Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8n6ZpAJjqNbEwbWMuCkXFHD4ja1v38KS829WcADpd2pn/1/323830343a336634303a3a2f33322d313238203d3e20323636363438.roa
File:                     323830343a336634303a3a2f33322d313238203d3e20323636363438.roa (raw, json)
Hash identifier:          f8QV9ZLAE3Ia1SRuWm2JcbgC9wiTi5qLEfhcaTjeogs=
Subject key identifier:   53:77:C1:B6:89:82:2A:F2:1A:48:79:F8:FD:48:29:77:5B:99:3F:25
Certificate issuer:       /CN=FD1F02FB13B8A44549F4A7647596B707E14850D0
Certificate serial:       3DABA85F0F4702BF6D80CB16E142F46228AF0DD5
Authority key identifier: FD:1F:02:FB:13:B8:A4:45:49:F4:A7:64:75:96:B7:07:E1:48:50:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD1F02FB13B8A44549F4A7647596B707E14850D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8n6ZpAJjqNbEwbWMuCkXFHD4ja1v38KS829WcADpd2pn/1/323830343a336634303a3a2f33322d313238203d3e20323636363438.roa
Signing time:             Thu 06 Mar 2025 10:39:11 +0000
ROA not before:           Thu 06 Mar 2025 10:34:11 +0000
ROA not after:            Thu 05 Mar 2026 10:39:11 +0000
asID:                     266648
IP address blocks:        2804:3f40::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8n6ZpAJjqNbEwbWMuCkXFHD4ja1v38KS829WcADpd2pn/1/FD1F02FB13B8A44549F4A7647596B707E14850D0.crl
                          rsync://rpki-repo.registro.br/repo/8n6ZpAJjqNbEwbWMuCkXFHD4ja1v38KS829WcADpd2pn/1/FD1F02FB13B8A44549F4A7647596B707E14850D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD1F02FB13B8A44549F4A7647596B707E14850D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 21:26:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:ab:a8:5f:0f:47:02:bf:6d:80:cb:16:e1:42:f4:62:28:af:0d:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD1F02FB13B8A44549F4A7647596B707E14850D0
        Validity
            Not Before: Mar  6 10:34:11 2025 GMT
            Not After : Mar  5 10:39:11 2026 GMT
        Subject: CN=5377C1B689822AF21A4879F8FD4829775B993F25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d2:05:8e:b3:31:c4:b8:fa:72:d0:44:6f:b9:
                    27:44:53:86:6d:46:60:0a:c4:1c:bc:1d:91:ed:6a:
                    8c:98:46:78:b3:a5:76:7f:84:52:25:71:fc:11:61:
                    df:8d:ea:10:cc:ab:74:d1:81:cf:1f:0e:e6:1d:d4:
                    02:1a:91:01:92:b4:18:92:da:01:6f:d9:ee:f9:78:
                    56:54:9f:00:38:44:c2:83:65:f5:71:e5:31:43:ae:
                    d7:bf:72:17:4c:5b:84:e5:be:91:a9:43:16:de:2d:
                    5c:56:cb:c0:94:b9:86:dd:e0:6c:24:3b:4e:a2:5a:
                    14:92:41:ea:c9:f0:fb:ca:60:5f:86:79:fe:16:56:
                    28:05:15:e1:5c:4a:8f:0b:dd:3c:1d:68:23:85:a4:
                    b7:e2:1f:02:c3:23:13:6c:b1:11:57:36:45:ab:49:
                    1e:bf:2f:b0:dd:7c:ac:d4:0a:32:3f:37:eb:ab:6e:
                    14:13:86:50:83:9a:13:c5:d2:dd:1a:31:e8:0f:d1:
                    c4:55:bf:c1:02:4a:6f:69:d6:78:cc:52:5e:9a:63:
                    a6:67:c7:2f:eb:b3:03:ab:9b:56:fe:af:d3:27:b1:
                    d3:78:e0:c0:06:95:46:c3:67:73:48:50:3b:fb:89:
                    4e:76:94:fb:18:d6:bf:18:7f:44:6f:60:b8:29:36:
                    32:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:77:C1:B6:89:82:2A:F2:1A:48:79:F8:FD:48:29:77:5B:99:3F:25
            X509v3 Authority Key Identifier:
                keyid:FD:1F:02:FB:13:B8:A4:45:49:F4:A7:64:75:96:B7:07:E1:48:50:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8n6ZpAJjqNbEwbWMuCkXFHD4ja1v38KS829WcADpd2pn/1/FD1F02FB13B8A44549F4A7647596B707E14850D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD1F02FB13B8A44549F4A7647596B707E14850D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8n6ZpAJjqNbEwbWMuCkXFHD4ja1v38KS829WcADpd2pn/1/323830343a336634303a3a2f33322d313238203d3e20323636363438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f40::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:15:be:27:74:06:94:21:91:85:2a:b4:bb:25:48:06:01:77:
         2c:d5:54:2e:58:cc:10:4c:82:cd:57:bf:54:77:29:fb:be:e0:
         ce:09:ce:4a:14:2f:11:ff:8d:0c:59:28:b6:e7:6a:fa:47:b4:
         65:36:a6:a4:74:c8:43:89:7a:69:6e:c0:03:1a:ee:1e:d2:e6:
         3c:02:59:af:f0:06:b5:e9:fa:d0:1b:d5:47:2f:24:9f:33:78:
         0c:7f:43:fe:39:86:0d:bf:df:f8:24:7d:43:60:b9:d8:2f:cc:
         dc:a9:42:a2:89:c3:a3:c0:8d:75:a2:3d:b5:cc:75:80:a4:1d:
         5b:27:3e:dc:43:71:0a:b1:85:6a:af:96:c5:b2:03:f5:4f:99:
         01:ac:1f:f0:4e:71:ff:17:11:9a:25:6e:9e:a3:27:3a:50:61:
         d2:fc:a4:10:81:ff:7b:30:31:7a:5e:74:6e:2f:37:4a:1c:f8:
         1d:42:40:55:58:d9:7a:64:ac:ba:89:16:f7:6b:f0:f3:f5:19:
         fc:fb:9d:d4:5b:d6:76:4b:a0:ba:4e:2d:77:58:1b:ca:0c:51:
         31:25:ed:d1:98:0c:62:ce:bc:87:2b:17:05:4a:51:0f:88:6d:
         e7:54:7a:57:99:07:22:b3:75:5b:f6:52:31:6d:d9:d2:c4:90:
         59:a0:db:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:44 2025 by rpki-client on console.sobornost.net