Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a363030303a3a2f33362d3336203d3e20323638303039.roa
File:                     323830343a353639303a363030303a3a2f33362d3336203d3e20323638303039.roa (raw, json)
Hash identifier:          ruOgsRfhW147/WrMPsk5wUNqA1q+759HUHNKe08mNv0=
Subject key identifier:   96:17:E7:87:B5:76:FA:1E:34:65:EE:66:A6:E3:5A:62:55:28:1C:5E
Certificate issuer:       /CN=3FF4610BF1D06106BA50D14E85900089D08C658F
Certificate serial:       794CF50807FD22955DD644CE2165B670850EEA2B
Authority key identifier: 3F:F4:61:0B:F1:D0:61:06:BA:50:D1:4E:85:90:00:89:D0:8C:65:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF4610BF1D06106BA50D14E85900089D08C658F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a363030303a3a2f33362d3336203d3e20323638303039.roa
Signing time:             Wed 26 Mar 2025 14:09:25 +0000
ROA not before:           Wed 26 Mar 2025 14:04:25 +0000
ROA not after:            Wed 25 Mar 2026 14:09:25 +0000
asID:                     268009
IP address blocks:        2804:5690:6000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/3FF4610BF1D06106BA50D14E85900089D08C658F.crl
                          rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/3FF4610BF1D06106BA50D14E85900089D08C658F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF4610BF1D06106BA50D14E85900089D08C658F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 01:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:4c:f5:08:07:fd:22:95:5d:d6:44:ce:21:65:b6:70:85:0e:ea:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF4610BF1D06106BA50D14E85900089D08C658F
        Validity
            Not Before: Mar 26 14:04:25 2025 GMT
            Not After : Mar 25 14:09:25 2026 GMT
        Subject: CN=9617E787B576FA1E3465EE66A6E35A6255281C5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d7:5a:c3:15:70:8b:c0:be:47:13:f3:45:ab:
                    d8:d1:f8:d9:e9:94:88:5c:ab:e6:59:30:97:34:e0:
                    88:fe:7e:d9:20:cb:2c:f2:e8:1f:2f:06:2d:5a:79:
                    cd:ad:2b:82:d7:61:71:29:dc:0e:12:6b:00:fd:9f:
                    ff:89:90:1f:dd:ed:2b:45:54:3c:7c:6f:07:04:86:
                    68:d3:4f:d3:4a:46:b5:15:41:8e:9b:f0:26:af:22:
                    20:57:aa:b9:5d:a4:bc:98:31:76:28:d5:73:66:85:
                    67:57:00:47:0b:d6:85:76:31:17:b1:2b:0b:2a:56:
                    60:37:98:aa:1d:53:95:19:92:5f:48:73:9f:49:41:
                    9a:eb:79:51:15:23:66:fe:ba:33:e9:da:8d:cb:01:
                    78:58:2d:d3:6e:3c:75:37:81:93:8f:67:43:7a:0d:
                    23:b1:72:bd:76:aa:5e:fb:16:d7:9e:41:04:d2:68:
                    e4:3e:0a:8e:c7:4b:96:08:b8:fe:6c:ec:2c:9f:08:
                    f2:ed:0b:f4:c6:c6:e9:9d:a1:55:88:14:93:2e:91:
                    4f:ab:a7:c2:15:f0:3d:ce:31:5f:07:80:54:f2:a1:
                    9b:4a:a5:18:43:02:30:a9:7e:02:6d:21:a9:b0:6e:
                    7f:97:d9:3d:e3:e5:4a:03:49:28:c3:69:cd:89:6d:
                    73:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:17:E7:87:B5:76:FA:1E:34:65:EE:66:A6:E3:5A:62:55:28:1C:5E
            X509v3 Authority Key Identifier:
                keyid:3F:F4:61:0B:F1:D0:61:06:BA:50:D1:4E:85:90:00:89:D0:8C:65:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/3FF4610BF1D06106BA50D14E85900089D08C658F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF4610BF1D06106BA50D14E85900089D08C658F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a363030303a3a2f33362d3336203d3e20323638303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5690:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9c:9e:2c:6d:b5:30:bc:7c:a6:3d:84:05:0b:5c:cb:bf:99:ff:
         4c:1c:12:9c:0b:f7:c9:96:b0:12:1b:11:8e:0c:ab:0d:38:db:
         98:e5:a5:66:3d:0d:53:f7:ee:71:4d:f0:ab:0b:d4:88:1d:1a:
         fe:d9:9c:69:26:96:d7:01:7d:c1:fc:8e:16:fc:8f:09:42:42:
         72:dd:80:c2:96:88:06:91:2c:f3:8e:f1:55:fc:f3:68:5c:2d:
         93:9a:e3:f3:17:25:67:43:f7:77:27:5c:c9:33:6d:b2:a5:82:
         68:a8:a8:b5:72:65:fd:54:5d:d8:b1:b7:70:2b:9f:fd:96:94:
         04:c9:d8:37:3c:21:7c:9e:59:20:ff:ae:9a:da:5f:5f:c6:ae:
         6f:a4:1c:39:1b:93:c2:90:f7:af:8f:fb:0b:7b:4a:0e:9a:c3:
         03:a1:d8:7b:53:ae:e0:8f:25:4f:d0:87:8c:44:37:48:58:04:
         3f:5e:d7:11:4d:38:3e:62:6d:bc:7a:11:d9:35:70:bf:01:94:
         14:a1:c7:e9:fc:85:70:e7:05:04:0a:2b:e9:12:fe:68:5c:f6:
         2b:d0:83:b9:d5:26:bf:63:fd:e8:9f:74:91:1a:59:02:2d:fe:
         00:15:74:70:95:ec:c3:85:16:4e:e8:96:20:77:9c:47:09:77:
         79:a4:bf:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:14:54 2025 by rpki-client on console.sobornost.net