Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/323830343a313239303a633030303a3a2f33342d3334203d3e20323633343834.roa
File:                     323830343a313239303a633030303a3a2f33342d3334203d3e20323633343834.roa (raw, json)
Hash identifier:          NFjRCMFSUVUc9MkWwbTZGdx52plPw0g0q2BAc/waefI=
Subject key identifier:   05:C7:79:53:F7:7C:1E:A7:F5:72:D5:7A:14:C6:80:B0:85:CE:F4:0E
Certificate issuer:       /CN=777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD
Certificate serial:       60463E00A3E104860384D72FF6B7DB1CA2275029
Authority key identifier: 77:7B:D5:D5:BE:4C:99:13:C3:CB:81:E6:7F:E7:7C:31:43:C1:C1:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/323830343a313239303a633030303a3a2f33342d3334203d3e20323633343834.roa
Signing time:             Thu 03 Apr 2025 13:48:34 +0000
ROA not before:           Thu 03 Apr 2025 13:43:34 +0000
ROA not after:            Thu 02 Apr 2026 13:48:34 +0000
asID:                     263484
IP address blocks:        2804:1290:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.crl
                          rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:46:3e:00:a3:e1:04:86:03:84:d7:2f:f6:b7:db:1c:a2:27:50:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD
        Validity
            Not Before: Apr  3 13:43:34 2025 GMT
            Not After : Apr  2 13:48:34 2026 GMT
        Subject: CN=05C77953F77C1EA7F572D57A14C680B085CEF40E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a9:25:51:28:ec:f8:27:94:af:33:c8:76:5a:
                    70:75:97:69:6d:d7:eb:64:75:80:75:e4:c9:a6:ca:
                    32:cd:56:da:d2:80:33:3b:40:36:af:cb:64:8a:43:
                    05:88:1d:07:8f:ef:0a:81:ee:2c:db:58:85:cf:05:
                    17:66:83:17:be:a8:f3:c4:a0:57:79:af:69:39:33:
                    ce:01:97:d4:de:74:1a:0a:14:53:5f:26:d3:e2:08:
                    92:68:9c:b0:4f:27:47:f8:20:34:3b:0e:5e:30:93:
                    85:d6:ad:30:ed:cd:55:c2:06:cd:5f:eb:69:3e:90:
                    87:a1:93:1a:0f:63:50:4e:45:f2:9f:07:9a:d4:9c:
                    76:1f:57:ef:b3:d5:41:3e:5b:83:da:ea:a6:01:85:
                    e1:e0:0c:93:e4:eb:33:0a:e7:76:6f:65:d3:a2:17:
                    34:31:3f:a6:c1:b5:9e:25:53:44:3f:be:ad:26:97:
                    9b:f5:42:1a:d4:2c:88:9b:13:f1:3b:9a:43:33:24:
                    66:fb:88:40:22:58:a3:a2:ec:52:27:e2:8b:0d:33:
                    5b:ef:1a:a4:e4:f4:ff:19:b6:23:f6:9a:33:52:79:
                    65:fd:a4:5f:f8:0d:ac:db:29:f3:e0:36:4d:06:60:
                    de:3b:62:f0:e0:51:5e:bc:db:c6:d2:9d:23:f2:78:
                    12:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C7:79:53:F7:7C:1E:A7:F5:72:D5:7A:14:C6:80:B0:85:CE:F4:0E
            X509v3 Authority Key Identifier:
                keyid:77:7B:D5:D5:BE:4C:99:13:C3:CB:81:E6:7F:E7:7C:31:43:C1:C1:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/323830343a313239303a633030303a3a2f33342d3334203d3e20323633343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1290:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         2d:b2:1d:6d:4e:cd:50:35:68:c8:77:96:78:61:a7:58:ca:fe:
         75:f0:bb:47:5d:79:15:1f:ea:c0:9e:01:0e:eb:6e:b0:81:5c:
         3c:1c:b4:88:fb:8a:6d:a2:7a:39:56:65:33:53:87:65:5e:4c:
         1b:ed:bd:4f:39:7f:d5:d5:3c:18:e3:d8:3b:b6:6c:d4:64:11:
         d4:9d:59:71:1c:d3:65:e6:38:7a:8e:2c:58:81:18:d1:9e:39:
         bd:ac:16:2f:15:17:dc:9a:39:38:38:59:ed:a3:dc:9b:ac:5b:
         4a:53:25:9a:8b:cb:9a:f1:5d:a0:c1:31:1f:22:d1:24:e0:3c:
         fd:a9:29:af:d6:53:e0:e9:25:2e:7b:1d:26:f0:cb:54:67:48:
         48:4d:94:75:81:14:29:78:e9:c6:7e:e8:af:ba:32:2c:4b:cf:
         50:94:ee:6d:55:0f:24:24:98:dd:bd:a4:19:b2:82:0d:0a:79:
         5f:63:63:13:69:cf:7f:c8:44:bd:89:e0:fd:d0:06:36:d9:d1:
         8e:40:50:1d:bf:14:80:55:39:38:2b:65:48:ce:91:e1:96:60:
         f5:bb:de:07:71:19:e4:90:04:99:33:ea:46:46:b7:0c:17:bd:
         7d:b4:db:66:be:08:61:64:6c:c4:40:44:db:16:f0:da:4d:42:
         ec:34:c1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:25 2025 by rpki-client on console.sobornost.net