Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/323830343a323939303a633030303a3a2f33352d3335203d3e20323634303232.roa
File:                     323830343a323939303a633030303a3a2f33352d3335203d3e20323634303232.roa (raw, json)
Hash identifier:          Wgbd4OcHdSf0uO9QNGyOSngiZOmhHbE0H68d9y8DEZg=
Subject key identifier:   0D:28:BC:96:7F:93:C3:2F:CD:18:BC:BB:B3:FF:B6:6C:B7:10:F8:09
Certificate issuer:       /CN=F63047CFCA73277026C41BFD930CC304F5F342B7
Certificate serial:       15E9913959619A189C91BCB9ADCD9ACC5DE5CA97
Authority key identifier: F6:30:47:CF:CA:73:27:70:26:C4:1B:FD:93:0C:C3:04:F5:F3:42:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F63047CFCA73277026C41BFD930CC304F5F342B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/323830343a323939303a633030303a3a2f33352d3335203d3e20323634303232.roa
Signing time:             Fri 25 Apr 2025 14:05:03 +0000
ROA not before:           Fri 25 Apr 2025 14:00:03 +0000
ROA not after:            Fri 24 Apr 2026 14:05:03 +0000
asID:                     264022
IP address blocks:        2804:2990:c000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/F63047CFCA73277026C41BFD930CC304F5F342B7.crl
                          rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/F63047CFCA73277026C41BFD930CC304F5F342B7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F63047CFCA73277026C41BFD930CC304F5F342B7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 16:45:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:e9:91:39:59:61:9a:18:9c:91:bc:b9:ad:cd:9a:cc:5d:e5:ca:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F63047CFCA73277026C41BFD930CC304F5F342B7
        Validity
            Not Before: Apr 25 14:00:03 2025 GMT
            Not After : Apr 24 14:05:03 2026 GMT
        Subject: CN=0D28BC967F93C32FCD18BCBBB3FFB66CB710F809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e6:54:79:28:35:74:a0:a1:d4:8d:75:3c:49:
                    1a:9e:af:cc:a5:59:5a:b4:25:e6:a1:94:54:bc:21:
                    9e:9c:9b:b8:e6:78:f6:95:26:0b:ae:8f:3a:cc:50:
                    d7:7e:a4:61:7a:86:cc:8b:51:0e:cd:54:62:97:a0:
                    9b:eb:dd:ad:10:34:d0:08:8b:d8:99:20:b7:33:15:
                    30:49:b8:45:ba:64:4a:a8:63:18:4d:94:bc:df:ff:
                    05:29:78:68:d1:c2:2b:8c:90:20:bc:90:f1:19:72:
                    b2:16:cf:eb:ee:de:83:29:65:5d:4b:ba:7c:1b:fd:
                    db:0d:bb:c3:f7:d6:d4:a7:60:c7:a1:45:f2:82:54:
                    a2:c9:8c:8e:1b:12:00:ad:62:61:a5:78:0b:e5:29:
                    9a:40:c5:1b:cd:e4:a2:68:fa:6c:77:a7:74:7d:9a:
                    29:f8:76:a3:f3:56:32:20:63:76:d0:10:85:cf:fe:
                    02:50:98:9e:3b:84:e3:07:ce:ef:f0:7a:ea:9c:f4:
                    9a:55:88:bc:4b:c8:13:70:21:02:3b:87:ba:fc:67:
                    23:18:51:0a:ae:d8:77:68:1c:65:86:7f:cb:9b:0d:
                    27:d7:3b:51:ce:d1:d8:96:50:af:d6:4d:a1:b6:66:
                    49:64:c6:03:7e:5f:62:10:e7:98:e2:5b:8a:a7:13:
                    6e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:28:BC:96:7F:93:C3:2F:CD:18:BC:BB:B3:FF:B6:6C:B7:10:F8:09
            X509v3 Authority Key Identifier:
                keyid:F6:30:47:CF:CA:73:27:70:26:C4:1B:FD:93:0C:C3:04:F5:F3:42:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/F63047CFCA73277026C41BFD930CC304F5F342B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F63047CFCA73277026C41BFD930CC304F5F342B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/323830343a323939303a633030303a3a2f33352d3335203d3e20323634303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2990:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         3c:ce:bd:f9:7d:b2:c7:b7:eb:5c:c1:38:30:76:e0:f6:1d:4d:
         b8:9b:d3:79:89:c8:b5:76:b3:00:3a:2c:b2:57:97:1d:f2:c7:
         26:fa:59:59:f2:d3:30:68:9b:b6:ba:78:31:50:01:66:b1:1a:
         66:c2:76:c7:c5:b3:ff:8f:2f:a9:0b:3a:fa:58:43:2b:a4:83:
         7d:c4:e3:7c:f1:b5:85:9d:af:87:c0:87:79:76:62:05:a7:50:
         ed:9b:7a:c4:ad:45:9a:e5:ba:a1:2c:63:f6:c8:a4:1f:53:2d:
         ef:20:62:85:31:76:3c:3f:81:10:3e:30:95:a8:f4:ce:fa:10:
         07:52:b9:46:84:d1:91:ba:9b:90:06:9a:b8:ff:b0:a6:83:b1:
         7f:e2:8d:ee:ac:8c:d9:64:b8:a7:c2:1d:b4:0e:d5:c7:97:52:
         89:06:67:46:14:e6:1c:f8:c0:db:24:e5:86:8e:54:f1:75:01:
         36:37:9a:07:14:a3:9f:7b:60:b4:75:a7:76:66:33:05:c8:92:
         24:93:99:66:eb:7c:9e:9b:35:cb:0b:ac:ab:2a:1e:32:dd:99:
         bb:af:43:49:49:4e:e7:83:5d:89:37:f0:06:d7:b8:8c:56:ed:
         88:1e:3b:14:7f:b4:53:51:6d:b1:e5:a4:84:b8:e6:7a:0a:23:
         9e:42:62:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:08 2025 by rpki-client on console.sobornost.net