Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9TxbWNx4X9cPz3tECayCXXwDCL3rEXYAfe4FgS1vJkj5/0/323830343a376635633a3a2f33322d3438203d3e20323731363833.roa
File:                     323830343a376635633a3a2f33322d3438203d3e20323731363833.roa (raw, json)
Hash identifier:          i9+wCiNlcNCB2+jPrJE7ZAjgNMWKFTpddqAjdggBe7s=
Subject key identifier:   E6:A2:12:90:E9:95:0C:5E:DD:22:93:32:A4:11:7B:3D:8C:F0:A8:A2
Certificate issuer:       /CN=D027EC1CE0CA54758020641AF223E272C10893C4
Certificate serial:       5EB615A6DC7868FD86AA8C6052E6C5023E383499
Authority key identifier: D0:27:EC:1C:E0:CA:54:75:80:20:64:1A:F2:23:E2:72:C1:08:93:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D027EC1CE0CA54758020641AF223E272C10893C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9TxbWNx4X9cPz3tECayCXXwDCL3rEXYAfe4FgS1vJkj5/0/323830343a376635633a3a2f33322d3438203d3e20323731363833.roa
Signing time:             Wed 23 Apr 2025 13:14:22 +0000
ROA not before:           Wed 23 Apr 2025 13:09:22 +0000
ROA not after:            Wed 22 Apr 2026 13:14:22 +0000
asID:                     271683
IP address blocks:        2804:7f5c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9TxbWNx4X9cPz3tECayCXXwDCL3rEXYAfe4FgS1vJkj5/0/D027EC1CE0CA54758020641AF223E272C10893C4.crl
                          rsync://rpki-repo.registro.br/repo/9TxbWNx4X9cPz3tECayCXXwDCL3rEXYAfe4FgS1vJkj5/0/D027EC1CE0CA54758020641AF223E272C10893C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D027EC1CE0CA54758020641AF223E272C10893C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 19:10:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:b6:15:a6:dc:78:68:fd:86:aa:8c:60:52:e6:c5:02:3e:38:34:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D027EC1CE0CA54758020641AF223E272C10893C4
        Validity
            Not Before: Apr 23 13:09:22 2025 GMT
            Not After : Apr 22 13:14:22 2026 GMT
        Subject: CN=E6A21290E9950C5EDD229332A4117B3D8CF0A8A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c0:82:9d:06:4d:cb:b6:13:c9:ed:e9:fe:48:
                    af:cf:7a:22:61:ac:7a:a0:21:a5:6c:09:ad:c3:fa:
                    f0:33:b1:f4:e7:55:58:db:9d:91:54:d6:97:23:f4:
                    77:60:29:60:ea:7e:5c:78:17:3c:f5:8f:f3:e5:8a:
                    71:16:7f:58:84:54:ae:40:fe:08:9a:05:60:c7:9e:
                    c7:0d:ff:05:b0:5b:0f:01:d1:bb:f4:86:e8:50:df:
                    58:01:6b:a1:64:76:3a:54:13:06:eb:31:94:24:f0:
                    ca:f1:c4:c8:fd:2a:77:c6:5f:22:f2:35:27:42:de:
                    4c:4e:5d:6c:07:4f:9e:e6:09:ff:ff:24:00:87:d1:
                    16:5b:81:1e:df:9c:8a:5a:0e:f4:c3:18:06:02:35:
                    1a:83:34:36:1d:7d:3e:0a:c4:8e:e0:cd:06:e3:97:
                    86:7e:06:ba:11:3c:ad:25:b6:5e:45:15:b9:8a:53:
                    fd:e9:30:67:1b:ea:d1:ba:26:1c:62:3e:8f:9e:34:
                    ef:79:ee:a1:62:d5:23:96:98:de:af:50:df:cd:6b:
                    7f:e0:0a:75:a9:c2:c5:1b:06:6f:c2:35:bb:d2:08:
                    44:b7:76:73:e1:bb:b2:52:e0:b1:a4:99:10:72:56:
                    50:6f:69:9a:2b:1a:e6:e6:d4:5b:7b:d0:1e:d6:27:
                    03:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A2:12:90:E9:95:0C:5E:DD:22:93:32:A4:11:7B:3D:8C:F0:A8:A2
            X509v3 Authority Key Identifier:
                keyid:D0:27:EC:1C:E0:CA:54:75:80:20:64:1A:F2:23:E2:72:C1:08:93:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9TxbWNx4X9cPz3tECayCXXwDCL3rEXYAfe4FgS1vJkj5/0/D027EC1CE0CA54758020641AF223E272C10893C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D027EC1CE0CA54758020641AF223E272C10893C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9TxbWNx4X9cPz3tECayCXXwDCL3rEXYAfe4FgS1vJkj5/0/323830343a376635633a3a2f33322d3438203d3e20323731363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7f5c::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:36:cb:92:2a:02:7f:fd:49:7c:bc:ef:40:4f:d2:8e:c8:86:
         79:59:da:5f:72:fb:e9:b8:cf:a7:5e:29:8b:49:06:ef:52:14:
         81:da:67:49:42:ea:f0:4f:3d:28:21:a1:09:d4:80:11:90:29:
         1a:0b:e6:2b:8d:a5:a5:50:df:34:69:43:d4:81:f7:de:3c:15:
         ec:8a:52:18:4a:c7:3c:02:39:9c:bd:9e:fb:4a:46:74:77:4e:
         26:13:31:78:e8:d8:71:c0:89:16:64:dd:0e:44:ef:16:15:4f:
         c6:13:3c:9c:a3:89:1e:9f:18:a3:28:0a:54:f3:e7:ff:9b:ab:
         92:a5:34:01:82:eb:ef:8f:22:9c:0b:90:f2:f5:24:01:10:71:
         50:ba:51:f8:78:31:01:f7:2c:66:5b:5b:3b:64:25:60:74:1e:
         6b:74:49:5f:6f:45:50:24:8a:53:06:8e:e4:66:21:24:ab:7c:
         ce:52:c7:fc:ee:94:35:f4:4b:e0:4b:94:80:12:38:0a:c0:c5:
         cb:b7:c3:11:bd:e9:b2:8c:15:f5:16:3b:f3:1c:0b:97:59:0e:
         aa:1e:07:1a:4b:01:e4:02:75:71:97:7f:23:19:f3:4b:5c:c1:
         f6:45:3c:e9:f6:bb:7e:cd:44:1f:07:c6:60:c2:06:64:59:7e:
         44:e3:b2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:38 2025 by rpki-client on console.sobornost.net