE:D1:0A:6C:B0:7A:13:AF:65:7F:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF49321F81789A195BED10A6CB07A13AF657F42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/323830343a333932303a343830303a3a2f34302d3430203d3e20323636303133.roa
Signing time:             Thu 06 Mar 2025 13:27:21 +0000
ROA not before:           Thu 06 Mar 2025 13:22:21 +0000
ROA not after:            Thu 05 Mar 2026 13:27:21 +0000
asID:                     266013
IP address blocks:        2804:3920:4800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/0CF49321F81789A195BED10A6CB07A13AF657F42.crl
                          rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/0CF49321F81789A195BED10A6CB07A13AF657F42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF49321F81789A195BED10A6CB07A13AF657F42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 12:13:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:8a:bd:89:61:0a:96:3f:2b:5c:52:a9:6d:be:35:64:0f:83:0b:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CF49321F81789A195BED10A6CB07A13AF657F42
        Validity
            Not Before: Mar  6 13:22:21 2025 GMT
            Not After : Mar  5 13:27:21 2026 GMT
        Subject: CN=D876B0F4EC74AEBA8DADB93D0067CEBC26A6F144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a9:85:b0:82:b8:8f:b9:2a:69:79:69:cd:2a:
                    a6:b4:3a:06:41:51:05:bb:38:dc:34:d4:8b:a6:46:
                    ef:fe:d5:e7:04:6d:e6:07:77:be:21:35:7b:da:8e:
                    06:51:c3:fe:46:a1:f9:bc:a4:d2:93:24:4a:2d:7b:
                    14:00:11:a3:e9:cb:7f:83:b4:a7:37:f0:5d:d8:bc:
                    e3:2c:fe:f6:7a:85:2a:41:1c:57:8e:ae:94:a2:fb:
                    d6:5c:fa:e9:77:1d:b5:25:9c:00:ca:49:cf:50:e0:
                    26:d1:a5:6a:be:ba:fc:06:a5:f0:b2:9c:e7:f6:e0:
                    3e:41:bf:1c:1a:2c:1d:61:4e:00:c2:4e:eb:8f:81:
                    3c:50:b9:46:b8:4a:b6:d6:54:27:51:ff:98:e9:e5:
                    0c:08:73:26:e5:1d:e8:19:da:7f:56:ef:93:06:1b:
                    bb:02:c7:f7:ca:20:12:26:63:a8:2e:d6:ed:b4:f9:
                    12:42:d0:da:30:eb:d9:a4:b8:6c:f4:0e:31:ea:ec:
                    9b:51:32:ab:08:5b:21:9c:6d:52:ac:50:c0:c1:a3:
                    3d:72:a8:fa:d5:9c:7a:d4:6c:e8:e7:46:57:2c:22:
                    6e:2d:07:89:97:db:89:d1:ab:13:71:32:4c:ae:b0:
                    76:fa:ad:59:08:e0:98:54:d6:0c:cd:5a:07:6d:d1:
                    21:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:76:B0:F4:EC:74:AE:BA:8D:AD:B9:3D:00:67:CE:BC:26:A6:F1:44
            X509v3 Authority Key Identifier:
                keyid:0C:F4:93:21:F8:17:89:A1:95:BE:D1:0A:6C:B0:7A:13:AF:65:7F:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/0CF49321F81789A195BED10A6CB07A13AF657F42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF49321F81789A195BED10A6CB07A13AF657F42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/323830343a333932303a343830303a3a2f34302d3430203d3e20323636303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3920:4800::/40

    Signature Algorithm: sha256WithRSAEncryption
         a2:19:91:11:b7:57:b2:f5:42:24:4d:4d:72:04:43:41:10:db:
         c3:64:d7:c2:c2:aa:1a:57:57:4e:de:58:68:21:5d:4c:75:f6:
         14:a6:b4:1e:0e:12:63:a1:f8:38:05:94:22:c0:c7:f2:1d:f6:
         8a:a2:cd:4a:88:98:d9:be:4e:0c:05:d2:d3:ff:8b:33:9f:bf:
         24:81:19:21:ba:42:8f:28:08:57:f9:98:b1:78:20:2c:84:d8:
         d8:34:89:f8:d5:3f:47:dc:32:cb:bd:e3:58:37:7e:a4:88:2d:
         1d:ec:34:c6:42:b0:17:0b:1d:d9:7d:57:b1:db:1f:fc:2b:4a:
         00:96:37:ef:e4:1a:4a:de:5f:75:f2:50:e0:bd:81:02:a1:8b:
         86:ae:03:94:60:5e:f2:aa:d0:4b:ed:5b:33:3d:fc:18:67:f1:
         e2:0b:03:5c:b9:c5:e3:51:ff:46:6f:e6:68:af:c5:57:a5:ab:
         6f:d6:84:22:f3:1c:87:9d:d8:dc:47:0d:c2:1d:3c:6e:8b:30:
         06:2b:67:7a:67:21:e7:40:3a:d2:cd:ed:51:15:2b:1a:0d:3e:
         1d:06:0d:67:43:68:36:64:f2:3b:fb:14:84:aa:ea:d6:b1:47:
         45:aa:d1:09:12:3a:f0:d9:f2:4e:9d:d8:3e:0c:ed:8c:14:bc:
         ec:d4:69:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:09:36 2025 by rpki-client