Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a363030303a3a2f33362d3336203d3e20323636343337.roa
File:                     323830343a333764303a363030303a3a2f33362d3336203d3e20323636343337.roa (raw, json)
Hash identifier:          9mbb251rieLCXagj9NOtnLbN3RZbGB7Nn8RH2Hn6/4k=
Subject key identifier:   10:43:3F:07:0F:76:C6:40:BD:67:A5:8D:0C:D5:B1:37:07:A7:25:1E
Certificate issuer:       /CN=1CB2152A8F44BC0B30650B200D8A3BA673D374FD
Certificate serial:       698C37CB53E87CEF6280F6F2E3834400DE34E190
Authority key identifier: 1C:B2:15:2A:8F:44:BC:0B:30:65:0B:20:0D:8A:3B:A6:73:D3:74:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a363030303a3a2f33362d3336203d3e20323636343337.roa
Signing time:             Thu 06 Mar 2025 17:28:16 +0000
ROA not before:           Thu 06 Mar 2025 17:23:16 +0000
ROA not after:            Thu 05 Mar 2026 17:28:16 +0000
asID:                     266437
IP address blocks:        2804:37d0:6000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.crl
                          rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 16:42:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:8c:37:cb:53:e8:7c:ef:62:80:f6:f2:e3:83:44:00:de:34:e1:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CB2152A8F44BC0B30650B200D8A3BA673D374FD
        Validity
            Not Before: Mar  6 17:23:16 2025 GMT
            Not After : Mar  5 17:28:16 2026 GMT
        Subject: CN=10433F070F76C640BD67A58D0CD5B13707A7251E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:33:94:94:e7:9b:05:cb:57:0d:10:78:93:02:
                    56:5b:e7:07:51:d9:05:6e:9e:fb:00:06:fd:ee:72:
                    25:06:7e:25:53:00:35:92:ed:23:cd:bd:f6:57:7f:
                    f2:46:3c:9d:74:5e:33:84:d8:ca:80:a2:11:ce:81:
                    fe:c5:0b:60:82:5a:23:27:2f:4e:ff:f0:a7:06:a3:
                    9a:1d:a3:2a:9b:19:ba:20:10:1f:60:46:54:bd:fd:
                    72:dc:cc:a3:75:9a:10:bf:93:a8:d7:e7:04:52:3b:
                    94:11:78:ef:51:01:5f:b3:fe:5f:c9:52:a2:27:ec:
                    08:ed:e3:0a:b3:0d:cd:2c:f9:d5:d2:39:7b:f8:cf:
                    2e:ea:6a:6c:53:59:9c:b7:dc:4f:e6:07:bc:e2:eb:
                    bc:28:e9:d6:40:fe:d2:76:31:2b:20:61:26:84:b7:
                    45:26:41:7b:88:6b:76:34:aa:63:c9:f3:15:e9:e5:
                    6c:9c:00:2e:6c:48:46:dc:36:3e:7e:24:1b:3e:1f:
                    16:8a:d7:91:a1:43:63:e1:c0:b0:73:a1:44:1b:1c:
                    dd:56:31:6a:57:4c:1a:4c:fe:cb:80:9f:69:20:5b:
                    79:61:d8:70:86:c5:ad:2e:e5:00:39:c4:50:ca:80:
                    c9:f8:08:3b:d2:66:01:5a:c4:e4:f5:6e:39:3b:91:
                    5b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:43:3F:07:0F:76:C6:40:BD:67:A5:8D:0C:D5:B1:37:07:A7:25:1E
            X509v3 Authority Key Identifier:
                keyid:1C:B2:15:2A:8F:44:BC:0B:30:65:0B:20:0D:8A:3B:A6:73:D3:74:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a363030303a3a2f33362d3336203d3e20323636343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37d0:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         63:a4:ce:e3:9d:fe:b4:ba:35:ad:43:10:3d:81:84:f8:b2:06:
         51:3b:4c:57:14:b2:9b:2b:b3:ea:df:bc:1a:9d:84:49:f0:f5:
         be:84:b3:fd:9d:56:7e:59:3d:64:43:b2:92:3e:3d:5c:14:f0:
         c3:2e:40:40:25:7f:0c:f5:87:05:dd:87:02:eb:e3:a1:93:96:
         7b:6a:4e:ea:f4:fa:85:1b:18:84:8a:16:e6:2b:f4:92:7f:ec:
         c4:9d:44:3c:1d:72:65:16:11:3c:5d:19:37:63:9d:54:8b:15:
         6c:80:b4:0f:f7:5e:ba:59:01:97:6b:76:88:1c:92:69:5a:d4:
         c7:8a:ed:39:88:a0:35:51:38:6e:a9:d5:2a:59:ba:92:c1:f6:
         ea:9f:77:f1:41:ba:50:3a:d6:36:dc:22:f2:62:77:cf:ea:d3:
         cc:8a:1f:d7:04:6a:05:e0:0c:69:5c:ab:ac:4a:47:c0:47:c1:
         08:01:68:f0:4d:3b:a4:75:de:c1:09:92:e5:cd:39:45:00:f6:
         2c:69:3d:59:a6:42:ee:66:a2:3a:92:8a:90:d5:55:9a:de:85:
         c7:8a:5b:26:4e:27:ff:ae:ab:26:d8:b6:b7:ad:05:e5:5c:15:
         9d:8b:2a:52:1c:af:79:7f:13:4e:32:de:63:8f:85:4a:83:00:
         ae:d3:d5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:06 2025 by rpki-client on console.sobornost.net