Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AkhBG8TuBGr4Edr5BZc9A5w1s4FXT2vCFsTrFjTHyFew/1/323830343a323963633a3a2f33322d3332203d3e20323634303335.roa
File:                     323830343a323963633a3a2f33322d3332203d3e20323634303335.roa (raw, json)
Hash identifier:          Bjaz4rYg353nZBXLTWYldaNaFO6h0rx9QDE+thoeUok=
Subject key identifier:   08:6A:27:D9:95:BA:47:7C:38:88:AA:FC:3F:FF:B3:82:86:D9:71:C0
Certificate issuer:       /CN=5462822197AD1B709CF7359BB22855D78C54671B
Certificate serial:       71ACE9B43E1B99595BAD92CEDB65A56E09551008
Authority key identifier: 54:62:82:21:97:AD:1B:70:9C:F7:35:9B:B2:28:55:D7:8C:54:67:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5462822197AD1B709CF7359BB22855D78C54671B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AkhBG8TuBGr4Edr5BZc9A5w1s4FXT2vCFsTrFjTHyFew/1/323830343a323963633a3a2f33322d3332203d3e20323634303335.roa
Signing time:             Thu 06 Mar 2025 16:13:50 +0000
ROA not before:           Thu 06 Mar 2025 16:08:50 +0000
ROA not after:            Thu 05 Mar 2026 16:13:50 +0000
asID:                     264035
IP address blocks:        2804:29cc::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AkhBG8TuBGr4Edr5BZc9A5w1s4FXT2vCFsTrFjTHyFew/1/5462822197AD1B709CF7359BB22855D78C54671B.crl
                          rsync://rpki-repo.registro.br/repo/AkhBG8TuBGr4Edr5BZc9A5w1s4FXT2vCFsTrFjTHyFew/1/5462822197AD1B709CF7359BB22855D78C54671B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5462822197AD1B709CF7359BB22855D78C54671B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 13:39:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:ac:e9:b4:3e:1b:99:59:5b:ad:92:ce:db:65:a5:6e:09:55:10:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5462822197AD1B709CF7359BB22855D78C54671B
        Validity
            Not Before: Mar  6 16:08:50 2025 GMT
            Not After : Mar  5 16:13:50 2026 GMT
        Subject: CN=086A27D995BA477C3888AAFC3FFFB38286D971C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f9:39:de:36:99:32:42:da:9d:58:c4:13:d6:
                    7f:58:46:55:42:be:f9:07:82:60:53:b9:ff:0e:95:
                    7c:bc:e1:99:03:f6:35:b7:c8:ef:aa:c3:2b:cb:55:
                    b5:fe:e5:83:ad:eb:5e:af:28:35:2b:59:48:67:e9:
                    a5:ed:f1:eb:e2:a4:ed:cf:2b:4b:fd:4a:34:ba:43:
                    8f:ce:f8:9b:1c:73:f5:06:62:32:63:e6:3f:13:b9:
                    0a:c3:21:4a:65:5b:66:b0:18:1d:10:e0:e0:9e:6f:
                    d6:bc:c9:40:12:c3:ef:bd:77:2c:3b:7c:c8:d6:fc:
                    2f:e2:5e:6b:73:86:82:ed:d5:57:d3:cc:21:7e:69:
                    aa:82:f4:d0:7f:0b:a7:54:eb:c0:ba:33:69:79:2a:
                    82:6b:a0:be:9b:d1:45:f7:77:21:e7:05:2b:16:95:
                    36:96:bc:32:88:eb:b9:77:7d:7c:da:67:e2:24:f3:
                    fe:00:4a:6e:d6:93:e2:6b:08:28:75:9e:ba:84:52:
                    5a:35:a1:73:a2:44:9b:19:f7:cb:dc:df:17:3e:68:
                    8f:70:38:16:b0:ee:73:92:1f:43:cb:ab:78:91:46:
                    92:ae:98:00:63:72:fe:d6:04:92:e7:98:8c:9d:39:
                    4b:ad:30:d3:88:fe:2e:04:bc:22:0e:51:fe:fc:6a:
                    a9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:6A:27:D9:95:BA:47:7C:38:88:AA:FC:3F:FF:B3:82:86:D9:71:C0
            X509v3 Authority Key Identifier:
                keyid:54:62:82:21:97:AD:1B:70:9C:F7:35:9B:B2:28:55:D7:8C:54:67:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AkhBG8TuBGr4Edr5BZc9A5w1s4FXT2vCFsTrFjTHyFew/1/5462822197AD1B709CF7359BB22855D78C54671B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5462822197AD1B709CF7359BB22855D78C54671B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AkhBG8TuBGr4Edr5BZc9A5w1s4FXT2vCFsTrFjTHyFew/1/323830343a323963633a3a2f33322d3332203d3e20323634303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:29cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:94:c1:a1:7f:76:0d:52:21:60:26:16:d0:91:2c:05:68:60:
         d1:dc:a1:47:6e:49:63:9d:71:45:2a:75:3d:39:4f:bf:d4:5d:
         38:1f:e4:2f:37:13:22:4f:3a:63:b3:69:eb:c6:1c:f3:56:8c:
         ec:3a:f3:52:d7:d8:ba:79:47:ed:12:bd:8d:a7:c2:32:57:37:
         9a:67:5c:6d:92:9b:14:ca:b6:5e:67:e8:74:fc:a9:d0:49:aa:
         4b:0c:81:7a:c1:9b:ec:92:23:d0:a5:11:fc:d6:fd:07:05:f7:
         d6:59:0a:96:13:4e:fd:71:78:95:41:98:ed:8f:6c:52:f3:d7:
         f9:d8:b4:84:7c:ca:e2:d2:b2:fc:c0:7a:13:76:17:2c:a5:be:
         00:00:65:36:e8:12:50:97:eb:fd:14:2a:28:cb:c4:78:e2:12:
         0f:6c:b7:a8:e2:21:10:11:1d:ff:57:33:64:34:1d:5d:df:ec:
         dc:81:06:15:e3:1a:6f:b2:34:94:05:17:e6:64:cc:4c:0d:15:
         af:3f:1c:df:19:93:a7:0b:47:d2:ab:60:d7:f1:60:ce:41:02:
         7d:c0:b6:f6:ad:48:ce:cb:20:4e:4a:f0:5d:e5:1a:37:7a:ed:
         b6:63:7c:6a:3f:2c:4f:f0:e8:d1:57:04:37:9b:29:6c:19:cc:
         e2:77:c9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:50:45 2025 by rpki-client on console.sobornost.net