Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/323830343a343934343a3a2f33322d3438203d3e20323637313734.roa
File:                     323830343a343934343a3a2f33322d3438203d3e20323637313734.roa (raw, json)
Hash identifier:          /98gqYovjRwsWAOUZz7FJqYoYsB4E7lW4Ll5DwBrRaQ=
Subject key identifier:   87:DC:6E:BA:A5:86:B8:44:1D:22:5D:4F:9C:68:28:AC:3B:FE:03:81
Certificate issuer:       /CN=3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156
Certificate serial:       2E2085C4B60FEADE62B317C744BF0947D89B074C
Authority key identifier: 3C:E2:7E:93:82:4D:1A:8C:BB:A8:C9:A4:EF:11:5E:F9:DC:A0:01:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/323830343a343934343a3a2f33322d3438203d3e20323637313734.roa
Signing time:             Wed 05 Feb 2025 18:36:26 +0000
ROA not before:           Wed 05 Feb 2025 18:31:26 +0000
ROA not after:            Wed 04 Feb 2026 18:36:26 +0000
asID:                     267174
IP address blocks:        2804:4944::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.crl
                          rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 18:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:20:85:c4:b6:0f:ea:de:62:b3:17:c7:44:bf:09:47:d8:9b:07:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156
        Validity
            Not Before: Feb  5 18:31:26 2025 GMT
            Not After : Feb  4 18:36:26 2026 GMT
        Subject: CN=87DC6EBAA586B8441D225D4F9C6828AC3BFE0381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8c:29:1b:26:49:59:6c:37:5f:23:2f:48:e2:
                    ab:17:33:dd:d1:53:ed:4e:46:cd:04:68:e1:aa:81:
                    8d:fc:c4:01:c9:eb:cb:3f:82:0a:26:d6:f6:69:98:
                    4c:3d:95:ca:39:4c:5b:f5:9e:9f:da:5b:17:95:45:
                    c3:b8:2f:4a:a2:a8:4c:1b:76:29:26:e7:e1:ce:ac:
                    49:93:90:06:1b:93:37:99:de:77:e5:62:34:6c:9a:
                    93:2d:f3:cd:2a:d4:52:ff:f2:3c:74:68:c9:ba:a8:
                    74:e3:df:04:60:88:67:ec:eb:e6:d6:fa:76:cb:91:
                    73:8c:33:f5:db:d0:28:15:dd:ea:65:3f:88:02:eb:
                    b3:d9:ab:de:ae:54:06:3a:b4:52:d8:0e:46:3f:8f:
                    8e:e5:1d:82:30:28:df:a1:d0:cb:98:19:fa:a7:27:
                    12:f8:15:90:fb:e3:c2:3e:51:9a:f8:4e:27:94:cd:
                    66:ec:62:5c:0f:4f:6d:4b:29:47:74:fb:33:be:74:
                    73:64:09:e0:0c:dc:6c:36:6b:42:55:12:5e:9e:2d:
                    06:05:8b:25:72:a4:c6:40:79:ed:90:06:21:e0:a0:
                    85:a8:21:7e:d7:22:54:71:fe:f6:60:da:f3:c9:99:
                    ee:8a:f0:02:95:80:ee:10:41:2b:89:4d:43:3b:49:
                    ae:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:DC:6E:BA:A5:86:B8:44:1D:22:5D:4F:9C:68:28:AC:3B:FE:03:81
            X509v3 Authority Key Identifier:
                keyid:3C:E2:7E:93:82:4D:1A:8C:BB:A8:C9:A4:EF:11:5E:F9:DC:A0:01:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/323830343a343934343a3a2f33322d3438203d3e20323637313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4944::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:30:df:58:46:77:18:42:10:23:81:21:ee:a0:e9:07:43:f1:
         b6:27:64:e1:1c:b8:91:41:e9:02:ef:5c:4f:e0:89:e6:38:5f:
         25:16:25:4a:fa:7f:c1:5e:e8:61:3c:a8:3e:ea:1f:02:f0:de:
         95:cf:83:e6:84:ff:98:d0:8f:fd:a4:b8:c7:f3:f2:84:67:a4:
         17:dc:1e:95:c7:32:ce:9f:cc:8d:29:52:21:fb:f5:58:01:1e:
         54:d9:22:34:e5:27:e7:ac:a9:ab:8f:43:14:d5:b1:d0:e4:6b:
         7d:00:9c:9e:f2:ee:a2:ff:21:02:1a:d7:d5:3f:d5:03:07:5f:
         d7:89:25:57:4a:04:40:fa:f9:97:81:35:b0:67:38:c3:19:d4:
         b8:32:02:4b:d1:aa:0a:6a:f3:60:37:b7:e7:30:bf:30:09:61:
         02:a6:1d:3b:42:d2:76:59:20:26:2a:ab:9e:30:78:e3:31:cc:
         15:ad:0c:8b:39:b2:f5:61:2d:16:69:4f:ab:33:7e:16:cc:4b:
         0a:36:4b:04:ad:02:88:59:76:76:b2:da:a1:e0:89:7f:15:4f:
         a7:81:bc:a1:bb:ee:ad:4e:02:38:4f:d7:b1:50:e4:25:c8:2a:
         7c:85:7f:ea:3f:56:01:ce:e1:a7:c6:10:fb:84:81:3b:42:96:
         3f:ef:ab:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:41 2025 by rpki-client on console.sobornost.net