Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/1/323830343a336561303a3a2f33322d3332203d3e20323636363130.roa
File:                     323830343a336561303a3a2f33322d3332203d3e20323636363130.roa (raw, json)
Hash identifier:          ZHyz9psXCcD+N4s/gCpLKFiQUVD7XuspD/NwkO9XF8M=
Subject key identifier:   9B:53:A1:C0:99:CF:45:1F:8F:19:90:61:1D:13:55:A6:2C:7F:C2:DE
Certificate issuer:       /CN=6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6
Certificate serial:       6983495598E6A26565D8F61F946DAB1CE874DED9
Authority key identifier: 6F:9D:7C:16:F6:F1:19:AD:3C:95:41:A0:F9:81:AB:ED:6F:D2:85:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/1/323830343a336561303a3a2f33322d3332203d3e20323636363130.roa
Signing time:             Thu 06 Mar 2025 09:33:13 +0000
ROA not before:           Thu 06 Mar 2025 09:28:13 +0000
ROA not after:            Thu 05 Mar 2026 09:33:13 +0000
asID:                     266610
IP address blocks:        2804:3ea0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/1/6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6.crl
                          rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/1/6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 05:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:83:49:55:98:e6:a2:65:65:d8:f6:1f:94:6d:ab:1c:e8:74:de:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6
        Validity
            Not Before: Mar  6 09:28:13 2025 GMT
            Not After : Mar  5 09:33:13 2026 GMT
        Subject: CN=9B53A1C099CF451F8F1990611D1355A62C7FC2DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:35:76:da:09:c1:27:cd:63:c4:96:aa:51:80:
                    fa:e4:44:19:fd:5f:3d:47:77:1e:89:4b:af:98:ed:
                    b7:a7:41:70:2f:55:d3:8d:32:8a:c6:01:42:b6:75:
                    fe:0e:61:24:82:76:ad:dd:6c:68:36:d2:98:5f:40:
                    f0:e8:c4:f1:d8:fc:0c:c4:81:27:af:31:d7:92:51:
                    ed:b3:d3:cd:f9:88:0c:69:da:4e:f5:a6:47:16:ab:
                    0f:df:3b:31:b9:19:cf:f6:66:84:96:7b:40:12:b9:
                    ea:c2:f1:ad:03:92:d4:bb:b9:d5:e5:2d:cc:b1:de:
                    a8:80:b2:94:57:0d:93:cb:09:b7:4a:03:60:30:2a:
                    61:9c:30:43:94:bf:15:64:61:de:7c:cb:32:02:a9:
                    82:df:f6:9c:4a:03:c7:42:27:79:11:1c:17:7d:b1:
                    e9:d3:55:ee:f7:3e:e9:72:92:cb:bb:af:99:66:9e:
                    c8:ea:9c:95:47:7c:1c:49:39:73:a2:dd:25:86:7e:
                    71:48:ef:0e:f2:ca:7b:10:bd:2c:f9:53:33:fd:06:
                    e9:37:bd:98:6c:6d:16:38:3c:95:64:96:02:46:07:
                    ee:9a:86:8b:36:74:8e:e6:8b:29:30:0c:d7:76:a6:
                    82:30:b1:5c:9d:70:67:08:93:b2:07:d1:04:bf:5d:
                    9e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:53:A1:C0:99:CF:45:1F:8F:19:90:61:1D:13:55:A6:2C:7F:C2:DE
            X509v3 Authority Key Identifier:
                keyid:6F:9D:7C:16:F6:F1:19:AD:3C:95:41:A0:F9:81:AB:ED:6F:D2:85:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/1/6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/1/323830343a336561303a3a2f33322d3332203d3e20323636363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ea0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c0:5e:87:c6:24:37:53:c0:18:06:11:81:f4:bf:9b:be:a9:bf:
         5c:9f:09:ea:e2:72:9a:b2:aa:30:81:96:ed:c4:46:83:e7:01:
         2c:c2:06:c0:67:55:f2:59:ed:52:de:e8:d1:4e:45:8e:33:b1:
         ed:dc:ff:50:8a:14:33:8c:7a:04:b5:94:02:d8:81:da:28:ec:
         86:56:a4:0d:4d:bb:70:ca:5a:d3:ba:4c:ba:5a:2c:a6:96:d0:
         28:3e:a6:db:f3:59:61:1b:47:9e:df:bc:cc:ff:3d:18:43:a4:
         cb:26:45:70:c7:5f:ac:8a:d8:de:6d:3d:a3:e3:61:81:a2:53:
         4c:ad:a0:8d:a7:bd:7e:c8:1a:a6:f4:ab:28:aa:5b:4c:d8:88:
         5f:fc:be:89:c0:de:ce:b6:3f:c2:2c:62:45:6c:9d:c5:22:d3:
         d1:a4:31:dc:21:23:58:30:c0:47:97:05:19:7e:b4:90:c8:d5:
         2c:da:5d:4e:a2:e0:4b:98:04:34:92:dd:19:60:f3:c6:30:26:
         0d:3a:b7:28:36:3a:e0:c7:36:e0:4d:c2:40:2b:3d:ee:f0:a0:
         bf:be:42:5b:cc:c4:aa:25:23:20:34:c7:c6:55:da:bf:4a:3f:
         4e:62:40:52:47:d8:f7:58:ff:c2:ad:e9:4d:8c:32:b2:43:5e:
         a7:0b:e0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:14:56 2025 by rpki-client on console.sobornost.net