Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/323830343a376136303a3a2f33322d3430203d3e20323731333637.roa
File:                     323830343a376136303a3a2f33322d3430203d3e20323731333637.roa (raw, json)
Hash identifier:          UsWEmfapjFwzOFUT9C/RUvzo75I4i0as5RuiYKUhEoc=
Subject key identifier:   CA:FC:F7:9A:0F:72:01:2B:06:B7:CE:3B:1F:3C:B8:1E:5D:C4:F4:65
Certificate issuer:       /CN=3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE
Certificate serial:       0603F22F771B7571382E2A7A351B8A2FA87CFFD3
Authority key identifier: 3A:BF:96:D1:8E:7E:05:A2:4E:DA:A1:17:D2:B9:E7:6A:07:FE:C5:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/323830343a376136303a3a2f33322d3430203d3e20323731333637.roa
Signing time:             Wed 05 Mar 2025 19:00:03 +0000
ROA not before:           Wed 05 Mar 2025 18:55:03 +0000
ROA not after:            Wed 04 Mar 2026 19:00:03 +0000
asID:                     271367
IP address blocks:        2804:7a60::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.crl
                          rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 11:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:03:f2:2f:77:1b:75:71:38:2e:2a:7a:35:1b:8a:2f:a8:7c:ff:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE
        Validity
            Not Before: Mar  5 18:55:03 2025 GMT
            Not After : Mar  4 19:00:03 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7e:20:78:c8:1e:83:2d:f3:96:0b:6b:04:f3:
                    8b:49:77:b6:a3:82:e9:76:35:8c:c8:e5:41:1f:99:
                    ff:aa:a5:ea:87:af:04:c5:d7:c4:fc:28:21:4f:1b:
                    e7:3b:d7:7a:2e:23:b9:67:4e:15:51:3f:1a:78:55:
                    1e:9b:f0:a8:5e:84:e7:41:39:2c:67:08:2a:f6:ca:
                    1d:0a:4a:c2:b4:a1:46:35:6b:b7:4c:b5:b3:df:f8:
                    25:fa:8c:65:b7:c0:21:d6:10:7e:03:ca:b6:b1:71:
                    5f:a1:b1:76:32:53:3d:90:aa:54:c6:5d:d0:7f:46:
                    36:9f:5d:54:8a:85:84:4b:51:e8:ab:50:4c:79:d9:
                    ee:ad:ec:76:89:83:a2:a5:f6:87:97:6e:89:31:8d:
                    62:5e:20:3e:89:7a:1a:3d:56:98:b8:c8:49:9b:32:
                    b9:8b:6d:8e:69:5d:88:d2:db:0e:12:cf:53:04:a3:
                    a2:36:a3:92:4d:14:e6:aa:0f:be:5e:5a:b7:02:14:
                    26:c5:3b:14:97:00:2b:59:6f:21:b6:d7:8f:24:36:
                    5e:eb:8b:72:db:80:aa:6c:fa:a7:53:1d:f4:6b:e9:
                    ab:c0:7c:c5:68:21:fb:01:de:2d:95:9f:f1:33:68:
                    d8:6f:f2:77:d7:fb:c5:0d:14:e6:c7:ef:a8:21:2e:
                    19:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:FC:F7:9A:0F:72:01:2B:06:B7:CE:3B:1F:3C:B8:1E:5D:C4:F4:65
            X509v3 Authority Key Identifier:
                keyid:3A:BF:96:D1:8E:7E:05:A2:4E:DA:A1:17:D2:B9:E7:6A:07:FE:C5:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/323830343a376136303a3a2f33322d3430203d3e20323731333637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a60::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:c6:46:af:da:0a:49:42:ad:39:6b:9b:e5:19:2d:45:58:19:
         42:31:f2:11:55:cb:5c:e8:15:4f:b7:7e:1a:11:cf:82:2f:a8:
         5a:ee:b3:fd:e5:94:c2:de:91:8b:9c:5e:e3:9d:47:46:7a:9b:
         f0:27:af:5c:f8:c2:36:89:68:7c:cf:72:df:5f:05:f6:8b:88:
         f5:1d:78:1e:49:64:95:3e:b2:a3:ce:dc:6e:e1:97:72:0d:73:
         1d:dc:f5:7c:9a:c2:7f:d0:fe:91:11:6a:f2:13:ba:63:40:38:
         17:91:8c:41:0c:ca:8e:59:58:b2:d4:3f:32:04:7f:30:5b:d6:
         ab:46:a1:1a:97:f5:10:6d:dd:31:36:0c:85:55:b0:a0:91:26:
         aa:14:5b:c2:f0:02:27:84:c6:fb:0a:30:69:7b:1a:b3:1b:e6:
         c9:82:6c:a0:44:1f:6f:1f:7e:ce:10:1a:e8:fb:38:00:5c:12:
         d2:d9:b7:46:ac:d7:28:53:03:9b:73:25:e9:73:8e:39:3d:cf:
         54:c7:da:8c:31:ac:b6:6b:1c:5d:dd:ee:5d:dc:0d:ab:77:c2:
         28:9c:fe:56:21:88:a8:57:43:e9:d9:5b:60:87:49:4f:bd:2c:
         07:0b:3c:19:f8:5d:e4:98:2b:30:3a:ab:c0:f5:f0:ef:ef:a5:
         1a:a5:51:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:20 2025 by rpki-client on console.sobornost.net