Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/22PvtXpQutRKvxkUY8Y7ekqiX3MHzkPbm9WCFjoWWxDK/0/323830343a376636633a3a2f33322d3332203d3e20323731363837.roa
File:                     323830343a376636633a3a2f33322d3332203d3e20323731363837.roa (raw, json)
Hash identifier:          p26Jyu313XyGNO8j6NKm/D3an7Qeon7QJL3xFSOTmCU=
Subject key identifier:   AD:3D:25:FE:C9:0F:5B:22:1B:BD:82:6A:84:AA:6C:77:C1:0A:8F:EA
Certificate issuer:       /CN=70C0B50747FC1E7BE87716B663F0AA749E426EE1
Certificate serial:       6FBF1364DEE9534829198AE8F063563F78955340
Authority key identifier: 70:C0:B5:07:47:FC:1E:7B:E8:77:16:B6:63:F0:AA:74:9E:42:6E:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70C0B50747FC1E7BE87716B663F0AA749E426EE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/22PvtXpQutRKvxkUY8Y7ekqiX3MHzkPbm9WCFjoWWxDK/0/323830343a376636633a3a2f33322d3332203d3e20323731363837.roa
Signing time:             Tue 01 Apr 2025 15:58:55 +0000
ROA not before:           Tue 01 Apr 2025 15:53:55 +0000
ROA not after:            Tue 31 Mar 2026 15:58:55 +0000
asID:                     271687
IP address blocks:        2804:7f6c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/22PvtXpQutRKvxkUY8Y7ekqiX3MHzkPbm9WCFjoWWxDK/0/70C0B50747FC1E7BE87716B663F0AA749E426EE1.crl
                          rsync://rpki-repo.registro.br/repo/22PvtXpQutRKvxkUY8Y7ekqiX3MHzkPbm9WCFjoWWxDK/0/70C0B50747FC1E7BE87716B663F0AA749E426EE1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70C0B50747FC1E7BE87716B663F0AA749E426EE1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 22:18:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:bf:13:64:de:e9:53:48:29:19:8a:e8:f0:63:56:3f:78:95:53:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70C0B50747FC1E7BE87716B663F0AA749E426EE1
        Validity
            Not Before: Apr  1 15:53:55 2025 GMT
            Not After : Mar 31 15:58:55 2026 GMT
        Subject: CN=AD3D25FEC90F5B221BBD826A84AA6C77C10A8FEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3d:2a:6a:0e:00:ba:04:8c:25:a6:3e:49:11:
                    9e:8d:67:de:7c:15:c9:28:83:a0:1b:45:ad:94:c2:
                    fe:67:83:0b:df:26:69:dc:ea:95:12:8d:65:c5:1f:
                    60:a8:a0:5b:29:c5:c7:60:c9:9b:a6:f3:bf:0d:e6:
                    9d:8a:6f:11:a0:8b:1b:94:f0:01:70:e5:76:df:64:
                    2b:42:d3:51:5d:6f:b9:dc:37:3a:47:34:78:aa:07:
                    99:3d:dc:2d:17:60:ea:de:12:69:81:26:e8:5c:de:
                    e5:ce:ab:83:02:1d:73:56:1b:db:6f:3b:a5:3c:c3:
                    b8:56:1c:46:07:dc:b2:35:fb:94:d3:f5:8b:d0:18:
                    5b:7d:42:64:3e:a4:2d:62:14:e1:ef:5a:2f:35:05:
                    e2:4b:48:e6:29:77:37:14:1e:97:43:7d:0e:7c:42:
                    7a:f6:de:e5:8f:cd:38:b2:98:63:60:3a:6b:f0:71:
                    87:eb:99:80:67:09:93:83:b4:be:6e:77:6d:13:49:
                    b1:4e:4c:71:76:a8:ad:96:6e:a4:59:28:6b:79:46:
                    8a:b0:a0:0f:69:ed:7d:51:e8:c4:b3:4a:41:37:cb:
                    83:78:62:7f:b4:00:e9:73:f0:ff:b6:f4:eb:6a:9a:
                    4c:44:c9:9f:da:83:8c:40:13:88:41:36:5e:03:91:
                    a2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:3D:25:FE:C9:0F:5B:22:1B:BD:82:6A:84:AA:6C:77:C1:0A:8F:EA
            X509v3 Authority Key Identifier:
                keyid:70:C0:B5:07:47:FC:1E:7B:E8:77:16:B6:63:F0:AA:74:9E:42:6E:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/22PvtXpQutRKvxkUY8Y7ekqiX3MHzkPbm9WCFjoWWxDK/0/70C0B50747FC1E7BE87716B663F0AA749E426EE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70C0B50747FC1E7BE87716B663F0AA749E426EE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/22PvtXpQutRKvxkUY8Y7ekqiX3MHzkPbm9WCFjoWWxDK/0/323830343a376636633a3a2f33322d3332203d3e20323731363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7f6c::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:0c:bf:b8:e8:50:c0:48:dd:7a:2a:1f:dc:8b:f9:5c:e4:63:
         c9:5a:09:dd:8d:78:d5:36:3f:3a:11:f6:6b:90:72:d4:43:30:
         0d:e7:ae:55:db:97:3e:62:71:7c:ed:ae:8f:fa:29:08:5f:4e:
         76:d8:a8:e9:ef:5a:6a:9f:8a:72:26:f8:02:95:a6:c0:76:61:
         a1:33:08:07:21:99:d5:2b:ed:6f:fd:0c:c3:ff:15:35:6e:cb:
         86:5b:f9:77:e1:a3:af:1a:54:24:be:fa:52:4a:61:43:fb:74:
         9e:af:c9:33:d6:11:ba:5b:f2:34:d9:83:e4:6f:a9:14:df:ab:
         e9:ae:ac:e8:4a:fa:c9:e0:ad:84:33:0a:c2:31:27:1a:3a:40:
         40:3b:80:a8:98:ea:be:98:58:ea:20:f6:33:61:7b:d3:15:8f:
         e6:55:74:2d:14:80:7c:75:9a:20:4c:3c:fa:ea:0c:58:a1:c8:
         93:ff:28:82:50:7e:17:83:2b:e2:82:b0:52:38:c1:1e:5e:2e:
         f0:2a:c2:b0:16:50:65:1a:5d:d9:33:0d:ab:70:88:bc:57:b1:
         19:9a:15:ab:59:4f:91:7e:28:d6:f8:65:72:07:e7:4f:1b:03:
         f8:b4:36:aa:bd:b0:1b:de:fb:4e:f3:e8:60:c8:cb:d3:f2:0f:
         0e:c2:ff:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:32 2025 by rpki-client on console.sobornost.net