Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a343030303a3a2f33362d3336203d3e20323633303539.roa
File:                     323830343a3933343a343030303a3a2f33362d3336203d3e20323633303539.roa (raw, json)
Hash identifier:          fJJfghpc6WTLDV+xXNeyMLhmEg86qtbXBED9om3uWAU=
Subject key identifier:   5C:84:D6:77:B4:AA:1A:6A:A5:BC:F5:3A:DC:1F:D3:D5:3D:7A:FA:6D
Certificate issuer:       /CN=62EBCE2DBD62515337C9AC2D25F417000E1B53E0
Certificate serial:       278E4BE2F4C13AE683A8E0DC49168B384C68C2DE
Authority key identifier: 62:EB:CE:2D:BD:62:51:53:37:C9:AC:2D:25:F4:17:00:0E:1B:53:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a343030303a3a2f33362d3336203d3e20323633303539.roa
Signing time:             Thu 13 Feb 2025 20:50:26 +0000
ROA not before:           Thu 13 Feb 2025 20:45:26 +0000
ROA not after:            Thu 12 Feb 2026 20:50:26 +0000
asID:                     263059
IP address blocks:        2804:934:4000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.crl
                          rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 12:23:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:8e:4b:e2:f4:c1:3a:e6:83:a8:e0:dc:49:16:8b:38:4c:68:c2:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62EBCE2DBD62515337C9AC2D25F417000E1B53E0
        Validity
            Not Before: Feb 13 20:45:26 2025 GMT
            Not After : Feb 12 20:50:26 2026 GMT
        Subject: CN=5C84D677B4AA1A6AA5BCF53ADC1FD3D53D7AFA6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:76:5c:fd:89:55:85:0a:fc:50:bd:20:8a:31:
                    d2:93:6a:06:5d:1f:06:9a:48:b7:b0:3c:71:0b:63:
                    fd:40:6d:08:e8:84:75:5f:13:0a:0c:ee:dc:d7:a3:
                    1d:d3:d6:e3:d5:e1:da:b8:cb:1a:16:bc:c5:23:09:
                    7b:b2:12:77:b8:2d:de:53:28:fc:6e:35:1d:af:2b:
                    aa:e8:a5:cd:1e:df:c0:a0:d5:5c:81:42:ca:5d:47:
                    a2:cb:9b:53:b1:de:b6:d4:a7:c2:ec:5c:b4:5c:0f:
                    eb:9c:08:57:a6:a2:02:53:c7:a3:30:f1:f5:da:62:
                    64:b0:ca:b7:fa:34:c0:fb:b2:67:4f:1a:66:c2:1d:
                    2e:af:c4:fc:2f:90:7f:ee:ba:63:df:8d:88:d4:60:
                    76:fa:aa:b5:a8:59:2f:ff:d6:73:75:1b:af:48:b2:
                    be:44:09:32:e4:0c:0b:dc:49:d1:51:95:b9:79:2a:
                    f5:57:61:0c:65:87:aa:d0:12:42:a4:7f:ae:9d:89:
                    14:20:02:47:7d:e1:34:60:51:c9:38:71:e6:4f:f5:
                    82:cd:c0:01:f3:9e:1f:c1:46:13:35:a1:2a:48:3f:
                    47:e1:79:ab:7a:4a:18:a3:de:e2:2a:e6:d3:aa:44:
                    7a:04:30:46:ac:61:00:a8:11:4e:68:dd:88:99:bc:
                    44:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:84:D6:77:B4:AA:1A:6A:A5:BC:F5:3A:DC:1F:D3:D5:3D:7A:FA:6D
            X509v3 Authority Key Identifier:
                keyid:62:EB:CE:2D:BD:62:51:53:37:C9:AC:2D:25:F4:17:00:0E:1B:53:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a343030303a3a2f33362d3336203d3e20323633303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:934:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         07:1d:be:49:d5:bc:93:ed:57:8e:20:05:c2:fd:ac:fe:01:c8:
         67:fb:1c:a1:ed:c3:8c:ed:06:81:5b:51:b2:66:27:71:c7:57:
         db:9e:1b:e7:7a:9a:22:14:11:ee:a0:e7:67:2b:9a:4a:10:bc:
         98:a7:20:45:2a:20:82:96:3d:bc:d0:bc:69:11:6f:de:72:dd:
         9a:f5:96:f7:0c:23:96:fe:8c:56:2f:58:da:2f:5b:2b:e1:ba:
         85:9f:96:c6:56:af:6d:d7:59:3f:e4:f7:58:15:dd:58:af:be:
         cc:2d:da:41:61:73:68:1f:de:b8:ac:f2:30:64:cb:8c:3a:b8:
         60:58:83:ca:67:cd:60:ef:ce:32:ea:5b:e0:e7:a5:8d:81:e1:
         5f:3d:bf:ef:15:15:30:dc:87:1b:ce:a8:66:8b:e6:6f:28:77:
         8a:68:7f:c3:db:7c:dd:7f:48:0a:d7:ba:fb:9b:d4:d6:2a:40:
         4b:33:4f:72:d9:f0:22:b7:d7:fc:d7:d4:f1:6a:f5:0e:1b:6b:
         8b:01:cc:91:5b:5b:ce:f9:a1:6e:bc:2a:9a:5f:a4:21:10:a2:
         6f:9f:84:59:61:3b:09:e1:1a:b6:fd:16:51:60:15:27:c0:d1:
         af:64:ee:73:f7:a9:b3:de:83:60:30:0e:09:48:c5:ac:9b:96:
         9a:88:ea:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:15 2025 by rpki-client on console.sobornost.net