Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CanptWuwGq58XnR4ZqXEVoSgDzWmkikjjTrfJgfNNvpN/0/323830343a326138633a3a2f33322d313238203d3e20323634303738.roa
File:                     323830343a326138633a3a2f33322d313238203d3e20323634303738.roa (raw, json)
Hash identifier:          vivbthIMrwVPsKQKZ47Xy27Sy/NHr/n0EQUMziXVpd8=
Subject key identifier:   83:FF:7E:6B:E4:D9:2A:AB:ED:B5:86:E1:1F:9E:9C:C2:58:9D:3C:29
Certificate issuer:       /CN=F29E4C1D9D18A782CFEA75554C79AEF713787EBB
Certificate serial:       1EB3032F61626BEF76DBB68784CD3E8E8F83F6DE
Authority key identifier: F2:9E:4C:1D:9D:18:A7:82:CF:EA:75:55:4C:79:AE:F7:13:78:7E:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F29E4C1D9D18A782CFEA75554C79AEF713787EBB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CanptWuwGq58XnR4ZqXEVoSgDzWmkikjjTrfJgfNNvpN/0/323830343a326138633a3a2f33322d313238203d3e20323634303738.roa
Signing time:             Fri 11 Apr 2025 18:40:57 +0000
ROA not before:           Fri 11 Apr 2025 18:35:57 +0000
ROA not after:            Fri 10 Apr 2026 18:40:57 +0000
asID:                     264078
IP address blocks:        2804:2a8c::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CanptWuwGq58XnR4ZqXEVoSgDzWmkikjjTrfJgfNNvpN/0/F29E4C1D9D18A782CFEA75554C79AEF713787EBB.crl
                          rsync://rpki-repo.registro.br/repo/CanptWuwGq58XnR4ZqXEVoSgDzWmkikjjTrfJgfNNvpN/0/F29E4C1D9D18A782CFEA75554C79AEF713787EBB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F29E4C1D9D18A782CFEA75554C79AEF713787EBB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:b3:03:2f:61:62:6b:ef:76:db:b6:87:84:cd:3e:8e:8f:83:f6:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F29E4C1D9D18A782CFEA75554C79AEF713787EBB
        Validity
            Not Before: Apr 11 18:35:57 2025 GMT
            Not After : Apr 10 18:40:57 2026 GMT
        Subject: CN=83FF7E6BE4D92AABEDB586E11F9E9CC2589D3C29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8a:5c:3b:a1:12:e4:91:5a:97:fb:47:d7:9d:
                    63:b0:a6:e6:17:8d:b8:81:97:ab:b9:a2:81:26:f3:
                    e3:1f:92:02:32:af:99:79:52:61:32:51:32:e6:00:
                    31:26:9f:29:a4:52:56:c1:6f:c3:99:49:a5:24:d2:
                    36:a6:1d:11:c8:6e:36:20:7a:3f:0d:26:40:99:9b:
                    be:cb:34:c5:3c:66:20:38:e0:45:39:bc:4c:b8:84:
                    4f:47:e2:30:48:0e:a8:0d:b4:4c:05:d3:1d:ae:ba:
                    e4:03:e8:8c:d4:c8:44:11:ac:b4:35:ac:9d:f1:00:
                    86:44:c0:ca:3b:1f:2a:a2:18:f3:f4:2c:15:82:7d:
                    94:fa:a5:81:56:29:7e:91:fe:e2:55:16:f7:0b:85:
                    a4:3a:dc:c0:37:42:53:d5:84:bb:eb:c4:a7:22:b5:
                    78:2f:43:b1:62:65:43:72:31:0d:e4:4d:d6:90:f5:
                    e2:8f:81:09:84:90:c8:a2:06:53:ea:e8:fb:3c:c0:
                    c8:56:23:8f:d0:df:80:06:d9:cf:bc:a8:2a:12:97:
                    66:da:3a:d9:c6:23:d1:78:1c:65:9f:a0:75:41:46:
                    35:02:08:ac:4a:ec:ad:b4:99:1b:38:11:7f:5a:20:
                    57:b6:6b:5e:a2:fd:20:9a:16:f6:f2:17:99:cf:31:
                    e6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:FF:7E:6B:E4:D9:2A:AB:ED:B5:86:E1:1F:9E:9C:C2:58:9D:3C:29
            X509v3 Authority Key Identifier:
                keyid:F2:9E:4C:1D:9D:18:A7:82:CF:EA:75:55:4C:79:AE:F7:13:78:7E:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CanptWuwGq58XnR4ZqXEVoSgDzWmkikjjTrfJgfNNvpN/0/F29E4C1D9D18A782CFEA75554C79AEF713787EBB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F29E4C1D9D18A782CFEA75554C79AEF713787EBB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CanptWuwGq58XnR4ZqXEVoSgDzWmkikjjTrfJgfNNvpN/0/323830343a326138633a3a2f33322d313238203d3e20323634303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2a8c::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:24:92:71:65:de:c1:c6:19:1a:b8:b0:75:2a:c5:88:5d:9c:
         62:f0:eb:7d:19:d4:cd:e6:da:43:ab:e7:04:65:75:48:99:80:
         31:de:75:27:cd:a7:39:56:b9:b3:a2:47:54:1b:9c:82:a7:94:
         48:57:50:94:02:c3:2d:ca:a6:96:06:d0:3f:fe:fb:27:61:f4:
         46:13:8c:99:62:e2:b0:63:4c:d1:bb:c5:f5:ca:c5:e1:75:8f:
         a3:15:47:60:60:31:a8:b2:31:22:4e:25:5e:07:d7:c8:a8:3b:
         31:ad:ea:c7:0d:24:07:5f:4d:f0:3d:ab:a1:84:ef:6d:f3:8f:
         41:61:72:26:9b:ed:f8:e7:49:bd:e0:c9:69:0a:d2:a8:51:19:
         b0:80:d9:3f:18:6f:f0:c6:fa:c9:9c:bd:3f:45:33:38:89:30:
         03:98:d9:d4:02:38:e3:e0:cf:a3:83:fa:98:2f:9f:de:13:52:
         e5:5a:08:eb:c5:63:a1:10:98:2a:fa:6f:52:ee:c1:56:6d:74:
         be:79:f0:03:f8:c0:ec:c3:da:ab:03:a1:22:ef:e9:61:32:47:
         3a:db:9c:03:3b:e5:bc:6b:21:74:34:cb:30:77:12:de:4c:64:
         ca:5f:fb:f7:aa:8a:48:4e:22:d1:c6:ae:8a:be:50:71:b1:50:
         b6:e8:08:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:40:42 2025 by rpki-client on console.sobornost.net