Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a323030303a3a2f33362d3336203d3e20323638303039.roa
File:                     323830343a353639303a323030303a3a2f33362d3336203d3e20323638303039.roa (raw, json)
Hash identifier:          Lu2vegyCeF0fTqVCb0dlnC7z13Cqf/WCaLZD9mzmdiA=
Subject key identifier:   3A:87:5E:47:12:09:EE:7E:7B:11:7C:23:62:4E:7E:1B:FA:88:F4:18
Certificate issuer:       /CN=3FF4610BF1D06106BA50D14E85900089D08C658F
Certificate serial:       10525168AC791AB91A8549E45CE190C25996DA24
Authority key identifier: 3F:F4:61:0B:F1:D0:61:06:BA:50:D1:4E:85:90:00:89:D0:8C:65:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF4610BF1D06106BA50D14E85900089D08C658F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a323030303a3a2f33362d3336203d3e20323638303039.roa
Signing time:             Wed 26 Mar 2025 14:09:25 +0000
ROA not before:           Wed 26 Mar 2025 14:04:25 +0000
ROA not after:            Wed 25 Mar 2026 14:09:25 +0000
asID:                     268009
IP address blocks:        2804:5690:2000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/3FF4610BF1D06106BA50D14E85900089D08C658F.crl
                          rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/3FF4610BF1D06106BA50D14E85900089D08C658F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF4610BF1D06106BA50D14E85900089D08C658F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 01:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:52:51:68:ac:79:1a:b9:1a:85:49:e4:5c:e1:90:c2:59:96:da:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF4610BF1D06106BA50D14E85900089D08C658F
        Validity
            Not Before: Mar 26 14:04:25 2025 GMT
            Not After : Mar 25 14:09:25 2026 GMT
        Subject: CN=3A875E471209EE7E7B117C23624E7E1BFA88F418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ad:c6:af:93:dc:48:ea:6d:53:cc:95:7e:12:
                    2b:01:56:63:1c:56:bd:b5:f8:2e:36:6f:4d:f2:d5:
                    d5:74:d4:20:cd:62:87:ae:25:3f:9a:70:5c:ff:96:
                    d8:9e:05:5e:1b:d9:30:2e:d8:0f:2a:61:4e:7a:05:
                    9a:00:e4:4f:e3:0f:00:85:79:8c:70:fb:c7:c9:d1:
                    58:42:59:fc:09:81:81:74:e3:c4:f3:73:98:40:e0:
                    c1:89:de:ef:54:5a:2a:21:61:5a:29:8d:91:a5:85:
                    b8:7f:01:7b:97:1c:cf:a4:44:0c:d3:0a:24:24:00:
                    0d:6d:67:bf:43:cf:15:8b:ba:b3:bc:e6:52:54:fe:
                    d8:5e:4c:85:05:d4:b5:82:1f:b4:f6:3c:d6:cc:e4:
                    34:46:79:56:a2:59:63:bc:5d:0e:2c:9d:ba:d1:c8:
                    64:95:fb:94:33:4d:d2:7e:30:f2:f3:5a:cc:82:21:
                    f1:ec:58:6d:55:2d:36:ac:47:51:07:97:a5:17:25:
                    37:d9:e9:5a:09:16:34:b8:93:d6:93:ff:78:de:46:
                    5c:d8:5e:4f:01:4d:70:7f:6b:48:16:7a:02:e1:1d:
                    6b:9d:08:23:9c:e8:d5:cb:72:2a:71:56:ab:34:80:
                    78:95:6a:65:02:fd:28:36:a2:d5:2a:4c:f5:7d:29:
                    05:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:87:5E:47:12:09:EE:7E:7B:11:7C:23:62:4E:7E:1B:FA:88:F4:18
            X509v3 Authority Key Identifier:
                keyid:3F:F4:61:0B:F1:D0:61:06:BA:50:D1:4E:85:90:00:89:D0:8C:65:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/3FF4610BF1D06106BA50D14E85900089D08C658F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF4610BF1D06106BA50D14E85900089D08C658F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a323030303a3a2f33362d3336203d3e20323638303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5690:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         be:59:a0:a6:08:4b:97:e8:69:3d:89:bc:a2:5d:7e:89:fb:af:
         e8:84:0b:f7:29:df:75:ac:4a:1f:eb:44:9d:59:4e:5e:18:b8:
         bb:db:7f:b2:02:1f:6e:6f:9a:88:5f:87:50:be:02:69:45:68:
         d6:65:03:6e:ed:3e:2d:20:ca:e7:3c:f1:6c:dd:3e:83:c2:37:
         f9:68:41:1d:0d:5c:af:f3:9f:5d:bd:03:08:09:e5:ef:86:eb:
         4d:18:93:a0:20:a6:0f:c7:eb:8f:85:73:dc:11:07:13:ce:6b:
         5b:1e:4b:70:85:34:3c:b3:9b:e8:8b:92:04:35:e9:7c:b4:81:
         99:09:72:85:17:40:fe:09:52:c6:62:5b:9d:57:09:fe:2f:8e:
         2d:69:ca:fb:07:9b:50:0d:e8:3c:6c:df:c5:4f:08:82:ef:73:
         3b:79:66:b2:5b:75:b9:ba:2e:8e:a0:f1:1e:44:97:fc:42:ad:
         ae:10:61:7e:3f:cf:e9:24:3b:5b:d5:05:f0:fe:43:c8:f9:a0:
         8c:30:39:a6:4d:da:8c:11:47:e6:a3:be:14:38:e9:2d:cb:c7:
         98:b0:58:f1:af:cf:53:f2:4a:a5:60:69:c7:6d:7d:c0:22:76:
         89:c8:ff:2c:52:76:48:c6:ce:63:1d:a9:c8:f9:86:97:b8:e5:
         5d:b5:0f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:14:54 2025 by rpki-client on console.sobornost.net