Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/323830343a363838633a3a2f33322d3332203d3e20323639373030.roa
File:                     323830343a363838633a3a2f33322d3332203d3e20323639373030.roa (raw, json)
Hash identifier:          BE5a1OUWgdP0GL1PgM4hDE06PyUsu1m0k9e5DxAhDGo=
Subject key identifier:   9B:0C:9C:AD:2B:54:F9:ED:9F:01:76:CD:D2:6B:74:02:EB:AB:42:5E
Certificate issuer:       /CN=8373C13408682E3BA48652A9BE590C5E4E4A0CFA
Certificate serial:       79CF198C9ABF3E57CE38D3341957883D8B7DE180
Authority key identifier: 83:73:C1:34:08:68:2E:3B:A4:86:52:A9:BE:59:0C:5E:4E:4A:0C:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/323830343a363838633a3a2f33322d3332203d3e20323639373030.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     269700
IP address blocks:        2804:688c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.crl
                          rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:cf:19:8c:9a:bf:3e:57:ce:38:d3:34:19:57:88:3d:8b:7d:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8373C13408682E3BA48652A9BE590C5E4E4A0CFA
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:73:85:0b:69:08:06:1d:3d:6e:84:7d:f2:40:
                    cf:df:17:7e:87:eb:cd:35:2a:db:97:31:c0:af:af:
                    32:e5:67:35:a6:00:0f:66:02:23:50:71:96:f8:db:
                    87:9a:4f:77:00:13:f3:3d:14:f6:f1:e5:87:9d:17:
                    77:63:e3:6a:1e:b0:55:cb:63:2b:d7:8a:a2:64:bd:
                    e7:4b:32:ef:1a:ca:0d:9c:a5:20:cd:25:5d:0e:19:
                    94:45:85:fc:7b:58:9a:82:d3:8f:fa:4c:cf:0c:d4:
                    c8:62:43:5c:bc:11:11:c6:06:57:5d:dd:01:d7:02:
                    dd:e6:2e:65:b6:5e:1c:4e:2f:f0:b9:fa:ae:46:c2:
                    6c:56:41:60:23:59:ff:e7:d1:6d:cf:ad:e6:4e:9e:
                    b3:d0:db:bd:cf:45:84:56:59:e3:41:9b:8c:59:aa:
                    cd:41:23:87:96:01:ca:39:15:67:67:d4:45:92:de:
                    62:58:c0:eb:4d:64:b2:17:a8:52:8e:38:10:30:de:
                    19:30:3f:51:2d:11:f0:8e:aa:4d:81:c3:ef:50:d3:
                    27:18:03:f9:48:1d:c2:11:54:00:ad:07:5b:69:77:
                    a4:7c:ae:f9:8f:39:de:65:b3:e9:b2:14:7b:6e:1c:
                    28:24:0b:92:d0:a7:4c:4b:00:f8:12:25:64:85:dd:
                    20:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:0C:9C:AD:2B:54:F9:ED:9F:01:76:CD:D2:6B:74:02:EB:AB:42:5E
            X509v3 Authority Key Identifier:
                keyid:83:73:C1:34:08:68:2E:3B:A4:86:52:A9:BE:59:0C:5E:4E:4A:0C:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/323830343a363838633a3a2f33322d3332203d3e20323639373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:688c::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:ee:28:04:4e:eb:ec:e7:29:a6:f8:cc:b5:04:9b:69:1a:69:
         90:eb:e4:d4:c5:83:87:07:92:95:16:46:9e:ef:76:47:73:25:
         30:36:df:c7:ac:39:72:7d:bc:fb:aa:fb:f4:ae:82:e3:b2:6d:
         e9:b5:ae:24:f5:3b:e3:88:63:bf:aa:18:74:f7:a3:4b:89:78:
         6e:29:e0:cb:33:8e:91:f6:8e:65:95:b9:62:fa:00:0f:63:c4:
         d8:8a:b3:ff:f2:0c:a1:c8:81:5b:37:24:7e:e4:4a:ed:1a:31:
         bc:d4:1a:2d:a2:01:10:9d:cd:7f:2a:95:59:2a:f4:4c:d0:71:
         87:c8:8b:aa:3c:f7:42:c2:a9:1d:ab:01:f6:57:c0:81:b1:95:
         f7:a1:62:84:67:8f:ed:39:6d:9f:55:13:3d:39:4d:f3:91:07:
         be:50:cd:52:ef:08:3c:bb:69:41:3c:09:53:99:9f:5c:d7:e8:
         d1:81:29:73:44:89:db:c3:bf:1b:81:be:d2:87:56:fd:7b:fd:
         97:f0:31:64:3d:eb:1e:16:fb:8d:7c:2a:a2:1a:6b:5d:62:00:
         a8:0d:50:40:d7:8d:49:9b:0f:3e:67:e3:44:72:01:c4:7c:a2:
         48:e0:5d:6f:48:86:a5:f0:a6:93:a1:c6:df:fb:a2:a8:a4:7e:
         37:3f:88:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:25 2025 by rpki-client on console.sobornost.net