Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/323830343a303a313830303a3a2f34382d3438203d3e20323638373434.roa
File:                     323830343a303a313830303a3a2f34382d3438203d3e20323638373434.roa (raw, json)
Hash identifier:          93YAeYtkcYLrIkR4qb9ZuND+JUs1+ACtjOEg8eVyGe4=
Subject key identifier:   6E:BF:D7:5B:8C:F0:95:8C:EB:2D:8F:C3:43:FA:16:58:C1:4B:86:82
Certificate issuer:       /CN=D54C376960A26972A0B767BDA084048DFFE3673E
Certificate serial:       115DD992393B2C142E54089806E48AA12E41B2B3
Authority key identifier: D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/323830343a303a313830303a3a2f34382d3438203d3e20323638373434.roa
Signing time:             Wed 05 Mar 2025 19:00:03 +0000
ROA not before:           Wed 05 Mar 2025 18:55:03 +0000
ROA not after:            Wed 04 Mar 2026 19:00:03 +0000
asID:                     268744
IP address blocks:        2804:0:1800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl
                          rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 19:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:5d:d9:92:39:3b:2c:14:2e:54:08:98:06:e4:8a:a1:2e:41:b2:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54C376960A26972A0B767BDA084048DFFE3673E
        Validity
            Not Before: Mar  5 18:55:03 2025 GMT
            Not After : Mar  4 19:00:03 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1b:ad:c5:f4:2b:6e:71:4f:ff:8a:1c:e3:13:
                    36:87:84:6f:10:3e:e7:47:8b:05:00:d9:eb:5e:76:
                    13:41:3e:75:58:4b:ab:ea:5f:61:b3:a1:c1:65:8b:
                    a5:5b:28:8b:9f:ca:1f:99:97:72:27:01:07:5d:84:
                    ae:f8:5e:65:8a:3a:1d:da:0e:f3:5d:49:a8:70:06:
                    15:f0:0a:fc:a1:d4:3d:81:eb:e9:98:92:97:47:68:
                    62:53:74:b7:cb:f6:21:08:ee:0e:e4:98:f2:b5:d4:
                    fa:27:ca:7f:9e:f3:80:f6:c2:99:68:db:fa:b0:f9:
                    04:3f:88:51:fe:02:c9:33:c0:e8:05:ea:6e:a9:1e:
                    69:6d:45:6a:0d:4a:c0:9c:42:ca:9a:f0:93:ee:6d:
                    b0:36:af:cf:e4:26:60:cf:99:d8:39:73:65:36:35:
                    10:fa:14:9b:49:e6:ad:06:c0:b1:f2:8d:d6:6f:02:
                    6f:eb:83:fc:ec:78:8e:24:ff:c6:63:c2:b6:c1:1e:
                    36:f3:7c:42:57:a2:fa:f4:ab:ce:31:63:0e:f8:17:
                    8f:1d:10:3c:b7:98:82:f0:bf:28:69:7b:d1:24:27:
                    4d:d9:4c:22:58:29:28:6f:54:a8:d2:92:b2:b9:ee:
                    1e:d8:48:ed:e6:1d:23:7d:17:1b:fd:6f:38:16:b4:
                    de:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:BF:D7:5B:8C:F0:95:8C:EB:2D:8F:C3:43:FA:16:58:C1:4B:86:82
            X509v3 Authority Key Identifier:
                keyid:D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/323830343a303a313830303a3a2f34382d3438203d3e20323638373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:0:1800::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:02:8b:9c:07:47:cb:e9:64:ac:78:ed:26:31:aa:f5:2d:28:
         05:5f:92:ee:ff:20:88:ec:88:53:88:26:70:42:07:3a:b2:e1:
         84:33:fd:a4:67:1e:bb:fb:c5:38:33:6e:e5:b7:fc:35:3b:43:
         05:68:85:68:d4:d2:e8:01:62:c8:09:e6:e7:b7:4d:09:0f:12:
         40:02:a3:23:94:b8:4e:c2:a1:f2:97:2e:15:8c:8b:1e:37:6b:
         da:22:b4:e5:db:35:0f:b0:3a:98:d4:ce:fe:b0:d5:15:f8:2e:
         c9:8e:66:23:00:fb:1a:f9:c3:ec:be:ef:9c:4e:de:56:c3:65:
         ec:f8:45:1b:fb:83:59:ea:ee:a9:c1:46:3b:e4:66:a0:5c:71:
         1f:e3:47:f5:2b:83:01:cf:91:09:9e:c1:ed:18:a6:74:03:32:
         d4:c2:f3:00:7b:b3:ae:79:75:91:30:f3:74:af:56:2c:80:8e:
         c2:cf:5b:39:6b:57:0e:97:4f:fb:bf:61:ff:cd:c0:b7:21:9f:
         cf:3e:50:5f:53:a8:5f:c2:e9:ea:24:6b:2f:6a:18:07:36:e5:
         c0:98:fb:5d:85:f0:d0:47:05:6b:95:dd:41:6c:aa:2e:c2:e3:
         f4:08:71:8b:a6:5d:4d:b7:89:78:4b:b6:5e:06:cc:a3:45:dc:
         cc:8e:dc:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:59 2025 by rpki-client on console.sobornost.net