Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/323830343a346566303a3a2f33322d3336203d3e20323638323932.roa
File:                     323830343a346566303a3a2f33322d3336203d3e20323638323932.roa (raw, json)
Hash identifier:          JzJsy650SSsFhDpBxyHj9SfH3TNilDwlyqAwmdmbW/o=
Subject key identifier:   98:88:83:A9:4F:4F:FF:3E:CC:E2:53:DE:44:AF:86:D5:33:EC:80:72
Certificate issuer:       /CN=9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87
Certificate serial:       07F053EF246017928F0020CF80A7E2729BA077D6
Authority key identifier: 99:65:B1:E2:93:1C:94:CD:A0:3C:B6:3E:F3:A6:CA:E3:3B:C1:5E:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/323830343a346566303a3a2f33322d3336203d3e20323638323932.roa
Signing time:             Thu 20 Mar 2025 13:09:51 +0000
ROA not before:           Thu 20 Mar 2025 13:04:51 +0000
ROA not after:            Thu 19 Mar 2026 13:09:51 +0000
asID:                     268292
IP address blocks:        2804:4ef0::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.crl
                          rsync://rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 10:13:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:f0:53:ef:24:60:17:92:8f:00:20:cf:80:a7:e2:72:9b:a0:77:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87
        Validity
            Not Before: Mar 20 13:04:51 2025 GMT
            Not After : Mar 19 13:09:51 2026 GMT
        Subject: CN=988883A94F4FFF3ECCE253DE44AF86D533EC8072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6c:3f:01:8a:01:c6:21:d0:9b:27:6c:33:ba:
                    55:ff:b0:0b:4d:03:83:7b:fc:61:17:6f:e8:10:96:
                    fc:c6:8c:4f:e8:7d:6e:84:e7:09:2b:e5:45:71:a2:
                    17:f5:54:65:6c:b4:95:9e:d7:79:65:9c:75:5f:d8:
                    62:9b:32:81:18:c9:35:de:cb:87:b9:8b:b9:fa:90:
                    8d:f8:1d:e2:ee:50:c6:4e:6b:3c:7d:26:35:4d:9a:
                    c6:09:b5:0e:3d:5c:eb:5c:e5:ca:40:f2:1d:58:4a:
                    76:46:72:e6:d8:8c:f7:b6:5c:61:b1:d7:37:90:89:
                    bc:19:e5:b1:47:23:a7:67:cd:15:8a:11:20:24:c0:
                    a0:2f:3c:de:a0:44:26:9d:76:6d:e5:fe:58:32:ab:
                    04:b6:c7:7d:9a:a8:00:da:e8:0e:1c:2c:29:76:54:
                    db:17:bc:b0:48:b8:99:ce:21:73:8c:31:93:57:a5:
                    ec:f6:c9:5d:42:59:ec:80:f3:88:53:11:51:67:ad:
                    bf:99:b1:37:b5:71:c6:98:f4:8a:72:ea:45:64:a7:
                    bf:1e:c0:0e:10:0a:aa:9a:4c:d0:a0:96:3b:ae:f8:
                    61:84:63:69:03:83:32:f3:31:69:83:0b:09:a2:50:
                    70:f4:b5:83:6d:68:70:e6:68:26:af:37:2d:fa:2c:
                    f9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:88:83:A9:4F:4F:FF:3E:CC:E2:53:DE:44:AF:86:D5:33:EC:80:72
            X509v3 Authority Key Identifier:
                keyid:99:65:B1:E2:93:1C:94:CD:A0:3C:B6:3E:F3:A6:CA:E3:3B:C1:5E:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/323830343a346566303a3a2f33322d3336203d3e20323638323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4ef0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:11:80:24:77:2d:c2:35:ca:cd:c7:42:64:9b:a0:6e:c4:a0:
         5d:45:d1:26:ab:00:a9:c3:a6:37:e1:20:bf:8d:a3:b2:53:d4:
         47:16:9c:0f:b0:c5:d7:d9:6e:7d:cf:ea:78:ce:9e:61:9f:1a:
         8d:7d:18:a0:eb:5e:ab:8f:13:9d:cd:71:ee:d5:48:e3:1c:3a:
         02:f0:b4:c0:2e:25:5b:65:09:df:a8:7b:7e:0f:a2:ce:1b:6a:
         6c:9f:47:2c:0f:7e:6c:9e:8e:e9:ac:c9:e1:38:d0:2a:33:4e:
         e4:a9:a4:64:3c:4d:6c:8c:21:8b:99:d5:5f:1a:2c:f2:9b:57:
         fa:d7:6f:bf:24:9d:c9:00:7d:30:af:97:24:db:47:d8:2a:94:
         10:45:d8:6f:e5:da:22:65:2c:ad:54:3f:c6:d6:22:d0:38:15:
         a5:16:00:5d:52:d9:95:d9:1f:39:84:5d:0b:5c:3b:d3:46:43:
         8c:c9:07:1e:2c:ab:e2:3a:93:2c:c9:0b:c9:c0:bb:53:0c:49:
         80:43:df:7e:45:bf:36:be:49:06:a5:e0:72:1d:6b:e5:86:b9:
         8d:45:1e:7a:45:bd:c0:4b:35:04:7c:a6:35:33:96:0d:bb:d0:
         25:7f:da:59:71:c5:d0:be:e7:9a:41:51:11:e4:26:d1:26:80:
         c5:c8:90:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:37:07 2025 by rpki-client on console.sobornost.net