Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a323a3a2f34382d3438203d3e20323636343337.roa
File:                     323830343a333764303a323a3a2f34382d3438203d3e20323636343337.roa (raw, json)
Hash identifier:          bBVNZUJlXqR8Wcp970Z+Zdf/YgdhqQLu48dw/cJ8zY4=
Subject key identifier:   C7:EC:9F:3E:98:90:53:C0:FC:4C:31:D3:7D:EA:54:00:00:84:AB:20
Certificate issuer:       /CN=1CB2152A8F44BC0B30650B200D8A3BA673D374FD
Certificate serial:       1547FA6E87580DBF874525DCC96CA716555C3463
Authority key identifier: 1C:B2:15:2A:8F:44:BC:0B:30:65:0B:20:0D:8A:3B:A6:73:D3:74:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a323a3a2f34382d3438203d3e20323636343337.roa
Signing time:             Thu 06 Mar 2025 17:28:17 +0000
ROA not before:           Thu 06 Mar 2025 17:23:17 +0000
ROA not after:            Thu 05 Mar 2026 17:28:17 +0000
asID:                     266437
IP address blocks:        2804:37d0:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.crl
                          rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 16:42:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:47:fa:6e:87:58:0d:bf:87:45:25:dc:c9:6c:a7:16:55:5c:34:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CB2152A8F44BC0B30650B200D8A3BA673D374FD
        Validity
            Not Before: Mar  6 17:23:17 2025 GMT
            Not After : Mar  5 17:28:17 2026 GMT
        Subject: CN=C7EC9F3E989053C0FC4C31D37DEA54000084AB20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e2:48:70:4c:54:1c:f3:1b:cc:0d:b3:50:74:
                    db:2e:f3:0a:6b:d4:e6:72:7a:63:8d:16:27:dc:30:
                    f4:af:4f:c8:60:e7:e0:ef:a2:04:6a:59:3a:0e:36:
                    25:5f:bc:06:71:df:d5:cb:52:73:08:dc:24:cd:02:
                    6d:65:38:f0:d3:b3:7b:6b:3a:95:69:c4:a8:c7:ed:
                    94:92:d3:6a:fd:28:76:77:70:d9:8f:e1:60:29:2e:
                    17:f0:3c:bb:bc:df:97:84:b0:a7:bc:56:dd:28:1f:
                    ca:22:83:15:11:0f:13:a0:db:ee:89:2e:0b:47:d1:
                    7b:3a:d9:f9:5c:42:92:7b:6c:92:4c:77:45:e9:18:
                    10:90:5f:0a:9e:12:48:9b:32:b7:de:3a:70:11:ad:
                    01:cc:40:07:e8:68:3d:3e:7f:d2:b1:3c:16:4f:6e:
                    8f:81:ef:b8:79:c3:15:1f:41:9b:c2:11:7c:fc:f9:
                    45:cf:60:04:ff:6b:ba:1c:8d:12:a8:af:91:c3:5a:
                    fd:8f:aa:80:35:50:e6:73:6c:06:1c:b5:54:53:c7:
                    63:fe:e7:6a:ef:c7:24:78:e5:f6:5e:51:29:13:0b:
                    c4:d9:90:7e:f2:f3:af:6b:be:27:70:ac:2a:5d:91:
                    bb:36:bc:6a:13:d0:06:ab:d3:63:20:e3:e0:66:f0:
                    5b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:EC:9F:3E:98:90:53:C0:FC:4C:31:D3:7D:EA:54:00:00:84:AB:20
            X509v3 Authority Key Identifier:
                keyid:1C:B2:15:2A:8F:44:BC:0B:30:65:0B:20:0D:8A:3B:A6:73:D3:74:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a323a3a2f34382d3438203d3e20323636343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37d0:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:d7:60:80:62:d9:a1:3a:61:ff:6a:8b:ea:0e:0e:ec:7c:e3:
         e5:f8:7f:c8:1e:8a:65:73:6b:f6:1c:94:22:1a:47:7d:1b:38:
         56:4d:17:5c:ba:71:42:64:4b:54:d1:22:27:b8:c5:1e:bd:0d:
         60:a1:b2:18:16:db:0d:6a:ab:7f:1d:4e:69:c5:c9:0d:b2:c9:
         54:e3:a4:b2:9a:18:e5:ab:7b:60:4d:4f:fb:68:f2:23:62:51:
         bc:da:c4:5d:50:ce:0e:17:44:03:7c:0e:6e:c1:42:51:13:24:
         a4:dc:2e:df:f1:0b:cd:90:93:00:28:9f:c5:7e:95:4c:b3:c3:
         a7:9e:75:be:2d:3a:e0:3e:95:91:e6:09:1f:64:6f:4e:97:d6:
         b4:02:ed:89:47:5f:d1:81:47:09:2f:30:30:e1:87:04:27:32:
         0a:ae:2f:f7:02:cb:f1:cb:68:76:cf:11:13:be:c2:34:a6:d8:
         24:4b:fc:80:a7:22:5d:c4:59:da:f7:89:b6:50:5f:26:a8:04:
         8b:ae:25:5c:d5:6e:41:92:92:40:32:a9:85:23:d8:18:6e:3c:
         57:48:64:65:5d:e9:9c:f8:17:56:49:97:fd:79:96:b2:e8:a2:
         1a:a9:61:ee:c3:9a:ff:ab:a7:21:94:6a:ec:35:06:47:d3:6d:
         63:c9:34:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:06 2025 by rpki-client on console.sobornost.net