Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a383030303a3a2f33332d3333203d3e20323634393936.roa
File:                     323830343a333132343a383030303a3a2f33332d3333203d3e20323634393936.roa (raw, json)
Hash identifier:          h0pC2oIsBCt9tXkPYAiUvB3DEjthKzWDIHZcV015Al0=
Subject key identifier:   E8:0C:2B:1C:6D:17:7D:96:C7:A7:72:07:A6:96:7D:62:45:FB:17:75
Certificate issuer:       /CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69
Certificate serial:       367B2CD99C8DB602D4606203BB1C8C8024F025E6
Authority key identifier: 2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a383030303a3a2f33332d3333203d3e20323634393936.roa
Signing time:             Thu 06 Mar 2025 08:50:12 +0000
ROA not before:           Thu 06 Mar 2025 08:45:12 +0000
ROA not after:            Thu 05 Mar 2026 08:50:12 +0000
asID:                     264996
IP address blocks:        2804:3124:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl
                          rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 09:20:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:7b:2c:d9:9c:8d:b6:02:d4:60:62:03:bb:1c:8c:80:24:f0:25:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69
        Validity
            Not Before: Mar  6 08:45:12 2025 GMT
            Not After : Mar  5 08:50:12 2026 GMT
        Subject: CN=E80C2B1C6D177D96C7A77207A6967D6245FB1775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:06:31:13:c7:7e:21:a2:63:5a:b0:a8:07:22:
                    1d:01:a9:db:7a:ec:65:56:d5:51:58:66:25:8c:20:
                    07:70:cc:2f:c7:fc:4e:80:28:49:a1:e2:a5:c3:eb:
                    c6:24:33:0b:dc:40:c0:9c:8c:c7:ad:e8:31:ef:e5:
                    d4:5b:11:00:a6:1c:d3:43:f6:c7:ee:2c:14:c4:f5:
                    b9:c4:cf:9b:60:64:f9:fa:4c:c9:1a:34:bf:33:92:
                    b0:d9:31:fe:41:21:62:b6:82:ec:2d:41:64:82:3b:
                    f6:53:68:19:21:79:a3:0b:2d:6f:8f:ce:7c:9f:11:
                    c8:bc:fd:ae:74:dc:cc:a1:da:1b:2f:6e:13:46:3e:
                    7d:d2:ba:9e:d2:0d:a2:4e:cd:cd:fe:e9:16:ff:f9:
                    10:64:a9:4e:00:62:36:cb:1a:29:b6:dc:98:eb:91:
                    4d:94:cc:28:14:40:bc:49:fa:32:5e:83:05:71:21:
                    f9:04:b3:a2:e5:59:d4:a8:60:a1:ff:5d:50:b9:b8:
                    45:0e:70:bd:c9:f7:8f:72:b1:ce:ff:35:e7:b5:43:
                    0a:a6:8f:21:46:a8:31:5b:53:fc:0a:f3:67:b3:20:
                    e2:40:33:27:12:03:11:a4:69:47:90:ca:a7:c4:5c:
                    94:ff:02:66:d0:00:4f:24:ca:6b:69:01:ae:38:f2:
                    23:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:0C:2B:1C:6D:17:7D:96:C7:A7:72:07:A6:96:7D:62:45:FB:17:75
            X509v3 Authority Key Identifier:
                keyid:2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a383030303a3a2f33332d3333203d3e20323634393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3124:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         68:52:d7:45:28:13:56:d7:a1:79:0a:dc:2c:f5:66:db:35:4f:
         a8:3b:1f:0e:48:75:43:49:bd:0e:e3:48:6d:1f:8a:70:b5:f8:
         ff:bd:1a:c5:c3:87:76:97:0b:c7:4d:5a:88:e4:bc:1c:3f:ab:
         df:7e:d6:52:8e:39:b3:66:ad:a1:7b:b9:53:98:7c:f3:a5:f0:
         75:4d:2d:cf:91:86:66:3b:9b:5a:8a:8e:2b:86:20:5d:a3:e1:
         ef:66:ae:f2:41:76:6a:48:4e:b4:5d:db:d0:b0:3a:dc:5a:86:
         7d:b9:39:ed:db:24:87:f7:25:a5:b6:cf:02:d4:e8:ed:c1:75:
         97:1a:ff:5c:59:b7:8a:30:05:34:8e:39:37:56:6e:81:78:f2:
         f4:0e:c9:a0:d7:3d:9d:ba:1e:4f:36:55:a3:85:86:55:cd:35:
         91:85:96:81:b0:de:be:4b:0c:d2:62:4e:d6:e7:e9:5e:d5:3e:
         fd:62:ca:dc:73:1b:cb:aa:f3:62:9c:d4:bc:9d:45:d1:72:2a:
         ef:71:79:9e:3a:5f:e7:31:b8:fb:dd:ed:da:0c:0e:fe:50:e3:
         41:a1:66:a3:5a:c3:97:15:78:20:10:71:8a:6d:13:24:03:62:
         67:bf:d6:45:95:a6:44:3d:ac:41:7c:55:8c:6a:8b:19:18:e2:
         b4:37:61:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:21:55 2025 by rpki-client on console.sobornost.net