Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/0/323830343a326362383a3a2f33322d313238203d3e20323635323339.roa
File:                     323830343a326362383a3a2f33322d313238203d3e20323635323339.roa (raw, json)
Hash identifier:          PHSDjfnBHkB9HmZhbGZ5q3XuKfWc/d8jLBkmMXoaauc=
Subject key identifier:   51:5A:94:90:D2:BC:48:7D:FF:66:33:00:C6:C3:51:4B:D4:40:C7:97
Certificate issuer:       /CN=166002DF14C56775A516493F63DE105DB90809F3
Certificate serial:       3929467CD913A018F1C0A3C3F0E91FDFCE30F2A3
Authority key identifier: 16:60:02:DF:14:C5:67:75:A5:16:49:3F:63:DE:10:5D:B9:08:09:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/166002DF14C56775A516493F63DE105DB90809F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/0/323830343a326362383a3a2f33322d313238203d3e20323635323339.roa
Signing time:             Thu 10 Apr 2025 19:35:35 +0000
ROA not before:           Thu 10 Apr 2025 19:30:35 +0000
ROA not after:            Thu 09 Apr 2026 19:35:35 +0000
asID:                     265239
IP address blocks:        2804:2cb8::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/0/166002DF14C56775A516493F63DE105DB90809F3.crl
                          rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/0/166002DF14C56775A516493F63DE105DB90809F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/166002DF14C56775A516493F63DE105DB90809F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:29:46:7c:d9:13:a0:18:f1:c0:a3:c3:f0:e9:1f:df:ce:30:f2:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=166002DF14C56775A516493F63DE105DB90809F3
        Validity
            Not Before: Apr 10 19:30:35 2025 GMT
            Not After : Apr  9 19:35:35 2026 GMT
        Subject: CN=515A9490D2BC487DFF663300C6C3514BD440C797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d6:d3:fc:5a:f2:93:cb:aa:63:f9:98:3f:a1:
                    60:45:bd:17:9a:57:e1:7b:b1:66:3b:3b:08:cf:ac:
                    cb:be:87:c5:df:11:af:71:b5:52:5e:6c:f9:3c:d6:
                    ad:22:00:d9:d5:4d:ff:b5:32:b6:2e:3a:43:43:c1:
                    85:8e:09:62:31:24:52:4d:87:ff:0b:2c:8b:f4:da:
                    e1:83:00:3c:1a:a1:9c:8c:36:ce:6b:68:d3:ef:2a:
                    c7:bb:d6:c0:85:39:a3:3d:f7:5a:f4:66:9f:4d:94:
                    5e:3d:42:94:67:a2:ea:1b:45:66:b8:4c:97:49:12:
                    aa:1b:fe:1b:d5:ad:d0:9d:e6:10:58:f5:af:f7:30:
                    eb:77:a5:83:2d:18:f6:c1:ec:cc:d4:1d:e3:62:4d:
                    7d:36:06:88:49:08:7a:be:60:c2:ce:bf:ae:2c:2d:
                    b4:09:45:c8:59:4e:35:8a:ef:04:b5:dc:62:e7:2a:
                    7e:07:73:9d:d1:07:ae:0a:40:f9:4f:c3:6a:da:ff:
                    c9:20:5c:87:77:29:8d:56:87:fd:00:99:be:b6:f8:
                    3c:25:77:b6:43:05:f4:0a:3a:32:59:a0:83:ad:16:
                    29:62:a6:35:67:12:60:64:f6:61:e0:54:d1:95:93:
                    ee:d0:72:8c:99:aa:eb:7e:39:af:28:70:c6:fc:36:
                    84:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:5A:94:90:D2:BC:48:7D:FF:66:33:00:C6:C3:51:4B:D4:40:C7:97
            X509v3 Authority Key Identifier:
                keyid:16:60:02:DF:14:C5:67:75:A5:16:49:3F:63:DE:10:5D:B9:08:09:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/0/166002DF14C56775A516493F63DE105DB90809F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/166002DF14C56775A516493F63DE105DB90809F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/0/323830343a326362383a3a2f33322d313238203d3e20323635323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2cb8::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:ca:94:d7:9e:01:85:59:2f:7b:e9:f7:a0:01:9f:91:e7:e4:
         38:4a:35:c4:0c:49:0e:11:9b:35:58:00:3b:6d:4c:75:85:51:
         60:c5:f3:3c:ad:9b:cd:9e:be:47:98:97:9b:2f:0b:8a:d1:a6:
         48:b5:9a:7c:65:c3:83:6c:be:cb:58:f5:c3:84:e9:b8:0e:91:
         4b:15:30:65:d1:8d:fe:c2:d8:6d:bb:9d:8b:62:d0:63:ff:cf:
         3e:85:d7:20:d7:42:d7:f1:1b:70:b2:b2:ae:91:68:62:8b:55:
         ca:81:c9:01:0a:bc:58:37:ee:e8:be:e8:c4:83:a9:36:6d:9a:
         e3:cb:bc:1c:88:c5:00:52:f9:93:6a:67:80:6e:65:c3:af:6a:
         ee:41:b5:00:b7:7b:2e:6a:e7:21:9a:f0:bb:eb:fa:00:a6:0e:
         34:fe:56:09:34:93:a9:19:b2:07:fd:38:f8:a6:c6:77:7d:59:
         fa:66:77:6f:00:cc:cc:c2:5b:9e:b8:69:fa:6e:9f:53:7e:6b:
         36:35:98:fe:be:6b:84:bc:b1:9b:66:49:dd:1f:2a:f0:f5:7e:
         40:5d:7e:f0:41:37:9b:0d:12:98:a6:70:25:16:74:3e:0e:36:
         07:1e:e6:5d:80:19:2f:f8:11:78:c0:63:87:a6:39:7c:10:c2:
         df:63:78:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:25 2025 by rpki-client on console.sobornost.net