Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/323830343a323833383a3a2f33322d3438203d3e20323633393438.roa
File:                     323830343a323833383a3a2f33322d3438203d3e20323633393438.roa (raw, json)
Hash identifier:          Ya4fSryUGTLhNFKEVrichqq/B0XqG1sGHLFR4mTC+HM=
Subject key identifier:   EF:C5:0C:FE:25:2F:D0:13:18:40:F4:36:2E:4B:0D:95:5A:CD:CD:77
Certificate issuer:       /CN=02A39F9DA8F095CC8E5E446FEE3F818FC793CC73
Certificate serial:       79EA754C5F38572BB4B76386A29A64966D3D8703
Authority key identifier: 02:A3:9F:9D:A8:F0:95:CC:8E:5E:44:6F:EE:3F:81:8F:C7:93:CC:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02A39F9DA8F095CC8E5E446FEE3F818FC793CC73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/323830343a323833383a3a2f33322d3438203d3e20323633393438.roa
Signing time:             Wed 03 Jul 2024 19:31:29 +0000
ROA not before:           Wed 03 Jul 2024 19:26:29 +0000
ROA not after:            Wed 02 Jul 2025 19:31:29 +0000
asID:                     263948
IP address blocks:        2804:2838::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/02A39F9DA8F095CC8E5E446FEE3F818FC793CC73.crl
                          rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/02A39F9DA8F095CC8E5E446FEE3F818FC793CC73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02A39F9DA8F095CC8E5E446FEE3F818FC793CC73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 13:49:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:ea:75:4c:5f:38:57:2b:b4:b7:63:86:a2:9a:64:96:6d:3d:87:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02A39F9DA8F095CC8E5E446FEE3F818FC793CC73
        Validity
            Not Before: Jul  3 19:26:29 2024 GMT
            Not After : Jul  2 19:31:29 2025 GMT
        Subject: CN=EFC50CFE252FD0131840F4362E4B0D955ACDCD77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f5:6f:2c:16:ca:2a:0c:f8:a0:16:59:65:28:
                    e4:34:1a:85:3b:26:a1:36:a2:77:ad:42:4b:af:a0:
                    00:4d:13:92:e1:de:16:72:5e:b3:22:c6:71:d1:15:
                    42:89:07:06:cf:c9:cd:5a:db:6b:d1:fc:ca:4e:81:
                    99:4c:7f:d5:51:a8:7d:6b:fa:c5:64:5f:b4:8a:fd:
                    5d:37:10:1b:41:40:67:10:fa:90:58:48:b3:85:a4:
                    17:fd:24:37:f9:88:b4:94:5e:57:a5:4e:a7:67:4c:
                    74:8e:47:00:a8:f6:7a:71:be:bd:19:79:4f:52:72:
                    8f:a0:1e:26:5b:0e:c2:80:d1:17:bc:db:e7:38:b2:
                    d2:ee:ea:76:78:1c:7b:d7:71:43:b4:9d:31:de:c1:
                    76:fb:3f:04:d2:a3:a4:db:dd:3e:dc:d6:f9:c3:49:
                    cb:67:76:fd:0f:31:93:3a:9a:50:5d:e7:87:bf:86:
                    43:54:61:00:29:5b:69:c8:5c:07:07:93:bd:0b:9e:
                    20:34:0e:f1:92:66:69:3f:31:27:f8:0e:3a:e1:61:
                    69:3e:69:13:7b:cc:e6:fc:4b:84:87:b5:a4:46:b4:
                    19:0e:bf:1e:ef:7c:b0:a7:6f:24:c9:b0:e2:af:c1:
                    d9:44:ef:4f:07:60:b6:65:41:9e:48:51:d9:22:1b:
                    36:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C5:0C:FE:25:2F:D0:13:18:40:F4:36:2E:4B:0D:95:5A:CD:CD:77
            X509v3 Authority Key Identifier:
                keyid:02:A3:9F:9D:A8:F0:95:CC:8E:5E:44:6F:EE:3F:81:8F:C7:93:CC:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/02A39F9DA8F095CC8E5E446FEE3F818FC793CC73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02A39F9DA8F095CC8E5E446FEE3F818FC793CC73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/323830343a323833383a3a2f33322d3438203d3e20323633393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2838::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:17:bb:02:54:13:29:19:f6:2c:fc:56:a1:93:73:6e:1e:35:
         b0:55:c3:c2:e1:a1:e2:6e:2c:c6:f9:06:2e:dc:7f:4c:e8:c6:
         56:cf:85:e7:ae:73:e3:15:f8:b6:b1:19:e7:4b:67:25:e5:2a:
         fe:5b:34:f8:42:97:ea:06:13:90:5f:36:73:e8:4e:24:33:d9:
         ec:80:5f:7c:ec:8b:d0:b8:11:9a:41:00:2d:0f:d1:aa:b5:f8:
         d1:f0:2b:9d:56:64:0b:40:73:41:95:70:f4:bb:38:c1:78:9a:
         bb:c7:eb:7c:e4:11:d1:1c:d4:eb:a1:c3:be:c4:81:0d:a8:32:
         14:1d:54:3b:96:b2:67:a4:04:a6:1f:c7:22:fb:e4:0e:7e:e2:
         16:d1:1a:db:6c:1e:8a:51:ef:a5:2a:16:7c:53:60:5e:39:5e:
         d1:cb:43:56:85:1f:a3:1a:a3:ac:00:68:96:5a:30:16:be:e9:
         72:73:0e:56:28:e8:8e:3b:ae:99:c2:6f:90:1c:b0:2d:61:d1:
         5c:b3:02:5e:89:55:a4:4b:ac:9c:1f:64:ba:f4:95:64:21:11:
         66:43:3e:be:97:2f:7a:8d:3d:4d:d5:c4:4e:e1:a2:e3:a1:33:
         ef:a7:e8:09:4c:37:a3:fb:d5:79:88:16:fd:06:58:5e:5e:bf:
         dd:fd:96:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:29 2025 by rpki-client