Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/323830343a373938383a383030303a3a2f33332d3333203d3e20323731333131.roa
File:                     323830343a373938383a383030303a3a2f33332d3333203d3e20323731333131.roa (raw, json)
Hash identifier:          ag1u+f92wAWxiTHG6jKHNGOhe12c1HPys+w84C5FKJA=
Subject key identifier:   72:D6:37:73:A8:44:EF:A2:06:72:F9:6E:66:59:EA:A4:65:C4:D0:D4
Certificate issuer:       /CN=B6CC812D59F4308FCB1D2239555678B476218767
Certificate serial:       79E1F52FF17C33648CD82ED829A115C77A14CE9D
Authority key identifier: B6:CC:81:2D:59:F4:30:8F:CB:1D:22:39:55:56:78:B4:76:21:87:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6CC812D59F4308FCB1D2239555678B476218767.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/323830343a373938383a383030303a3a2f33332d3333203d3e20323731333131.roa
Signing time:             Wed 05 Mar 2025 21:14:50 +0000
ROA not before:           Wed 05 Mar 2025 21:09:50 +0000
ROA not after:            Wed 04 Mar 2026 21:14:50 +0000
asID:                     271311
IP address blocks:        2804:7988:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/B6CC812D59F4308FCB1D2239555678B476218767.crl
                          rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/B6CC812D59F4308FCB1D2239555678B476218767.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6CC812D59F4308FCB1D2239555678B476218767.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:e1:f5:2f:f1:7c:33:64:8c:d8:2e:d8:29:a1:15:c7:7a:14:ce:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6CC812D59F4308FCB1D2239555678B476218767
        Validity
            Not Before: Mar  5 21:09:50 2025 GMT
            Not After : Mar  4 21:14:50 2026 GMT
        Subject: CN=72D63773A844EFA20672F96E6659EAA465C4D0D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:46:63:74:86:d0:ca:5b:75:bc:fa:30:fd:3b:
                    d3:9a:57:d4:15:62:88:2a:da:5e:df:4e:0f:0c:4e:
                    bc:ce:ea:dd:26:b1:b2:30:28:dc:3b:bc:85:c0:84:
                    00:70:f5:70:ed:09:33:be:1e:e6:aa:ae:d0:28:fb:
                    7f:b7:52:9e:65:9a:18:5f:94:2c:ba:1c:1b:6c:26:
                    a8:de:73:d6:4f:ea:f6:ca:21:c1:7d:cb:95:54:4a:
                    b5:d1:bc:d7:be:dc:8a:10:f2:df:4a:d9:48:f5:a6:
                    9c:51:f4:84:7c:75:30:c9:44:cc:eb:9c:a2:85:2c:
                    5b:87:fa:9e:0a:98:f4:bb:a5:42:c6:d3:28:39:96:
                    c8:ec:74:c6:ab:6b:ae:e4:14:58:36:f3:0b:af:17:
                    45:a4:7e:b3:fc:f9:c2:11:6e:68:b5:e0:79:0c:2f:
                    45:e3:f4:88:4f:d6:a6:0e:91:c8:92:26:f5:8f:d2:
                    db:44:dd:99:f0:82:85:1f:20:9c:52:7d:f2:f8:f8:
                    d8:a8:92:2d:34:46:a8:1e:24:9b:b1:a3:69:70:07:
                    8a:a0:67:88:4f:70:a4:ec:c2:9f:27:69:0c:87:c6:
                    3b:73:26:58:8d:9e:ea:ef:09:15:07:6d:83:16:09:
                    6a:fa:b9:a1:68:e3:69:92:66:2f:fd:70:8d:37:c2:
                    d4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D6:37:73:A8:44:EF:A2:06:72:F9:6E:66:59:EA:A4:65:C4:D0:D4
            X509v3 Authority Key Identifier:
                keyid:B6:CC:81:2D:59:F4:30:8F:CB:1D:22:39:55:56:78:B4:76:21:87:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/B6CC812D59F4308FCB1D2239555678B476218767.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6CC812D59F4308FCB1D2239555678B476218767.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/323830343a373938383a383030303a3a2f33332d3333203d3e20323731333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7988:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         aa:70:d7:bc:55:b9:51:69:9d:77:02:17:d2:16:d1:f8:ed:55:
         8b:ad:96:c5:f5:0d:d8:c7:a3:ee:23:13:69:14:58:4e:c1:6c:
         86:ee:bf:47:af:9e:61:05:71:0e:ea:9b:1d:db:d4:80:dc:48:
         a7:93:08:13:9f:52:df:e0:19:84:6f:7d:b1:fa:fa:3b:c4:90:
         39:7e:48:e5:8d:76:7f:cf:d7:1d:6c:4c:8a:0f:3d:8c:77:c6:
         c7:10:df:dd:5c:5a:5f:a9:48:a0:70:3b:11:59:3b:6f:2e:7a:
         7d:56:10:5e:ae:b5:e8:8d:9b:96:f6:67:0a:b1:7d:cc:25:6e:
         61:39:3f:25:f1:f4:61:76:6d:e0:fb:00:f6:37:f1:eb:c4:ed:
         ed:3f:a2:da:f9:84:5e:6f:e5:64:99:cd:c7:c5:ec:58:18:9c:
         08:64:e5:b9:a4:ee:12:bd:3a:57:43:8a:bf:26:5b:e2:6f:c5:
         59:0b:da:fe:7a:f8:6f:fb:6f:4c:db:de:8e:e0:9b:29:ec:cd:
         87:61:b9:b6:4f:32:6e:64:2b:43:9f:8f:33:1b:7b:c8:30:0f:
         ec:18:fe:08:8f:ff:9d:58:9f:23:4c:93:ce:90:e2:d6:e4:15:
         82:bd:06:bf:e1:5e:6d:63:0d:e0:c7:de:2c:f8:cc:4a:f5:2c:
         8e:88:8f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:26:48 2025 by rpki-client on console.sobornost.net