Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/0/323830343a373163343a3a2f33322d3438203d3e20323730383130.roa
File:                     323830343a373163343a3a2f33322d3438203d3e20323730383130.roa (raw, json)
Hash identifier:          aOgKcvT2Rk2r8nMhbEWP5GSrE4NL7BcnyrCNG8KO7BE=
Subject key identifier:   AE:B2:8F:08:5A:11:53:B9:56:9D:55:44:23:06:3A:D0:AC:71:08:40
Certificate issuer:       /CN=B94000B22033682A1205F93C185BD01DF4C1083A
Certificate serial:       0E5328DD8C846CC1AE586C56E1B7672D32512597
Authority key identifier: B9:40:00:B2:20:33:68:2A:12:05:F9:3C:18:5B:D0:1D:F4:C1:08:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B94000B22033682A1205F93C185BD01DF4C1083A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/0/323830343a373163343a3a2f33322d3438203d3e20323730383130.roa
Signing time:             Tue 08 Apr 2025 13:08:37 +0000
ROA not before:           Tue 08 Apr 2025 13:03:37 +0000
ROA not after:            Tue 07 Apr 2026 13:08:37 +0000
asID:                     270810
IP address blocks:        2804:71c4::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/0/B94000B22033682A1205F93C185BD01DF4C1083A.crl
                          rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/0/B94000B22033682A1205F93C185BD01DF4C1083A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B94000B22033682A1205F93C185BD01DF4C1083A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:32:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:53:28:dd:8c:84:6c:c1:ae:58:6c:56:e1:b7:67:2d:32:51:25:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B94000B22033682A1205F93C185BD01DF4C1083A
        Validity
            Not Before: Apr  8 13:03:37 2025 GMT
            Not After : Apr  7 13:08:37 2026 GMT
        Subject: CN=AEB28F085A1153B9569D554423063AD0AC710840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ee:2e:9c:8a:75:93:23:bb:79:70:15:c2:f3:
                    77:60:c2:e1:09:7e:61:60:c7:15:06:a9:2e:8d:ca:
                    a7:e7:25:35:3a:64:d0:fb:16:8b:b8:8e:be:50:ae:
                    4b:91:fb:8c:17:d0:00:b6:81:e4:c6:27:02:2e:90:
                    84:1e:ac:ee:96:31:97:ba:dc:5e:67:0a:7c:a5:92:
                    c1:f4:3e:1c:c8:29:e2:71:23:e7:79:fc:4e:fc:b2:
                    88:68:71:a7:0c:eb:3c:79:c9:51:fa:15:fa:23:8e:
                    dd:f4:1b:13:76:4d:e4:8e:89:75:88:1f:b9:89:d0:
                    d6:90:ef:17:a9:30:59:48:20:16:a9:72:c1:12:97:
                    d7:50:37:4a:5a:8c:c2:51:56:6f:5b:8e:92:87:dd:
                    f6:52:6e:68:7e:8e:d3:b1:6a:0b:f8:84:a0:92:b0:
                    10:81:8f:05:ed:d5:6e:7d:c4:93:71:7c:55:bb:d8:
                    e0:43:3e:87:18:8b:d6:2e:dc:bf:6c:83:49:a9:4d:
                    9b:0d:fd:5e:a2:29:b0:ec:3c:ca:73:63:80:61:de:
                    45:a8:2c:18:3f:d7:a7:51:a5:b2:46:58:a1:3e:1c:
                    6d:ba:7a:d2:aa:53:2b:40:29:51:cb:c7:e5:d9:80:
                    4a:f5:92:02:bd:18:97:2f:ac:ef:30:97:b1:df:4c:
                    04:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B2:8F:08:5A:11:53:B9:56:9D:55:44:23:06:3A:D0:AC:71:08:40
            X509v3 Authority Key Identifier:
                keyid:B9:40:00:B2:20:33:68:2A:12:05:F9:3C:18:5B:D0:1D:F4:C1:08:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/0/B94000B22033682A1205F93C185BD01DF4C1083A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B94000B22033682A1205F93C185BD01DF4C1083A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/0/323830343a373163343a3a2f33322d3438203d3e20323730383130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:71c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:eb:db:b5:ec:ad:6d:26:e6:e4:ac:c2:cc:7d:4e:09:40:01:
         dc:f8:83:3a:98:55:4e:55:91:2f:d9:2f:2d:fc:98:52:46:7e:
         73:59:65:1b:dd:c1:03:73:cd:4d:a5:e7:0c:c5:b3:25:4d:d2:
         e3:68:82:63:25:dd:a0:49:83:30:16:f9:af:8b:78:fe:4e:c8:
         7d:49:4a:6f:ea:dd:4b:a3:94:b3:a2:72:59:37:fc:94:d4:dd:
         bf:44:52:bf:f5:25:5e:1b:a1:c9:62:85:b3:c1:a6:3f:5b:e4:
         89:95:e1:26:bd:c1:3e:ab:28:09:ba:ea:fd:9a:18:0f:92:28:
         63:ea:65:b1:f8:0a:4c:45:c8:0b:9f:40:06:7d:34:70:9e:13:
         32:77:11:71:c8:e5:af:8f:2c:66:6e:6a:5a:02:d5:48:05:f5:
         3f:63:22:80:5d:24:12:89:73:49:c4:58:8c:a0:37:47:d6:0b:
         e6:04:ff:ec:1a:ee:62:fb:11:b8:20:4e:17:5b:66:ef:8f:0e:
         f3:75:88:a6:d9:4c:95:df:51:c2:f0:c8:5a:cd:39:11:47:86:
         22:e0:bf:7c:35:a6:8c:12:f7:fc:e1:d4:82:c9:65:94:fe:13:
         a5:93:33:32:cc:23:eb:2c:f3:95:4a:42:fa:75:0c:a4:9e:1b:
         2c:2d:c2:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:21 2025 by rpki-client on console.sobornost.net