Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/1/323830343a353936633a3a2f33322d3438203d3e20323638373031.roa
File:                     323830343a353936633a3a2f33322d3438203d3e20323638373031.roa (raw, json)
Hash identifier:          B6ugajSL4puD7PTn8NcYo34kM4J4u0z4mQ30ZS5OCcw=
Subject key identifier:   F3:42:FE:56:48:64:DD:0F:B7:DC:B2:C7:38:49:CF:32:20:2D:7C:69
Certificate issuer:       /CN=7DC1C2AA899276F04E4330B1E4471D510486417F
Certificate serial:       11A2679FF3223B91A7167A56AC9C24E1CE5964FF
Authority key identifier: 7D:C1:C2:AA:89:92:76:F0:4E:43:30:B1:E4:47:1D:51:04:86:41:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DC1C2AA899276F04E4330B1E4471D510486417F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/1/323830343a353936633a3a2f33322d3438203d3e20323638373031.roa
Signing time:             Wed 05 Mar 2025 23:51:42 +0000
ROA not before:           Wed 05 Mar 2025 23:46:42 +0000
ROA not after:            Wed 04 Mar 2026 23:51:42 +0000
asID:                     268701
IP address blocks:        2804:596c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/1/7DC1C2AA899276F04E4330B1E4471D510486417F.crl
                          rsync://rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/1/7DC1C2AA899276F04E4330B1E4471D510486417F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DC1C2AA899276F04E4330B1E4471D510486417F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 03:48:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:a2:67:9f:f3:22:3b:91:a7:16:7a:56:ac:9c:24:e1:ce:59:64:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DC1C2AA899276F04E4330B1E4471D510486417F
        Validity
            Not Before: Mar  5 23:46:42 2025 GMT
            Not After : Mar  4 23:51:42 2026 GMT
        Subject: CN=F342FE564864DD0FB7DCB2C73849CF32202D7C69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:59:42:cc:71:9f:61:b8:a8:4b:90:0f:9b:84:
                    09:07:cb:2a:79:da:ad:3b:db:bc:24:0d:27:c7:08:
                    5c:5c:f9:26:9f:c0:d9:54:8d:df:c7:ee:fe:3d:88:
                    7d:f9:40:22:10:c2:ed:c1:18:02:0e:91:46:6a:88:
                    1a:e3:cd:b6:f3:f4:1f:77:e2:e6:fb:23:50:95:23:
                    25:b2:6c:3f:1c:31:9a:c4:ff:55:99:7b:04:6a:0a:
                    91:d7:ac:98:80:3d:fb:0b:57:33:eb:8c:64:64:72:
                    91:bd:b5:5c:6f:24:84:8a:0a:f0:d7:a4:6f:7c:bd:
                    ac:35:6b:64:a9:cc:f0:fb:d2:9a:61:cb:c5:6c:13:
                    47:77:17:19:8a:8d:31:e7:b5:65:be:0d:cb:4a:94:
                    cd:c6:38:aa:65:f2:e4:a9:56:b5:d8:94:68:f3:4f:
                    e9:8e:6b:41:2b:31:2f:cb:32:cc:16:d7:d6:63:2a:
                    05:92:de:13:f4:f0:fe:b8:2c:48:6e:74:fc:59:41:
                    54:46:56:20:55:52:4f:72:fe:53:2a:62:f9:34:64:
                    0b:96:f8:ff:8a:18:f8:59:5e:73:d9:ae:2c:b2:69:
                    2c:8d:f9:ab:58:98:59:f2:09:33:09:ef:df:42:b4:
                    56:04:58:51:29:35:f3:12:6e:7b:47:90:07:3b:8b:
                    43:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:42:FE:56:48:64:DD:0F:B7:DC:B2:C7:38:49:CF:32:20:2D:7C:69
            X509v3 Authority Key Identifier:
                keyid:7D:C1:C2:AA:89:92:76:F0:4E:43:30:B1:E4:47:1D:51:04:86:41:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/1/7DC1C2AA899276F04E4330B1E4471D510486417F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DC1C2AA899276F04E4330B1E4471D510486417F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/1/323830343a353936633a3a2f33322d3438203d3e20323638373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:596c::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:8c:0d:e9:7d:0b:a6:54:01:d1:92:bf:c4:85:1d:ea:5b:97:
         a6:de:2e:f8:ab:a6:d3:d7:d4:4c:a8:1f:a0:38:83:00:3d:e0:
         4f:c0:af:27:3a:6b:3d:c1:08:de:0f:76:7d:df:e9:c9:f4:fb:
         c5:ee:3e:b6:9f:dd:3c:de:fe:62:9a:d5:ac:0c:74:57:73:09:
         4b:40:09:87:7f:70:33:6a:28:9e:13:22:b7:e6:79:ce:ac:eb:
         3a:0b:10:a4:eb:10:03:fe:20:08:bf:67:39:1a:6e:88:02:91:
         9d:5a:d3:71:61:c3:e7:82:6a:9c:4e:b9:c9:06:0d:97:4f:67:
         73:5f:5b:7e:a2:df:5b:55:83:4c:81:c7:d4:d5:48:83:e4:91:
         ec:71:34:ba:8e:82:c2:a6:13:ab:c8:01:ea:5c:c9:2e:3e:92:
         33:19:7b:52:b0:26:1b:21:0e:a6:06:96:bf:c8:56:39:68:58:
         c4:36:89:48:09:b8:39:6f:14:01:91:11:4f:f4:42:67:d5:9a:
         77:a6:86:fa:a9:ef:2e:fa:d9:95:71:33:7d:ba:82:fa:62:a3:
         ea:16:e5:db:39:5a:46:c8:ee:26:f0:96:b7:ad:ae:88:b4:8c:
         d9:a4:a7:f7:ff:7e:ea:89:a7:4e:6d:b4:bd:05:81:23:5e:26:
         19:98:f0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:56 2025 by rpki-client on console.sobornost.net