Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/1/323830343a363839633a3a2f33322d3332203d3e20323639373034.roa
File:                     323830343a363839633a3a2f33322d3332203d3e20323639373034.roa (raw, json)
Hash identifier:          2b9CDGdKdAYLs/t5BJl3KHK1ion7nN6OYSsGe5/e6ZU=
Subject key identifier:   D9:84:C8:38:0E:F1:D0:F9:E1:80:55:B9:69:3A:4E:FA:2E:2B:70:60
Certificate issuer:       /CN=B0C3C6B983747F871BB1AE8CE992EAC776B76AB3
Certificate serial:       6860F2E0D07477481E1A2B53F4C6BF65263B886E
Authority key identifier: B0:C3:C6:B9:83:74:7F:87:1B:B1:AE:8C:E9:92:EA:C7:76:B7:6A:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0C3C6B983747F871BB1AE8CE992EAC776B76AB3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/1/323830343a363839633a3a2f33322d3332203d3e20323639373034.roa
Signing time:             Tue 22 Apr 2025 19:49:46 +0000
ROA not before:           Tue 22 Apr 2025 19:44:46 +0000
ROA not after:            Tue 21 Apr 2026 19:49:46 +0000
asID:                     269704
IP address blocks:        2804:689c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/1/B0C3C6B983747F871BB1AE8CE992EAC776B76AB3.crl
                          rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/1/B0C3C6B983747F871BB1AE8CE992EAC776B76AB3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0C3C6B983747F871BB1AE8CE992EAC776B76AB3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:60:f2:e0:d0:74:77:48:1e:1a:2b:53:f4:c6:bf:65:26:3b:88:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0C3C6B983747F871BB1AE8CE992EAC776B76AB3
        Validity
            Not Before: Apr 22 19:44:46 2025 GMT
            Not After : Apr 21 19:49:46 2026 GMT
        Subject: CN=D984C8380EF1D0F9E18055B9693A4EFA2E2B7060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1a:9d:a4:c2:6a:aa:0c:ae:d4:21:5c:56:32:
                    98:55:17:30:e2:7f:91:b9:37:97:46:62:da:5f:82:
                    09:d2:f3:1f:a6:f5:61:38:1e:5c:a6:a3:7c:70:d0:
                    7e:d1:88:ee:33:f7:2e:09:40:6b:83:be:88:ee:0c:
                    62:9b:b0:41:c4:7e:be:7b:c7:26:36:ac:8e:16:5f:
                    b7:c5:95:73:1a:55:5e:56:ba:58:ad:57:e5:24:6a:
                    5f:72:ea:1e:72:fb:5d:59:a7:07:6c:c1:0f:45:c2:
                    8c:f5:ad:23:c1:49:a3:5d:a8:6d:18:72:22:7e:80:
                    3f:cb:25:57:61:50:48:e5:e5:9f:fe:41:65:ab:98:
                    12:d3:2b:b9:42:5b:84:3c:76:58:19:5f:eb:36:cc:
                    c2:74:bc:d1:2e:7e:c6:bd:91:14:e5:f0:e2:3b:06:
                    7b:0d:e2:ab:7b:c5:d0:89:38:47:06:5f:25:68:8b:
                    41:29:2d:ac:5a:fb:c8:08:31:fe:4a:e9:96:eb:af:
                    cd:87:f7:ba:40:eb:5e:56:82:65:c4:46:24:f3:5c:
                    d8:c8:71:b6:44:3e:11:c2:ae:a1:f9:0a:70:a1:83:
                    e4:d8:a7:17:41:fa:9f:2d:b6:be:30:2c:ab:0d:ee:
                    22:26:c3:93:9f:68:fa:37:d5:8e:2e:12:4b:3d:cf:
                    87:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:84:C8:38:0E:F1:D0:F9:E1:80:55:B9:69:3A:4E:FA:2E:2B:70:60
            X509v3 Authority Key Identifier:
                keyid:B0:C3:C6:B9:83:74:7F:87:1B:B1:AE:8C:E9:92:EA:C7:76:B7:6A:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/1/B0C3C6B983747F871BB1AE8CE992EAC776B76AB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0C3C6B983747F871BB1AE8CE992EAC776B76AB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/1/323830343a363839633a3a2f33322d3332203d3e20323639373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:689c::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:14:bc:2c:fe:d4:93:e1:c0:ac:85:37:8e:78:e1:8d:27:54:
         20:cd:3a:06:75:ef:89:7d:d3:c6:e6:18:a0:ab:a9:a2:90:6d:
         c9:92:d3:95:aa:43:41:8a:e5:63:f1:be:51:8b:4f:96:3e:52:
         bb:ab:21:f6:c3:a0:71:e0:0b:ba:0a:d7:8e:94:73:e4:cc:4f:
         f3:05:43:d8:c8:8a:23:c6:ee:1f:10:6c:da:b6:33:85:23:36:
         23:92:74:a4:58:61:d1:c3:c5:ef:38:b7:09:d6:49:10:5f:90:
         3c:d9:0f:88:8f:6e:87:9a:c9:92:32:81:22:5b:a4:b3:87:90:
         a5:4f:63:06:ef:48:fb:04:39:a7:90:93:a2:27:ad:e0:94:60:
         96:46:5a:7a:84:67:03:7c:86:de:33:af:86:58:a5:fc:b8:2e:
         ab:7b:88:79:b6:4f:cc:8a:0d:4f:40:d8:f6:08:50:18:cb:aa:
         e4:ec:3b:c3:9e:9b:ad:cb:07:e6:fd:54:10:ed:58:64:02:ee:
         1b:32:49:07:ac:c1:00:01:e7:9a:2b:18:2e:d4:6e:a2:54:35:
         02:6a:54:9b:7d:3b:c9:df:6d:d7:98:0d:36:fc:68:49:44:4c:
         4d:46:4d:41:5f:05:fa:0d:1c:7f:15:48:ec:fb:a5:45:11:ac:
         e8:79:dc:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:46:20 2025 by rpki-client on console.sobornost.net