Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/323830343a333932303a343830303a3a2f34302d3430203d3e20323636303133.roa
File:                     323830343a333932303a343830303a3a2f34302d3430203d3e20323636303133.roa (raw, json)
Hash identifier:          BxgI4PjCKkF0k2+H0vwRLYx3LnCCGrqz+yDhe16j8MI=
Subject key identifier:   64:DF:14:F4:F6:C7:1F:7C:BA:A7:0C:55:38:5F:21:4C:9E:89:77:6C
Certificate issuer:       /CN=0CF49321F81789A195BED10A6CB07A13AF657F42
Certificate serial:       7B7C5858201AAC73D0E07AA55DF52A32B9737349
Authority key identifier: 0C:F4:93:21:F8:17:89:A1:95:BE:D1:0A:6C:B0:7A:13:AF:65:7F:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF49321F81789A195BED10A6CB07A13AF657F42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/323830343a333932303a343830303a3a2f34302d3430203d3e20323636303133.roa
Signing time:             Thu 04 Apr 2024 12:52:45 +0000
ROA not before:           Thu 04 Apr 2024 12:47:45 +0000
ROA not after:            Thu 03 Apr 2025 12:52:45 +0000
asID:                     266013
IP address blocks:        2804:3920:4800::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/0CF49321F81789A195BED10A6CB07A13AF657F42.crl
                          rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/0CF49321F81789A195BED10A6CB07A13AF657F42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF49321F81789A195BED10A6CB07A13AF657F42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:20:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:7c:58:58:20:1a:ac:73:d0:e0:7a:a5:5d:f5:2a:32:b9:73:73:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CF49321F81789A195BED10A6CB07A13AF657F42
        Validity
            Not Before: Apr  4 12:47:45 2024 GMT
            Not After : Apr  3 12:52:45 2025 GMT
        Subject: CN=64DF14F4F6C71F7CBAA70C55385F214C9E89776C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:af:41:d3:6d:0f:32:2b:3d:6d:82:c7:91:67:
                    70:3e:b8:94:fc:e0:48:5e:de:91:7e:38:b5:be:31:
                    ef:5d:2c:aa:65:1b:43:39:4c:0c:02:10:11:15:9c:
                    37:67:ef:6d:58:23:84:5f:78:fc:88:9c:4e:d0:2f:
                    98:dd:b0:9c:ab:9f:11:f6:ea:12:b2:18:1b:e8:1a:
                    10:b7:72:a9:de:5d:a7:ed:c6:97:e2:6e:d1:f2:d6:
                    ef:9b:ab:dd:8c:ae:da:18:07:04:4b:cb:47:4c:19:
                    47:a4:4b:54:53:bd:54:e5:90:49:c3:82:1e:6b:e8:
                    6e:dd:b7:a4:54:eb:01:c0:a4:b1:87:7f:f6:a0:6d:
                    4d:87:7b:61:5e:c8:06:59:47:d8:25:1f:27:fe:bf:
                    d3:71:93:8f:96:5b:a5:af:9d:a9:5b:61:bd:9e:5e:
                    3c:c0:69:59:97:6b:26:a2:eb:4a:58:de:28:71:1a:
                    96:c5:a5:15:4b:77:a6:c5:1b:6d:0f:07:3f:3a:4a:
                    53:d3:d9:54:67:88:5e:e6:59:c1:bb:d8:37:1f:c6:
                    e2:a6:f5:77:d1:f2:21:fd:44:9b:8c:7f:4b:4e:c6:
                    59:0f:6d:26:6b:7c:29:f7:6e:6d:62:53:a3:a2:19:
                    a3:69:43:76:39:83:b7:a1:d5:ce:92:11:0e:7a:87:
                    8e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:DF:14:F4:F6:C7:1F:7C:BA:A7:0C:55:38:5F:21:4C:9E:89:77:6C
            X509v3 Authority Key Identifier:
