Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A8ry8AJmb1MvgJNDdnGtYEpAuryfGhiTPUBwTSLQfkWn/0/323830343a326331303a3a2f33322d313238203d3e20323635313932.roa
File:                     323830343a326331303a3a2f33322d313238203d3e20323635313932.roa (raw, json)
Hash identifier:          Y7IHCoddv+IYvqQOrGwz3rn6sSmkNq//L+F+iwiNgyw=
Subject key identifier:   81:0B:0C:D8:08:8A:76:E5:BB:C6:C9:48:28:FA:D1:F4:8A:D5:AB:00
Certificate issuer:       /CN=F1E405EB4918A33663A8375931A74893C3CABF02
Certificate serial:       75241306300558D88650E568162898841590B0DC
Authority key identifier: F1:E4:05:EB:49:18:A3:36:63:A8:37:59:31:A7:48:93:C3:CA:BF:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1E405EB4918A33663A8375931A74893C3CABF02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A8ry8AJmb1MvgJNDdnGtYEpAuryfGhiTPUBwTSLQfkWn/0/323830343a326331303a3a2f33322d313238203d3e20323635313932.roa
Signing time:             Mon 21 Apr 2025 18:09:26 +0000
ROA not before:           Mon 21 Apr 2025 18:04:26 +0000
ROA not after:            Mon 20 Apr 2026 18:09:26 +0000
asID:                     265192
IP address blocks:        2804:2c10::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A8ry8AJmb1MvgJNDdnGtYEpAuryfGhiTPUBwTSLQfkWn/0/F1E405EB4918A33663A8375931A74893C3CABF02.crl
                          rsync://rpki-repo.registro.br/repo/A8ry8AJmb1MvgJNDdnGtYEpAuryfGhiTPUBwTSLQfkWn/0/F1E405EB4918A33663A8375931A74893C3CABF02.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1E405EB4918A33663A8375931A74893C3CABF02.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 13:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:24:13:06:30:05:58:d8:86:50:e5:68:16:28:98:84:15:90:b0:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1E405EB4918A33663A8375931A74893C3CABF02
        Validity
            Not Before: Apr 21 18:04:26 2025 GMT
            Not After : Apr 20 18:09:26 2026 GMT
        Subject: CN=810B0CD8088A76E5BBC6C94828FAD1F48AD5AB00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:94:ff:ff:56:1d:f0:1c:d2:5f:83:e1:c7:39:
                    cf:d2:23:91:e1:7c:d6:e0:9d:20:29:50:84:81:6b:
                    95:68:b8:e2:2b:68:45:b5:4e:50:d3:95:29:47:53:
                    82:92:1d:b5:bd:44:39:c5:3f:86:41:40:18:20:3e:
                    56:35:f3:e7:4f:e6:e0:01:2d:21:ba:ea:56:47:22:
                    86:f0:25:fb:fe:03:9c:e5:42:55:1e:a1:d0:10:09:
                    3a:7a:33:e0:a8:78:b2:33:e9:d8:c8:f9:d6:fc:d5:
                    78:9d:6b:3e:8f:61:b0:2a:0a:94:61:d5:0e:ae:34:
                    c5:9e:63:cd:4a:9f:84:f3:02:35:b8:46:4c:36:7b:
                    84:8d:52:6e:49:86:f7:83:2e:02:8b:7b:7c:ad:2e:
                    fc:85:fa:09:df:7d:f6:2a:b8:38:95:0d:5a:c5:1a:
                    71:51:bd:c8:80:99:0d:cc:1e:da:25:ca:ec:76:73:
                    87:3c:a8:9c:29:f6:e8:9a:87:7f:40:ce:0e:6f:ac:
                    11:b3:90:ab:58:52:e6:83:58:90:f4:73:2b:57:78:
                    15:d3:33:80:2c:c0:ee:19:93:12:7f:ac:80:67:d2:
                    54:cb:c4:c6:d0:dd:02:e3:57:89:f3:93:fc:72:d9:
                    94:77:53:c5:f6:8a:91:09:15:af:36:de:80:98:71:
                    94:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:0B:0C:D8:08:8A:76:E5:BB:C6:C9:48:28:FA:D1:F4:8A:D5:AB:00
            X509v3 Authority Key Identifier:
                keyid:F1:E4:05:EB:49:18:A3:36:63:A8:37:59:31:A7:48:93:C3:CA:BF:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A8ry8AJmb1MvgJNDdnGtYEpAuryfGhiTPUBwTSLQfkWn/0/F1E405EB4918A33663A8375931A74893C3CABF02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1E405EB4918A33663A8375931A74893C3CABF02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8ry8AJmb1MvgJNDdnGtYEpAuryfGhiTPUBwTSLQfkWn/0/323830343a326331303a3a2f33322d313238203d3e20323635313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c10::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:38:42:31:0a:00:8a:5d:b0:be:90:a7:a0:5d:78:43:5c:c0:
         d9:da:ce:02:ef:f5:2b:c9:db:ee:59:64:a1:0a:2c:40:12:22:
         9a:88:cd:55:42:a7:bb:b4:23:54:31:31:33:ff:ab:14:f0:d6:
         61:07:98:07:3b:d5:61:13:0b:e3:2a:e4:aa:54:54:91:1a:6f:
         a5:41:51:b3:5c:64:52:2c:e5:bb:c3:a6:01:ad:d7:55:58:13:
         b2:f9:b3:cd:6d:b5:54:23:ec:df:df:72:65:4e:36:5b:5d:54:
         60:34:f6:db:32:31:ca:23:fc:e7:a8:d2:51:bc:40:ea:4d:40:
         11:e0:d1:af:96:6e:8a:ef:55:a1:90:4f:06:d3:32:43:07:74:
         47:0b:f6:19:0d:ed:c4:19:91:61:0f:9a:d4:ae:06:75:d6:65:
         6b:29:71:47:8c:df:24:98:38:75:2e:47:04:aa:55:eb:3d:c5:
         fe:a2:4a:01:33:c3:ab:76:c2:dd:a0:48:39:e4:6b:53:bb:2c:
         af:16:f9:bc:26:b5:d8:8e:e8:1a:7b:53:9f:5f:86:6b:47:27:
         f6:e2:f4:4f:6c:64:d3:d3:36:72:ef:a0:89:b6:ed:44:79:86:
         be:7b:35:13:0a:ae:6d:4f:83:0a:ae:4a:38:6a:0e:7d:d4:ac:
         d4:84:2c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:09 2025 by rpki-client on console.sobornost.net