Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/323830343a386161343a333830303a3a2f33372d3337203d3e20323733363833.roa
File:                     323830343a386161343a333830303a3a2f33372d3337203d3e20323733363833.roa (raw, json)
Hash identifier:          fXVmQy82Dj3fwc2Yvy/wv8XiQMK/bZZWr17l9A7lVmw=
Subject key identifier:   FF:C2:5B:DB:3B:55:54:ED:4F:BB:87:DB:CA:5F:35:EB:2B:CB:37:1B
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       67A6C93D23BBA162C315F9757B3365236D2B6CC3
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/323830343a386161343a333830303a3a2f33372d3337203d3e20323733363833.roa
Signing time:             Thu 17 Oct 2024 19:53:56 +0000
ROA not before:           Thu 17 Oct 2024 19:48:56 +0000
ROA not after:            Thu 16 Oct 2025 19:53:56 +0000
asID:                     273683
IP address blocks:        2804:8aa4:3800::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 15:39:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:a6:c9:3d:23:bb:a1:62:c3:15:f9:75:7b:33:65:23:6d:2b:6c:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Oct 17 19:48:56 2024 GMT
            Not After : Oct 16 19:53:56 2025 GMT
        Subject: CN=FFC25BDB3B5554ED4FBB87DBCA5F35EB2BCB371B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:42:fb:5c:fa:3f:33:32:12:5f:fd:b2:78:17:
                    5e:3c:2a:d7:cd:17:d8:80:d5:d2:41:4b:2b:23:38:
                    49:b3:2a:ea:cc:b9:1a:60:94:9b:b0:18:0e:7f:40:
                    be:ed:ec:15:9b:ba:8c:66:1d:63:c0:d9:f1:c5:dc:
                    b0:12:3e:95:02:b5:e4:bf:85:c9:53:2a:a2:9e:77:
                    73:09:07:73:54:d3:12:b8:b9:87:f6:22:be:8a:27:
                    47:0c:cb:8d:2b:9a:55:a6:68:08:7d:51:49:bb:aa:
                    83:31:dd:14:71:84:4c:45:0a:fa:66:ee:c4:d4:89:
                    4f:18:8b:42:a9:4a:70:22:d2:da:c0:ea:a0:e6:aa:
                    e5:51:71:1c:49:d9:72:b2:47:cc:8c:3b:76:3e:a5:
                    96:ba:3b:c7:34:5f:7b:4b:cb:77:8b:a3:ea:e4:7e:
                    0d:00:58:f5:7d:33:c7:a8:05:51:e6:92:f3:6f:e2:
                    90:0d:37:c4:44:8b:ef:d2:dd:5a:9f:7c:7e:8a:f1:
                    69:3c:e4:4a:9d:19:a7:b7:97:11:e7:be:a6:52:05:
                    bf:d7:89:3b:49:7a:4f:79:87:7e:1d:9d:3c:b8:3b:
                    c6:91:9d:c6:23:16:77:ae:e9:b9:95:1b:1a:9d:48:
                    50:6e:78:89:cd:9c:eb:ab:42:3d:28:5c:e0:e3:a1:
                    42:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:C2:5B:DB:3B:55:54:ED:4F:BB:87:DB:CA:5F:35:EB:2B:CB:37:1B
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/323830343a386161343a333830303a3a2f33372d3337203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8aa4:3800::/37

    Signature Algorithm: sha256WithRSAEncryption
         47:54:b3:67:fe:12:68:38:b1:b8:5a:e8:61:00:c2:60:5d:64:
         ab:2a:93:a7:88:9c:72:3e:80:67:e8:68:e8:2c:23:f1:7c:ca:
         7b:4b:96:8f:e9:70:39:78:f9:30:6c:f5:77:a6:06:b4:3c:8d:
         f2:69:d6:17:ef:c1:84:96:f0:f2:2f:43:a1:83:2f:af:29:fe:
         ef:25:8f:ad:4b:dc:97:f6:fb:60:29:25:21:a5:e7:ae:16:9d:
         ff:17:e3:48:d0:80:db:41:55:96:74:75:20:96:7a:cb:64:26:
         9f:a2:d9:d0:82:d6:aa:f5:6e:87:b8:30:ae:de:33:25:f4:84:
         da:0c:e7:a0:93:ce:77:e7:c4:dc:89:19:bd:e8:0e:9a:2e:62:
         3c:7f:64:a8:df:3f:c1:51:a7:b4:7b:35:e6:dc:23:7b:1e:1c:
         c9:39:cd:53:af:f1:f5:fd:6b:f0:c7:23:fc:38:15:bc:c2:13:
         8e:bd:9c:e4:f5:84:ca:1d:72:a6:8a:46:64:1e:7c:78:8f:3c:
         bd:05:23:9c:7a:f7:35:9f:0d:7b:54:51:e3:56:fc:6b:47:5c:
         ac:ef:6f:c5:ca:b9:16:9a:98:6e:e3:b2:56:46:52:b3:34:f3:
         09:a4:63:8d:b7:8b:c6:6c:00:db:66:43:1b:52:97:7b:4b:91:
         c9:5c:c2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:18 2025 by rpki-client