Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/323830343a6131383a3a2f33322d3332203d3e20323633303232.roa
File:                     323830343a6131383a3a2f33322d3332203d3e20323633303232.roa (raw, json)
Hash identifier:          hHzj/1U34Hb14mhLSmOaJOe36Adh6w5jMwEAPr+/2MQ=
Subject key identifier:   8A:81:26:AF:2F:D0:2B:CF:FF:B5:0A:ED:67:4C:DB:46:F4:21:95:73
Certificate issuer:       /CN=BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B
Certificate serial:       29F965005AA78EAED5B8B24A8F055B0437EE6EFD
Authority key identifier: BD:8D:13:72:FD:1D:2A:32:BF:9E:9A:0F:16:C2:F6:0D:FF:92:AD:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/323830343a6131383a3a2f33322d3332203d3e20323633303232.roa
Signing time:             Tue 08 Apr 2025 20:10:52 +0000
ROA not before:           Tue 08 Apr 2025 20:05:52 +0000
ROA not after:            Tue 07 Apr 2026 20:10:52 +0000
asID:                     263022
IP address blocks:        2804:a18::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.crl
                          rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:f9:65:00:5a:a7:8e:ae:d5:b8:b2:4a:8f:05:5b:04:37:ee:6e:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B
        Validity
            Not Before: Apr  8 20:05:52 2025 GMT
            Not After : Apr  7 20:10:52 2026 GMT
        Subject: CN=8A8126AF2FD02BCFFFB50AED674CDB46F4219573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3c:27:d1:c2:76:d3:6b:1d:3c:6f:99:d8:55:
                    81:ab:a4:d3:6f:5b:87:31:c9:ef:bd:d4:82:92:33:
                    69:77:22:16:34:5f:6c:f9:e9:f7:16:24:4e:76:18:
                    40:8d:64:6e:96:ac:cc:44:29:61:ce:14:29:c1:03:
                    bc:18:d8:90:a1:6a:39:55:e8:57:fa:ac:65:78:fe:
                    61:e8:cd:d1:8f:31:dd:b6:52:27:c4:34:fb:5b:eb:
                    e0:25:28:87:59:50:36:cd:e0:b9:32:d0:99:e6:6d:
                    ab:1d:01:fe:ab:b9:1b:5e:06:71:95:bb:3c:c2:69:
                    e8:60:15:37:9d:14:7f:08:3c:17:0d:4f:58:6e:f0:
                    98:c6:cb:fc:a9:87:f5:89:d8:07:92:80:75:5a:59:
                    f6:b4:95:86:e0:15:3b:7b:b2:79:ea:0a:b6:43:2e:
                    4a:a9:4c:96:2a:88:9e:f0:ce:73:c6:c0:01:40:14:
                    6c:91:02:1d:88:6d:63:96:49:42:2b:90:fe:43:53:
                    88:05:88:12:d9:c7:55:30:6a:ba:52:24:8d:2a:57:
                    69:58:a5:23:37:4e:3d:17:b6:b7:04:8a:c4:5f:4a:
                    5f:a5:f1:13:b7:d0:45:74:4f:2d:d7:7e:03:6c:82:
                    96:e7:29:5d:1b:54:d4:4e:4b:6b:f0:c2:34:52:3a:
                    8d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:81:26:AF:2F:D0:2B:CF:FF:B5:0A:ED:67:4C:DB:46:F4:21:95:73
            X509v3 Authority Key Identifier:
                keyid:BD:8D:13:72:FD:1D:2A:32:BF:9E:9A:0F:16:C2:F6:0D:FF:92:AD:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/323830343a6131383a3a2f33322d3332203d3e20323633303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a18::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:45:d1:77:b1:42:d3:4b:1e:48:42:99:1d:07:0d:d8:49:a3:
         1e:22:84:65:f4:3a:88:04:67:14:d2:34:b4:eb:e8:76:35:41:
         9b:a9:85:b9:f0:07:db:c0:67:5d:71:d8:07:41:33:69:ee:a2:
         c0:cd:73:17:8d:15:9e:89:e5:26:8c:60:79:81:88:15:27:05:
         84:a6:28:51:fb:04:26:d1:24:d8:ea:8b:ab:3f:98:75:ff:eb:
         cf:8f:91:74:19:0b:2f:5a:6c:3c:35:8a:bd:70:cb:e1:ab:c4:
         e6:6f:85:50:bb:80:ca:aa:10:f1:93:c7:21:f2:7e:92:40:f7:
         de:27:35:46:aa:97:67:76:df:11:3e:4e:f0:a8:ca:cc:8d:4f:
         aa:b4:4c:55:94:98:d3:b3:a0:fb:d4:b6:ea:09:c0:b1:09:e2:
         97:57:2a:c3:06:8b:ca:c1:43:9f:6d:c5:a9:af:5f:e7:10:ed:
         78:0c:29:a1:08:f2:04:63:44:00:e8:3f:50:00:68:df:84:d4:
         c3:3c:20:bb:8b:8c:c6:04:eb:b1:56:fa:78:e3:67:97:ff:dd:
         36:c9:f5:6d:cc:a7:15:53:3f:75:f7:a1:2d:b4:73:9c:0e:34:
         a5:af:8e:55:51:54:6f:1e:97:15:6f:52:6a:a7:40:63:72:a3:
         3a:7b:a0:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:26 2025 by rpki-client on console.sobornost.net