Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/323830343a376334303a3a2f33322d3332203d3e20323731343834.roa
File:                     323830343a376334303a3a2f33322d3332203d3e20323731343834.roa (raw, json)
Hash identifier:          kxdMBUt5jpp/DhkqO9p5Eucys82Y+hZDMce1OQ/LR1Y=
Subject key identifier:   AC:05:DB:43:C9:AB:95:C5:B5:CC:30:52:C7:0C:88:DC:16:50:DA:17
Certificate issuer:       /CN=3B5BBCE7F8F28C41BFC307B8430A56A16C67E800
Certificate serial:       32858906564F5D386CAC4DF308EDB0ED7212952B
Authority key identifier: 3B:5B:BC:E7:F8:F2:8C:41:BF:C3:07:B8:43:0A:56:A1:6C:67:E8:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5BBCE7F8F28C41BFC307B8430A56A16C67E800.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/323830343a376334303a3a2f33322d3332203d3e20323731343834.roa
Signing time:             Thu 13 Mar 2025 15:10:46 +0000
ROA not before:           Thu 13 Mar 2025 15:05:46 +0000
ROA not after:            Thu 12 Mar 2026 15:10:46 +0000
asID:                     271484
IP address blocks:        2804:7c40::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3B5BBCE7F8F28C41BFC307B8430A56A16C67E800.crl
                          rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3B5BBCE7F8F28C41BFC307B8430A56A16C67E800.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5BBCE7F8F28C41BFC307B8430A56A16C67E800.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 12:58:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:85:89:06:56:4f:5d:38:6c:ac:4d:f3:08:ed:b0:ed:72:12:95:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B5BBCE7F8F28C41BFC307B8430A56A16C67E800
        Validity
            Not Before: Mar 13 15:05:46 2025 GMT
            Not After : Mar 12 15:10:46 2026 GMT
        Subject: CN=AC05DB43C9AB95C5B5CC3052C70C88DC1650DA17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1f:68:2f:43:a8:01:e7:c3:b5:15:2b:27:d4:
                    b8:0f:f3:7c:f2:d7:12:d2:f2:c3:88:f1:fd:11:6c:
                    14:c4:38:09:b4:7f:ae:78:98:7a:8e:99:06:15:a1:
                    83:ec:f1:1b:07:41:6d:e8:96:b6:c0:ed:0f:9b:03:
                    27:93:67:d0:38:e7:8c:59:88:13:9d:c6:27:75:e6:
                    fb:ae:91:6c:80:d3:f1:df:44:95:f5:4b:12:45:25:
                    af:7c:d5:db:6c:23:c7:d4:39:ed:83:88:b0:97:d9:
                    3c:3a:a6:2f:17:d6:4b:78:63:a5:91:3c:2d:3f:46:
                    34:07:18:27:e9:48:d3:e6:11:0c:0c:b6:37:60:65:
                    10:9b:ac:6b:3d:2a:24:27:8c:8a:95:bd:91:36:a6:
                    43:93:5b:94:ad:c5:6a:a0:0e:19:75:6f:4c:c3:4b:
                    1e:07:14:16:95:16:2e:35:0d:49:8e:8b:9a:1b:19:
                    6e:bf:1d:08:f9:c7:94:69:b4:5b:de:d5:3e:87:d2:
                    4a:30:23:4e:37:5a:6d:19:bc:2a:e7:90:e0:51:db:
                    a2:e9:19:56:9a:e6:b2:18:ad:b3:b3:78:88:bb:65:
                    1a:3c:06:32:ec:d8:88:02:fb:75:73:72:2a:e6:44:
                    3b:f0:2d:1f:6a:09:e4:86:85:f8:8b:6d:a6:5a:43:
                    0f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:05:DB:43:C9:AB:95:C5:B5:CC:30:52:C7:0C:88:DC:16:50:DA:17
            X509v3 Authority Key Identifier:
                keyid:3B:5B:BC:E7:F8:F2:8C:41:BF:C3:07:B8:43:0A:56:A1:6C:67:E8:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3B5BBCE7F8F28C41BFC307B8430A56A16C67E800.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5BBCE7F8F28C41BFC307B8430A56A16C67E800.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/323830343a376334303a3a2f33322d3332203d3e20323731343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c40::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:c7:a9:95:9b:9e:1a:d4:4c:ef:5e:17:ee:c3:1e:f9:7c:93:
         01:31:0e:d5:12:e7:7a:d6:45:f9:cd:99:98:f3:21:96:61:18:
         ce:7f:e9:21:4a:74:34:a3:d3:19:ad:65:7e:23:fb:81:9b:5b:
         fb:f1:b5:04:f9:2e:f6:2a:06:4a:5b:d1:5b:fe:21:01:48:0e:
         11:31:7e:2d:2c:e8:bc:8e:f5:8f:a7:68:90:f8:0b:e6:55:25:
         95:2a:82:24:58:13:7b:13:d0:bc:55:03:09:e6:c2:83:52:5d:
         ee:15:71:5a:3f:0b:8c:ef:9c:ca:e1:49:4c:41:20:51:dc:f3:
         94:8d:73:38:0e:07:72:5e:b6:e5:e4:6f:b6:d8:19:b2:23:16:
         32:90:36:10:01:73:a1:5e:7f:93:19:92:c1:be:2a:8c:0f:a7:
         d1:f7:3f:03:84:d6:7b:4a:ce:f9:7d:9f:55:70:b3:7d:df:91:
         ac:70:1f:9d:db:74:fa:64:08:31:ca:4b:1b:69:87:a0:55:6d:
         68:db:c0:d8:9a:d3:80:bc:1f:15:ce:bb:1c:cc:a2:35:b5:81:
         6c:94:87:6e:40:f9:96:18:c5:65:56:90:ab:a5:68:b9:de:ae:
         57:9d:77:13:e1:e9:f4:d7:6b:e7:5c:b3:e4:39:29:85:63:e6:
         4f:7b:f4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:37:12 2025 by rpki-client on console.sobornost.net