                keyid:0C:F4:93:21:F8:17:89:A1:95:BE:D1:0A:6C:B0:7A:13:AF:65:7F:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/0CF49321F81789A195BED10A6CB07A13AF657F42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF49321F81789A195BED10A6CB07A13AF657F42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/323830343a333932303a343830303a3a2f34302d3430203d3e20323636303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3920:4800::/40

    Signature Algorithm: sha256WithRSAEncryption
         53:85:57:b6:01:63:e9:10:0c:1f:9c:d0:44:cd:db:b3:c5:7e:
         62:e4:6b:f9:1a:3b:78:c3:a4:c4:15:c9:f8:5e:84:a6:69:b8:
         af:45:5f:3b:5a:3c:34:5e:db:f0:7d:60:a1:c8:88:3f:82:5f:
         bb:ab:14:9a:cc:cf:96:b7:be:dc:3b:80:9e:7d:a0:81:71:33:
         94:9a:0e:2c:12:3a:6b:61:1a:fa:1a:9e:9f:10:9e:ee:e6:e5:
         4e:c9:91:41:8b:66:ca:a9:76:23:93:e1:ff:5a:98:87:c9:89:
         63:13:41:9c:c3:ce:bd:5e:f7:fc:70:be:f3:da:56:09:59:6e:
         63:a6:ed:a9:20:11:00:8a:14:12:2b:3b:bf:3b:dc:71:d5:79:
         35:7b:91:51:ae:90:86:85:cd:f8:02:34:a6:a6:2e:cf:85:53:
         00:b9:9d:36:2f:8c:3a:c6:23:19:80:4d:13:40:4a:ed:15:3e:
         ef:2e:87:7a:8f:96:f3:3c:1e:85:a7:25:58:e9:0d:92:f7:83:
         cc:2a:16:51:df:9c:a4:8b:af:6d:e1:b0:25:06:42:b7:42:1e:
         d0:44:82:74:8d:57:84:71:02:2a:2c:b8:d2:38:e2:cc:4d:08:
         87:b5:d1:31:db:07:97:1d:eb:91:83:a9:03:f1:f8:09:7a:5a:
         1f:8f:da:3b
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUe3xYWCAarHPQ4HqlXfUqMrlzc0kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMENGNDkzMjFGODE3ODlBMTk1QkVEMTBBNkNCMDdBMTNB
RjY1N0Y0MjAeFw0yNDA0MDQxMjQ3NDVaFw0yNTA0MDMxMjUyNDVaMDMxMTAvBgNV
BAMTKDY0REYxNEY0RjZDNzFGN0NCQUE3MEM1NTM4NUYyMTRDOUU4OTc3NkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJr0HTbQ8yKz1tgseRZ3A+uJT8
4Ehe3pF+OLW+Me9dLKplG0M5TAwCEBEVnDdn721YI4RfePyInE7QL5jdsJyrnxH2
6hKyGBvoGhC3cqneXaftxpfibtHy1u+bq92MrtoYBwRLy0dMGUekS1RTvVTlkEnD
gh5r6G7dt6RU6wHApLGHf/agbU2He2FeyAZZR9glHyf+v9Nxk4+WW6WvnalbYb2e
XjzAaVmXayai60pY3ihxGpbFpRVLd6bFG20PBz86SlPT2VRniF7mWcG72DcfxuKm
9XfR8iH9RJuMf0tOxlkPbSZrfCn3bm1iU6OiGaNpQ3Y5g7eh1c6SEQ56h47RAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUZN8U9PbHH3y6pwxVOF8hTJ6Jd2wwHwYDVR0j
BBgwFoAUDPSTIfgXiaGVvtEKbLB6E69lf0IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUZLRW54OVdXZHB5NmJmblVMQjg3d0tKTERZc3htUUs1SlJoZmFoWnFO
V00vMi8wQ0Y0OTMyMUY4MTc4OUExOTVCRUQxMEE2Q0IwN0ExM0FGNjU3RjQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBDRjQ5MzIxRjgxNzg5QTE5
NUJFRDEwQTZDQjA3QTEzQUY2NTdGNDIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VGS0VueDlXV2RweTZiZm5VTEI4N3dLSkxEWXN4bVFLNUpSaGZhaFpxTldNLzIv
MzIzODMwMzQzYTMzMzkzMjMwM2EzNDM4MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzNjMwMzEzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEOSBIMA0GCSqGSIb3DQEBCwUA
A4IBAQBThVe2AWPpEAwfnNBEzduzxX5i5Gv5Gjt4w6TEFcn4XoSmabivRV87Wjw0
XtvwfWChyIg/gl+7qxSazM+Wt77cO4CefaCBcTOUmg4sEjprYRr6Gp6fEJ7u5uVO
yZFBi2bKqXYjk+H/WpiHyYljE0Gcw869Xvf8cL7z2lYJWW5jpu2pIBEAihQSKzu/
O9xx1Xk1e5FRrpCGhc34AjSmpi7PhVMAuZ02L4w6xiMZgE0TQErtFT7vLod6j5bz
PB6FpyVY6Q2S94PMKhZR35yki69t4bAlBkK3Qh7QRIJ0jVeEcQIqLLjSOOLMTQiH
tdEx2weXHeuRg6kD8fgJelofj9o7
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:07 2024 by rpki-client on console-ams.rpki-client.org