Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7sJpx1DJz5t7V4itgR9VrFS8KHNAfoNZYZ2s3F2Jvp2B/1/323830343a336335343a3a2f33322d3438203d3e20323636323034.roa
File:                     323830343a336335343a3a2f33322d3438203d3e20323636323034.roa (raw, json)
Hash identifier:          7iwWxXj0dbP9TBY77/V/MEBRXmfH5Z4m8U68y8jf70I=
Subject key identifier:   4C:10:F9:A5:8B:5B:B7:27:E2:4F:43:36:8D:9C:67:3E:1A:B1:F1:6A
Certificate issuer:       /CN=3E9ABEDC7E771B85710E3E49ED20657F04DA1797
Certificate serial:       0B347565DCFA456FBEFDBD342A4D70041F0895BC
Authority key identifier: 3E:9A:BE:DC:7E:77:1B:85:71:0E:3E:49:ED:20:65:7F:04:DA:17:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E9ABEDC7E771B85710E3E49ED20657F04DA1797.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7sJpx1DJz5t7V4itgR9VrFS8KHNAfoNZYZ2s3F2Jvp2B/1/323830343a336335343a3a2f33322d3438203d3e20323636323034.roa
Signing time:             Fri 07 Mar 2025 03:52:32 +0000
ROA not before:           Fri 07 Mar 2025 03:47:32 +0000
ROA not after:            Fri 06 Mar 2026 03:52:32 +0000
asID:                     266204
IP address blocks:        2804:3c54::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7sJpx1DJz5t7V4itgR9VrFS8KHNAfoNZYZ2s3F2Jvp2B/1/3E9ABEDC7E771B85710E3E49ED20657F04DA1797.crl
                          rsync://rpki-repo.registro.br/repo/7sJpx1DJz5t7V4itgR9VrFS8KHNAfoNZYZ2s3F2Jvp2B/1/3E9ABEDC7E771B85710E3E49ED20657F04DA1797.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E9ABEDC7E771B85710E3E49ED20657F04DA1797.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 20:37:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:34:75:65:dc:fa:45:6f:be:fd:bd:34:2a:4d:70:04:1f:08:95:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E9ABEDC7E771B85710E3E49ED20657F04DA1797
        Validity
            Not Before: Mar  7 03:47:32 2025 GMT
            Not After : Mar  6 03:52:32 2026 GMT
        Subject: CN=4C10F9A58B5BB727E24F43368D9C673E1AB1F16A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:de:22:98:28:6d:45:5c:0c:b4:d4:ae:73:cb:
                    14:e4:a6:c2:47:cd:d4:81:48:c4:6a:36:1c:25:b5:
                    a4:b1:08:cb:42:59:f6:7b:cd:d9:63:c1:a4:9c:af:
                    25:1c:6d:ca:76:2f:78:f5:21:94:8f:77:f1:50:66:
                    e8:5f:5a:eb:93:8b:cf:72:87:cf:d2:d1:3f:67:5c:
                    f2:51:0b:63:db:b3:c3:b1:c7:12:0e:e2:29:10:61:
                    fc:47:c6:36:54:c6:83:d5:74:fc:ba:04:6d:5a:98:
                    9c:21:8b:28:35:41:08:15:de:ee:81:60:65:b4:7b:
                    c7:24:52:7a:fe:25:0d:e9:9e:65:7f:8b:4f:5c:70:
                    b2:cd:61:3b:bc:9b:d6:e8:50:8b:9f:9c:8e:e9:76:
                    42:b6:35:ca:bc:50:0c:46:24:66:0a:de:ae:77:00:
                    f4:1f:cb:b4:5e:c0:1e:28:cb:ba:6d:9a:74:29:60:
                    3b:38:13:e6:c2:db:ef:d3:7b:44:74:78:39:54:cf:
                    23:1f:c7:a7:ef:12:da:1d:f8:a1:d4:51:86:5b:e0:
                    86:db:71:57:b6:56:3f:f6:f5:76:5a:60:e1:ee:be:
                    99:e7:2e:e6:8e:10:94:29:1b:24:08:df:82:56:c2:
                    ff:ff:19:05:21:88:ad:20:5c:f0:d9:f5:13:73:53:
                    17:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:10:F9:A5:8B:5B:B7:27:E2:4F:43:36:8D:9C:67:3E:1A:B1:F1:6A
            X509v3 Authority Key Identifier:
                keyid:3E:9A:BE:DC:7E:77:1B:85:71:0E:3E:49:ED:20:65:7F:04:DA:17:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7sJpx1DJz5t7V4itgR9VrFS8KHNAfoNZYZ2s3F2Jvp2B/1/3E9ABEDC7E771B85710E3E49ED20657F04DA1797.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E9ABEDC7E771B85710E3E49ED20657F04DA1797.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7sJpx1DJz5t7V4itgR9VrFS8KHNAfoNZYZ2s3F2Jvp2B/1/323830343a336335343a3a2f33322d3438203d3e20323636323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c54::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:9f:36:d9:e8:44:4a:3c:ff:b7:3b:cf:c1:5c:b5:5b:3b:84:
         f1:10:70:3b:03:f4:b3:a0:fe:a3:25:5b:12:7f:cb:08:4c:8f:
         e8:46:f2:8f:1c:6c:ee:71:f5:74:89:8b:c7:e9:b3:08:e5:0e:
         e1:27:32:f2:58:71:74:8d:98:a1:0e:57:5b:70:c8:15:5a:b1:
         31:c0:58:2e:b2:ab:60:7c:38:ef:80:75:18:b5:a2:08:fa:8d:
         8b:cc:4e:13:be:47:44:2a:31:16:08:2d:81:3e:7d:c1:90:ed:
         d7:a5:77:8c:6a:19:4c:56:3e:f7:ae:57:cd:fc:54:84:c6:0f:
         3c:e4:fc:3f:80:d1:a7:fe:5c:19:80:fd:65:d3:ea:76:93:95:
         8a:b8:fe:ce:dd:8a:e3:fc:88:25:7b:ff:fe:b5:66:78:14:54:
         4b:d0:57:2e:e7:60:fb:99:e3:ba:3e:a9:27:aa:1b:c1:ef:b5:
         88:0e:91:2e:b5:4c:d8:13:d6:7a:52:f8:f2:55:87:3f:2b:14:
         df:c5:43:6b:6a:75:cd:6f:53:c9:1c:9c:d6:9c:64:bb:f4:c9:
         d9:eb:b7:99:47:a5:e3:2b:e3:7f:eb:f2:e5:48:92:e3:28:a8:
         4e:f9:0e:00:b1:73:64:1c:2c:51:f8:88:af:31:e5:60:4f:56:
         92:4e:ee:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:43:08 2025 by rpki-client on console.sobornost.net