Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a353030303a3a2f33362d3336203d3e20323638303039.roa
File:                     323830343a353639303a353030303a3a2f33362d3336203d3e20323638303039.roa (raw, json)
Hash identifier:          /WyumNs9dACrGT09pBCwj3KObcqmfQYxfY3FpvZ56tE=
Subject key identifier:   28:F8:F4:D8:78:44:25:19:A3:A8:D6:16:19:33:1E:B8:E4:77:42:D4
Certificate issuer:       /CN=3FF4610BF1D06106BA50D14E85900089D08C658F
Certificate serial:       35420B77177EA773405FDB568E2E20DBF2802F58
Authority key identifier: 3F:F4:61:0B:F1:D0:61:06:BA:50:D1:4E:85:90:00:89:D0:8C:65:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF4610BF1D06106BA50D14E85900089D08C658F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a353030303a3a2f33362d3336203d3e20323638303039.roa
Signing time:             Wed 26 Mar 2025 14:09:24 +0000
ROA not before:           Wed 26 Mar 2025 14:04:24 +0000
ROA not after:            Wed 25 Mar 2026 14:09:24 +0000
asID:                     268009
IP address blocks:        2804:5690:5000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/3FF4610BF1D06106BA50D14E85900089D08C658F.crl
                          rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/3FF4610BF1D06106BA50D14E85900089D08C658F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF4610BF1D06106BA50D14E85900089D08C658F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 01:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:42:0b:77:17:7e:a7:73:40:5f:db:56:8e:2e:20:db:f2:80:2f:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF4610BF1D06106BA50D14E85900089D08C658F
        Validity
            Not Before: Mar 26 14:04:24 2025 GMT
            Not After : Mar 25 14:09:24 2026 GMT
        Subject: CN=28F8F4D878442519A3A8D61619331EB8E47742D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a1:1c:17:cf:d1:a8:c5:89:43:b9:8f:74:de:
                    a2:40:83:ed:f6:e4:81:f0:a8:05:86:bb:5f:cf:88:
                    7f:df:69:f5:c5:5e:ec:e7:6a:94:37:33:a3:d5:e1:
                    f9:b7:32:05:7a:c0:65:1e:89:7e:ed:11:06:b0:a6:
                    c2:55:5a:49:f8:e6:23:94:02:4a:fb:9a:88:2a:97:
                    bd:f7:d0:62:8d:6b:02:da:66:d9:72:a7:5d:5d:c0:
                    07:b0:50:c9:6b:0e:e8:2f:14:72:ba:16:56:88:b1:
                    eb:be:e3:2b:2a:23:8d:a0:b5:ac:c4:13:c5:2b:7b:
                    b9:00:77:0f:ab:81:16:a8:96:c2:c9:59:6f:f0:3b:
                    69:19:a6:71:80:70:0a:86:8a:11:23:70:28:6f:34:
                    6e:6c:c1:c8:ef:f1:76:56:bf:b9:1c:af:5c:37:a0:
                    1c:86:fe:a4:94:9b:82:9b:99:06:29:35:28:3c:84:
                    14:d6:f5:c3:63:39:79:74:f4:68:8b:1c:f6:86:d2:
                    fb:f5:4d:51:45:35:52:20:c4:f8:08:43:7c:b8:97:
                    27:8f:dd:52:a2:06:7b:7e:94:08:19:7d:b7:6a:4f:
                    20:70:ab:3c:dc:1b:f1:4a:be:12:ba:62:c7:ec:4c:
                    7d:88:15:69:97:ae:b2:2c:4d:53:11:c1:9a:ca:6c:
                    32:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F8:F4:D8:78:44:25:19:A3:A8:D6:16:19:33:1E:B8:E4:77:42:D4
            X509v3 Authority Key Identifier:
                keyid:3F:F4:61:0B:F1:D0:61:06:BA:50:D1:4E:85:90:00:89:D0:8C:65:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/3FF4610BF1D06106BA50D14E85900089D08C658F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF4610BF1D06106BA50D14E85900089D08C658F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a353030303a3a2f33362d3336203d3e20323638303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5690:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         17:df:b1:80:2d:5c:6e:7b:9c:18:f3:29:ee:0e:34:37:87:0f:
         a5:ab:72:2e:4c:cf:75:c3:61:e9:84:ae:71:fc:58:11:f3:74:
         09:ce:cc:ad:ab:f6:c1:6e:c3:fe:14:ea:c2:82:06:db:1d:14:
         96:e0:4b:ef:bb:5e:52:f6:c9:d7:83:48:ee:ef:e9:b9:52:b4:
         6e:58:e6:25:a1:7e:e6:5d:4c:5b:d5:5e:a2:05:35:8b:67:85:
         7e:60:5a:d3:e1:96:ab:eb:7c:1f:4a:ea:d6:41:2c:0b:e5:77:
         7c:7e:c1:95:55:49:66:2a:ed:13:74:34:eb:c2:fc:37:e6:2c:
         0f:f6:a6:de:fa:68:fe:7d:b7:9f:eb:fe:a1:00:f7:2c:44:de:
         37:97:df:86:7e:13:4a:75:96:94:4b:1e:4d:91:3a:c2:17:94:
         62:b0:43:cf:d6:2c:fa:7c:23:24:ca:0d:06:3f:61:93:08:b1:
         c2:af:d3:d2:19:0c:8e:2f:86:71:e3:ce:e5:34:e5:89:25:bc:
         48:73:89:b8:7a:f9:53:22:38:79:2b:35:01:15:7d:cd:f2:1f:
         a6:22:67:fb:e3:4b:8b:bc:fb:cb:52:39:26:59:a0:65:8e:77:
         5e:5e:95:11:ae:26:71:85:14:ac:80:42:ad:10:71:ce:3d:e2:
         94:15:30:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:14:54 2025 by rpki-client on console.sobornost.net