Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/323830343a323232633a3a2f33322d3332203d3e20323634353936.roa
File:                     323830343a323232633a3a2f33322d3332203d3e20323634353936.roa (raw, json)
Hash identifier:          gISfXxqBU/leqiaZdS+4MXquTkxMfgyyZKbU9WY/D4s=
Subject key identifier:   34:ED:AA:6A:91:9E:D4:E2:CB:58:70:0C:24:FC:F1:C0:86:5F:5D:52
Certificate issuer:       /CN=D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7
Certificate serial:       2755AE2FE476CC514A85E1D118BEE22EC29A12E5
Authority key identifier: D8:3B:D8:1B:DC:0A:01:D1:AE:F1:AF:D4:0B:C6:A4:E7:2C:94:11:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/323830343a323232633a3a2f33322d3332203d3e20323634353936.roa
Signing time:             Thu 06 Mar 2025 18:33:28 +0000
ROA not before:           Thu 06 Mar 2025 18:28:28 +0000
ROA not after:            Thu 05 Mar 2026 18:33:28 +0000
asID:                     264596
IP address blocks:        2804:222c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.crl
                          rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:55:ae:2f:e4:76:cc:51:4a:85:e1:d1:18:be:e2:2e:c2:9a:12:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7
        Validity
            Not Before: Mar  6 18:28:28 2025 GMT
            Not After : Mar  5 18:33:28 2026 GMT
        Subject: CN=34EDAA6A919ED4E2CB58700C24FCF1C0865F5D52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:99:d5:2a:33:08:dc:d4:49:72:ac:89:b8:44:
                    c9:2b:e7:a0:b1:3c:5f:b1:70:10:af:c9:ae:c6:02:
                    41:61:4f:53:0e:50:6d:fd:da:b5:de:60:be:f2:67:
                    0e:3d:85:48:51:a2:d2:3c:9d:78:16:9b:b1:2d:5f:
                    99:ac:7f:6d:b5:2b:75:86:35:30:36:a2:27:00:d5:
                    ea:87:fa:34:32:74:37:f9:54:11:3f:96:f5:1a:13:
                    19:1a:24:eb:5b:b3:24:19:1d:63:2d:ef:66:e9:c1:
                    df:6e:c8:2e:ee:dd:99:f3:ed:be:0e:19:fc:8d:65:
                    d9:3d:66:47:58:67:fd:ca:23:cd:80:52:d9:b2:8c:
                    09:29:d8:4b:c4:bf:81:34:0b:e3:13:92:58:06:64:
                    be:92:b5:0a:98:74:f1:87:7d:9f:ed:73:7b:2f:6e:
                    44:52:b6:86:bc:44:16:03:d9:3a:d7:d6:fb:df:92:
                    ca:ae:6d:ad:62:20:90:a8:49:74:87:60:50:50:a9:
                    e4:bb:01:94:95:8b:8f:b0:4a:57:06:6a:5a:94:c7:
                    13:fb:0d:53:9c:a5:e4:59:e4:b3:9f:2d:a0:bb:fe:
                    c6:65:ce:fd:4d:cd:d5:54:28:eb:f9:20:b1:89:1e:
                    2d:8e:7c:79:30:4b:92:b6:7d:0c:26:7a:78:85:48:
                    f9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:ED:AA:6A:91:9E:D4:E2:CB:58:70:0C:24:FC:F1:C0:86:5F:5D:52
            X509v3 Authority Key Identifier:
                keyid:D8:3B:D8:1B:DC:0A:01:D1:AE:F1:AF:D4:0B:C6:A4:E7:2C:94:11:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/323830343a323232633a3a2f33322d3332203d3e20323634353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:222c::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:eb:2f:77:c6:b8:b9:ac:d0:a8:24:57:68:75:a2:a0:20:6f:
         9e:12:fb:2e:43:8d:c0:32:e4:e2:0f:30:d5:41:fa:88:be:b8:
         01:8d:40:73:ba:ac:d8:61:38:67:46:b9:15:64:4e:12:5d:42:
         51:f7:ac:bf:54:9a:c8:d2:90:d5:42:1a:db:54:01:0c:3e:26:
         ec:1e:89:00:87:85:1e:7b:68:a3:51:71:6e:a1:f1:56:5b:26:
         00:e5:bd:c5:b1:01:b4:d0:94:52:ed:c2:e3:b2:8c:b1:f1:be:
         af:04:2f:cc:44:42:80:09:cd:4e:56:c8:07:50:a5:5c:8b:88:
         94:78:a9:d3:8c:19:00:60:ce:23:5a:96:dc:be:03:58:b2:a6:
         55:a8:46:d0:6d:57:95:8b:86:53:6c:a3:f3:0e:51:36:62:f0:
         f4:15:e5:89:7b:a9:26:f8:17:14:48:3e:12:c2:ec:36:21:f0:
         77:65:b7:e6:95:d6:6c:1d:19:89:46:f6:84:3e:bb:0e:9d:b8:
         f9:51:29:d3:90:39:a7:82:d4:54:4a:c5:c1:3d:2a:87:ae:b3:
         9c:c4:ea:67:1b:89:73:4f:4e:95:85:e2:cb:20:7e:4f:ed:f4:
         8d:e0:20:2f:69:b1:cc:75:83:ab:70:7b:f1:72:d8:2b:5f:ad:
         91:a5:34:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:26 2025 by rpki-client on console.sobornost.net