Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/323830343a333030343a3a2f33322d3334203d3e20323634393236.roa
File:                     323830343a333030343a3a2f33322d3334203d3e20323634393236.roa (raw, json)
Hash identifier:          3UmHpmFjNu9z929FSMUEX+wDYx+nFf5iIN8AdmezNdM=
Subject key identifier:   0C:E8:57:8D:E1:61:2E:B6:9F:DF:DE:CD:A8:42:78:51:8F:DE:AC:15
Certificate issuer:       /CN=29693FC359A5A86688559CF55626142C53AF60AF
Certificate serial:       282FCD654CB1316253142DD82E8A2CB529E7504F
Authority key identifier: 29:69:3F:C3:59:A5:A8:66:88:55:9C:F5:56:26:14:2C:53:AF:60:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29693FC359A5A86688559CF55626142C53AF60AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/323830343a333030343a3a2f33322d3334203d3e20323634393236.roa
Signing time:             Fri 07 Mar 2025 00:36:01 +0000
ROA not before:           Fri 07 Mar 2025 00:31:01 +0000
ROA not after:            Fri 06 Mar 2026 00:36:01 +0000
asID:                     264926
IP address blocks:        2804:3004::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/29693FC359A5A86688559CF55626142C53AF60AF.crl
                          rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/29693FC359A5A86688559CF55626142C53AF60AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29693FC359A5A86688559CF55626142C53AF60AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 21:25:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:2f:cd:65:4c:b1:31:62:53:14:2d:d8:2e:8a:2c:b5:29:e7:50:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29693FC359A5A86688559CF55626142C53AF60AF
        Validity
            Not Before: Mar  7 00:31:01 2025 GMT
            Not After : Mar  6 00:36:01 2026 GMT
        Subject: CN=0CE8578DE1612EB69FDFDECDA84278518FDEAC15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:eb:e9:07:1a:f2:79:da:9c:30:a9:1a:f1:28:
                    ec:8e:e8:7b:6e:6c:09:29:cd:8e:8e:42:bc:86:6b:
                    ef:72:0c:6d:2b:b6:96:7c:41:2e:93:b8:da:27:7e:
                    52:0b:a9:be:7e:72:ea:81:b9:c9:60:0d:b9:b2:20:
                    fc:52:36:8c:58:4f:54:48:cc:9b:b5:e9:58:d4:b1:
                    e3:35:00:02:58:16:57:be:a6:8b:b7:00:6e:9a:d4:
                    f1:78:f8:fa:8d:dc:e3:c7:fb:fa:fa:76:6c:18:bf:
                    1d:1b:d1:26:2b:64:e5:92:86:02:3b:27:dc:c6:09:
                    9f:7c:4a:2d:0b:69:b6:59:bf:d6:9e:69:09:db:92:
                    24:ae:96:2b:12:e5:68:05:52:31:e2:ea:69:47:46:
                    a3:1e:8e:6e:19:a0:b3:23:45:bb:30:74:0c:18:90:
                    52:a0:44:5a:e1:eb:51:59:35:59:da:0c:49:93:3c:
                    27:cc:71:eb:28:60:9c:0f:c2:6e:af:ac:0e:09:c8:
                    4c:2c:fe:aa:d5:01:8f:2f:a9:25:67:7a:45:b6:9d:
                    be:6b:0f:74:f9:c1:fd:4e:e3:7b:b1:7f:63:36:31:
                    b8:40:8a:31:ca:ec:e7:7a:c7:de:e9:ba:e3:4d:c2:
                    69:41:0d:2b:ea:dc:d4:37:8d:22:ad:98:8c:3c:02:
                    6e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:E8:57:8D:E1:61:2E:B6:9F:DF:DE:CD:A8:42:78:51:8F:DE:AC:15
            X509v3 Authority Key Identifier:
                keyid:29:69:3F:C3:59:A5:A8:66:88:55:9C:F5:56:26:14:2C:53:AF:60:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/29693FC359A5A86688559CF55626142C53AF60AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29693FC359A5A86688559CF55626142C53AF60AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/323830343a333030343a3a2f33322d3334203d3e20323634393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3004::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:a5:3f:4d:0f:a7:45:7f:5b:9e:c4:ff:22:77:7c:1a:90:db:
         4a:7b:3f:d8:ee:04:a3:3a:2d:db:41:6d:13:ac:4f:35:79:2c:
         33:b8:d6:33:7a:96:82:bf:49:7a:57:75:99:3c:48:8b:9b:69:
         a5:00:2f:c3:17:1b:66:8d:2d:7b:80:67:77:db:8c:b5:8c:e3:
         52:9b:52:6d:6a:c9:66:4f:cf:9d:df:b2:2f:ef:da:14:84:01:
         c0:bb:23:fc:2d:3c:43:43:98:b2:94:8b:87:92:a3:49:7f:51:
         68:b5:3b:25:12:be:72:ac:97:99:e3:5a:81:4a:62:40:63:63:
         87:c4:7c:3a:d6:ef:c5:3e:b7:1c:d1:31:77:6a:20:3c:cc:fb:
         ba:33:4d:f7:48:ac:3f:56:70:0a:17:a9:ce:54:ce:f9:c5:a0:
         3d:c2:03:53:76:ac:9f:9d:12:f2:cd:72:e7:74:c1:a8:bf:a5:
         82:9d:b7:1b:0d:66:78:a8:b6:01:31:b0:4f:02:75:2b:ba:8f:
         89:a1:3f:f4:3e:b6:37:1a:5f:af:c1:77:84:0c:cc:4e:ed:a1:
         11:00:35:69:7a:3b:60:1a:ad:a6:4f:10:f0:b7:55:be:92:9a:
         79:9c:5d:63:ab:62:97:b2:72:57:d3:ba:75:1d:c8:5c:0e:5c:
         35:26:bb:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:36 2025 by rpki-client on console.sobornost.net