Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/323830343a386161343a313030303a3a2f33372d3337203d3e20323733363833.roa
File:                     323830343a386161343a313030303a3a2f33372d3337203d3e20323733363833.roa (raw, json)
Hash identifier:          pOST6v4AA6fEKm1479OxMl+oelv0yk9kNYWzDZBWTKY=
Subject key identifier:   CC:91:27:DD:5F:E4:6D:03:40:68:DB:0A:55:76:25:D3:CB:C7:EB:D1
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       3A72705249C98126150018A9330B127ED81A755B
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/323830343a386161343a313030303a3a2f33372d3337203d3e20323733363833.roa
Signing time:             Fri 23 Aug 2024 19:44:58 +0000
ROA not before:           Fri 23 Aug 2024 19:39:58 +0000
ROA not after:            Fri 22 Aug 2025 19:44:58 +0000
asID:                     273683
IP address blocks:        2804:8aa4:1000::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 15:39:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:72:70:52:49:c9:81:26:15:00:18:a9:33:0b:12:7e:d8:1a:75:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Aug 23 19:39:58 2024 GMT
            Not After : Aug 22 19:44:58 2025 GMT
        Subject: CN=CC9127DD5FE46D034068DB0A557625D3CBC7EBD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f5:3a:97:79:2b:e0:32:7e:58:af:8e:14:34:
                    f8:fd:fb:cc:12:6d:9f:79:0b:ec:5d:4e:f7:24:9f:
                    f2:3c:05:5f:a8:91:2e:8f:bd:42:0c:dc:30:2f:aa:
                    86:39:21:5b:ab:40:cb:c5:6e:be:fb:a4:6e:9e:b6:
                    7c:d2:16:06:1f:b5:8f:15:fb:bf:b2:54:5d:1e:b7:
                    1f:c0:90:4c:a1:65:7c:02:9a:13:39:e6:1a:63:1a:
                    c1:77:7f:e1:89:f1:e2:94:0b:71:99:9f:f8:b2:fc:
                    4c:34:be:57:85:3b:c6:db:66:fd:b1:70:61:4f:10:
                    47:0e:43:53:8c:d9:1b:51:3a:c1:f9:da:7e:2d:b3:
                    c6:28:98:6c:21:d3:f4:53:97:d9:d2:65:a5:2d:3e:
                    8a:ba:78:63:55:74:fe:b6:a4:cf:43:eb:b5:ac:d1:
                    21:49:e4:18:28:07:28:05:8e:a5:0d:72:db:30:47:
                    67:ea:72:29:45:3f:ba:24:fd:53:b1:c1:3c:ca:6c:
                    a6:15:f6:4f:7a:43:fa:0f:89:72:4c:db:e9:cc:fe:
                    9e:e4:2d:26:3d:0b:96:43:d2:c7:b3:88:b1:18:99:
                    79:0e:7c:ba:b4:7a:26:2f:42:20:41:74:3f:c8:9f:
                    35:8e:59:c3:d5:df:be:e5:e8:a5:df:f8:9c:76:a8:
                    b6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:91:27:DD:5F:E4:6D:03:40:68:DB:0A:55:76:25:D3:CB:C7:EB:D1
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/323830343a386161343a313030303a3a2f33372d3337203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8aa4:1000::/37

    Signature Algorithm: sha256WithRSAEncryption
         01:a0:b1:ac:1f:5b:6b:3a:8f:23:26:7b:9e:cb:e7:94:ed:f9:
         ec:98:3f:6b:df:fa:60:da:b5:13:e8:dd:cf:08:b2:3a:ee:51:
         f4:65:3d:bf:5b:e6:14:de:5f:c4:74:e6:25:f5:88:95:2e:04:
         9e:38:45:f7:f4:bb:1f:3d:f2:e8:74:60:60:cc:6a:fb:85:5b:
         2d:ee:1d:a2:7e:a3:22:bc:7e:ea:1b:14:38:69:7b:8e:c3:53:
         3b:da:4a:fb:73:90:a5:12:6c:71:72:79:91:70:c6:05:d5:4f:
         fa:e0:66:ce:00:81:67:31:24:12:77:5b:24:22:53:17:b9:c9:
         51:ee:08:fa:64:25:96:22:13:96:4c:8d:89:a2:11:5f:24:35:
         e7:42:d0:36:3c:e1:64:c6:25:6b:8d:a7:44:83:5e:b8:72:fb:
         b1:91:08:5c:94:b8:9e:75:09:18:9d:63:31:c2:13:31:8e:62:
         91:b7:db:b4:6c:97:37:01:57:e5:1a:32:12:27:1b:12:6f:26:
         bb:3c:c0:a8:8a:e5:f0:06:e6:5c:ca:d9:07:a7:8f:c6:99:0f:
         18:35:37:80:88:3a:28:7f:e9:89:5c:4e:bf:9f:13:78:20:ba:
         24:e5:4d:23:3b:7f:d3:b7:3e:05:aa:12:5a:8b:3e:2a:44:86:
         6e:f5:c9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:07 2025 by rpki-client