Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9gam2s5zPGWK6ALGGvBUJwuqChgRLdgS3v29BoppNEbt/1/323830343a343938633a3a2f33322d3335203d3e20323637313930.roa
File:                     323830343a343938633a3a2f33322d3335203d3e20323637313930.roa (raw, json)
Hash identifier:          qoYaqjdq3avYQ9b1gvzY8PmZGZqNnlMyJ92ty1D4j5U=
Subject key identifier:   AD:9B:04:CB:F1:94:3B:B5:F6:DE:99:E3:2C:62:9D:82:3F:94:BA:4D
Certificate issuer:       /CN=4273B563259728F1EFD6BB3011E0F26828FB113D
Certificate serial:       1D677F9B572A89BF750DFC066DD26907BC1F95FD
Authority key identifier: 42:73:B5:63:25:97:28:F1:EF:D6:BB:30:11:E0:F2:68:28:FB:11:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4273B563259728F1EFD6BB3011E0F26828FB113D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9gam2s5zPGWK6ALGGvBUJwuqChgRLdgS3v29BoppNEbt/1/323830343a343938633a3a2f33322d3335203d3e20323637313930.roa
Signing time:             Wed 05 Mar 2025 19:00:08 +0000
ROA not before:           Wed 05 Mar 2025 18:55:08 +0000
ROA not after:            Wed 04 Mar 2026 19:00:08 +0000
asID:                     267190
IP address blocks:        2804:498c::/32 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9gam2s5zPGWK6ALGGvBUJwuqChgRLdgS3v29BoppNEbt/1/4273B563259728F1EFD6BB3011E0F26828FB113D.crl
                          rsync://rpki-repo.registro.br/repo/9gam2s5zPGWK6ALGGvBUJwuqChgRLdgS3v29BoppNEbt/1/4273B563259728F1EFD6BB3011E0F26828FB113D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4273B563259728F1EFD6BB3011E0F26828FB113D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 19:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:67:7f:9b:57:2a:89:bf:75:0d:fc:06:6d:d2:69:07:bc:1f:95:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4273B563259728F1EFD6BB3011E0F26828FB113D
        Validity
            Not Before: Mar  5 18:55:08 2025 GMT
            Not After : Mar  4 19:00:08 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:70:3b:b7:58:91:ee:81:1f:25:f3:96:81:bb:
                    28:07:5a:df:af:24:59:33:29:12:6b:8d:74:0a:3c:
                    bf:49:ff:49:75:e2:93:9a:82:95:0e:ad:9c:41:59:
                    76:66:ec:8d:fb:e6:59:bd:1c:83:51:e8:53:d5:50:
                    bb:4f:51:f7:70:6a:29:99:9a:32:81:53:7e:45:9b:
                    54:20:c0:5a:ed:73:d8:29:15:86:f1:fd:63:72:67:
                    9a:88:03:94:3c:f2:f9:39:52:8d:cf:5d:e9:cd:52:
                    2e:fd:90:51:8b:47:e5:99:01:25:52:d8:1b:a1:e7:
                    18:7c:0f:bc:17:61:48:f4:8e:b3:59:1b:8f:23:c1:
                    c6:71:46:42:bf:29:7f:b9:21:ac:2d:3c:9c:94:f6:
                    63:89:b6:96:94:a0:97:aa:a3:a1:90:ee:b3:81:55:
                    b6:74:ba:34:4a:a5:06:f3:87:79:14:cc:db:6c:07:
                    92:57:55:80:7c:f4:ce:c0:08:f1:ed:f5:26:20:38:
                    be:8b:7c:e7:0f:10:93:b1:da:d4:b8:a9:7f:51:f1:
                    e0:72:e1:aa:ce:ab:16:1e:0a:c3:8f:69:88:3b:dd:
                    fa:1b:da:a1:52:68:92:4d:1e:0f:6b:ea:cc:5f:a3:
                    47:ea:1b:75:e2:a4:e6:2b:b1:12:8e:44:e9:53:54:
                    5e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:9B:04:CB:F1:94:3B:B5:F6:DE:99:E3:2C:62:9D:82:3F:94:BA:4D
            X509v3 Authority Key Identifier:
                keyid:42:73:B5:63:25:97:28:F1:EF:D6:BB:30:11:E0:F2:68:28:FB:11:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9gam2s5zPGWK6ALGGvBUJwuqChgRLdgS3v29BoppNEbt/1/4273B563259728F1EFD6BB3011E0F26828FB113D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4273B563259728F1EFD6BB3011E0F26828FB113D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9gam2s5zPGWK6ALGGvBUJwuqChgRLdgS3v29BoppNEbt/1/323830343a343938633a3a2f33322d3335203d3e20323637313930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:498c::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:4f:36:a1:dd:1a:ce:f8:b5:ee:3d:e5:36:4c:7f:15:96:f2:
         c8:3d:5b:31:4f:3b:15:67:c6:27:99:af:13:5c:bf:e7:73:be:
         ef:97:4e:14:5e:11:1c:cd:bf:16:9b:06:b9:8d:74:03:fc:96:
         19:55:5c:18:66:61:bd:ff:a2:ed:81:ee:2c:e6:c0:17:af:0b:
         a9:f6:77:3e:36:ba:e7:d0:a1:90:ee:ef:27:15:57:8c:88:56:
         9b:2d:f1:1d:0d:24:61:b1:84:b5:0f:42:82:02:3f:92:48:68:
         67:10:ee:35:28:80:a2:28:8a:e6:6c:aa:89:7d:d5:6b:31:b9:
         23:be:a2:29:27:33:db:61:9f:2f:97:90:3a:f4:0e:d1:0a:f5:
         f9:59:79:5e:d3:b1:04:04:39:53:a7:21:83:00:ec:90:3e:f2:
         04:f9:89:dc:2d:1d:3d:a2:31:24:c9:19:a6:cf:76:0a:7d:33:
         36:a1:7f:10:8b:b9:90:8f:bb:80:b3:7d:18:4e:32:fb:ba:b5:
         46:ca:e7:ac:7c:98:8b:5e:88:d0:77:91:81:d1:a6:73:60:58:
         d0:76:79:46:c8:75:c1:36:73:59:58:59:ab:1f:7a:37:78:e6:
         ef:96:97:ef:47:ed:68:ac:9d:2b:28:7d:60:16:0b:62:23:89:
         cf:f4:b8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:00:10 2025 by rpki-client on console.sobornost.net