Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/323830343a346362343a313030303a3a2f33362d3336203d3e20323637333836.roa
File:                     323830343a346362343a313030303a3a2f33362d3336203d3e20323637333836.roa (raw, json)
Hash identifier:          0RNqX6LC7erwGI9kQ+AQLO1CZgwrlvcV/krdgAP925g=
Subject key identifier:   F8:BA:E9:3F:AF:75:E5:B6:1B:BA:2B:5B:E5:2E:66:69:CD:67:C4:70
Certificate issuer:       /CN=272EE1B25800F489DD72CC554F5C22037BDA8291
Certificate serial:       5E4167954A9DD4480350513002CD0EBF09DCC0AA
Authority key identifier: 27:2E:E1:B2:58:00:F4:89:DD:72:CC:55:4F:5C:22:03:7B:DA:82:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/272EE1B25800F489DD72CC554F5C22037BDA8291.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/323830343a346362343a313030303a3a2f33362d3336203d3e20323637333836.roa
Signing time:             Thu 01 Aug 2024 11:59:02 +0000
ROA not before:           Thu 01 Aug 2024 11:54:02 +0000
ROA not after:            Thu 31 Jul 2025 11:59:02 +0000
asID:                     267386
IP address blocks:        2804:4cb4:1000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/272EE1B25800F489DD72CC554F5C22037BDA8291.crl
                          rsync://rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/272EE1B25800F489DD72CC554F5C22037BDA8291.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/272EE1B25800F489DD72CC554F5C22037BDA8291.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Oct 2024 14:30:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:41:67:95:4a:9d:d4:48:03:50:51:30:02:cd:0e:bf:09:dc:c0:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=272EE1B25800F489DD72CC554F5C22037BDA8291
        Validity
            Not Before: Aug  1 11:54:02 2024 GMT
            Not After : Jul 31 11:59:02 2025 GMT
        Subject: CN=F8BAE93FAF75E5B61BBA2B5BE52E6669CD67C470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:63:a7:e0:79:11:09:3f:96:72:22:c7:69:1a:
                    00:b1:dd:7c:84:0d:ce:dd:ad:d2:31:4d:ed:46:a5:
                    5c:e9:6b:db:7b:c1:e1:9d:8b:7d:e2:f0:40:49:32:
                    94:e4:05:9b:33:46:f7:29:72:04:6e:38:ee:1a:33:
                    bd:e8:38:f8:10:6a:88:d9:a3:e3:7e:0d:36:78:7a:
                    40:41:5f:3c:37:c5:63:93:10:a1:9d:d1:48:45:03:
                    4b:ad:65:69:28:3a:c6:55:02:3e:38:4c:00:ed:bf:
                    ad:cf:03:5d:50:5a:d5:b6:e8:09:65:55:89:2f:d9:
                    82:d7:9e:8e:f7:b9:bb:cc:e7:e1:62:fd:00:81:66:
                    b6:1f:77:58:34:cf:38:7b:e1:77:d4:5e:cd:f0:a8:
                    9c:8b:57:75:ef:9a:87:96:bf:a0:a6:6c:c7:44:10:
                    51:70:03:a9:e2:b7:18:8b:db:e9:40:ac:6c:a4:49:
                    48:9a:8d:b9:69:3f:bb:43:33:22:e2:6a:08:85:0e:
                    3e:ec:b9:04:5e:49:f9:f8:f5:1b:f9:f0:97:b2:5d:
                    d3:f2:a2:b7:36:28:bf:46:f2:9d:68:82:0b:0b:5a:
                    7b:8a:5e:43:32:a8:c6:55:1a:a2:f4:42:e6:73:4a:
                    dc:3b:d2:a6:7f:66:41:f9:74:28:f4:7f:8e:cd:6a:
                    35:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:BA:E9:3F:AF:75:E5:B6:1B:BA:2B:5B:E5:2E:66:69:CD:67:C4:70
            X509v3 Authority Key Identifier:
                keyid:27:2E:E1:B2:58:00:F4:89:DD:72:CC:55:4F:5C:22:03:7B:DA:82:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/272EE1B25800F489DD72CC554F5C22037BDA8291.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/272EE1B25800F489DD72CC554F5C22037BDA8291.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/323830343a346362343a313030303a3a2f33362d3336203d3e20323637333836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4cb4:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         19:41:18:bc:e2:a9:99:8d:84:64:57:20:84:6f:7e:76:b7:26:
         c4:83:1f:43:ea:04:42:15:5d:2b:e1:ba:d7:4b:6f:94:69:db:
         11:cb:14:37:54:d3:f7:5d:af:3e:69:7c:73:95:a4:61:fa:b2:
         0b:43:b7:7b:49:60:ae:a1:96:b4:73:b4:75:b9:39:61:fe:46:
         6c:b1:76:10:be:c2:71:21:78:96:ef:cb:a6:2d:be:36:02:47:
         fe:1a:55:4b:5b:37:68:d2:ac:1f:3f:b2:a3:f7:70:54:ab:ad:
         da:f0:31:5b:b6:3e:73:cc:3a:6a:8c:80:19:2b:17:0a:d9:79:
         c8:2c:8b:ff:18:19:cc:19:39:97:98:90:57:c7:40:29:00:14:
         2e:05:c2:62:ff:d5:14:bf:63:cc:e4:f4:7c:22:59:5c:4d:dd:
         a7:34:57:da:58:50:a2:d1:98:02:b6:f5:46:fb:f0:af:ea:44:
         1c:b5:d9:57:48:a8:de:7a:64:9a:13:5c:b5:98:ce:98:b3:22:
         7d:f8:41:74:17:c8:3d:39:18:33:4c:d6:0c:09:a7:21:59:21:
         fc:26:09:2b:6e:e7:4a:6a:0e:6e:80:4a:b2:79:7f:fe:64:be:
         d4:84:c3:64:62:e4:ee:36:f5:23:7c:4d:f7:8c:4d:cb:e7:bb:
         73:51:52:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 20 17:01:38 2024 by rpki-client on console.sobornost.net