Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/323830343a363631343a3a2f33332d3333203d3e20323639353332.roa
File:                     323830343a363631343a3a2f33332d3333203d3e20323639353332.roa (raw, json)
Hash identifier:          ZQ1fgVMOcperwl2rYTb8rAvEvd0yx+3H1f81atPX2Zc=
Subject key identifier:   94:92:28:0E:A7:C7:66:D4:E2:2D:1C:A3:F2:13:70:3F:65:43:6B:F9
Certificate issuer:       /CN=C3976BFC098E04D93A5507BBB046C3608B889670
Certificate serial:       3FA273A57263A4EA9ED61D79DFE614B83292E892
Authority key identifier: C3:97:6B:FC:09:8E:04:D9:3A:55:07:BB:B0:46:C3:60:8B:88:96:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3976BFC098E04D93A5507BBB046C3608B889670.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/323830343a363631343a3a2f33332d3333203d3e20323639353332.roa
Signing time:             Wed 05 Mar 2025 19:00:02 +0000
ROA not before:           Wed 05 Mar 2025 18:55:02 +0000
ROA not after:            Wed 04 Mar 2026 19:00:02 +0000
asID:                     269532
IP address blocks:        2804:6614::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.crl
                          rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3976BFC098E04D93A5507BBB046C3608B889670.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 19:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:a2:73:a5:72:63:a4:ea:9e:d6:1d:79:df:e6:14:b8:32:92:e8:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3976BFC098E04D93A5507BBB046C3608B889670
        Validity
            Not Before: Mar  5 18:55:02 2025 GMT
            Not After : Mar  4 19:00:02 2026 GMT
        Subject: CN=3082010A0282010100C469ED49170373333EC3B905F0643F0AA5B3CD32B4D270483F9061C30D00F0E07BD4FA3A887F33824BECC29BA0DEB8F6C7F267FC9A6AE79E4B63F8E97B2F1557E3C10D87B797A8FF94249605ED3D89038562B84DA70F558116A1E3335E24DA6387F9812ED66F8472BB03DE317FC44C12BEB69A2C1CDC34FF9206D30F71D949D2D74047B0FA16330795E1EF4EC093A8DDB6DDDFF8E70C1616D37621D891E541C5B6C1C725939A1AEC787EC72E58B8E5FAB467C056A46E52F94C92C2DAA2541781FB5BEB4AA37086856438723CC4F93458D78DBD5E502C710BE1B9C5ECF0BC81839C57FD4CD336A96D774E3D4C450A82F45E01A96CF38DC21B7576F9F257463C530203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:69:ed:49:17:03:73:33:3e:c3:b9:05:f0:64:
                    3f:0a:a5:b3:cd:32:b4:d2:70:48:3f:90:61:c3:0d:
                    00:f0:e0:7b:d4:fa:3a:88:7f:33:82:4b:ec:c2:9b:
                    a0:de:b8:f6:c7:f2:67:fc:9a:6a:e7:9e:4b:63:f8:
                    e9:7b:2f:15:57:e3:c1:0d:87:b7:97:a8:ff:94:24:
                    96:05:ed:3d:89:03:85:62:b8:4d:a7:0f:55:81:16:
                    a1:e3:33:5e:24:da:63:87:f9:81:2e:d6:6f:84:72:
                    bb:03:de:31:7f:c4:4c:12:be:b6:9a:2c:1c:dc:34:
                    ff:92:06:d3:0f:71:d9:49:d2:d7:40:47:b0:fa:16:
                    33:07:95:e1:ef:4e:c0:93:a8:dd:b6:dd:df:f8:e7:
                    0c:16:16:d3:76:21:d8:91:e5:41:c5:b6:c1:c7:25:
                    93:9a:1a:ec:78:7e:c7:2e:58:b8:e5:fa:b4:67:c0:
                    56:a4:6e:52:f9:4c:92:c2:da:a2:54:17:81:fb:5b:
                    eb:4a:a3:70:86:85:64:38:72:3c:c4:f9:34:58:d7:
                    8d:bd:5e:50:2c:71:0b:e1:b9:c5:ec:f0:bc:81:83:
                    9c:57:fd:4c:d3:36:a9:6d:77:4e:3d:4c:45:0a:82:
                    f4:5e:01:a9:6c:f3:8d:c2:1b:75:76:f9:f2:57:46:
                    3c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:92:28:0E:A7:C7:66:D4:E2:2D:1C:A3:F2:13:70:3F:65:43:6B:F9
            X509v3 Authority Key Identifier:
                keyid:C3:97:6B:FC:09:8E:04:D9:3A:55:07:BB:B0:46:C3:60:8B:88:96:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3976BFC098E04D93A5507BBB046C3608B889670.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/323830343a363631343a3a2f33332d3333203d3e20323639353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6614::/33

    Signature Algorithm: sha256WithRSAEncryption
         36:38:d6:af:e0:a9:71:15:1a:bb:cc:19:e6:98:39:65:b6:95:
         e2:0f:41:7f:8c:26:3e:a9:8f:38:02:9b:83:50:e4:e6:64:56:
         3a:28:a3:d5:3c:48:ab:f0:5c:88:8f:84:f4:d6:9a:2d:c9:f5:
         7d:fe:f3:97:ca:be:53:0e:46:07:4e:bd:ac:9c:8e:91:dc:b2:
         3c:64:d7:ca:ef:7e:c5:a6:5d:86:1e:d0:9c:fe:76:7e:4d:84:
         8e:dd:75:7a:26:47:39:b1:fb:ce:42:84:70:88:45:80:96:39:
         99:5e:b2:0f:4b:a2:b7:1c:3a:fb:32:a7:62:7b:4e:a4:48:e1:
         01:85:89:05:99:73:38:79:e4:b3:f5:56:28:24:00:f8:95:92:
         27:3d:5f:f1:8b:02:67:55:00:c3:e0:ac:d3:76:51:2f:c4:b7:
         92:20:95:e3:c7:c3:ad:1c:c3:6f:84:c2:39:15:67:82:43:cd:
         5a:be:06:e4:ee:c7:ff:ee:fc:ec:52:e4:12:cb:86:85:5e:2f:
         17:00:54:45:17:06:5e:19:0d:3c:c9:a3:d7:cf:74:0c:bf:fe:
         15:a1:69:dc:07:ea:06:9c:87:88:ad:08:fb:8a:37:c3:d9:ad:
         1f:c2:e4:1c:b9:eb:79:ca:32:a0:a8:2d:3d:9d:5b:f6:ec:f9:
         88:85:da:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:00:11 2025 by rpki-client on console.sobornost.net