Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BaCJ7joF74gUTmVwPLrK4jpGGtvaNyKgPTNVZy7GEui6/0/323830343a366331303a3a2f33322d313238203d3e20323730343433.roa
File:                     323830343a366331303a3a2f33322d313238203d3e20323730343433.roa (raw, json)
Hash identifier:          B40MNpI62IHLLHT3zeYkujMl3OTO8ZkqTJTzZ0+jc7M=
Subject key identifier:   F8:9B:28:E8:98:BF:50:88:CF:25:11:FA:0D:41:26:7C:1D:95:4B:26
Certificate issuer:       /CN=EA345BA603ECE3DC78BD25C614FE3BB450F4C4C4
Certificate serial:       36AE54915215A749FA62103A09419240BA9B5221
Authority key identifier: EA:34:5B:A6:03:EC:E3:DC:78:BD:25:C6:14:FE:3B:B4:50:F4:C4:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA345BA603ECE3DC78BD25C614FE3BB450F4C4C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BaCJ7joF74gUTmVwPLrK4jpGGtvaNyKgPTNVZy7GEui6/0/323830343a366331303a3a2f33322d313238203d3e20323730343433.roa
Signing time:             Fri 11 Apr 2025 19:06:45 +0000
ROA not before:           Fri 11 Apr 2025 19:01:45 +0000
ROA not after:            Fri 10 Apr 2026 19:06:45 +0000
asID:                     270443
IP address blocks:        2804:6c10::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BaCJ7joF74gUTmVwPLrK4jpGGtvaNyKgPTNVZy7GEui6/0/EA345BA603ECE3DC78BD25C614FE3BB450F4C4C4.crl
                          rsync://rpki-repo.registro.br/repo/BaCJ7joF74gUTmVwPLrK4jpGGtvaNyKgPTNVZy7GEui6/0/EA345BA603ECE3DC78BD25C614FE3BB450F4C4C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA345BA603ECE3DC78BD25C614FE3BB450F4C4C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 04:54:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:ae:54:91:52:15:a7:49:fa:62:10:3a:09:41:92:40:ba:9b:52:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA345BA603ECE3DC78BD25C614FE3BB450F4C4C4
        Validity
            Not Before: Apr 11 19:01:45 2025 GMT
            Not After : Apr 10 19:06:45 2026 GMT
        Subject: CN=F89B28E898BF5088CF2511FA0D41267C1D954B26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:91:67:7f:2f:bf:6d:7f:f2:62:f1:6e:48:32:
                    7a:62:55:25:61:f6:5a:be:d1:c6:30:e6:77:d4:8c:
                    7a:12:53:30:ea:88:74:a0:ab:d7:43:f6:36:03:d5:
                    ec:b6:09:5f:2e:b0:ac:51:f3:9b:c0:ab:b4:4d:24:
                    05:26:9c:b8:ac:cd:80:d8:4f:92:eb:4b:ad:23:10:
                    e4:f4:ce:86:fc:e7:9d:8e:d1:e8:c2:62:51:87:02:
                    c7:39:f4:94:e3:6d:81:d8:c9:d5:69:8b:13:66:e3:
                    91:83:98:ed:8e:bd:d1:f6:34:e4:04:8c:1f:44:28:
                    bb:cb:40:b8:68:70:a5:68:76:95:d5:55:8b:d7:df:
                    bb:8c:36:ce:0d:7b:28:a3:4a:21:00:31:58:45:90:
                    76:9f:41:d5:0f:14:5b:aa:9c:61:42:aa:34:20:bd:
                    f6:e1:73:53:59:61:e5:d3:04:3b:c3:4a:ef:02:ed:
                    30:94:6e:24:bd:28:d8:5c:36:1a:fb:5f:24:40:08:
                    0c:fa:6d:dc:b3:8d:b9:f3:7a:dc:ce:f8:78:2b:72:
                    99:ee:af:18:21:b8:3e:d5:fd:d1:33:39:a5:e7:57:
                    4e:9a:8b:47:42:0a:fc:e2:c6:63:d6:77:c4:ee:26:
                    36:3d:68:dd:cb:4f:34:af:f2:b2:32:77:18:22:b8:
                    dd:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:9B:28:E8:98:BF:50:88:CF:25:11:FA:0D:41:26:7C:1D:95:4B:26
            X509v3 Authority Key Identifier:
                keyid:EA:34:5B:A6:03:EC:E3:DC:78:BD:25:C6:14:FE:3B:B4:50:F4:C4:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BaCJ7joF74gUTmVwPLrK4jpGGtvaNyKgPTNVZy7GEui6/0/EA345BA603ECE3DC78BD25C614FE3BB450F4C4C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA345BA603ECE3DC78BD25C614FE3BB450F4C4C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BaCJ7joF74gUTmVwPLrK4jpGGtvaNyKgPTNVZy7GEui6/0/323830343a366331303a3a2f33322d313238203d3e20323730343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c10::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:8b:d0:fc:bf:b6:0c:b0:00:2e:c4:fc:d0:55:09:03:06:d6:
         3a:e9:30:36:17:7c:72:8d:49:a7:a2:81:1b:0c:c1:bd:c6:64:
         21:2d:64:bb:ff:d0:2c:59:98:f7:82:30:da:e6:2d:64:1b:57:
         59:03:2f:99:af:da:8f:18:fe:ee:7f:63:c8:e2:5b:92:af:07:
         7b:b1:e5:63:02:15:6e:eb:95:4c:ab:0c:a7:13:89:47:14:6c:
         8e:18:d3:eb:d5:8a:7c:0e:c4:c2:9b:94:59:76:da:0e:87:4b:
         c2:16:c1:a1:f0:b2:07:07:47:f9:9b:76:4a:5b:05:80:7f:6a:
         fe:cb:96:c6:7f:56:eb:cf:31:30:a5:5f:7d:6c:83:8e:ba:ea:
         11:9c:0c:19:1e:ad:bc:4c:d5:94:12:53:31:34:fc:fe:d6:a0:
         b3:47:9f:a2:82:95:90:6e:30:73:25:c1:31:3c:34:b4:79:f4:
         c3:82:d9:3b:b9:d3:27:fb:f9:de:9e:5a:88:5f:97:2b:84:54:
         0c:3d:70:c1:f7:d1:7f:af:b5:6e:91:c2:33:6e:78:28:d8:d8:
         de:2d:49:06:89:c5:cd:d9:4c:a1:d8:ae:2c:f3:e3:7d:74:0b:
         f3:c6:b2:6a:9b:cf:ba:ed:6a:f4:2e:c2:83:f4:89:50:9d:6d:
         a0:86:4b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:15:07 2025 by rpki-client on console.sobornost.net