Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/323830343a386161343a343830303a3a2f33372d3337203d3e20323733363833.roa
File:                     323830343a386161343a343830303a3a2f33372d3337203d3e20323733363833.roa (raw, json)
Hash identifier:          LGegEkpe3xDfQXUXwIC73HL2SLsGv7RmZRkRq+bwenI=
Subject key identifier:   E9:02:9F:5A:C1:3C:30:0E:40:DC:08:C0:B0:8D:D4:08:07:D5:50:28
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       47F6CCF553361FF5A36D6EB0F3D924FEA5F8C9D9
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/323830343a386161343a343830303a3a2f33372d3337203d3e20323733363833.roa
Signing time:             Thu 17 Oct 2024 19:51:33 +0000
ROA not before:           Thu 17 Oct 2024 19:46:33 +0000
ROA not after:            Thu 16 Oct 2025 19:51:33 +0000
asID:                     273683
IP address blocks:        2804:8aa4:4800::/37 maxlen: 37

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:f6:cc:f5:53:36:1f:f5:a3:6d:6e:b0:f3:d9:24:fe:a5:f8:c9:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Oct 17 19:46:33 2024 GMT
            Not After : Oct 16 19:51:33 2025 GMT
        Subject: CN=E9029F5AC13C300E40DC08C0B08DD40807D55028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e0:70:01:83:13:c2:b9:72:89:d7:5d:aa:40:
                    9a:8c:36:1d:a3:3f:0a:b6:0e:2d:6b:94:2e:21:7b:
                    92:94:73:01:5b:bd:f0:7f:d9:ee:82:55:22:b0:79:
                    35:68:98:52:b9:c8:c6:6a:5f:16:ea:46:04:20:42:
                    bd:a5:d9:45:96:98:a7:c7:2d:68:f5:d5:3f:95:a9:
                    92:5c:b0:be:6a:e2:5a:d8:9c:21:d8:48:e2:c4:c4:
                    8a:b0:23:eb:e9:53:10:9f:61:ba:f6:80:da:64:30:
                    09:a2:dc:27:f9:8a:25:df:ff:60:03:da:f7:53:04:
                    04:39:8a:14:fa:92:10:3a:d0:3f:6e:12:06:a1:7b:
                    aa:5c:f0:5f:f4:9a:41:6d:ee:86:9c:7d:75:5f:20:
                    ff:4e:96:59:67:37:5d:ac:d8:c2:37:81:86:43:02:
                    95:9b:b4:37:63:5f:4e:cf:a8:ec:f6:47:d1:2e:fe:
                    cb:55:f6:cf:ea:73:6b:fa:f6:f6:70:21:57:a3:3b:
                    83:5d:84:6b:d0:5e:21:2b:7e:c0:de:74:7b:6f:88:
                    10:96:b2:9a:ad:b6:46:df:a3:d4:79:ee:fd:75:f0:
                    cf:f1:26:b8:c1:80:8c:42:c7:c1:62:2d:62:c1:56:
                    1e:9a:64:f9:56:66:34:8e:5e:34:df:b1:e0:8d:49:
                    f9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:02:9F:5A:C1:3C:30:0E:40:DC:08:C0:B0:8D:D4:08:07:D5:50:28
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/323830343a386161343a343830303a3a2f33372d3337203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8aa4:4800::/37

    Signature Algorithm: sha256WithRSAEncryption
         95:03:3b:f7:dd:c5:cb:d0:08:55:c3:04:42:65:4d:ca:87:1b:
         ff:78:e2:a8:f1:db:35:30:28:8e:86:cf:ea:ad:48:2a:a1:5f:
         e0:7b:85:8c:74:23:5f:2e:9a:9d:59:63:2a:b9:df:b9:9e:7a:
         7f:8a:26:5a:1d:7f:fa:16:5f:d0:9a:7b:f9:51:bb:4d:e1:7a:
         55:99:75:71:ec:1e:5c:d2:82:34:29:70:35:c3:ca:44:48:7b:
         7c:25:59:e2:f2:fe:24:a5:cb:90:02:91:94:f8:02:d8:96:a6:
         35:40:26:2a:4a:a0:03:1c:d9:2a:6a:04:49:64:7d:94:50:80:
         6f:b6:e2:fd:c4:82:17:d8:03:1e:18:ca:01:85:d3:eb:a2:17:
         8c:2d:2e:ea:03:f0:bc:44:c0:29:b5:13:4f:51:92:f9:e2:34:
         1b:e4:9c:80:3f:9b:cf:cd:72:f1:e6:9e:25:54:52:8d:9c:dc:
         2d:2b:f3:1e:94:0b:c3:03:4a:5a:24:3e:62:af:9c:82:29:3f:
         bd:a3:35:a9:b8:92:27:f3:f0:77:79:bb:25:f7:43:47:80:42:
         ad:82:4b:4a:2c:e5:0a:4e:6c:59:6c:7a:c1:ff:57:65:eb:92:
         ce:86:4b:66:86:ea:8d:aa:14:31:56:d8:68:69:b3:e8:3f:30:
         1f:94:b2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:51 2024 by rpki-client on console-ams.rpki-client.org