Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BPMLQBaerhjg1q5JujubsXXAYFy9kXGRL5MUi4CqkTcf/2/323830343a343136343a3a2f33322d313238203d3e20323637343330.roa
File:                     323830343a343136343a3a2f33322d313238203d3e20323637343330.roa (raw, json)
Hash identifier:          9OEETcsW8OKuEuSLZEG6CKxbZskLQILaqPSt9oi5DG8=
Subject key identifier:   59:F0:A9:0C:1D:C4:FD:BC:A5:A6:9C:67:57:40:D3:2C:E4:F0:47:C2
Certificate issuer:       /CN=83C90E15FAD82473867D38C030D3F41E1192F5A2
Certificate serial:       0832492C9B4210E541481897E1052A0361701AE0
Authority key identifier: 83:C9:0E:15:FA:D8:24:73:86:7D:38:C0:30:D3:F4:1E:11:92:F5:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83C90E15FAD82473867D38C030D3F41E1192F5A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BPMLQBaerhjg1q5JujubsXXAYFy9kXGRL5MUi4CqkTcf/2/323830343a343136343a3a2f33322d313238203d3e20323637343330.roa
Signing time:             Thu 24 Apr 2025 09:48:26 +0000
ROA not before:           Thu 24 Apr 2025 09:43:26 +0000
ROA not after:            Thu 23 Apr 2026 09:48:26 +0000
asID:                     267430
IP address blocks:        2804:4164::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BPMLQBaerhjg1q5JujubsXXAYFy9kXGRL5MUi4CqkTcf/2/83C90E15FAD82473867D38C030D3F41E1192F5A2.crl
                          rsync://rpki-repo.registro.br/repo/BPMLQBaerhjg1q5JujubsXXAYFy9kXGRL5MUi4CqkTcf/2/83C90E15FAD82473867D38C030D3F41E1192F5A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83C90E15FAD82473867D38C030D3F41E1192F5A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 06:17:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:32:49:2c:9b:42:10:e5:41:48:18:97:e1:05:2a:03:61:70:1a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83C90E15FAD82473867D38C030D3F41E1192F5A2
        Validity
            Not Before: Apr 24 09:43:26 2025 GMT
            Not After : Apr 23 09:48:26 2026 GMT
        Subject: CN=59F0A90C1DC4FDBCA5A69C675740D32CE4F047C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:75:52:fe:52:09:20:01:16:fc:87:dd:8b:f4:
                    be:f0:30:58:77:29:ee:52:1b:71:01:77:d8:a7:27:
                    7e:7e:ed:b3:8d:69:de:a6:5e:a3:ff:94:ae:3c:0e:
                    b6:c9:72:c6:47:c9:80:8c:47:6f:30:8b:a6:d1:65:
                    2a:51:7f:f0:95:b9:ae:f6:83:ff:0e:db:e7:e2:15:
                    9d:90:c8:97:f3:d7:82:53:59:1b:f1:19:ba:63:67:
                    00:a2:3d:71:8d:36:14:67:91:eb:92:dc:d7:10:62:
                    40:dd:13:6d:84:ad:43:ef:3a:35:ae:d4:9c:f0:72:
                    31:ef:8a:0b:e2:90:e0:c1:22:01:bf:80:88:4a:1b:
                    51:e2:1c:db:eb:6d:68:63:dc:be:f6:a7:32:5a:0e:
                    6b:59:d2:0e:fc:a8:dd:cd:2f:48:c4:0f:b6:e7:7e:
                    64:11:f7:d8:d8:d3:9c:d8:fc:74:f4:6a:ab:83:59:
                    2b:28:10:3c:c1:48:46:93:60:f3:39:e1:ef:39:89:
                    08:fe:a0:1a:47:ec:16:3c:49:df:66:42:85:49:72:
                    ca:c0:b3:51:3f:66:1f:9e:b2:dc:60:14:9b:0e:c5:
                    bc:11:2e:bc:50:16:64:b7:09:d0:5e:04:0f:05:44:
                    47:1c:42:93:87:88:ab:71:ac:af:4b:86:e4:49:68:
                    55:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F0:A9:0C:1D:C4:FD:BC:A5:A6:9C:67:57:40:D3:2C:E4:F0:47:C2
            X509v3 Authority Key Identifier:
                keyid:83:C9:0E:15:FA:D8:24:73:86:7D:38:C0:30:D3:F4:1E:11:92:F5:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BPMLQBaerhjg1q5JujubsXXAYFy9kXGRL5MUi4CqkTcf/2/83C90E15FAD82473867D38C030D3F41E1192F5A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83C90E15FAD82473867D38C030D3F41E1192F5A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BPMLQBaerhjg1q5JujubsXXAYFy9kXGRL5MUi4CqkTcf/2/323830343a343136343a3a2f33322d313238203d3e20323637343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4164::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:b8:cb:63:2f:e8:b2:99:10:23:34:bd:0a:a5:c9:47:25:d4:
         3c:70:be:f9:c0:29:e8:5b:f3:7a:89:6f:4f:82:04:09:38:3e:
         88:2c:a8:14:48:d8:31:ef:8f:5c:ba:be:8d:c8:bc:31:d2:81:
         78:ba:e2:0d:27:53:e1:d2:ac:ca:35:d0:aa:1a:1f:93:5b:7c:
         24:7b:65:f4:59:26:41:8c:3b:00:52:97:05:1a:da:ac:ad:1e:
         95:4c:2c:b9:93:a3:ad:b2:76:fd:95:d3:d3:42:7b:51:a0:3b:
         03:b9:bc:52:ba:48:45:f4:5a:45:73:7a:f1:99:3d:c3:6d:51:
         a7:73:b3:d3:a0:cd:fa:a3:c9:8b:d9:21:4a:29:cc:28:1b:35:
         88:6c:ca:43:e1:40:b3:7c:29:30:29:2f:8f:22:0f:08:4c:87:
         b8:03:dc:eb:84:e1:80:4e:8b:25:26:c2:5b:c8:f8:e6:f0:44:
         60:5d:85:f8:d5:48:7e:b0:20:fe:72:20:0a:dd:af:8d:bb:1b:
         16:b5:1b:fe:93:e3:23:75:90:45:d2:41:e9:97:01:b7:9f:25:
         e1:8e:40:6e:fa:56:3b:81:09:61:7a:62:80:b6:ed:3f:37:8e:
         aa:1e:fc:5d:8d:d5:d9:4a:c6:bd:66:6a:e4:35:39:c8:9c:49:
         95:99:2f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:22:02 2025 by rpki-client on console.sobornost.net