Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/0/323830343a353239383a3a2f33322d3438203d3e20323638353238.roa
File:                     323830343a353239383a3a2f33322d3438203d3e20323638353238.roa (raw, json)
Hash identifier:          npZtOWAX2jdEasirZhHJUpjOYx48/HGh96fzMy2npB8=
Subject key identifier:   09:47:E0:80:B3:2F:24:EE:F1:FD:0D:75:C4:FB:4F:D4:07:4A:06:B4
Certificate issuer:       /CN=8C9489B5F162370B3CD6AE611F82567891AA2F79
Certificate serial:       27F6C1B62E7A495F15F1A41CB48B6DBAF3C3D3F8
Authority key identifier: 8C:94:89:B5:F1:62:37:0B:3C:D6:AE:61:1F:82:56:78:91:AA:2F:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C9489B5F162370B3CD6AE611F82567891AA2F79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/0/323830343a353239383a3a2f33322d3438203d3e20323638353238.roa
Signing time:             Wed 23 Apr 2025 14:50:10 +0000
ROA not before:           Wed 23 Apr 2025 14:45:10 +0000
ROA not after:            Wed 22 Apr 2026 14:50:10 +0000
asID:                     268528
IP address blocks:        2804:5298::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/0/8C9489B5F162370B3CD6AE611F82567891AA2F79.crl
                          rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/0/8C9489B5F162370B3CD6AE611F82567891AA2F79.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C9489B5F162370B3CD6AE611F82567891AA2F79.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:f6:c1:b6:2e:7a:49:5f:15:f1:a4:1c:b4:8b:6d:ba:f3:c3:d3:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C9489B5F162370B3CD6AE611F82567891AA2F79
        Validity
            Not Before: Apr 23 14:45:10 2025 GMT
            Not After : Apr 22 14:50:10 2026 GMT
        Subject: CN=0947E080B32F24EEF1FD0D75C4FB4FD4074A06B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a9:f6:70:a7:55:32:45:d1:34:dc:78:a0:f3:
                    e8:1e:52:18:af:30:51:32:a3:37:16:91:c3:c2:53:
                    cb:f0:8c:d9:02:22:cb:74:80:ee:d6:cb:c3:09:36:
                    ba:7e:f8:d8:87:38:22:df:30:6b:82:9c:ab:18:b7:
                    dd:59:89:75:03:4c:4f:89:7f:36:d8:09:0f:43:47:
                    c5:96:ae:98:ce:eb:84:e7:28:fd:a8:34:55:80:9e:
                    88:0e:35:a2:71:a0:dd:e5:6f:58:8f:80:2e:35:df:
                    d1:f3:8f:6f:12:2d:ae:c2:bb:13:4d:38:62:47:2d:
                    2d:31:50:e8:c6:4b:fe:23:8e:3f:56:0b:48:4d:54:
                    2a:16:2c:ae:ca:d8:4d:00:1c:24:02:f8:22:14:ae:
                    91:a8:77:dc:6d:23:34:d7:5f:b7:5a:6d:e0:ca:21:
                    fd:58:eb:60:ad:94:d0:37:77:f6:58:67:1c:3b:9c:
                    96:d7:e3:a2:c6:29:a3:d3:8f:fc:3e:ba:e4:b4:d3:
                    68:cd:bd:81:28:92:99:39:98:3e:d8:b4:13:9e:07:
                    ad:d8:ed:06:59:4f:01:7a:38:f8:f8:70:bc:23:14:
                    09:5a:e9:3e:58:2a:5c:75:57:fb:42:ab:c1:05:8e:
                    45:76:92:84:0e:e9:63:8a:c6:7b:16:e6:26:94:73:
                    8f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:47:E0:80:B3:2F:24:EE:F1:FD:0D:75:C4:FB:4F:D4:07:4A:06:B4
            X509v3 Authority Key Identifier:
                keyid:8C:94:89:B5:F1:62:37:0B:3C:D6:AE:61:1F:82:56:78:91:AA:2F:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/0/8C9489B5F162370B3CD6AE611F82567891AA2F79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C9489B5F162370B3CD6AE611F82567891AA2F79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/0/323830343a353239383a3a2f33322d3438203d3e20323638353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5298::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:92:f6:69:8a:6c:4b:4a:e1:62:3d:a5:e8:a8:a3:c7:c5:20:
         1a:2d:08:fe:8b:3f:d2:91:de:80:88:59:54:bb:61:a2:35:71:
         a7:57:6f:69:a3:7a:0b:50:0c:9d:70:ce:6a:fe:f3:53:a0:ff:
         46:b8:74:62:34:ab:5e:85:ef:ec:68:83:d9:ff:65:66:e9:62:
         95:79:22:d9:2e:89:c6:00:ae:a2:fb:5d:58:c3:c3:5f:0c:90:
         9f:91:ee:2b:fa:8a:02:88:a1:5b:30:0e:96:5b:5d:fd:fa:8a:
         91:fe:21:64:25:79:f3:5a:1b:c3:7a:1b:57:04:5a:9e:ca:28:
         19:82:78:88:01:47:83:d3:79:9f:d6:16:69:a0:11:5f:cc:92:
         fa:34:77:4d:5a:37:3e:6e:99:72:cb:cb:09:85:38:6b:03:20:
         0f:ea:2e:50:28:5e:1e:8a:98:ca:f6:2c:e8:64:47:43:43:82:
         0a:30:13:fd:36:54:ce:18:80:a2:23:47:a3:e0:eb:44:51:f1:
         ca:70:f5:a7:ef:d3:3e:ad:aa:0d:06:cc:e3:e7:c6:c0:d0:d7:
         38:b6:10:96:01:bd:6a:6b:cc:77:f4:34:1b:b2:86:d7:6a:e7:
         09:4a:e7:0d:eb:4e:42:de:26:3f:df:52:b0:8a:77:c9:6e:92:
         be:81:ed:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:36 2025 by rpki-client on console.sobornost.net