Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5yQJ3eeN27HHZKx1tMtFGcJDmmEy3SWG2z5QaSw8xR5V/0/323830343a383933383a3a2f33322d313238203d3e20323733353930.roa
File:                     323830343a383933383a3a2f33322d313238203d3e20323733353930.roa (raw, json)
Hash identifier:          58zrphx8OB2kHzhfFR5IFZLa+vWoMvsx3gGMHSrMUQM=
Subject key identifier:   81:52:F0:68:0A:2F:2C:A2:36:E9:54:23:E5:0D:73:E8:CB:50:F9:F1
Certificate issuer:       /CN=8CEAC6E2EDB68BCA5A6C78EE1EF5D1E77E4A683C
Certificate serial:       1C350AF015E2A84894AF6B557854C117286D7BDC
Authority key identifier: 8C:EA:C6:E2:ED:B6:8B:CA:5A:6C:78:EE:1E:F5:D1:E7:7E:4A:68:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CEAC6E2EDB68BCA5A6C78EE1EF5D1E77E4A683C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5yQJ3eeN27HHZKx1tMtFGcJDmmEy3SWG2z5QaSw8xR5V/0/323830343a383933383a3a2f33322d313238203d3e20323733353930.roa
Signing time:             Mon 24 Feb 2025 14:42:25 +0000
ROA not before:           Mon 24 Feb 2025 14:37:25 +0000
ROA not after:            Mon 23 Feb 2026 14:42:25 +0000
asID:                     273590
IP address blocks:        2804:8938::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5yQJ3eeN27HHZKx1tMtFGcJDmmEy3SWG2z5QaSw8xR5V/0/8CEAC6E2EDB68BCA5A6C78EE1EF5D1E77E4A683C.crl
                          rsync://rpki-repo.registro.br/repo/5yQJ3eeN27HHZKx1tMtFGcJDmmEy3SWG2z5QaSw8xR5V/0/8CEAC6E2EDB68BCA5A6C78EE1EF5D1E77E4A683C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CEAC6E2EDB68BCA5A6C78EE1EF5D1E77E4A683C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 23:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:35:0a:f0:15:e2:a8:48:94:af:6b:55:78:54:c1:17:28:6d:7b:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CEAC6E2EDB68BCA5A6C78EE1EF5D1E77E4A683C
        Validity
            Not Before: Feb 24 14:37:25 2025 GMT
            Not After : Feb 23 14:42:25 2026 GMT
        Subject: CN=8152F0680A2F2CA236E95423E50D73E8CB50F9F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b0:88:19:c0:59:b5:b8:07:a5:9d:74:1c:a3:
                    e5:42:4b:48:6f:5a:77:f6:51:a6:ba:2c:1c:b2:d2:
                    20:b0:e6:5d:d9:20:3b:0d:df:3c:67:f1:a5:74:5b:
                    9f:de:17:4a:86:d2:0b:f4:fa:e5:e2:c6:75:7a:bb:
                    11:43:f6:98:7b:d4:76:6d:9e:11:0e:10:ab:90:76:
                    4a:6f:6f:b4:2c:02:1e:d3:ed:1a:00:bf:3a:99:81:
                    44:99:7f:b4:5b:b9:2c:e7:48:04:dc:27:63:0a:ed:
                    89:78:b2:d0:d7:c2:26:f8:2c:a0:fc:63:3f:30:a7:
                    d1:50:fd:ca:f1:d5:26:b1:01:f0:77:eb:85:c3:27:
                    13:43:cc:56:ea:ad:6a:d7:6d:be:32:ae:15:60:c3:
                    5e:2a:52:80:5b:f8:7b:e3:0c:b7:84:c1:b2:7e:cf:
                    31:5f:77:4a:47:38:36:6d:ee:37:90:d4:dc:a8:df:
                    36:4a:70:0d:0c:07:50:59:7e:e0:26:ca:06:73:05:
                    57:c0:02:26:1d:6b:ff:85:b4:27:0e:52:39:cf:f2:
                    1d:7d:69:d4:19:88:57:13:4a:0b:41:63:36:75:7b:
                    73:a2:e6:d8:95:3c:ed:2a:7b:1e:ad:e3:08:6e:df:
                    84:58:4c:d9:88:5a:01:d9:93:33:3c:0a:52:e0:ac:
                    48:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:52:F0:68:0A:2F:2C:A2:36:E9:54:23:E5:0D:73:E8:CB:50:F9:F1
            X509v3 Authority Key Identifier:
                keyid:8C:EA:C6:E2:ED:B6:8B:CA:5A:6C:78:EE:1E:F5:D1:E7:7E:4A:68:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5yQJ3eeN27HHZKx1tMtFGcJDmmEy3SWG2z5QaSw8xR5V/0/8CEAC6E2EDB68BCA5A6C78EE1EF5D1E77E4A683C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CEAC6E2EDB68BCA5A6C78EE1EF5D1E77E4A683C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5yQJ3eeN27HHZKx1tMtFGcJDmmEy3SWG2z5QaSw8xR5V/0/323830343a383933383a3a2f33322d313238203d3e20323733353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8938::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:9d:10:8b:dd:14:02:33:ac:95:a9:36:5e:d1:f7:d0:cb:dc:
         7f:b6:4f:60:85:44:a3:4f:92:b7:fd:d7:fc:79:e4:79:98:14:
         ac:1d:a1:10:30:2a:06:a3:b3:48:bb:a6:96:a5:76:1b:7d:66:
         3b:e6:dd:4c:24:c2:58:27:82:73:cf:93:97:ae:45:0f:88:4f:
         78:80:68:88:36:59:03:29:f5:31:98:0d:31:18:74:08:17:a9:
         a2:d4:55:7a:44:4d:bb:c3:b4:ee:cd:8d:b0:2f:27:9c:83:6f:
         45:eb:ed:15:5c:38:31:b2:30:6b:ce:09:7d:c2:4b:6e:3f:af:
         77:15:03:68:27:43:fe:55:2b:85:0c:e3:49:6c:70:3c:2a:ef:
         54:7e:0d:db:90:2d:36:6d:58:3f:82:dd:75:93:23:d0:ed:f7:
         48:5f:6b:fb:54:7d:69:97:bb:5f:3a:d9:df:da:5e:04:93:87:
         31:90:fd:5a:24:21:9b:2a:d2:fc:83:d7:fc:5e:9a:8a:89:cc:
         30:91:42:55:52:e4:1e:0a:20:b8:31:8c:64:dd:97:23:c0:58:
         b9:14:47:e7:35:cf:a8:9a:e5:14:11:c6:1c:d2:49:8c:5c:30:
         00:2d:ec:96:1e:3c:63:97:0c:b5:5c:73:5c:b8:01:e3:42:6e:
         16:91:93:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:14:45 2025 by rpki-client on console.sobornost.net