Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/323830343a323931303a31303a3a2f34342d3434203d3e20323633393935.roa
File:                     323830343a323931303a31303a3a2f34342d3434203d3e20323633393935.roa (raw, json)
Hash identifier:          qIqXFF+EFAPY9WZVD0mrTRtSZpbvEDWHAOrmv/e83ZA=
Subject key identifier:   8D:75:85:7B:0A:1B:09:B2:9D:50:78:40:43:70:10:CD:BA:98:52:88
Certificate issuer:       /CN=D3CB0519647F9D3C145E31E81E779EA9C3D2C274
Certificate serial:       6E2D15F5D35DC2FDC6BC03273D4C6A42A26C1A1B
Authority key identifier: D3:CB:05:19:64:7F:9D:3C:14:5E:31:E8:1E:77:9E:A9:C3:D2:C2:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/323830343a323931303a31303a3a2f34342d3434203d3e20323633393935.roa
Signing time:             Tue 25 Mar 2025 19:55:15 +0000
ROA not before:           Tue 25 Mar 2025 19:50:15 +0000
ROA not after:            Tue 24 Mar 2026 19:55:15 +0000
asID:                     263995
IP address blocks:        2804:2910:10::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.crl
                          rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:2d:15:f5:d3:5d:c2:fd:c6:bc:03:27:3d:4c:6a:42:a2:6c:1a:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3CB0519647F9D3C145E31E81E779EA9C3D2C274
        Validity
            Not Before: Mar 25 19:50:15 2025 GMT
            Not After : Mar 24 19:55:15 2026 GMT
        Subject: CN=8D75857B0A1B09B29D507840437010CDBA985288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:41:e4:30:e9:75:a7:e2:86:62:40:ab:d7:0a:
                    98:64:06:50:33:0d:4d:33:d9:e2:5d:ee:e8:5e:9a:
                    6f:88:54:7b:90:28:36:9e:af:79:c9:f5:40:f7:18:
                    ca:5a:16:4c:56:39:4a:a7:d4:05:7a:ae:57:47:50:
                    b8:2d:cb:fa:a8:fb:c4:4a:db:70:b9:72:0f:ce:f3:
                    3b:d6:cd:9f:a6:1d:50:74:88:77:6c:be:82:65:a1:
                    aa:1d:e7:79:ef:52:b5:27:8f:3c:9f:19:7a:a3:6d:
                    4b:bf:d9:9d:8f:80:f6:46:0d:89:11:b3:fe:bc:92:
                    18:9f:ba:bd:96:73:82:7c:2e:0e:31:26:ad:69:04:
                    a8:6e:e3:3b:b7:42:83:40:59:d3:4d:c7:6a:60:a8:
                    ad:e5:8a:e1:01:47:66:88:4e:44:2c:1b:b0:92:36:
                    7a:ae:db:ba:9f:8f:72:f9:6b:c5:fa:0b:46:04:b2:
                    01:8b:87:cc:b5:be:21:fc:a3:a8:32:80:b4:02:c9:
                    ed:8a:f6:09:49:af:e7:4d:03:e9:d2:f4:76:ba:82:
                    85:1d:53:87:4f:e9:d9:e1:75:81:eb:e6:72:51:d3:
                    52:a6:c8:d2:96:61:94:10:8c:79:26:84:01:d3:02:
                    e9:ca:46:dc:d1:41:aa:0b:7f:ea:2a:9d:4d:8c:42:
                    d0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:75:85:7B:0A:1B:09:B2:9D:50:78:40:43:70:10:CD:BA:98:52:88
            X509v3 Authority Key Identifier:
                keyid:D3:CB:05:19:64:7F:9D:3C:14:5E:31:E8:1E:77:9E:A9:C3:D2:C2:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/323830343a323931303a31303a3a2f34342d3434203d3e20323633393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2910:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         7f:2d:05:67:14:2d:30:16:3b:aa:a6:d5:79:04:a6:45:ed:45:
         7a:51:7a:c4:d5:2b:b6:d6:ca:9e:ef:b2:67:23:7d:4e:a0:19:
         02:81:6d:8a:2e:db:70:b5:ce:bf:ad:3e:41:19:6f:12:25:ec:
         e9:a9:99:53:01:14:a9:21:b3:67:78:70:9e:a0:c9:34:37:4d:
         a0:2a:a0:2e:50:28:3f:b6:38:0e:8b:06:25:36:be:1d:9f:fa:
         16:84:52:46:e5:94:14:43:2d:a3:18:55:1b:82:eb:5e:5e:10:
         c1:af:9d:f8:2d:4d:ab:23:05:17:cd:a0:c3:ce:ab:af:9b:ba:
         cc:31:b3:06:39:d7:ca:22:5d:5b:03:1f:53:21:dd:5e:3a:fb:
         a3:b3:b6:90:70:da:bf:67:fd:67:ea:8c:16:a3:0d:02:3e:94:
         c8:51:96:f3:c6:0a:b0:f1:4b:b1:2a:4b:80:05:b5:c2:c1:90:
         88:37:8c:d8:3b:0f:09:8e:20:0f:99:55:a1:a7:03:a5:18:5e:
         cc:70:74:41:35:2c:f3:19:39:44:43:00:50:24:34:f5:82:33:
         e2:77:8b:54:bc:82:a1:aa:db:98:9f:32:69:da:87:70:50:c6:
         9d:07:55:66:0b:ae:2b:45:ef:3d:09:62:42:79:f3:67:d7:d3:
         bb:42:5c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:40:41 2025 by rpki-client on console.sobornost.net