Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJUaKhkLJJJa2F8vs4jFtzfTWksoenEjDbJwCfhaXfi8/1/323830343a323838383a343030303a3a2f33342d3334203d3e20323633393637.roa
File:                     323830343a323838383a343030303a3a2f33342d3334203d3e20323633393637.roa (raw, json)
Hash identifier:          fGWqeGCnkXX6xdTDpOviR0N2Xxf2yXc5/zYHHEt88sU=
Subject key identifier:   9F:86:2D:B4:AC:1C:29:25:E4:32:BA:83:B7:D9:35:03:98:54:61:FB
Certificate issuer:       /CN=B224D943E8065A18929A784B51D1633209C1CC91
Certificate serial:       1F11A6BF7BD1002FB3C9CA572A3FA295BE393B88
Authority key identifier: B2:24:D9:43:E8:06:5A:18:92:9A:78:4B:51:D1:63:32:09:C1:CC:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B224D943E8065A18929A784B51D1633209C1CC91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJUaKhkLJJJa2F8vs4jFtzfTWksoenEjDbJwCfhaXfi8/1/323830343a323838383a343030303a3a2f33342d3334203d3e20323633393637.roa
Signing time:             Thu 06 Mar 2025 05:13:45 +0000
ROA not before:           Thu 06 Mar 2025 05:08:45 +0000
ROA not after:            Thu 05 Mar 2026 05:13:45 +0000
asID:                     263967
IP address blocks:        2804:2888:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJUaKhkLJJJa2F8vs4jFtzfTWksoenEjDbJwCfhaXfi8/1/B224D943E8065A18929A784B51D1633209C1CC91.crl
                          rsync://rpki-repo.registro.br/repo/EJUaKhkLJJJa2F8vs4jFtzfTWksoenEjDbJwCfhaXfi8/1/B224D943E8065A18929A784B51D1633209C1CC91.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B224D943E8065A18929A784B51D1633209C1CC91.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 00:43:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:11:a6:bf:7b:d1:00:2f:b3:c9:ca:57:2a:3f:a2:95:be:39:3b:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B224D943E8065A18929A784B51D1633209C1CC91
        Validity
            Not Before: Mar  6 05:08:45 2025 GMT
            Not After : Mar  5 05:13:45 2026 GMT
        Subject: CN=9F862DB4AC1C2925E432BA83B7D93503985461FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7e:d3:cd:22:fe:f9:94:40:1a:bc:94:32:ee:
                    89:91:bd:38:c9:9a:1d:0a:64:1e:46:92:c8:28:9b:
                    35:41:37:d7:64:ea:bd:39:b9:bf:b5:b3:37:e9:b8:
                    b7:51:a6:d8:c4:0e:bb:d4:a9:f6:65:1a:9c:dd:23:
                    c5:2c:c4:63:7b:6d:94:63:9e:cb:41:b3:17:5e:0c:
                    4f:d5:df:e2:fb:1b:21:06:96:63:74:76:38:59:22:
                    4c:8b:e6:93:e0:45:23:5c:09:45:97:d0:fe:9b:52:
                    b8:33:c2:c4:b8:08:6f:95:38:87:46:db:20:05:b4:
                    1a:5d:a1:33:7c:f4:70:aa:22:2f:8d:be:b1:27:07:
                    13:2b:ee:13:9c:09:57:72:0e:28:a9:a0:0f:36:b4:
                    ac:e9:0a:94:b6:03:4d:50:71:7d:17:d9:d7:f8:b6:
                    75:60:b6:fd:95:00:e4:04:d8:00:1b:38:54:42:67:
                    9d:0b:43:9e:da:77:49:be:82:20:f6:f1:a0:6c:f0:
                    9c:47:c3:3c:b7:dd:a9:56:13:70:31:f9:04:1b:8c:
                    b2:e9:d8:67:a0:f9:b4:6f:0d:cf:20:de:06:6e:4f:
                    2b:39:8d:9f:ac:ee:b0:1d:44:10:ed:da:47:87:45:
                    f3:d7:e0:e3:4e:fa:eb:36:28:9c:19:58:a4:ea:e5:
                    38:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:86:2D:B4:AC:1C:29:25:E4:32:BA:83:B7:D9:35:03:98:54:61:FB
            X509v3 Authority Key Identifier:
                keyid:B2:24:D9:43:E8:06:5A:18:92:9A:78:4B:51:D1:63:32:09:C1:CC:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJUaKhkLJJJa2F8vs4jFtzfTWksoenEjDbJwCfhaXfi8/1/B224D943E8065A18929A784B51D1633209C1CC91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B224D943E8065A18929A784B51D1633209C1CC91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJUaKhkLJJJa2F8vs4jFtzfTWksoenEjDbJwCfhaXfi8/1/323830343a323838383a343030303a3a2f33342d3334203d3e20323633393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2888:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7c:29:aa:c4:de:ff:d0:b0:0c:d0:42:27:25:a5:b4:dd:63:cf:
         9b:73:ea:03:f1:ca:22:aa:82:3b:b1:16:8c:83:80:ad:40:11:
         ef:80:bd:5a:84:2b:1d:1a:96:5e:b1:9b:eb:43:6c:32:31:a9:
         5a:fb:ae:74:30:60:9e:72:43:75:a3:b1:44:66:30:a7:13:97:
         3c:d4:c6:06:46:a5:ae:69:e8:e2:d6:be:02:fe:60:8a:f6:2d:
         06:bd:5f:84:f7:27:b3:42:e8:44:1a:df:aa:fc:83:c8:b0:35:
         a0:f3:23:07:95:3d:79:a2:da:d8:e6:ff:a6:64:53:65:39:1a:
         01:7e:e1:ff:3b:60:b3:45:38:e3:6d:81:36:a9:44:26:8d:e7:
         1d:4a:d3:fa:89:fe:0b:ee:fa:c8:63:84:f5:18:cc:2a:08:bc:
         b7:6e:20:72:95:72:91:98:80:f6:0e:59:a1:86:f6:cd:ff:62:
         59:8e:56:4d:32:cd:0c:5c:28:cc:64:fd:28:99:ac:9e:d3:c9:
         a6:a9:f6:73:39:d6:df:93:18:48:e8:d5:af:1b:30:89:ed:66:
         c7:c1:ba:d7:06:e7:b3:ed:64:4d:0f:03:f6:e0:0b:bd:29:45:
         8c:3b:63:54:f3:54:f4:ae:b2:2e:9a:4f:72:26:f9:55:15:3f:
         86:96:1d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:38:19 2025 by rpki-client