Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/0/323830343a363230633a3a2f33322d3334203d3e203238323235.roa
File:                     323830343a363230633a3a2f33322d3334203d3e203238323235.roa (raw, json)
Hash identifier:          pb/l3KSMWM3wtGuNvxyMzdnvIMAr9lJCsp8BMQwS6iQ=
Subject key identifier:   B6:9D:AA:E8:0F:B9:AC:5B:C6:6F:F4:90:59:DC:DC:7D:3B:58:B0:5B
Certificate issuer:       /CN=EEE7ECD0FACEDB5728224B1A1ED60D889F673104
Certificate serial:       4C36174A7C1A9469A1709F41C03B25B542258662
Authority key identifier: EE:E7:EC:D0:FA:CE:DB:57:28:22:4B:1A:1E:D6:0D:88:9F:67:31:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEE7ECD0FACEDB5728224B1A1ED60D889F673104.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/0/323830343a363230633a3a2f33322d3334203d3e203238323235.roa
Signing time:             Tue 15 Apr 2025 13:20:49 +0000
ROA not before:           Tue 15 Apr 2025 13:15:49 +0000
ROA not after:            Tue 14 Apr 2026 13:20:49 +0000
asID:                     28225
IP address blocks:        2804:620c::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/0/EEE7ECD0FACEDB5728224B1A1ED60D889F673104.crl
                          rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/0/EEE7ECD0FACEDB5728224B1A1ED60D889F673104.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEE7ECD0FACEDB5728224B1A1ED60D889F673104.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 11:41:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:36:17:4a:7c:1a:94:69:a1:70:9f:41:c0:3b:25:b5:42:25:86:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEE7ECD0FACEDB5728224B1A1ED60D889F673104
        Validity
            Not Before: Apr 15 13:15:49 2025 GMT
            Not After : Apr 14 13:20:49 2026 GMT
        Subject: CN=B69DAAE80FB9AC5BC66FF49059DCDC7D3B58B05B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:26:2a:8c:b2:7e:c2:5c:8a:3d:8b:5e:69:0b:
                    cb:84:a7:0a:7f:57:a9:43:9c:fd:0c:1b:4c:05:78:
                    4d:b7:2d:38:fc:27:4d:45:11:46:c4:57:c1:b2:67:
                    2d:fc:5a:73:94:93:eb:6e:31:fd:3f:30:5b:00:7f:
                    b1:fc:35:5e:66:8a:96:11:f9:f7:93:c2:1f:08:dd:
                    86:98:5b:64:f8:48:f2:67:82:bb:44:53:6a:77:2b:
                    4a:a3:08:f8:b3:73:2b:50:c5:83:46:15:c2:b3:61:
                    9a:49:27:c0:37:a8:01:cb:55:93:6e:1a:0a:3b:b3:
                    9e:b0:3a:2c:a6:e8:ee:f1:d6:7c:c5:86:f3:44:86:
                    fb:67:32:c2:a4:1a:5e:4f:28:1d:5d:90:7f:34:1d:
                    3a:b0:ff:10:07:96:b0:36:d7:51:2e:dc:48:c7:bd:
                    ab:7b:f4:06:fd:0d:2a:2e:be:17:02:01:f4:41:e5:
                    78:d6:49:74:ca:75:84:28:77:ec:39:9c:c2:61:4f:
                    f4:ca:f9:86:37:34:28:96:8d:d0:07:0d:cf:ba:b1:
                    53:d6:76:96:3f:33:bf:92:d4:1b:82:98:b8:c7:a8:
                    ce:6a:30:6f:0d:6c:ae:93:ec:f6:4c:a5:3c:61:5d:
                    2e:b3:97:02:2e:ea:01:3c:00:db:ec:84:f4:8f:a6:
                    ea:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:9D:AA:E8:0F:B9:AC:5B:C6:6F:F4:90:59:DC:DC:7D:3B:58:B0:5B
            X509v3 Authority Key Identifier:
                keyid:EE:E7:EC:D0:FA:CE:DB:57:28:22:4B:1A:1E:D6:0D:88:9F:67:31:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/0/EEE7ECD0FACEDB5728224B1A1ED60D889F673104.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEE7ECD0FACEDB5728224B1A1ED60D889F673104.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/0/323830343a363230633a3a2f33322d3334203d3e203238323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:620c::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:65:00:b2:63:27:7c:f0:10:36:04:ad:cf:d0:e8:e8:4c:36:
         24:21:b0:07:da:27:3c:ac:bb:77:ef:67:45:97:79:64:a3:0c:
         9e:bc:96:8a:12:63:aa:c1:73:f3:c1:86:ad:ce:6d:1a:c3:58:
         fe:a6:dd:32:08:9f:05:d5:a8:10:12:c9:6d:fd:ff:a5:2d:4d:
         0d:90:bf:f1:bd:ae:dd:2c:86:20:1f:8b:9e:8a:9b:f2:db:41:
         a4:99:ba:3d:bc:2f:00:2b:d2:db:a2:94:5a:1a:72:c7:9e:7e:
         37:1e:8a:03:eb:0c:4c:c8:8d:2c:70:78:53:bb:81:3c:4c:37:
         5b:f8:5c:37:1d:3a:d9:f7:cc:3d:3d:ac:bb:1a:2d:a3:f9:a7:
         e8:2f:54:a2:52:d2:f5:ce:72:82:2a:04:d2:3e:bf:36:ce:38:
         42:9c:b8:f1:bd:cf:a8:23:da:72:a9:9e:d8:27:88:a8:be:4d:
         5b:c5:f8:cf:27:c1:a7:5b:40:1c:4f:e8:82:b9:fa:b0:7e:9c:
         a9:07:7e:e6:9a:90:77:17:8f:34:c7:52:91:2a:1d:1d:fa:11:
         d1:c2:b9:54:99:08:5b:09:70:9d:86:0a:60:78:27:e9:b4:b0:
         cf:2e:4e:1d:53:42:45:59:fb:b3:50:e3:d7:d8:eb:70:da:38:
         a5:01:32:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:04:58 2025 by rpki-client on console.sobornost.net