Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/323830343a3863383a363030303a3a2f33352d3335203d3e20323632333933.roa
File:                     323830343a3863383a363030303a3a2f33352d3335203d3e20323632333933.roa (raw, json)
Hash identifier:          PVW6h9Xco0FwwZrlQk0HuQF3QDt318QJyllbxqUEvcc=
Subject key identifier:   9A:A8:1B:D6:AD:4F:9E:96:84:71:28:81:15:52:26:68:D9:50:3A:E6
Certificate issuer:       /CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
Certificate serial:       12B12F280B37F1F3176518B475BE64FF080B7380
Authority key identifier: C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/323830343a3863383a363030303a3a2f33352d3335203d3e20323632333933.roa
Signing time:             Sun 06 Apr 2025 22:08:51 +0000
ROA not before:           Sun 06 Apr 2025 22:03:51 +0000
ROA not after:            Sun 05 Apr 2026 22:08:51 +0000
asID:                     262393
IP address blocks:        2804:8c8:6000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl
                          rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:b1:2f:28:0b:37:f1:f3:17:65:18:b4:75:be:64:ff:08:0b:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
        Validity
            Not Before: Apr  6 22:03:51 2025 GMT
            Not After : Apr  5 22:08:51 2026 GMT
        Subject: CN=9AA81BD6AD4F9E968471288115522668D9503AE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3d:06:89:5a:fe:ba:52:99:89:5d:0e:cb:d1:
                    7f:21:20:a6:b3:d4:81:eb:b9:d3:26:35:dc:c2:6e:
                    13:12:97:76:0f:b0:23:86:79:ad:38:ca:93:2e:95:
                    ce:04:49:61:cc:40:68:54:ce:78:63:87:fc:a8:21:
                    17:8d:74:74:63:70:f5:2b:54:62:b3:7b:9d:18:d0:
                    29:5e:1a:5b:48:30:c7:91:cb:37:c4:52:e1:df:a1:
                    14:d6:1a:f5:72:54:a7:9d:49:1a:35:53:d9:0f:47:
                    cb:6b:b4:5b:04:c9:e3:29:4e:bc:20:47:ab:44:e6:
                    d7:57:5a:58:14:26:89:48:c7:3c:7b:05:36:76:88:
                    1e:18:0c:c2:05:06:d4:6b:9c:35:e1:c1:03:e9:89:
                    1e:4e:c4:f7:7e:26:45:18:90:69:99:f9:50:e6:b2:
                    9f:e8:fe:33:84:08:e4:e6:38:22:1d:99:6c:d0:fd:
                    9b:ac:1f:f1:d0:02:4a:56:76:67:ab:20:90:27:da:
                    fb:01:d7:fc:27:bd:4c:46:fb:8a:5a:1f:0b:6a:9e:
                    71:6e:87:e9:f8:0b:cb:ff:4d:0c:72:d6:94:37:5b:
                    8f:24:53:99:80:c8:17:44:8a:56:ca:fa:b2:d5:92:
                    3a:b8:b6:c8:eb:77:b5:4d:d4:ff:98:4e:ac:c9:06:
                    73:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A8:1B:D6:AD:4F:9E:96:84:71:28:81:15:52:26:68:D9:50:3A:E6
            X509v3 Authority Key Identifier:
                keyid:C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/323830343a3863383a363030303a3a2f33352d3335203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c8:6000::/35

    Signature Algorithm: sha256WithRSAEncryption
         ba:24:9a:ee:be:1f:32:89:7a:8d:e2:57:b1:80:c7:f4:d5:cc:
         2e:d5:59:68:a5:ed:c8:7c:4b:ac:cf:81:b9:a7:b8:cd:7f:4b:
         50:34:bc:0a:51:42:96:7c:4c:40:09:89:df:a7:51:83:b3:43:
         cc:19:89:33:d9:eb:b4:f0:fd:cc:6d:07:86:88:2a:f3:8e:a9:
         f8:39:c8:7f:2d:53:3b:ce:6b:e9:4d:bd:42:58:5b:f5:77:46:
         70:13:d9:a4:43:a7:58:cb:8b:04:09:1f:7c:bb:3e:33:ec:5f:
         1b:51:31:1e:0e:9e:1d:bc:e8:86:78:00:59:9e:fd:a4:21:4c:
         0b:05:a0:e3:2a:ec:03:c3:8c:fc:2b:d9:8b:90:d9:a5:ca:e5:
         23:03:01:00:1b:0b:5d:c5:f9:92:8d:9e:86:29:36:85:cd:eb:
         ff:29:de:e3:cd:79:d7:02:b0:da:24:a6:f7:25:bf:c0:ba:35:
         17:f2:eb:1d:01:04:7c:65:ed:13:80:40:31:20:00:1f:df:85:
         a3:e8:fc:b2:75:7b:27:5d:27:49:cf:da:bf:d4:8b:e7:fa:96:
         de:de:98:65:4d:cb:44:c6:3d:4a:05:19:01:c1:8a:df:6b:c6:
         8c:93:00:cd:a7:3c:54:69:b1:33:22:d7:9e:84:c5:41:0a:ee:
         d0:e7:b1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:06:59 2025 by rpki-client on console.sobornost.net