Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a393030303a3a2f33362d3336203d3e20323638303039.roa
File:                     323830343a353639303a393030303a3a2f33362d3336203d3e20323638303039.roa (raw, json)
Hash identifier:          EfdOszltilS8j8oEz8FJjNHsxgkS0IgsvarNI6+NT+M=
Subject key identifier:   51:AB:E9:8A:5B:D5:DC:7A:0B:89:CC:8A:4E:30:BD:83:35:F1:9A:F3
Certificate issuer:       /CN=3FF4610BF1D06106BA50D14E85900089D08C658F
Certificate serial:       6722060A915BD327E7D602103A3277E587B87541
Authority key identifier: 3F:F4:61:0B:F1:D0:61:06:BA:50:D1:4E:85:90:00:89:D0:8C:65:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF4610BF1D06106BA50D14E85900089D08C658F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a393030303a3a2f33362d3336203d3e20323638303039.roa
Signing time:             Wed 26 Mar 2025 14:09:26 +0000
ROA not before:           Wed 26 Mar 2025 14:04:26 +0000
ROA not after:            Wed 25 Mar 2026 14:09:26 +0000
asID:                     268009
IP address blocks:        2804:5690:9000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/3FF4610BF1D06106BA50D14E85900089D08C658F.crl
                          rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/3FF4610BF1D06106BA50D14E85900089D08C658F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF4610BF1D06106BA50D14E85900089D08C658F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 01:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:22:06:0a:91:5b:d3:27:e7:d6:02:10:3a:32:77:e5:87:b8:75:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF4610BF1D06106BA50D14E85900089D08C658F
        Validity
            Not Before: Mar 26 14:04:26 2025 GMT
            Not After : Mar 25 14:09:26 2026 GMT
        Subject: CN=51ABE98A5BD5DC7A0B89CC8A4E30BD8335F19AF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4d:d4:32:23:78:cf:51:e9:dd:83:51:56:6c:
                    de:8a:61:31:64:a2:77:20:51:a2:db:4d:cd:4b:d9:
                    58:f4:c5:48:73:c4:29:03:6b:60:f4:1f:02:90:5a:
                    39:54:bf:7b:8d:b4:8c:a8:7e:ae:dc:8f:b9:64:64:
                    5a:0c:d1:4b:6f:d5:e2:74:43:74:21:9e:87:1c:97:
                    86:bf:4b:57:ce:0e:57:aa:b9:b7:0e:56:1f:a4:c9:
                    54:03:36:9a:7f:cd:c0:ce:1d:f4:ad:dd:3c:9e:f1:
                    6a:c7:98:32:fe:f9:55:da:6f:ad:72:90:c9:0a:34:
                    26:22:bc:a6:18:8c:31:6a:98:ec:e3:76:27:02:c8:
                    3f:56:b6:0f:4e:56:08:ad:02:ff:52:cf:90:0d:35:
                    ee:84:33:d7:ab:0f:24:4c:72:38:d4:61:02:46:f6:
                    71:1b:53:41:02:0f:6c:98:a8:c0:6c:a8:5e:6e:7a:
                    8c:05:ae:3c:f3:62:da:d9:24:21:70:7e:89:c4:ac:
                    e8:aa:a2:fe:db:d6:2a:72:e0:02:15:9a:65:40:37:
                    67:c2:c5:34:4d:28:d2:52:da:99:08:a0:80:64:e3:
                    c4:3a:4f:9d:3f:1d:53:d2:d0:dc:be:92:0b:fb:ce:
                    1e:57:c0:f1:88:e6:60:5a:98:d1:7d:e3:45:bd:20:
                    8b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:AB:E9:8A:5B:D5:DC:7A:0B:89:CC:8A:4E:30:BD:83:35:F1:9A:F3
            X509v3 Authority Key Identifier:
                keyid:3F:F4:61:0B:F1:D0:61:06:BA:50:D1:4E:85:90:00:89:D0:8C:65:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/3FF4610BF1D06106BA50D14E85900089D08C658F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF4610BF1D06106BA50D14E85900089D08C658F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a393030303a3a2f33362d3336203d3e20323638303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5690:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         33:18:4e:45:00:bc:fe:09:4f:8b:22:1e:50:de:fb:51:fb:22:
         bd:c7:e7:1c:78:f3:24:23:95:8a:36:e4:a6:19:a2:da:b9:66:
         e1:b9:99:c5:05:05:29:0e:79:50:e1:17:84:ee:5b:38:18:e4:
         9b:aa:d0:b2:81:0a:c8:e0:1c:69:4d:e5:fa:ee:a4:a2:c5:04:
         27:2e:c1:3a:fb:3f:97:7f:be:af:90:08:37:01:d1:8a:6e:d0:
         77:13:c5:3f:da:3e:01:52:e1:87:b4:c2:45:77:aa:70:82:d0:
         c8:b9:60:2e:91:c3:91:74:86:52:5a:79:03:8a:93:cb:dc:c2:
         e8:f0:18:c9:76:b2:94:65:2b:c0:a8:68:8f:67:e9:b4:1e:89:
         75:ca:cf:e4:56:70:fb:e4:49:ff:69:ab:2b:9f:be:17:a8:46:
         b7:4c:ae:91:d5:30:bf:64:1d:a4:67:c6:2c:75:0c:0f:45:e1:
         db:5a:8b:f8:ef:cd:06:2f:bb:ab:7a:26:cc:5b:33:00:2a:fe:
         33:55:45:f5:88:bd:85:f9:30:2a:bc:f4:93:e0:56:c6:22:92:
         d5:e0:ad:42:ba:7a:91:ef:61:5b:ea:97:c0:2c:28:80:05:a6:
         6f:3d:d3:a8:b1:d6:8b:01:88:a1:fc:95:03:01:b3:d8:9a:95:
         5f:c8:da:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:14:54 2025 by rpki-client on console.sobornost.net