Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BZgTKVP87K6uWivxSqnD7oQ1RUGvSi5MrNad2z1nkA8m/0/323830343a363934383a3a2f33322d3332203d3e20323730323630.roa
File:                     323830343a363934383a3a2f33322d3332203d3e20323730323630.roa (raw, json)
Hash identifier:          /Tomm6MXWfVJJSAr+P9JKr6KC2eC7fCYAjoLHdOxing=
Subject key identifier:   AC:19:53:09:FF:D5:48:4D:90:21:84:77:9D:0B:4F:60:B5:9F:11:EC
Certificate issuer:       /CN=82EFE137B6D9999428400B1E8C0FA5C15F8F7C9F
Certificate serial:       3686F78413A6D717195CCC8A84E3F8712302274F
Authority key identifier: 82:EF:E1:37:B6:D9:99:94:28:40:0B:1E:8C:0F:A5:C1:5F:8F:7C:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82EFE137B6D9999428400B1E8C0FA5C15F8F7C9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BZgTKVP87K6uWivxSqnD7oQ1RUGvSi5MrNad2z1nkA8m/0/323830343a363934383a3a2f33322d3332203d3e20323730323630.roa
Signing time:             Tue 08 Apr 2025 16:11:58 +0000
ROA not before:           Tue 08 Apr 2025 16:06:58 +0000
ROA not after:            Tue 07 Apr 2026 16:11:58 +0000
asID:                     270260
IP address blocks:        2804:6948::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BZgTKVP87K6uWivxSqnD7oQ1RUGvSi5MrNad2z1nkA8m/0/82EFE137B6D9999428400B1E8C0FA5C15F8F7C9F.crl
                          rsync://rpki-repo.registro.br/repo/BZgTKVP87K6uWivxSqnD7oQ1RUGvSi5MrNad2z1nkA8m/0/82EFE137B6D9999428400B1E8C0FA5C15F8F7C9F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82EFE137B6D9999428400B1E8C0FA5C15F8F7C9F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 15:19:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:86:f7:84:13:a6:d7:17:19:5c:cc:8a:84:e3:f8:71:23:02:27:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82EFE137B6D9999428400B1E8C0FA5C15F8F7C9F
        Validity
            Not Before: Apr  8 16:06:58 2025 GMT
            Not After : Apr  7 16:11:58 2026 GMT
        Subject: CN=AC195309FFD5484D902184779D0B4F60B59F11EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6f:7d:2b:ff:9a:e7:34:f7:17:2b:b1:23:a5:
                    03:fd:77:be:27:e6:7b:e2:43:55:4b:f0:bc:48:dc:
                    97:6e:9b:4e:98:52:b5:85:f8:e0:15:ae:af:73:86:
                    23:b3:e7:4a:82:6f:68:83:e3:1f:6e:9d:d5:0e:a6:
                    ff:b1:3b:3b:38:60:4c:79:ad:61:01:3c:2f:86:1b:
                    ca:33:17:f4:b8:3b:1e:21:82:6b:a0:7b:b6:dd:35:
                    b9:6a:72:53:56:c9:0c:90:14:ea:1b:d6:e0:7e:62:
                    45:cb:1c:37:2f:b6:a7:e4:3d:b9:98:da:a8:ce:b6:
                    8d:14:90:51:c2:cc:59:de:1a:93:59:c9:e1:ff:a3:
                    8d:59:f1:d6:29:9b:ef:fb:3e:43:cb:ae:73:04:2b:
                    7d:05:53:d4:ad:19:c8:3c:18:0c:63:75:0b:18:9f:
                    3f:72:49:45:28:1b:e5:20:0b:fa:b8:65:0f:48:c2:
                    ea:fe:e9:2a:e3:46:d2:e0:55:ef:dc:bd:0c:15:cb:
                    62:f9:6a:53:56:6c:22:82:43:ce:2b:30:2f:d9:0c:
                    b6:2e:38:db:d7:73:7c:b0:96:3b:c4:1c:79:47:08:
                    16:98:ea:08:24:a0:c6:18:d9:b7:3a:25:12:f1:49:
                    42:69:38:59:f9:14:09:a3:d3:e1:d5:ce:a8:56:a9:
                    82:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:19:53:09:FF:D5:48:4D:90:21:84:77:9D:0B:4F:60:B5:9F:11:EC
            X509v3 Authority Key Identifier:
                keyid:82:EF:E1:37:B6:D9:99:94:28:40:0B:1E:8C:0F:A5:C1:5F:8F:7C:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BZgTKVP87K6uWivxSqnD7oQ1RUGvSi5MrNad2z1nkA8m/0/82EFE137B6D9999428400B1E8C0FA5C15F8F7C9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82EFE137B6D9999428400B1E8C0FA5C15F8F7C9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BZgTKVP87K6uWivxSqnD7oQ1RUGvSi5MrNad2z1nkA8m/0/323830343a363934383a3a2f33322d3332203d3e20323730323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6948::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:c4:7c:e0:13:3f:51:61:a8:6c:78:82:da:71:ab:4d:d3:7c:
         76:ef:61:aa:e4:8c:68:7c:3b:8c:99:02:a4:c8:6f:f5:7b:5b:
         fd:1c:71:8d:d8:f0:94:27:22:46:78:93:58:26:68:42:40:96:
         ad:35:71:dd:6a:a6:10:c0:2a:67:9a:f9:a5:3b:35:3a:16:bb:
         8e:58:89:f8:98:18:d2:0c:b0:5a:0f:aa:20:52:62:c4:5e:f3:
         4a:6d:65:63:b1:76:f6:f3:34:34:9a:af:dd:30:a8:37:43:41:
         72:33:8c:69:51:47:9b:d3:cb:f2:bf:a3:d2:f0:ba:7e:68:1c:
         75:01:00:70:15:fe:8d:83:57:3a:75:fa:78:27:69:93:26:77:
         f9:15:af:38:10:37:cc:89:7b:48:69:57:98:1b:56:11:b4:b5:
         5d:0d:f0:16:7e:db:11:01:9a:07:25:99:f3:a3:79:b4:95:33:
         20:d1:fb:39:84:26:ec:89:29:2a:c8:69:ab:e4:dc:7c:9d:8b:
         04:8c:dd:3b:83:50:c5:ec:f8:7c:f9:45:b3:36:30:38:b6:3c:
         bc:d8:26:a9:1f:e5:88:f6:ea:be:e9:d8:16:e4:a4:a2:81:62:
         2d:f4:2e:6a:7c:6f:84:58:66:a2:e5:51:99:c2:c1:e9:27:bc:
         59:b9:7c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:11 2025 by rpki-client on console.sobornost.net