Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a343030303a3a2f33362d3336203d3e20323638303039.roa
File:                     323830343a353639303a343030303a3a2f33362d3336203d3e20323638303039.roa (raw, json)
Hash identifier:          OFHbkijnro+oVVi6Ai8+uHwlbDQVqVwfOLYy/6OPSDI=
Subject key identifier:   8D:DC:35:B5:31:F7:8D:74:FF:44:3A:EE:D5:74:EB:35:00:C1:96:67
Certificate issuer:       /CN=3FF4610BF1D06106BA50D14E85900089D08C658F
Certificate serial:       67CE4DF96A1CAD77AC34573B80B0F129DE0F1CC7
Authority key identifier: 3F:F4:61:0B:F1:D0:61:06:BA:50:D1:4E:85:90:00:89:D0:8C:65:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF4610BF1D06106BA50D14E85900089D08C658F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a343030303a3a2f33362d3336203d3e20323638303039.roa
Signing time:             Wed 26 Mar 2025 14:09:26 +0000
ROA not before:           Wed 26 Mar 2025 14:04:26 +0000
ROA not after:            Wed 25 Mar 2026 14:09:26 +0000
asID:                     268009
IP address blocks:        2804:5690:4000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/3FF4610BF1D06106BA50D14E85900089D08C658F.crl
                          rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/3FF4610BF1D06106BA50D14E85900089D08C658F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF4610BF1D06106BA50D14E85900089D08C658F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 01:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ce:4d:f9:6a:1c:ad:77:ac:34:57:3b:80:b0:f1:29:de:0f:1c:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF4610BF1D06106BA50D14E85900089D08C658F
        Validity
            Not Before: Mar 26 14:04:26 2025 GMT
            Not After : Mar 25 14:09:26 2026 GMT
        Subject: CN=8DDC35B531F78D74FF443AEED574EB3500C19667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:da:a1:0b:96:4d:aa:d1:2f:e2:26:1e:48:f3:
                    95:37:c2:e6:62:27:50:55:56:d3:71:55:3d:66:af:
                    50:e1:de:4b:c9:ee:1c:ee:39:b5:5b:6c:40:17:96:
                    4d:c1:ea:c6:7e:f5:a1:8a:57:b0:f3:a0:42:e1:21:
                    04:8e:ca:a2:75:b0:66:03:7f:c4:2d:ea:54:b2:a2:
                    63:99:08:59:a5:fd:4b:fa:6f:9f:87:f2:a7:b1:78:
                    11:a6:7c:39:30:77:1a:36:54:4e:fd:be:9a:2a:57:
                    46:0d:0f:97:1d:9a:85:2f:b1:e3:a8:23:64:76:be:
                    29:19:99:2d:41:93:19:20:02:79:08:60:a5:69:ea:
                    33:ae:68:d1:d6:7d:69:5c:fb:0a:77:33:b7:62:0e:
                    25:ea:1b:7a:35:f4:f8:b1:ce:3a:09:6a:a1:bd:6d:
                    aa:e3:4e:aa:62:28:db:87:c5:2d:c8:af:5e:55:c4:
                    8e:ea:80:5e:69:c7:f1:0e:9a:91:7d:54:1b:30:6a:
                    e2:a4:bb:7e:af:20:8e:c3:4c:66:d4:4b:a4:77:ec:
                    22:bb:54:34:62:1e:04:39:3c:91:7b:0a:fd:4f:c8:
                    62:32:16:98:0c:2f:02:c6:cf:07:fe:a0:5e:d7:e6:
                    42:47:d1:55:ef:e5:bb:ff:d6:1e:f1:19:5e:ad:86:
                    dd:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:DC:35:B5:31:F7:8D:74:FF:44:3A:EE:D5:74:EB:35:00:C1:96:67
            X509v3 Authority Key Identifier:
                keyid:3F:F4:61:0B:F1:D0:61:06:BA:50:D1:4E:85:90:00:89:D0:8C:65:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/3FF4610BF1D06106BA50D14E85900089D08C658F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF4610BF1D06106BA50D14E85900089D08C658F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a343030303a3a2f33362d3336203d3e20323638303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5690:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         93:14:d5:20:db:cd:99:a6:cd:15:8a:6c:60:9f:ee:aa:e1:5a:
         95:5d:19:2b:63:bb:0b:d2:fb:a6:82:86:cf:d0:85:19:bb:29:
         a3:d4:b0:c4:41:8c:78:36:df:fe:98:0e:04:6d:c5:21:66:b1:
         bb:5b:28:df:28:d1:53:a0:54:43:b8:f3:29:99:bb:8d:97:89:
         63:16:c3:da:1d:6d:60:98:f0:76:6c:37:86:32:9b:76:02:2a:
         cd:35:18:61:d3:87:8a:06:f2:9f:25:03:21:ae:9a:03:bd:f8:
         6a:64:22:df:95:40:65:47:28:f7:ac:4b:3c:35:1c:28:6b:26:
         76:ab:74:7f:26:fe:18:b9:20:54:b7:1a:69:4f:98:fc:81:ef:
         05:c7:2a:a1:db:d7:3c:39:cf:05:94:18:bd:f6:52:a2:9b:58:
         0f:e5:62:bf:d1:fd:1c:4e:0e:94:b4:e7:4b:ff:81:bf:19:fd:
         18:c5:b3:e6:28:4a:2b:cc:62:94:5a:63:a8:11:bb:e3:86:fe:
         3d:e5:93:c8:28:a2:6b:ef:df:39:a4:32:0c:9c:8b:ce:dc:20:
         12:da:cc:3a:ce:0a:1d:c2:f5:b3:6f:59:8c:76:df:d6:4b:7b:
         01:aa:f4:83:43:91:a8:fb:ab:7c:1c:6e:80:35:bb:8a:03:72:
         64:60:f5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:14:54 2025 by rpki-client on console.sobornost.net