Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/323830343a373337303a3a2f33322d313238203d3e20323730393135.roa
File:                     323830343a373337303a3a2f33322d313238203d3e20323730393135.roa (raw, json)
Hash identifier:          KMnNfiGbQAdeWTsxWZb9UoBq9ofCZePNAQDACCPcjhM=
Subject key identifier:   6F:9A:24:3F:3D:98:D4:40:6B:AB:6B:EB:58:24:D2:BF:E9:E9:83:A7
Certificate issuer:       /CN=B11BE6CAB53FC4E28CBCD5946DDCED24099FF940
Certificate serial:       04A1B97F060BB690614EEC74FDCADCE9FA669314
Authority key identifier: B1:1B:E6:CA:B5:3F:C4:E2:8C:BC:D5:94:6D:DC:ED:24:09:9F:F9:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B11BE6CAB53FC4E28CBCD5946DDCED24099FF940.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/323830343a373337303a3a2f33322d313238203d3e20323730393135.roa
Signing time:             Thu 06 Mar 2025 20:20:45 +0000
ROA not before:           Thu 06 Mar 2025 20:15:45 +0000
ROA not after:            Thu 05 Mar 2026 20:20:45 +0000
asID:                     270915
IP address blocks:        2804:7370::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/B11BE6CAB53FC4E28CBCD5946DDCED24099FF940.crl
                          rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/B11BE6CAB53FC4E28CBCD5946DDCED24099FF940.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B11BE6CAB53FC4E28CBCD5946DDCED24099FF940.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 11:44:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:a1:b9:7f:06:0b:b6:90:61:4e:ec:74:fd:ca:dc:e9:fa:66:93:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B11BE6CAB53FC4E28CBCD5946DDCED24099FF940
        Validity
            Not Before: Mar  6 20:15:45 2025 GMT
            Not After : Mar  5 20:20:45 2026 GMT
        Subject: CN=6F9A243F3D98D4406BAB6BEB5824D2BFE9E983A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2e:95:73:03:62:e6:a5:28:6c:11:f6:d4:f2:
                    4b:7d:26:ae:89:91:b4:5e:25:36:dc:84:9b:56:df:
                    0d:ce:6d:ce:6c:0d:9d:09:24:59:e1:92:3e:97:bc:
                    8a:15:37:10:05:af:39:a3:c4:31:b1:ea:eb:89:3f:
                    ee:96:7a:2f:01:82:9d:f3:ef:5a:85:99:20:c3:f1:
                    ee:dc:d0:32:7c:dd:a5:78:94:0a:23:16:79:ef:ef:
                    e2:db:0d:c4:ff:cd:1e:ca:06:33:78:b7:fa:63:ab:
                    02:aa:54:f0:12:fe:0f:bc:6e:52:74:5d:0c:1c:40:
                    44:5c:ef:3f:33:c5:00:50:a3:68:3f:7e:46:d1:ca:
                    77:0a:75:6e:13:0c:e5:2f:96:3c:cd:93:26:46:72:
                    4f:75:4c:64:5d:3a:dc:0e:5e:73:4b:83:77:35:89:
                    32:2f:9c:78:75:2a:d2:0c:2a:69:6b:18:81:3c:40:
                    08:32:ee:b0:09:93:ed:cd:f4:d2:43:34:a9:03:14:
                    2f:81:65:88:33:04:42:10:40:5d:a5:91:6e:ac:78:
                    af:5a:60:36:a0:0f:a9:c4:72:c4:ed:ae:5f:96:3d:
                    2d:f3:bc:84:9a:5b:c3:ff:19:94:f4:88:e7:8b:fa:
                    e7:33:db:4c:5e:58:06:7a:d4:5b:07:32:00:83:70:
                    7c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:9A:24:3F:3D:98:D4:40:6B:AB:6B:EB:58:24:D2:BF:E9:E9:83:A7
            X509v3 Authority Key Identifier:
                keyid:B1:1B:E6:CA:B5:3F:C4:E2:8C:BC:D5:94:6D:DC:ED:24:09:9F:F9:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/B11BE6CAB53FC4E28CBCD5946DDCED24099FF940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B11BE6CAB53FC4E28CBCD5946DDCED24099FF940.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/323830343a373337303a3a2f33322d313238203d3e20323730393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7370::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:41:61:60:fe:fb:30:42:11:92:ca:2c:35:17:2b:aa:c3:bf:
         68:66:e2:78:1d:75:ba:38:50:3d:f3:18:1f:2f:12:ec:1a:b5:
         69:63:1d:58:7d:e7:88:ad:92:6b:6f:4a:13:07:86:19:86:5b:
         a9:d6:a9:a5:fd:aa:d6:1c:98:f0:bf:1b:b6:4d:21:fe:5c:7a:
         d1:c5:3f:3d:53:b6:0b:b3:74:64:81:a3:52:d0:53:75:e5:d4:
         fb:38:99:1c:59:27:0d:e6:4c:77:1f:87:a5:95:0b:c8:77:ef:
         8f:5c:ec:f0:e2:e3:79:41:16:66:f9:ec:5e:f0:cc:19:84:b1:
         11:4e:fb:dc:cf:86:ba:42:a0:70:cb:99:cc:2a:fb:26:e8:c5:
         8e:0f:07:26:33:71:2f:0a:00:de:72:d3:3b:9e:4f:24:6f:3f:
         c8:31:80:75:5d:e1:c0:cc:31:40:f7:ad:ff:53:86:82:53:32:
         ec:95:60:a9:7c:ba:de:69:f7:05:ce:a0:75:da:f4:5d:21:1e:
         e8:7f:ab:55:e3:25:ff:ba:c1:d7:89:67:88:9e:70:b5:b9:b3:
         66:14:13:4e:e7:0b:7b:e7:c8:90:bb:21:9f:62:f6:72:24:f3:
         ca:fc:59:36:eb:5b:e8:4b:c6:4d:56:d6:cb:f2:c9:de:24:a3:
         88:44:fb:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:36:59 2025 by rpki-client on console.sobornost.net