Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/1/323830343a353831383a3a2f33332d3334203d3e20323638313036.roa
File:                     323830343a353831383a3a2f33332d3334203d3e20323638313036.roa (raw, json)
Hash identifier:          9Qd0HCvUJwRFtv8BW7GOfuskXH0ApKQ6nwZGuKnI7WQ=
Subject key identifier:   03:19:73:5D:61:52:EC:29:56:1F:3E:AF:ED:13:49:7E:E7:2F:11:48
Certificate issuer:       /CN=1771F2F1D3DC9A42A40D80A53EABBA062A2A1077
Certificate serial:       08A1FD1E9494BD784203D5B21854235BC09D6439
Authority key identifier: 17:71:F2:F1:D3:DC:9A:42:A4:0D:80:A5:3E:AB:BA:06:2A:2A:10:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1771F2F1D3DC9A42A40D80A53EABBA062A2A1077.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/1/323830343a353831383a3a2f33332d3334203d3e20323638313036.roa
Signing time:             Wed 05 Mar 2025 22:33:05 +0000
ROA not before:           Wed 05 Mar 2025 22:28:05 +0000
ROA not after:            Wed 04 Mar 2026 22:33:05 +0000
asID:                     268106
IP address blocks:        2804:5818::/33 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/1/1771F2F1D3DC9A42A40D80A53EABBA062A2A1077.crl
                          rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/1/1771F2F1D3DC9A42A40D80A53EABBA062A2A1077.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1771F2F1D3DC9A42A40D80A53EABBA062A2A1077.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:a1:fd:1e:94:94:bd:78:42:03:d5:b2:18:54:23:5b:c0:9d:64:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1771F2F1D3DC9A42A40D80A53EABBA062A2A1077
        Validity
            Not Before: Mar  5 22:28:05 2025 GMT
            Not After : Mar  4 22:33:05 2026 GMT
        Subject: CN=0319735D6152EC29561F3EAFED13497EE72F1148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1f:3a:f1:6e:1d:f4:79:ec:dd:b4:2a:14:28:
                    20:da:fb:62:f0:b5:76:48:29:96:9b:69:9c:13:ee:
                    76:2d:7d:9f:05:03:d5:20:c0:d7:1a:a6:ec:ed:d2:
                    31:c9:4a:84:73:b8:50:ed:d8:94:b8:bb:01:35:28:
                    13:44:f7:e0:d7:41:1d:89:5d:f6:18:2a:ac:de:bb:
                    ac:58:7a:5c:53:a2:3f:c2:8f:00:1e:32:9e:f6:7a:
                    f4:c0:4e:e0:c1:ce:84:fc:43:71:b1:23:da:48:45:
                    a1:f1:ba:35:30:cd:25:d0:10:53:a4:3b:4d:15:12:
                    96:d8:48:2b:5f:af:b3:a6:6a:04:c2:77:70:2b:f2:
                    2b:af:77:43:01:77:d4:25:d6:81:77:a8:26:88:86:
                    56:65:8e:c6:35:ff:73:f3:01:ee:d8:e8:ce:55:27:
                    74:f2:07:40:40:6a:96:25:5e:e6:f0:2c:8f:26:3d:
                    c9:cf:b5:44:69:a6:1f:c6:03:4f:63:2e:08:8d:bb:
                    fc:8a:db:0e:e6:a6:df:2e:12:fe:8e:aa:74:2c:44:
                    9f:89:c8:ec:ca:76:01:b0:5e:7d:eb:d3:85:b6:4a:
                    de:2f:4c:b2:51:4a:8d:e9:3b:06:b1:7b:25:57:27:
                    46:ed:88:56:15:6c:46:86:eb:50:eb:30:03:9f:0b:
                    cf:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:19:73:5D:61:52:EC:29:56:1F:3E:AF:ED:13:49:7E:E7:2F:11:48
            X509v3 Authority Key Identifier:
                keyid:17:71:F2:F1:D3:DC:9A:42:A4:0D:80:A5:3E:AB:BA:06:2A:2A:10:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/1/1771F2F1D3DC9A42A40D80A53EABBA062A2A1077.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1771F2F1D3DC9A42A40D80A53EABBA062A2A1077.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/1/323830343a353831383a3a2f33332d3334203d3e20323638313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5818::/33

    Signature Algorithm: sha256WithRSAEncryption
         8b:9d:01:8b:e9:40:6f:55:f1:b4:cc:70:3f:e9:00:5f:da:06:
         e5:7f:d6:a9:c7:2e:e0:36:17:3e:82:cc:38:91:17:6f:d7:8e:
         88:5d:55:10:7b:e6:74:ad:e4:6a:e3:35:39:4f:3e:90:12:82:
         7c:d4:28:c3:4a:f0:a8:05:40:99:5e:b0:12:5a:da:61:37:39:
         86:a5:87:3e:a7:cf:1e:c8:d8:94:fd:15:bd:7e:bc:6e:d6:27:
         b4:11:db:e8:9e:79:72:62:8b:94:f7:a8:b6:11:6f:c6:c7:a1:
         f5:22:09:9f:ad:4c:6e:dc:2a:0f:3c:18:7b:3a:5a:dc:4e:a1:
         c4:2e:26:58:8a:22:ae:ec:11:82:bf:52:6d:b0:c2:fb:e1:98:
         4c:bc:97:e7:c4:7f:51:f6:5c:db:a0:8c:d5:78:f4:e8:84:21:
         aa:b8:5e:68:fd:61:36:1c:97:64:d1:2f:36:3d:16:fd:e2:b3:
         b4:7f:97:83:1e:8c:1a:6e:cc:25:cd:81:84:2d:63:38:e6:10:
         73:46:e2:62:18:cb:8e:13:83:4c:43:73:ac:cc:49:c0:91:30:
         85:b3:99:3b:86:fb:51:51:fa:f2:93:cc:4a:79:35:dd:d5:4c:
         2e:1e:dd:27:9b:ca:eb:61:98:cf:6e:a2:2a:71:47:c9:5f:0a:
         ed:d3:ee:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:40:42 2025 by rpki-client on console.sobornost.net