Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/1/323830343a373165633a3a2f33322d3334203d3e20323730383230.roa
File:                     323830343a373165633a3a2f33322d3334203d3e20323730383230.roa (raw, json)
Hash identifier:          mFXobTyqdcYNMW0m9lmZoblaw4OtIBlFh+gYjEgM1Y0=
Subject key identifier:   B5:F7:88:C0:A6:E9:F1:AA:CF:11:5A:BB:7D:61:04:10:B1:58:0A:0D
Certificate issuer:       /CN=4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D
Certificate serial:       024BF11D5D33D7FBA9C92C635A6B954E0567CEDE
Authority key identifier: 44:13:F2:BD:E0:8D:3C:28:B7:34:73:1A:6E:80:F7:AB:4C:D6:6E:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/1/323830343a373165633a3a2f33322d3334203d3e20323730383230.roa
Signing time:             Wed 05 Mar 2025 19:00:10 +0000
ROA not before:           Wed 05 Mar 2025 18:55:10 +0000
ROA not after:            Wed 04 Mar 2026 19:00:10 +0000
asID:                     270820
IP address blocks:        2804:71ec::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.crl
                          rsync://rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 05:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:4b:f1:1d:5d:33:d7:fb:a9:c9:2c:63:5a:6b:95:4e:05:67:ce:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D
        Validity
            Not Before: Mar  5 18:55:10 2025 GMT
            Not After : Mar  4 19:00:10 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5d:84:20:e5:e8:5b:f3:25:88:f2:99:e7:f6:
                    40:84:9a:cd:3f:54:f1:e6:35:0b:d1:91:4b:2f:53:
                    ae:c6:49:1a:6b:85:68:8e:5d:a1:4c:a8:ab:dd:33:
                    a0:21:69:0e:fd:58:64:60:fd:b9:b4:f2:50:ee:89:
                    e2:9c:8d:08:25:8a:76:a5:55:08:91:4f:d7:bc:cb:
                    04:c1:89:00:57:88:6f:69:cf:c9:96:69:36:37:7d:
                    e5:be:b0:cc:1b:5b:b5:57:92:f7:67:b7:00:59:e0:
                    fb:29:1f:9c:22:c1:64:63:de:d4:3c:58:35:53:20:
                    0d:06:cf:d2:8d:5a:25:3b:b3:2f:95:86:c7:ab:60:
                    60:6f:5b:70:cd:cb:67:cd:44:41:d7:1c:31:83:31:
                    9e:59:77:1e:ee:fe:d1:e1:28:8c:98:40:18:40:ec:
                    48:47:93:58:f8:ff:ac:11:02:dd:c3:42:f2:73:6b:
                    33:69:18:fa:a6:d1:b7:a8:d6:2a:bf:10:11:a4:b3:
                    4f:4a:c2:0d:a2:3d:6c:04:75:6e:0c:40:25:fc:0d:
                    31:72:a3:bb:62:80:d2:3b:70:94:a3:66:d3:18:cb:
                    ab:55:57:ee:e3:4c:ab:45:1c:c7:d7:dc:16:07:8c:
                    90:0c:84:82:78:e6:c5:f4:32:d6:61:0f:52:1a:0c:
                    03:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:F7:88:C0:A6:E9:F1:AA:CF:11:5A:BB:7D:61:04:10:B1:58:0A:0D
            X509v3 Authority Key Identifier:
                keyid:44:13:F2:BD:E0:8D:3C:28:B7:34:73:1A:6E:80:F7:AB:4C:D6:6E:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/1/323830343a373165633a3a2f33322d3334203d3e20323730383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:71ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:fa:0b:a5:12:3b:11:95:ba:7e:49:b6:50:07:b1:d4:85:97:
         2f:15:70:68:67:ea:97:43:3b:c5:94:d5:70:7a:2a:cb:12:30:
         10:2f:1e:39:e4:c0:6f:73:28:d7:35:0c:5e:93:f6:84:1d:fe:
         8b:fa:f8:13:09:69:ce:10:21:ca:11:28:a5:a7:85:d8:20:bd:
         b9:ef:45:da:73:b1:33:be:85:ec:03:b9:2e:7e:c3:42:16:5b:
         ba:fb:3d:1f:ff:fd:69:f3:59:80:38:1e:61:f0:ca:f7:14:95:
         b5:40:56:d2:d4:22:72:4d:cf:95:dd:5d:37:80:d2:23:fa:51:
         ff:92:c5:a2:6e:ec:94:12:16:3e:25:07:16:1d:f6:5b:94:e7:
         0e:bc:28:25:5f:af:45:ee:b9:9f:99:91:cd:76:b7:e7:2d:ef:
         af:35:2d:97:0d:9d:dd:16:4b:64:e0:cd:28:94:a7:09:de:b3:
         9d:d5:80:db:aa:10:47:32:ad:32:1e:84:fa:8b:4e:89:f5:4e:
         55:b3:cd:2f:37:0b:b5:ae:54:23:d9:67:e9:6f:e6:42:6f:b6:
         b1:d4:f8:04:c0:be:c8:ec:41:97:0e:54:d4:af:10:2d:77:2c:
         c7:7b:b1:ba:96:28:8e:40:ce:e7:5c:ed:72:1e:d1:71:e5:dd:
         cb:fe:c1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:46:25 2025 by rpki-client on console.sobornost.net