Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/323830343a6137383a3a2f33322d3332203d3e20323632343738.roa
File:                     323830343a6137383a3a2f33322d3332203d3e20323632343738.roa (raw, json)
Hash identifier:          /PlLQ+witYtzdMO7n7e2DU2zJX5sZebjIk20R7mT428=
Subject key identifier:   EF:A8:60:4C:0D:F7:F1:0C:EA:BC:39:DC:06:AA:F5:72:D2:35:59:75
Certificate issuer:       /CN=2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A
Certificate serial:       16786A9D8934A9BCBAE2F0B306B5B55D55D39B60
Authority key identifier: 2A:DB:E9:AD:84:AE:FF:D4:39:4F:6B:8E:20:CB:07:E9:C0:30:C5:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/323830343a6137383a3a2f33322d3332203d3e20323632343738.roa
Signing time:             Sat 15 Feb 2025 15:43:17 +0000
ROA not before:           Sat 15 Feb 2025 15:38:17 +0000
ROA not after:            Sat 14 Feb 2026 15:43:17 +0000
asID:                     262478
IP address blocks:        2804:a78::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.crl
                          rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 16:46:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:78:6a:9d:89:34:a9:bc:ba:e2:f0:b3:06:b5:b5:5d:55:d3:9b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A
        Validity
            Not Before: Feb 15 15:38:17 2025 GMT
            Not After : Feb 14 15:43:17 2026 GMT
        Subject: CN=EFA8604C0DF7F10CEABC39DC06AAF572D2355975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:bb:0c:59:6a:53:07:4a:97:94:22:fd:1e:db:
                    27:ad:77:3d:43:fe:87:a8:89:81:77:f7:bc:d2:9f:
                    72:30:ff:55:44:62:e2:05:0b:c4:5d:aa:84:1c:fa:
                    e9:51:b9:b8:fc:8d:18:dc:b9:69:48:33:21:25:c3:
                    49:1c:2b:7e:f3:64:67:15:64:fc:83:ed:8a:a4:41:
                    3b:bf:ae:7d:71:41:3b:50:22:f0:61:7a:c7:00:08:
                    72:02:6b:a1:6c:bc:dc:2d:54:5d:fb:14:a2:f9:19:
                    60:3f:68:e5:51:59:d6:35:be:f1:7f:29:c6:d7:04:
                    6d:e5:11:bb:79:97:7c:6c:e6:09:e0:39:1e:cc:46:
                    dc:f2:a8:3a:26:81:81:a3:c5:7f:e6:65:cc:6b:2d:
                    7d:cb:78:aa:2f:79:ba:f1:b5:35:39:b8:65:e0:ce:
                    d2:4e:3d:92:65:ac:d9:c0:a8:1f:f0:b7:d8:5f:f2:
                    52:cf:b8:e5:64:a6:62:00:9a:a4:60:dc:21:22:4b:
                    6d:48:95:49:5d:5c:ff:fa:6b:17:39:18:9d:97:bb:
                    1b:8a:8d:0b:2c:31:f3:99:8e:5d:5b:6e:0a:9e:07:
                    88:d4:c6:b6:d0:9b:31:df:a1:d5:ea:38:e1:24:30:
                    aa:fd:9d:a1:78:04:7f:a8:1e:3a:5b:eb:9d:39:d3:
                    24:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:A8:60:4C:0D:F7:F1:0C:EA:BC:39:DC:06:AA:F5:72:D2:35:59:75
            X509v3 Authority Key Identifier:
                keyid:2A:DB:E9:AD:84:AE:FF:D4:39:4F:6B:8E:20:CB:07:E9:C0:30:C5:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/323830343a6137383a3a2f33322d3332203d3e20323632343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a78::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:f3:f8:69:14:88:b5:e2:41:05:f3:e4:82:23:75:21:de:b0:
         a6:eb:97:4d:88:26:ae:2c:e0:52:3e:89:dd:91:dc:0c:e7:c2:
         2b:3e:b6:4e:64:5a:d3:57:05:a7:f2:70:11:45:ce:8c:d5:98:
         54:2b:aa:d2:22:f1:70:f0:07:28:1a:e2:30:f1:ad:d3:1e:39:
         a2:76:9a:0b:17:48:8b:0a:bd:64:c4:ab:2c:30:84:96:ef:92:
         b5:67:06:d2:f2:d5:3f:bb:4b:1e:cd:64:31:c0:68:7f:81:77:
         60:a6:43:0c:13:54:14:ad:e3:62:21:55:f1:62:33:2c:84:34:
         85:f4:0f:20:4e:c3:41:cb:91:66:a6:62:98:dc:f0:c5:d3:9c:
         9d:eb:e7:57:91:3b:fe:6b:3c:93:75:e0:9f:a8:6a:0d:f2:d9:
         c5:22:9e:f9:61:45:03:33:57:c2:2d:a3:63:58:7f:a7:56:38:
         f3:72:79:62:2c:38:68:a3:ba:6b:cf:b8:74:a3:22:f2:9d:f6:
         4d:46:96:d9:9c:08:f6:ac:33:7c:b3:99:e1:23:a7:c7:0a:22:
         4a:c5:45:c3:40:f6:33:6b:42:be:20:5f:1c:35:7a:24:fb:69:
         18:2d:13:c4:08:d8:ad:21:f9:89:9e:9b:d0:85:d9:70:25:bb:
         bc:95:e9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:30:56 2025 by rpki-client