Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a373030323a3a2f34382d3438203d3e20323636343337.roa
File:                     323830343a333764303a373030323a3a2f34382d3438203d3e20323636343337.roa (raw, json)
Hash identifier:          IgQHQIu/qETZyC3wOAE+jtCJjgcwRod3zEFnVa2vg7s=
Subject key identifier:   DB:16:A5:34:A4:A5:6E:C5:4F:F7:D6:BF:B0:BD:DA:0C:C8:8B:AC:8C
Certificate issuer:       /CN=1CB2152A8F44BC0B30650B200D8A3BA673D374FD
Certificate serial:       5ECDAEF59DCABE317CD04DDDA83BC9B31F1B3985
Authority key identifier: 1C:B2:15:2A:8F:44:BC:0B:30:65:0B:20:0D:8A:3B:A6:73:D3:74:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a373030323a3a2f34382d3438203d3e20323636343337.roa
Signing time:             Thu 06 Mar 2025 17:28:18 +0000
ROA not before:           Thu 06 Mar 2025 17:23:18 +0000
ROA not after:            Thu 05 Mar 2026 17:28:18 +0000
asID:                     266437
IP address blocks:        2804:37d0:7002::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.crl
                          rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 16:42:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:cd:ae:f5:9d:ca:be:31:7c:d0:4d:dd:a8:3b:c9:b3:1f:1b:39:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CB2152A8F44BC0B30650B200D8A3BA673D374FD
        Validity
            Not Before: Mar  6 17:23:18 2025 GMT
            Not After : Mar  5 17:28:18 2026 GMT
        Subject: CN=DB16A534A4A56EC54FF7D6BFB0BDDA0CC88BAC8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fb:a6:0f:32:d8:62:3d:60:45:63:eb:d4:b2:
                    16:03:c1:2f:bb:13:25:b3:7b:96:23:09:6a:13:dc:
                    75:ef:ac:de:c5:c1:af:17:d8:ca:48:e0:60:86:75:
                    bc:f0:b3:52:34:93:59:03:d3:d2:32:d2:a4:92:ed:
                    70:2f:7d:78:ab:07:f0:70:87:d1:b6:f4:6c:b9:ff:
                    bb:fc:bd:6e:fa:36:06:8d:a5:85:58:e0:88:cd:2b:
                    fa:2d:e0:20:90:f1:b6:75:69:ff:33:12:26:7e:00:
                    16:9d:10:d7:63:6b:9e:a0:3b:04:a5:5a:36:6f:4e:
                    71:1f:fe:ac:72:62:46:80:85:ea:fb:e7:aa:44:a3:
                    a4:f4:80:39:04:ae:1d:1c:7a:b7:b2:10:24:bd:f9:
                    a5:8e:8e:9d:30:19:9c:1f:b3:a1:20:4a:71:bb:41:
                    60:9d:9f:fe:57:ca:fe:69:0f:c8:eb:97:b6:09:06:
                    da:d9:38:85:5d:b6:72:fc:15:92:ab:18:94:1c:58:
                    cc:6d:0a:fd:aa:23:b1:7e:b5:b5:40:75:fc:5e:0d:
                    56:cb:ab:92:a5:c2:5e:99:34:e2:0f:18:5a:88:27:
                    b0:09:d1:7e:4c:46:89:15:af:ee:aa:6e:ea:27:63:
                    0d:8e:47:5a:f1:65:90:61:92:78:ae:f8:31:bc:62:
                    b0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:16:A5:34:A4:A5:6E:C5:4F:F7:D6:BF:B0:BD:DA:0C:C8:8B:AC:8C
            X509v3 Authority Key Identifier:
                keyid:1C:B2:15:2A:8F:44:BC:0B:30:65:0B:20:0D:8A:3B:A6:73:D3:74:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a373030323a3a2f34382d3438203d3e20323636343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37d0:7002::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:d2:98:44:d6:c2:e1:23:89:13:cb:21:96:0a:20:69:8f:83:
         b6:8f:4c:2c:b7:c7:ab:a4:34:6a:21:94:6e:54:af:4c:de:80:
         0d:7b:13:2b:4c:4b:23:b1:de:3e:ae:f9:ed:2b:be:2a:c7:fb:
         0c:eb:b2:53:70:6f:d6:3f:17:ad:24:b0:db:0a:ef:e3:dc:e6:
         25:be:60:a7:f6:ba:1d:d3:6b:b9:02:54:cc:04:69:9f:bf:88:
         f6:13:10:53:bd:6e:9b:4b:4f:1e:e1:f6:3b:ea:d6:2d:6d:0e:
         dc:42:9d:b5:e2:93:07:36:6e:e2:e8:fe:e1:1a:b2:67:b1:4c:
         59:00:e8:da:03:a6:75:cd:0a:2e:4b:db:5b:98:0c:c9:f1:42:
         fd:9e:d9:62:8e:e7:c3:89:a5:02:c1:9b:7f:2c:71:26:01:fa:
         13:fc:90:60:28:d4:39:02:18:00:99:65:94:b4:68:9a:c8:83:
         03:e0:08:4d:ef:e9:14:52:63:48:5b:7a:74:e8:c9:41:e6:d6:
         c2:c5:99:cc:f9:25:48:55:7f:a1:34:f4:cb:4d:29:66:94:d3:
         4b:e9:29:7a:76:a2:f2:65:75:61:64:d1:5f:61:eb:c0:86:ae:
         cb:9b:7c:07:89:15:85:4d:ed:17:4b:31:f7:27:8e:34:0b:9c:
         64:21:66:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:06 2025 by rpki-client on console.sobornost.net