Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/323830343a323463633a3a2f33322d313238203d3e20323634323432.roa
File:                     323830343a323463633a3a2f33322d313238203d3e20323634323432.roa (raw, json)
Hash identifier:          IE1mSt94cNaTXuqHHUGlx316JgJKc6nz86IT+1yrR20=
Subject key identifier:   36:EB:A7:45:0F:AD:0C:E0:16:7F:12:F0:40:94:58:0E:6E:41:1B:34
Certificate issuer:       /CN=EF4027F97A62AA37CB4E993440497A1C0AB87F51
Certificate serial:       438059731F4C3A324FB70204D1A16C783FF550B9
Authority key identifier: EF:40:27:F9:7A:62:AA:37:CB:4E:99:34:40:49:7A:1C:0A:B8:7F:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF4027F97A62AA37CB4E993440497A1C0AB87F51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/323830343a323463633a3a2f33322d313238203d3e20323634323432.roa
Signing time:             Fri 14 Mar 2025 01:34:03 +0000
ROA not before:           Fri 14 Mar 2025 01:29:03 +0000
ROA not after:            Fri 13 Mar 2026 01:34:03 +0000
asID:                     264242
IP address blocks:        2804:24cc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/EF4027F97A62AA37CB4E993440497A1C0AB87F51.crl
                          rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/EF4027F97A62AA37CB4E993440497A1C0AB87F51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF4027F97A62AA37CB4E993440497A1C0AB87F51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 16:30:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:80:59:73:1f:4c:3a:32:4f:b7:02:04:d1:a1:6c:78:3f:f5:50:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF4027F97A62AA37CB4E993440497A1C0AB87F51
        Validity
            Not Before: Mar 14 01:29:03 2025 GMT
            Not After : Mar 13 01:34:03 2026 GMT
        Subject: CN=36EBA7450FAD0CE0167F12F04094580E6E411B34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:60:5c:e2:70:93:7a:eb:73:e5:5a:cb:d7:5e:
                    8a:27:d4:ce:12:13:fb:2c:cb:ad:4e:83:82:ee:0e:
                    f4:da:70:4e:cf:db:bb:0c:13:67:55:cc:36:3c:da:
                    70:30:49:f6:b2:d7:fe:7e:3d:05:45:f3:ef:c1:21:
                    49:a0:e3:9a:03:24:96:08:c6:1f:f0:82:32:01:c7:
                    9b:e5:4d:f2:e0:f0:a8:0f:2b:de:31:de:71:da:7e:
                    7f:5e:59:09:6a:00:3c:8e:8c:c3:7b:0b:35:39:9e:
                    60:7a:df:f4:82:d1:17:af:70:b4:f3:28:fb:a6:44:
                    4c:33:51:c6:b2:3a:d2:b4:da:ce:36:45:86:a6:4f:
                    90:1d:75:43:d6:b8:79:32:ee:a7:5d:74:35:60:84:
                    5e:f5:00:09:33:6b:d3:a7:02:e1:6b:70:9e:e3:f8:
                    32:b6:00:ab:d2:f1:2b:00:c5:49:75:9a:8a:4a:2c:
                    c2:54:a5:da:5c:00:41:6e:26:3c:e1:13:03:c2:d8:
                    81:85:95:98:f3:13:95:aa:dd:b7:2e:dc:32:ec:76:
                    c4:cf:87:28:26:b9:42:67:5e:6f:c8:76:90:49:68:
                    e0:18:b8:90:4a:c9:44:e9:f6:19:f8:d6:09:9a:ce:
                    ee:fc:56:ee:bd:99:16:f5:36:67:68:dd:77:12:76:
                    40:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:EB:A7:45:0F:AD:0C:E0:16:7F:12:F0:40:94:58:0E:6E:41:1B:34
            X509v3 Authority Key Identifier:
                keyid:EF:40:27:F9:7A:62:AA:37:CB:4E:99:34:40:49:7A:1C:0A:B8:7F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/EF4027F97A62AA37CB4E993440497A1C0AB87F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF4027F97A62AA37CB4E993440497A1C0AB87F51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/323830343a323463633a3a2f33322d313238203d3e20323634323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:9a:6d:ee:73:e2:fe:c9:19:7f:79:b1:39:41:66:7e:a3:8a:
         c6:cf:05:3b:19:42:81:62:9c:15:60:66:7b:ed:3b:63:8a:52:
         d2:49:51:4e:78:3e:06:c9:99:31:a1:e7:50:e2:4d:c2:29:00:
         47:32:78:71:90:65:3b:a5:70:9e:82:c8:47:55:6c:f8:eb:91:
         b3:59:9a:a8:b0:fe:df:30:8f:6c:85:51:14:20:bd:f0:51:1a:
         88:8f:27:d3:d0:27:0f:fe:c2:45:a5:72:32:07:54:3f:fb:02:
         72:61:7a:4b:69:3a:d0:7d:38:dc:aa:2d:6a:d3:1b:a6:8a:47:
         ba:2a:32:03:ed:8d:66:72:cc:6b:86:30:23:5b:1e:1d:c6:e9:
         c0:eb:cf:f0:40:a7:f0:61:25:61:0d:dd:77:88:f3:6a:ea:98:
         31:85:d2:f3:80:f9:93:2b:fd:12:1f:fe:a0:e4:9c:05:f1:38:
         44:81:85:24:c6:84:9a:79:13:05:bc:8e:dd:cd:98:ba:f6:0e:
         30:6d:1a:d9:24:95:6a:61:89:c7:0d:96:56:93:a4:37:85:22:
         6e:0d:65:fd:3d:d5:7a:6e:fa:fa:99:15:65:3d:8c:87:8d:ba:
         7e:14:e9:78:ee:c6:29:60:9d:d1:5b:fe:d5:33:a4:ed:09:30:
         34:ca:0b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:55:27 2025 by rpki-client