Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/323830343a3764303a3a2f33322d3332203d3e20323632333234.roa
File:                     323830343a3764303a3a2f33322d3332203d3e20323632333234.roa (raw, json)
Hash identifier:          4V/Sv6xY/gwZm77V3Tsp8JSPtuR05I4JzCHso4tLNkY=
Subject key identifier:   A6:D4:F5:2B:B8:B3:19:66:0E:C7:9F:DD:86:84:6B:28:5D:AF:E6:98
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       47372BDA8F2A43055266CEDBD633E2A4128BDF0A
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/323830343a3764303a3a2f33322d3332203d3e20323632333234.roa
Signing time:             Fri 23 Aug 2024 19:45:00 +0000
ROA not before:           Fri 23 Aug 2024 19:40:00 +0000
ROA not after:            Fri 22 Aug 2025 19:45:00 +0000
asID:                     262324
IP address blocks:        2804:7d0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 15:39:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:37:2b:da:8f:2a:43:05:52:66:ce:db:d6:33:e2:a4:12:8b:df:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Aug 23 19:40:00 2024 GMT
            Not After : Aug 22 19:45:00 2025 GMT
        Subject: CN=A6D4F52BB8B319660EC79FDD86846B285DAFE698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f8:ec:5d:23:1c:1f:50:b8:b8:b6:8a:4b:95:
                    f0:e8:c8:5f:d4:5f:e7:5d:69:57:76:aa:91:67:24:
                    5d:e7:7f:13:1a:6b:55:93:98:03:41:22:5c:e3:d8:
                    7d:77:91:62:2e:6c:46:b2:83:73:a5:fd:ff:b5:16:
                    8c:fb:c8:23:c3:09:64:5a:cb:d0:11:8a:e5:22:fc:
                    5a:d4:47:8b:97:71:4b:c4:1e:2c:2e:46:ca:bb:d4:
                    26:0c:35:3c:46:c4:31:7d:ac:d1:a6:1c:8a:85:3b:
                    6e:fa:90:f9:5b:b8:ab:3e:39:f5:d9:23:e4:a4:c3:
                    3a:10:c8:4a:5e:d6:f2:b6:9f:6c:c0:ad:4c:b4:8a:
                    5c:1f:e3:96:fb:63:b7:db:ef:c3:03:27:7a:42:62:
                    af:c8:53:12:dc:45:a2:9a:d8:bf:26:a9:c7:20:6f:
                    79:63:1a:66:bf:ae:26:a6:67:74:67:f8:18:ea:29:
                    e6:9f:d2:2f:be:32:b3:0d:0e:09:f8:16:04:22:5f:
                    71:cb:13:81:1d:ce:8b:a9:21:98:8c:a7:a7:98:94:
                    86:7c:73:85:00:e2:bc:9a:16:52:af:db:29:69:86:
                    e9:50:eb:73:7f:73:ef:1d:fe:d9:00:24:51:a7:0c:
                    e7:57:cc:6f:4e:0c:cd:64:53:77:79:b7:0f:e5:9e:
                    19:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:D4:F5:2B:B8:B3:19:66:0E:C7:9F:DD:86:84:6B:28:5D:AF:E6:98
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/323830343a3764303a3a2f33322d3332203d3e20323632333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:41:ae:99:e1:1a:54:4a:48:3d:53:ad:58:1e:d6:7b:83:2d:
         6d:40:77:ae:2f:0d:b6:fd:11:5e:1d:c1:55:3f:e1:9d:75:5d:
         15:28:ba:16:bc:17:ec:51:d7:09:eb:6b:4a:ee:c0:77:81:a8:
         bb:3d:45:16:f8:fb:f2:c8:0c:a6:54:b5:cd:60:1b:ca:01:65:
         89:7b:e5:4d:22:17:00:df:1c:8d:d9:1a:2d:c6:cc:92:db:87:
         4d:6f:31:a4:53:c3:7f:96:19:a8:3e:f3:85:c3:b3:a6:20:c0:
         97:b2:c5:9e:9f:c7:e1:32:70:f6:b9:23:44:fc:e8:95:09:6b:
         3e:84:70:dd:b4:0c:05:86:ab:1a:78:49:cd:a8:5e:6a:1f:1e:
         8d:45:0c:7a:f2:39:f5:15:03:a0:f6:b8:4e:2d:ec:a5:58:6d:
         e4:10:65:1c:45:c6:bc:61:74:b1:51:1f:15:1e:8f:ee:0b:fb:
         7d:28:86:e9:09:d4:76:00:d6:b4:1a:1f:b4:0e:8c:57:c9:bb:
         ec:ea:60:c6:71:12:5d:38:ee:2d:29:6e:e3:05:e8:fa:44:a3:
         ae:ef:b1:c5:d3:84:60:b7:35:ba:1b:e0:74:c0:24:8d:55:43:
         a7:ed:59:1d:b1:7c:36:0e:80:51:ef:37:c5:93:5c:cf:76:41:
         83:ca:ca:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:50 2025 by rpki-client