Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/323830343a363762633a343030303a3a2f33342d3334203d3e20323639363437.roa
File:                     323830343a363762633a343030303a3a2f33342d3334203d3e20323639363437.roa (raw, json)
Hash identifier:          a1C+hpzUTZtHk2FHBwHGm01zz+wU4bo5iettVF0Z6Ls=
Subject key identifier:   13:CA:36:A6:EA:A9:05:60:53:46:25:8A:98:DA:79:30:BF:F2:83:2F
Certificate issuer:       /CN=D95F78E630398477E9BAE976B3EAEDB0059994DB
Certificate serial:       33FB405539CAAC4DEB3A6A11DE86E5ADCB21F2C2
Authority key identifier: D9:5F:78:E6:30:39:84:77:E9:BA:E9:76:B3:EA:ED:B0:05:99:94:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/323830343a363762633a343030303a3a2f33342d3334203d3e20323639363437.roa
Signing time:             Thu 06 Mar 2025 08:32:29 +0000
ROA not before:           Thu 06 Mar 2025 08:27:29 +0000
ROA not after:            Thu 05 Mar 2026 08:32:29 +0000
asID:                     269647
IP address blocks:        2804:67bc:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.crl
                          rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:fb:40:55:39:ca:ac:4d:eb:3a:6a:11:de:86:e5:ad:cb:21:f2:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D95F78E630398477E9BAE976B3EAEDB0059994DB
        Validity
            Not Before: Mar  6 08:27:29 2025 GMT
            Not After : Mar  5 08:32:29 2026 GMT
        Subject: CN=13CA36A6EAA905605346258A98DA7930BFF2832F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:20:f1:3f:48:fa:c3:6b:1c:00:dc:28:5d:98:
                    a2:85:4b:82:d7:68:36:65:23:26:b4:13:c6:bf:bd:
                    68:8a:b0:e8:a4:30:00:12:e7:4c:96:13:fd:9d:c4:
                    0a:a8:87:fc:4d:4e:28:ba:32:ed:98:6b:3f:9a:73:
                    bf:b8:44:b0:99:22:da:5e:a4:74:77:5d:62:25:92:
                    ca:13:17:fc:bc:ee:6c:8e:5e:0a:14:c2:f4:3b:05:
                    41:09:42:b0:68:61:3f:32:53:72:0a:d2:bc:e9:38:
                    ba:10:a2:fd:c0:64:8c:5f:9a:53:ae:f4:b2:21:d1:
                    84:dd:4b:c6:0b:b2:e0:7b:4d:e7:98:05:0e:15:f8:
                    ea:6e:91:67:da:21:20:9a:24:25:36:0f:82:5d:37:
                    f7:05:26:a8:36:ca:9b:85:41:d1:f4:79:01:55:1f:
                    53:86:df:fe:0f:f7:72:26:a8:21:57:10:fe:80:96:
                    4b:81:0a:a9:25:a2:d1:af:b9:ca:d2:6a:7e:bb:1c:
                    52:bb:4d:90:98:46:73:3b:d4:23:9f:02:8b:06:df:
                    ce:0a:5b:a1:fe:95:e5:42:30:82:5d:2e:ad:d8:c3:
                    93:f9:13:c0:25:45:7e:be:a6:f3:2a:c2:85:dd:29:
                    7f:32:47:75:13:5d:17:43:92:c7:f2:ae:be:e4:f0:
                    1c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:CA:36:A6:EA:A9:05:60:53:46:25:8A:98:DA:79:30:BF:F2:83:2F
            X509v3 Authority Key Identifier:
                keyid:D9:5F:78:E6:30:39:84:77:E9:BA:E9:76:B3:EA:ED:B0:05:99:94:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/323830343a363762633a343030303a3a2f33342d3334203d3e20323639363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:67bc:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         52:c5:2a:cc:de:22:22:a6:31:46:00:13:1d:e4:7f:25:72:80:
         8a:92:04:5d:52:10:80:20:3e:00:32:43:dc:7e:bb:a8:f5:08:
         a1:c5:c5:90:a7:86:3b:41:f3:86:b7:33:7e:81:db:b3:53:ad:
         ef:93:0e:b0:1d:14:e1:77:67:3c:ab:03:59:6d:bf:a7:ac:a0:
         c2:c4:b4:1c:84:be:cf:a6:d5:68:e2:92:39:72:13:c7:e1:88:
         ed:8f:00:3a:4e:8d:6c:d3:1c:8d:63:e3:db:4d:46:00:4e:a3:
         5c:39:37:1b:4c:4f:ef:a5:55:7c:c9:b9:06:7d:47:e4:ee:49:
         a9:e0:21:69:5a:85:de:d0:7b:16:53:ba:83:0c:d8:86:d2:52:
         5f:82:b6:ad:94:b6:72:ca:07:5c:e2:d8:58:94:8a:51:42:87:
         78:1b:c6:77:77:84:dc:87:f4:b4:4a:38:36:72:c7:3b:ef:4b:
         9a:fb:36:f0:2e:7f:49:fb:76:07:a0:0e:11:8d:5d:2d:c6:d0:
         1e:8a:98:69:be:b7:e9:e1:a3:b2:0c:ad:4c:ef:d0:7e:21:2a:
         29:19:07:71:da:c3:e0:e9:fb:c2:34:7e:85:f9:eb:cb:1a:96:
         b5:f0:4e:ac:be:98:47:77:3a:71:c3:4c:72:0f:ff:3f:33:cb:
         9b:36:ee:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:34 2025 by rpki-client on console.sobornost.net