Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/323830343a373433633a3a2f33342d3334203d3e20323730393638.roa
File:                     323830343a373433633a3a2f33342d3334203d3e20323730393638.roa (raw, json)
Hash identifier:          HBDN9EeKCqHvCPayTudtpyaL/vDjZRW/r2quZk4MHPE=
Subject key identifier:   CD:EC:86:16:4D:49:3C:72:FE:D5:52:53:C9:54:BD:0F:95:BD:D8:F1
Certificate issuer:       /CN=BD729FD9CBD5A0A9946D6068C63DEC839E9765EF
Certificate serial:       3AABDE9313A9CB7FB2981F6A3B74659A7303B64E
Authority key identifier: BD:72:9F:D9:CB:D5:A0:A9:94:6D:60:68:C6:3D:EC:83:9E:97:65:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/323830343a373433633a3a2f33342d3334203d3e20323730393638.roa
Signing time:             Mon 14 Apr 2025 21:14:24 +0000
ROA not before:           Mon 14 Apr 2025 21:09:24 +0000
ROA not after:            Mon 13 Apr 2026 21:14:24 +0000
asID:                     270968
IP address blocks:        2804:743c::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.crl
                          rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 09:35:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:ab:de:93:13:a9:cb:7f:b2:98:1f:6a:3b:74:65:9a:73:03:b6:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD729FD9CBD5A0A9946D6068C63DEC839E9765EF
        Validity
            Not Before: Apr 14 21:09:24 2025 GMT
            Not After : Apr 13 21:14:24 2026 GMT
        Subject: CN=CDEC86164D493C72FED55253C954BD0F95BDD8F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:7c:ce:71:23:65:5e:81:a8:34:da:da:18:fa:
                    e3:c5:e0:d9:cc:9f:de:78:08:1e:fa:4e:29:26:7a:
                    21:77:ee:c4:9f:3b:76:74:25:a6:25:a6:61:41:ac:
                    91:db:d2:1b:3b:a4:e0:5b:ab:2e:dd:24:87:3f:64:
                    5c:86:b2:d1:c8:17:8f:ca:09:2f:45:cc:b7:48:07:
                    5a:d3:53:b3:4f:d8:4a:16:af:fc:de:4c:17:21:72:
                    a4:ac:5d:28:8d:18:35:8f:f0:b9:29:94:aa:3c:a0:
                    e3:b5:d1:14:ab:72:3a:3d:a0:a7:37:99:34:27:ce:
                    65:0d:ef:01:f9:bd:12:03:5f:a8:62:d0:09:93:2c:
                    b5:50:45:f8:36:f3:f4:fc:ba:12:da:5f:d4:ac:bf:
                    ec:0d:c5:59:e5:0c:96:40:b6:4e:48:58:75:0b:7b:
                    b0:a3:aa:53:a3:86:11:86:ef:d0:16:47:dc:de:18:
                    16:65:c6:2a:d5:37:44:82:8a:59:dc:75:9a:74:be:
                    57:5e:e4:a7:5b:84:d8:9a:84:b9:96:85:3b:e1:ca:
                    f5:b1:16:60:5f:fb:09:65:a5:e3:bf:0c:b6:7b:3e:
                    f7:65:33:ed:10:a2:e0:66:61:33:5d:0c:83:e1:b6:
                    c1:02:00:ce:29:28:67:10:f7:51:a5:bf:bc:ea:92:
                    f8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:EC:86:16:4D:49:3C:72:FE:D5:52:53:C9:54:BD:0F:95:BD:D8:F1
            X509v3 Authority Key Identifier:
                keyid:BD:72:9F:D9:CB:D5:A0:A9:94:6D:60:68:C6:3D:EC:83:9E:97:65:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/323830343a373433633a3a2f33342d3334203d3e20323730393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:743c::/34

    Signature Algorithm: sha256WithRSAEncryption
         41:c3:76:64:ce:cc:8f:07:c4:bd:75:37:35:eb:f6:1e:05:00:
         1e:4b:5e:57:54:51:59:3f:50:d6:8a:89:2b:38:a6:cb:6a:5f:
         45:96:ea:19:d2:1e:ba:31:7e:88:38:41:2f:9f:92:2a:ea:ba:
         b7:5f:78:2c:89:17:de:a6:20:79:2e:2a:11:b3:92:15:33:1b:
         12:93:a2:6e:71:a1:4c:af:b1:38:45:1c:b7:30:19:b9:9b:f2:
         bf:4e:c3:68:72:70:9b:4f:9a:f9:ff:5f:97:5c:92:98:07:10:
         2c:d8:c9:5d:a1:94:b4:3b:67:dd:1e:b3:9f:98:46:bb:96:b9:
         fa:03:26:d2:55:da:a6:8c:8a:22:13:2b:79:41:59:eb:45:e5:
         34:28:e8:66:b6:c9:62:e9:5c:6f:e0:f2:69:a5:d5:39:2d:90:
         55:9e:ea:83:b0:37:0d:aa:f4:da:3e:e7:a3:37:ec:99:10:f0:
         6e:41:0a:50:af:82:39:02:31:9b:56:06:37:f9:9d:38:65:e5:
         16:97:16:44:35:54:7b:76:c5:a1:62:96:f7:2f:31:e5:6a:5b:
         97:6c:48:85:d3:c6:1d:74:3c:fd:e8:e9:cd:98:00:7b:5f:b8:
         5d:f4:f7:59:cf:05:56:06:31:7b:62:99:54:49:58:9e:28:ad:
         fd:30:11:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:37:04 2025 by rpki-client on console.sobornost.net