Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/323830343a376635303a3a2f33322d3332203d3e20323731363830.roa
File:                     323830343a376635303a3a2f33322d3332203d3e20323731363830.roa (raw, json)
Hash identifier:          8mwojufcPep+splbZMuv38KNaQbe2kXCGWx7hQgtXxA=
Subject key identifier:   B2:3D:3B:EE:AE:23:51:67:89:9D:9F:10:55:01:B3:9A:C9:55:12:8B
Certificate issuer:       /CN=0667C1E975614C995A6FB737132548928E943717
Certificate serial:       6AFAD0143409B216C9BE4C6D39EC0032738A3919
Authority key identifier: 06:67:C1:E9:75:61:4C:99:5A:6F:B7:37:13:25:48:92:8E:94:37:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0667C1E975614C995A6FB737132548928E943717.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/323830343a376635303a3a2f33322d3332203d3e20323731363830.roa
Signing time:             Tue 25 Mar 2025 15:41:38 +0000
ROA not before:           Tue 25 Mar 2025 15:36:38 +0000
ROA not after:            Tue 24 Mar 2026 15:41:38 +0000
asID:                     271680
IP address blocks:        2804:7f50::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.crl
                          rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0667C1E975614C995A6FB737132548928E943717.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 04:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:fa:d0:14:34:09:b2:16:c9:be:4c:6d:39:ec:00:32:73:8a:39:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0667C1E975614C995A6FB737132548928E943717
        Validity
            Not Before: Mar 25 15:36:38 2025 GMT
            Not After : Mar 24 15:41:38 2026 GMT
        Subject: CN=B23D3BEEAE235167899D9F105501B39AC955128B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a5:1b:37:14:f2:22:c5:16:27:d9:1f:70:cc:
                    32:cd:86:90:ee:36:16:2b:99:b3:bb:bb:cc:5b:7f:
                    62:87:d3:1c:16:b9:df:ec:c7:0b:19:73:5d:98:ee:
                    f2:cf:5e:25:92:09:84:b8:17:c7:f6:0e:74:11:44:
                    17:32:9e:97:de:0b:78:0a:18:55:89:53:74:d2:07:
                    2e:28:2b:6a:59:e9:8c:d1:b9:ea:67:bf:22:93:f5:
                    63:80:71:b8:68:c8:2d:97:a4:76:9f:3b:56:45:c1:
                    6c:c2:3f:b8:c8:0a:cf:48:5d:24:dd:2e:0a:aa:79:
                    bb:a7:af:4e:89:e5:be:95:72:09:26:d9:43:5f:42:
                    43:40:17:39:b7:87:03:af:a1:3d:ce:1a:fa:f9:15:
                    77:9d:00:fa:2e:36:85:65:3d:6b:d8:04:52:e6:c1:
                    85:d5:72:ce:73:e8:eb:0f:09:10:c2:e0:75:58:00:
                    5f:9a:a3:d4:d5:48:10:03:23:c9:81:5f:24:7e:4e:
                    96:ca:a9:0c:12:84:17:3b:aa:bb:40:39:46:80:33:
                    6d:e9:6a:8d:54:5c:b8:21:3c:f9:24:23:06:00:c2:
                    89:72:62:fd:75:9d:e7:fe:63:51:a6:b5:ea:6d:60:
                    94:a8:dd:24:d6:b2:0d:d0:fc:66:0e:21:cf:9b:94:
                    14:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:3D:3B:EE:AE:23:51:67:89:9D:9F:10:55:01:B3:9A:C9:55:12:8B
            X509v3 Authority Key Identifier:
                keyid:06:67:C1:E9:75:61:4C:99:5A:6F:B7:37:13:25:48:92:8E:94:37:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0667C1E975614C995A6FB737132548928E943717.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/323830343a376635303a3a2f33322d3332203d3e20323731363830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7f50::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:b5:fa:bb:30:de:5e:41:dc:2f:d0:e1:a3:38:87:17:6e:c4:
         84:18:a5:ce:54:73:36:ad:66:ca:13:c0:a1:49:c0:b7:80:cb:
         a5:97:2e:69:44:a2:44:c3:be:6f:79:11:d1:46:b0:f0:8c:b2:
         5a:bf:a2:78:35:ba:b5:4f:65:16:11:f4:48:75:9f:d5:76:ee:
         60:09:03:8a:e2:1d:2c:d4:5a:9f:e2:b3:1c:ee:34:26:54:34:
         13:71:4f:98:90:f8:d0:bc:b0:08:de:e7:51:29:2f:e2:c0:18:
         bf:5e:59:91:ac:52:bf:a7:ba:80:b4:0b:af:a7:6d:49:2d:d2:
         63:51:bc:75:b7:bb:e5:d2:58:af:3a:95:6a:41:b0:a7:44:42:
         ca:15:f4:b6:27:24:48:e1:2f:c3:43:f2:0e:3e:e5:38:05:5b:
         ed:fe:86:c1:fb:8c:27:74:d7:d8:7e:65:a3:f1:e7:be:92:7e:
         23:a6:a8:7e:bb:b5:94:17:c9:0e:c0:e2:d4:49:cc:e5:71:27:
         51:6e:16:e1:46:3f:15:95:76:3f:a9:fe:3c:0f:fc:8e:47:53:
         6a:3a:46:cb:f2:3f:ec:1e:b9:70:7f:0c:04:14:d7:79:09:c3:
         5c:71:a3:35:ca:32:91:65:d0:f0:a0:c5:70:b6:3e:d1:f9:07:
         03:16:b5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:14:29 2025 by rpki-client on console.sobornost.net