Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a333a3a2f34382d3438203d3e20323636343337.roa
File:                     323830343a333764303a333a3a2f34382d3438203d3e20323636343337.roa (raw, json)
Hash identifier:          J9WA/1djFJCQQsIX1kfC+Vi1Na5vB+SZig38GdPiYnE=
Subject key identifier:   6C:C7:BC:39:96:45:3E:BB:18:71:CB:01:8C:EF:3A:6A:4D:1A:21:F8
Certificate issuer:       /CN=1CB2152A8F44BC0B30650B200D8A3BA673D374FD
Certificate serial:       78E8BCC369CE72827EFC49047DFE71CFA4566653
Authority key identifier: 1C:B2:15:2A:8F:44:BC:0B:30:65:0B:20:0D:8A:3B:A6:73:D3:74:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a333a3a2f34382d3438203d3e20323636343337.roa
Signing time:             Thu 06 Mar 2025 17:28:17 +0000
ROA not before:           Thu 06 Mar 2025 17:23:17 +0000
ROA not after:            Thu 05 Mar 2026 17:28:17 +0000
asID:                     266437
IP address blocks:        2804:37d0:3::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.crl
                          rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 16:42:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:e8:bc:c3:69:ce:72:82:7e:fc:49:04:7d:fe:71:cf:a4:56:66:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CB2152A8F44BC0B30650B200D8A3BA673D374FD
        Validity
            Not Before: Mar  6 17:23:17 2025 GMT
            Not After : Mar  5 17:28:17 2026 GMT
        Subject: CN=6CC7BC3996453EBB1871CB018CEF3A6A4D1A21F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f5:70:52:bb:14:b2:1c:1c:17:5d:3c:46:69:
                    4b:0f:a1:01:61:89:99:a7:e3:b8:a5:68:32:df:e3:
                    2c:9e:45:09:50:33:b0:83:29:91:94:15:51:8d:7e:
                    52:15:d5:78:0b:3e:d6:ed:1f:fd:20:37:cd:2f:d6:
                    32:7c:4c:b7:e7:74:79:f8:7b:e7:3f:9b:7e:8a:0d:
                    d9:36:86:41:cf:56:35:6b:3f:b1:6f:5d:01:85:1d:
                    40:57:17:5b:7d:b7:bb:4c:fa:aa:db:1f:4b:a5:b4:
                    0b:5f:a0:6d:ec:e4:80:a8:54:ba:84:fb:77:aa:0e:
                    17:41:14:e3:4e:0a:f8:08:ba:4a:9c:4f:98:26:13:
                    79:21:ad:86:da:d4:2a:17:45:3f:3b:60:73:6c:3b:
                    67:e8:b2:b8:26:45:7c:4e:a2:81:e4:4a:bc:55:ca:
                    22:bf:4f:aa:6c:96:23:b0:be:a2:3c:8c:07:5d:b3:
                    e4:b7:ba:08:4f:5d:8b:ed:cd:eb:5b:b8:8c:05:ce:
                    b0:07:80:88:df:7a:4e:30:b7:ed:a0:6a:10:f5:b9:
                    a4:91:df:ce:cd:ec:fb:63:bc:54:25:c4:08:a2:49:
                    90:4b:23:c0:91:6b:6c:a3:68:65:cc:6a:cb:41:3e:
                    70:d5:b9:26:03:b6:b7:ce:f6:5e:ac:f6:41:ee:24:
                    90:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C7:BC:39:96:45:3E:BB:18:71:CB:01:8C:EF:3A:6A:4D:1A:21:F8
            X509v3 Authority Key Identifier:
                keyid:1C:B2:15:2A:8F:44:BC:0B:30:65:0B:20:0D:8A:3B:A6:73:D3:74:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a333a3a2f34382d3438203d3e20323636343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37d0:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:29:90:91:90:29:dc:4d:00:44:5c:58:ed:8f:6c:d8:50:a4:
         c5:aa:67:bb:59:98:1f:c7:90:e9:60:ef:77:72:5d:1c:06:b9:
         04:84:2d:d9:d6:02:81:0d:de:fa:77:23:5c:09:de:ee:f2:0d:
         4c:f2:6f:e0:69:f1:e1:28:11:ab:6a:df:01:e6:44:af:53:f1:
         d8:28:79:cb:a0:cf:30:20:c1:b8:23:7a:5e:ff:6c:39:00:3b:
         55:2e:ae:e2:4e:73:6a:39:c2:1b:e4:8a:b7:4e:02:3e:63:b1:
         42:84:c9:2e:56:4b:54:6b:b1:d2:91:91:72:87:5d:40:66:25:
         6d:b5:c5:0d:9a:92:69:2b:b2:76:b2:80:41:d5:ae:c0:0c:49:
         c8:44:9f:bd:b9:47:91:10:dd:f6:dd:b6:de:5f:68:02:70:42:
         f2:24:c8:90:16:de:dd:01:e2:eb:47:53:be:b0:ca:5d:d6:82:
         95:72:82:de:88:0e:1e:af:01:f9:79:2b:79:c0:c6:d4:72:96:
         a4:8c:e3:c3:0c:2c:18:0a:24:73:c7:dd:f1:5c:2b:49:e9:db:
         f0:d6:cf:68:eb:90:f9:ab:54:05:36:c5:51:dd:40:5b:b3:0c:
         db:70:89:df:87:95:93:f3:70:02:db:49:b9:b1:0a:65:81:6d:
         85:19:61:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:06 2025 by rpki-client on console.sobornost.net