Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/323830343a346663383a3a2f33332d3333203d3e20323638333439.roa
File:                     323830343a346663383a3a2f33332d3333203d3e20323638333439.roa (raw, json)
Hash identifier:          8Yhzl9LD7MmbBimCzlPJhVt28ch/VSRwLHcl4xJZS94=
Subject key identifier:   30:BB:13:56:DE:91:97:50:20:91:74:E1:AA:AC:9C:AB:08:BC:B2:51
Certificate issuer:       /CN=F21385055D4BA00AF1EC37AF53C91C003B6A5F8A
Certificate serial:       0FD8312EDFBF32FF4B15E2D97EE5FBC39417385D
Authority key identifier: F2:13:85:05:5D:4B:A0:0A:F1:EC:37:AF:53:C9:1C:00:3B:6A:5F:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F21385055D4BA00AF1EC37AF53C91C003B6A5F8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/323830343a346663383a3a2f33332d3333203d3e20323638333439.roa
Signing time:             Wed 02 Apr 2025 21:52:39 +0000
ROA not before:           Wed 02 Apr 2025 21:47:39 +0000
ROA not after:            Wed 01 Apr 2026 21:52:39 +0000
asID:                     268349
IP address blocks:        2804:4fc8::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/F21385055D4BA00AF1EC37AF53C91C003B6A5F8A.crl
                          rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/F21385055D4BA00AF1EC37AF53C91C003B6A5F8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F21385055D4BA00AF1EC37AF53C91C003B6A5F8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 20:32:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:d8:31:2e:df:bf:32:ff:4b:15:e2:d9:7e:e5:fb:c3:94:17:38:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F21385055D4BA00AF1EC37AF53C91C003B6A5F8A
        Validity
            Not Before: Apr  2 21:47:39 2025 GMT
            Not After : Apr  1 21:52:39 2026 GMT
        Subject: CN=30BB1356DE919750209174E1AAAC9CAB08BCB251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fe:78:28:90:9f:fb:42:e7:51:97:f0:f4:80:
                    1e:88:7f:fc:16:15:a9:ce:73:da:86:89:38:17:b8:
                    66:ae:8a:e0:24:b9:3d:cd:1b:31:5d:db:13:f6:c0:
                    37:de:37:9c:e5:68:99:01:42:e2:59:26:c8:dc:ce:
                    47:84:80:a5:63:66:2b:cd:fc:d9:5b:7e:b5:74:51:
                    0a:5c:3d:cd:6a:37:1d:70:03:4a:57:bf:2d:fa:f9:
                    75:f0:5f:db:6e:ce:a7:cb:fd:b9:eb:06:4c:ff:f5:
                    40:d0:10:19:b2:5d:ae:db:dd:9c:69:8a:e7:06:fb:
                    89:ea:0f:68:ed:f1:68:b0:36:28:84:74:91:de:fe:
                    4f:c0:36:a1:64:df:25:06:a8:26:ca:7d:67:4c:eb:
                    ce:4d:5a:38:e7:31:93:40:bb:33:78:94:e7:83:e2:
                    44:47:51:35:55:3c:97:d9:2f:03:b9:2f:17:97:b4:
                    85:0d:80:5c:60:f0:df:fc:95:0a:09:95:ee:ff:75:
                    26:18:0a:5a:05:4c:eb:9a:a0:d7:cd:11:c9:9b:ea:
                    54:fb:09:42:b2:4a:ce:24:0d:fb:6a:02:f7:be:0f:
                    09:74:59:99:43:1e:25:3d:f3:82:b5:af:0d:33:4b:
                    b9:c2:83:55:90:b9:0b:65:eb:df:66:97:e9:41:44:
                    45:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:BB:13:56:DE:91:97:50:20:91:74:E1:AA:AC:9C:AB:08:BC:B2:51
            X509v3 Authority Key Identifier:
                keyid:F2:13:85:05:5D:4B:A0:0A:F1:EC:37:AF:53:C9:1C:00:3B:6A:5F:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/F21385055D4BA00AF1EC37AF53C91C003B6A5F8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F21385055D4BA00AF1EC37AF53C91C003B6A5F8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/323830343a346663383a3a2f33332d3333203d3e20323638333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4fc8::/33

    Signature Algorithm: sha256WithRSAEncryption
         78:eb:33:e8:00:68:1a:b4:50:d9:94:84:b0:8b:c8:7e:11:a5:
         68:d3:87:b5:58:f9:49:60:63:dc:70:f3:2a:a8:b0:fb:b5:d3:
         3d:d7:48:6a:13:61:63:5f:f3:46:3a:e7:35:5b:76:db:7f:9a:
         c7:66:bf:55:e4:83:ed:9f:11:99:52:db:fb:78:3b:71:62:c9:
         0f:bd:cf:ed:0d:3d:c4:75:66:ac:43:c5:82:76:9d:4e:9d:4c:
         d6:a8:44:b3:f9:63:19:50:c7:22:41:fb:3a:fe:59:6d:32:a1:
         a4:f7:fc:ae:a9:89:79:80:c4:45:16:ab:50:92:3f:54:07:4a:
         9d:af:6a:3e:1a:7c:3b:c0:77:4e:42:b9:e6:d1:4b:8f:80:70:
         ef:ac:9d:32:b2:c7:4d:4c:a7:5d:44:5f:54:fd:eb:66:15:9b:
         30:a6:f7:6a:0b:b6:12:00:3f:6c:9d:e4:be:2c:09:14:35:45:
         c4:15:f2:fd:09:35:88:dd:bd:0e:45:a9:83:24:92:6a:0d:28:
         0a:b0:6a:b1:0f:86:38:88:35:8c:9a:a6:96:8f:85:5b:cc:13:
         4a:9b:76:f6:d7:11:dd:59:c9:2a:52:32:28:64:9c:cd:a6:da:
         f6:3b:79:d7:fd:f2:67:f3:2e:d0:1d:27:71:73:38:54:8e:d9:
         cc:2f:ae:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:36 2025 by rpki-client on console.sobornost.net