Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a333030303a3a2f33362d3336203d3e20323636343337.roa
File:                     323830343a333764303a333030303a3a2f33362d3336203d3e20323636343337.roa (raw, json)
Hash identifier:          RewHdzTwOPJaA2UGB45eV1XICmKFXERpmw9ch3RUMi8=
Subject key identifier:   22:7E:A7:87:DF:96:C0:30:EC:72:B2:FB:F9:C9:B8:39:56:0F:B6:41
Certificate issuer:       /CN=1CB2152A8F44BC0B30650B200D8A3BA673D374FD
Certificate serial:       31470DCACE9E9B17424A9D136A8CDD36E87BA0A2
Authority key identifier: 1C:B2:15:2A:8F:44:BC:0B:30:65:0B:20:0D:8A:3B:A6:73:D3:74:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a333030303a3a2f33362d3336203d3e20323636343337.roa
Signing time:             Thu 06 Mar 2025 17:28:17 +0000
ROA not before:           Thu 06 Mar 2025 17:23:17 +0000
ROA not after:            Thu 05 Mar 2026 17:28:17 +0000
asID:                     266437
IP address blocks:        2804:37d0:3000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.crl
                          rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 16:42:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:47:0d:ca:ce:9e:9b:17:42:4a:9d:13:6a:8c:dd:36:e8:7b:a0:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CB2152A8F44BC0B30650B200D8A3BA673D374FD
        Validity
            Not Before: Mar  6 17:23:17 2025 GMT
            Not After : Mar  5 17:28:17 2026 GMT
        Subject: CN=227EA787DF96C030EC72B2FBF9C9B839560FB641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5c:01:f2:cd:84:7c:55:5e:19:51:ab:42:37:
                    21:dd:e0:01:2f:a3:1d:dd:57:38:4c:3e:bc:87:54:
                    fd:ba:48:92:7b:22:d1:3d:c2:dd:db:0c:1d:1a:94:
                    fa:81:8a:e2:15:0b:c0:39:48:29:e2:da:c4:5f:c7:
                    40:fb:40:e5:6c:bb:48:86:b2:9f:d0:b8:cd:89:f5:
                    00:49:1b:e2:d4:5a:1b:ce:0c:85:49:ca:cc:84:fe:
                    23:86:7f:f7:04:62:a6:7e:36:89:f2:fa:c1:cd:43:
                    cb:35:37:2f:4b:22:3d:5e:70:2d:2e:7d:df:f7:2c:
                    28:77:c6:d4:7e:55:98:28:03:1b:bf:c2:dd:fe:28:
                    6e:a7:07:9b:97:7c:85:f3:65:ee:1c:7e:86:a5:0b:
                    24:04:47:3c:43:53:d2:c7:bd:07:31:62:7d:43:6e:
                    2a:68:41:10:06:b5:df:2f:05:f7:ed:1b:48:ea:f1:
                    01:a9:26:c8:b3:72:5e:91:81:6f:9a:63:5e:2b:30:
                    d7:90:b7:a2:ed:cb:29:33:0c:8d:a9:fe:b6:af:88:
                    65:85:8f:92:2e:3d:35:bc:39:b3:17:55:f5:f0:8c:
                    cc:61:46:4a:7f:0c:3b:cf:f5:84:39:17:17:37:a6:
                    25:44:42:ae:bd:20:8e:59:88:8b:5c:ac:99:68:6b:
                    8f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:7E:A7:87:DF:96:C0:30:EC:72:B2:FB:F9:C9:B8:39:56:0F:B6:41
            X509v3 Authority Key Identifier:
                keyid:1C:B2:15:2A:8F:44:BC:0B:30:65:0B:20:0D:8A:3B:A6:73:D3:74:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a333030303a3a2f33362d3336203d3e20323636343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37d0:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         08:19:11:86:a6:76:32:88:65:e1:15:1b:f8:83:7c:00:47:d5:
         fb:96:2d:6d:a4:e2:a9:50:a3:6f:2a:bc:e9:20:7f:6b:39:20:
         3d:c8:53:ce:26:ae:80:6d:8b:95:63:1a:15:91:a7:d6:a1:29:
         09:96:9e:b1:36:07:9c:cf:f4:4c:ec:3b:30:4c:95:30:be:bf:
         67:5d:e8:49:2e:f6:59:3a:d3:06:56:1f:c9:93:40:88:bb:85:
         ab:78:92:6c:cb:9c:92:8f:fb:25:11:0b:bf:25:e4:fe:40:02:
         2f:f4:56:82:c8:1d:b4:f0:f6:05:fc:54:04:a2:7f:ea:08:ed:
         2a:d2:68:97:e9:52:3b:fc:1c:20:85:8d:16:47:d5:0d:ed:8e:
         3c:3e:c1:3e:90:78:fd:f4:73:19:72:9f:89:3c:9b:9d:fe:d1:
         9c:b1:76:6d:f0:f1:8e:f9:c6:2d:df:72:ad:92:ed:46:3e:f7:
         dc:f5:9e:5c:8c:f4:14:80:83:4a:c5:73:a5:b9:7c:23:26:8c:
         1b:0c:b6:39:e2:82:58:96:91:2b:9d:97:32:14:24:0e:7e:76:
         31:06:c2:93:88:f3:ac:c3:f0:a2:20:be:84:26:7e:ca:59:d2:
         10:e8:9e:a7:49:79:24:4f:8d:0d:94:9d:69:3e:a4:89:85:e2:
         7c:45:03:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:06 2025 by rpki-client on console.sobornost.net