Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/323830343a343163383a383030303a3a2f33332d3333203d3e20323637343536.roa
File:                     323830343a343163383a383030303a3a2f33332d3333203d3e20323637343536.roa (raw, json)
Hash identifier:          FTE+LZCpdiCJomD6mcUTZFlfLuLwhqC1jHUIHgg1uoc=
Subject key identifier:   BA:DE:FA:7A:31:57:2A:83:C6:CB:43:3C:2B:A5:DB:66:84:77:4E:4C
Certificate issuer:       /CN=76E1848CDA572B37FCF5D9FC2F32072BAB9072B2
Certificate serial:       126CCE628C5D2BE66F4816328D2A52909E7D17A6
Authority key identifier: 76:E1:84:8C:DA:57:2B:37:FC:F5:D9:FC:2F:32:07:2B:AB:90:72:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/323830343a343163383a383030303a3a2f33332d3333203d3e20323637343536.roa
Signing time:             Fri 25 Apr 2025 18:01:07 +0000
ROA not before:           Fri 25 Apr 2025 17:56:07 +0000
ROA not after:            Fri 24 Apr 2026 18:01:07 +0000
asID:                     267456
IP address blocks:        2804:41c8:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.crl
                          rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 19:14:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:6c:ce:62:8c:5d:2b:e6:6f:48:16:32:8d:2a:52:90:9e:7d:17:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76E1848CDA572B37FCF5D9FC2F32072BAB9072B2
        Validity
            Not Before: Apr 25 17:56:07 2025 GMT
            Not After : Apr 24 18:01:07 2026 GMT
        Subject: CN=BADEFA7A31572A83C6CB433C2BA5DB6684774E4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6f:83:34:cc:3c:c7:4f:e6:47:ec:51:8f:f3:
                    2f:52:e4:f9:51:2c:51:68:24:ac:30:d3:76:f0:95:
                    65:75:ff:c0:d1:b1:43:c3:09:2f:a5:ea:48:f8:af:
                    f0:bb:a4:e2:90:37:b1:83:6a:0d:8b:65:3d:e2:2e:
                    01:2b:57:d6:96:37:3b:e8:5e:f6:de:cc:fe:be:cd:
                    99:c3:c6:c3:b4:42:93:82:61:84:71:1d:05:f0:22:
                    db:88:75:be:9f:76:54:b8:5d:52:6a:16:72:a2:b5:
                    04:47:ec:8d:0f:3d:9e:f5:e6:84:24:fb:57:0d:be:
                    33:7c:8d:7c:a5:d3:c8:7d:9c:4e:04:f9:38:ff:70:
                    48:4e:96:4f:b7:3e:34:4e:cb:8f:e9:60:11:86:65:
                    c9:b9:69:a1:0d:67:16:06:c4:99:47:fc:51:96:28:
                    41:ea:ed:d8:d3:26:72:21:b1:b7:ff:bb:bd:73:40:
                    88:48:23:23:cf:ff:68:0e:c7:9e:8b:e1:bd:07:e3:
                    36:ef:8d:84:37:b5:6f:46:ac:37:d1:07:83:c3:a6:
                    bf:82:48:b5:f9:c9:22:41:10:25:c9:d9:d6:d2:45:
                    b9:0b:de:9d:44:9d:22:de:19:9d:dc:91:f8:6b:c6:
                    6c:fc:ba:7a:92:e6:84:f2:76:ab:be:2d:d5:c7:a4:
                    32:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:DE:FA:7A:31:57:2A:83:C6:CB:43:3C:2B:A5:DB:66:84:77:4E:4C
            X509v3 Authority Key Identifier:
                keyid:76:E1:84:8C:DA:57:2B:37:FC:F5:D9:FC:2F:32:07:2B:AB:90:72:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/323830343a343163383a383030303a3a2f33332d3333203d3e20323637343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41c8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         60:0a:da:6a:62:4b:68:1c:38:52:e4:d7:47:a0:5a:0f:8f:6b:
         89:41:0e:c2:5b:f1:e6:bc:43:50:99:7f:35:79:92:ac:c4:4c:
         51:b8:43:50:de:56:f5:9b:b1:ba:0a:31:78:b6:9e:e1:ff:a9:
         07:cd:ff:b2:1b:7e:63:9a:40:9b:ae:d4:24:60:db:2c:05:80:
         6b:c8:c2:b7:06:01:41:f0:37:3a:e0:d1:aa:5b:06:73:e5:d4:
         37:b4:e2:57:53:c2:23:a1:0d:6e:e2:71:ab:e4:e1:49:fe:aa:
         40:84:48:1e:c2:5e:a8:35:ea:9a:00:f7:5d:d3:f1:82:8c:c9:
         f7:b9:02:e8:bb:84:bd:2b:25:1e:10:ba:86:df:e4:02:24:54:
         bf:00:c3:87:59:76:7b:1d:7a:00:38:68:b9:dd:c1:54:64:29:
         4a:9a:68:3b:4e:6d:d6:24:db:a8:c4:b1:c2:bf:d1:60:b1:31:
         e1:ea:1a:6c:c1:77:55:5c:67:ff:57:75:09:e0:75:63:52:57:
         f4:81:22:a6:f6:e3:47:23:23:f0:78:16:c4:9f:6b:30:c8:4b:
         98:e9:7e:57:89:c6:5b:29:2d:4a:76:45:37:b1:0e:d4:6c:29:
         5e:09:5b:81:21:52:a0:7e:50:f2:12:b7:ec:1b:d8:ed:1d:72:
         52:59:cb:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:41 2025 by rpki-client on console.sobornost.net