Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/0/323830343a376564343a3a2f33322d3438203d3e20323731363530.roa
File:                     323830343a376564343a3a2f33322d3438203d3e20323731363530.roa (raw, json)
Hash identifier:          zSjiobgoP11yDGx1JU1uR4tWyfG6IJVOJJn9eu9znsg=
Subject key identifier:   10:49:A0:2A:A8:1F:64:E9:29:1D:EA:A4:F6:65:84:2B:24:BE:80:D8
Certificate issuer:       /CN=9128FD2FB3F69083F597C7967074F15DFCAC3130
Certificate serial:       0554AF23CA9FCE0CEDA3835D9607CD3ADFD8B1F8
Authority key identifier: 91:28:FD:2F:B3:F6:90:83:F5:97:C7:96:70:74:F1:5D:FC:AC:31:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9128FD2FB3F69083F597C7967074F15DFCAC3130.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/0/323830343a376564343a3a2f33322d3438203d3e20323731363530.roa
Signing time:             Thu 20 Mar 2025 13:52:05 +0000
ROA not before:           Thu 20 Mar 2025 13:47:05 +0000
ROA not after:            Thu 19 Mar 2026 13:52:05 +0000
asID:                     271650
IP address blocks:        2804:7ed4::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/0/9128FD2FB3F69083F597C7967074F15DFCAC3130.crl
                          rsync://rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/0/9128FD2FB3F69083F597C7967074F15DFCAC3130.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9128FD2FB3F69083F597C7967074F15DFCAC3130.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:54:af:23:ca:9f:ce:0c:ed:a3:83:5d:96:07:cd:3a:df:d8:b1:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9128FD2FB3F69083F597C7967074F15DFCAC3130
        Validity
            Not Before: Mar 20 13:47:05 2025 GMT
            Not After : Mar 19 13:52:05 2026 GMT
        Subject: CN=1049A02AA81F64E9291DEAA4F665842B24BE80D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6e:55:36:e8:42:47:0c:f2:cc:c6:bf:09:5c:
                    04:a6:0b:ed:0c:8e:23:4b:55:66:4d:b2:6b:94:7f:
                    cc:76:b7:46:6f:d5:01:f2:36:80:06:8b:74:08:5f:
                    37:ac:dc:18:90:36:ad:7d:8d:ad:a9:9c:96:7c:be:
                    0f:ec:fe:48:21:d8:ad:47:56:2b:7d:d4:12:d8:6e:
                    ac:44:dc:ce:a5:fd:cd:9c:3b:9a:8c:64:6d:0f:1b:
                    fb:f0:ca:fe:ac:3b:fb:05:4c:cb:be:5d:7f:a7:ab:
                    7e:c0:c3:23:0b:a1:6a:17:25:7d:e3:fb:8c:03:fb:
                    8c:8f:b7:13:8d:c6:9d:80:87:df:b3:8b:f8:11:93:
                    e9:e1:b5:08:cd:e9:d2:e2:b5:89:b8:82:89:67:f2:
                    39:32:37:18:07:a9:5a:0b:03:a4:8d:da:ca:33:87:
                    a2:2b:4e:4b:70:a6:ed:7c:cb:46:30:8a:0f:30:8c:
                    2a:20:51:c9:31:94:7e:48:38:06:73:26:d3:40:a0:
                    25:68:da:57:3e:21:ed:62:36:13:85:41:c4:36:6d:
                    85:60:03:c0:7b:23:9f:a4:13:3f:36:33:b5:21:c9:
                    56:7f:02:a8:fc:65:f5:5f:77:8f:ee:52:42:d6:dd:
                    12:82:3c:c4:3b:87:0c:96:26:62:2e:07:5f:95:58:
                    3c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:49:A0:2A:A8:1F:64:E9:29:1D:EA:A4:F6:65:84:2B:24:BE:80:D8
            X509v3 Authority Key Identifier:
                keyid:91:28:FD:2F:B3:F6:90:83:F5:97:C7:96:70:74:F1:5D:FC:AC:31:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/0/9128FD2FB3F69083F597C7967074F15DFCAC3130.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9128FD2FB3F69083F597C7967074F15DFCAC3130.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/0/323830343a376564343a3a2f33322d3438203d3e20323731363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ed4::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:d3:24:2f:de:df:2d:7c:8f:ae:81:5d:a0:f3:92:0c:d1:be:
         46:f1:7c:fe:95:3b:75:40:51:ae:fd:5c:58:8c:37:c1:82:2a:
         9d:2e:be:63:f6:40:84:ca:a5:5f:09:46:04:9a:1f:61:01:72:
         b0:68:21:bd:61:fa:d2:f0:83:73:1d:ad:80:f0:27:26:28:5c:
         c4:9a:60:94:0e:48:f6:29:11:92:03:7d:1e:1c:8e:03:27:8d:
         9e:85:5a:01:b4:1a:19:18:4a:19:9b:8e:b6:94:cf:04:5f:e8:
         6d:06:ea:2b:82:36:20:59:71:58:4f:fb:3e:4e:39:87:1a:1a:
         83:f6:fd:a7:8b:8a:2d:51:d6:35:0b:83:c0:6e:91:04:a1:f9:
         29:e5:2a:49:a4:74:62:4e:5a:63:06:92:60:26:0a:4e:80:d4:
         20:53:68:41:77:4c:0c:6d:36:d8:13:27:0f:dd:90:ea:b8:6d:
         4c:95:21:49:15:ac:ea:60:09:90:67:12:70:8b:4b:48:7a:3f:
         70:80:0f:b9:f9:25:cb:6e:39:3f:fe:51:5a:3f:fb:9b:7b:d5:
         73:f7:56:c5:66:e1:9d:b4:8c:c3:9c:6a:7a:3f:54:3c:6b:fc:
         a0:89:5e:64:c5:3e:e1:fd:eb:bc:60:47:72:b7:d2:1a:16:3d:
         81:86:7e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:27 2025 by rpki-client on console.sobornost.net