Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/323830343a376532633a3a2f33322d3332203d3e20323731363037.roa
File:                     323830343a376532633a3a2f33322d3332203d3e20323731363037.roa (raw, json)
Hash identifier:          BiTGCD0gvzrMxqWVIyRJCn10pAYkei6eq8Ec2AODcUs=
Subject key identifier:   38:C0:80:8C:E0:7F:4B:FB:D7:11:5E:0D:62:DA:47:5D:8C:80:01:9D
Certificate issuer:       /CN=175384092ABAD3D152DCA97639AC5068FE84B741
Certificate serial:       6CB8571C0F7A3AA70FFED42AB470720574546131
Authority key identifier: 17:53:84:09:2A:BA:D3:D1:52:DC:A9:76:39:AC:50:68:FE:84:B7:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/175384092ABAD3D152DCA97639AC5068FE84B741.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/323830343a376532633a3a2f33322d3332203d3e20323731363037.roa
Signing time:             Wed 09 Apr 2025 18:46:02 +0000
ROA not before:           Wed 09 Apr 2025 18:41:02 +0000
ROA not after:            Wed 08 Apr 2026 18:46:02 +0000
asID:                     271607
IP address blocks:        2804:7e2c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/175384092ABAD3D152DCA97639AC5068FE84B741.crl
                          rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/175384092ABAD3D152DCA97639AC5068FE84B741.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/175384092ABAD3D152DCA97639AC5068FE84B741.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 20:12:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:b8:57:1c:0f:7a:3a:a7:0f:fe:d4:2a:b4:70:72:05:74:54:61:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=175384092ABAD3D152DCA97639AC5068FE84B741
        Validity
            Not Before: Apr  9 18:41:02 2025 GMT
            Not After : Apr  8 18:46:02 2026 GMT
        Subject: CN=38C0808CE07F4BFBD7115E0D62DA475D8C80019D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:83:ea:3c:f4:e7:cf:a3:ee:77:bf:74:66:9b:
                    02:0c:7d:5d:b3:f4:f8:ec:8d:c5:2b:64:ed:18:00:
                    ee:1d:61:0a:16:63:27:9e:de:34:1d:00:e7:6c:03:
                    e7:c9:00:95:56:21:92:03:82:24:f2:26:7f:d9:87:
                    f8:ae:36:79:fd:90:e3:21:5e:9c:0d:4c:c5:f1:2d:
                    5c:0d:2d:76:b2:d1:72:27:06:32:12:3d:42:27:ef:
                    57:5c:76:2c:7d:a4:21:59:b5:09:d0:8e:5f:5a:10:
                    f0:8f:af:08:44:3e:b2:19:2e:30:a7:1f:08:d5:a6:
                    1b:9a:7e:bb:0c:1a:0a:e7:37:21:a8:47:26:b8:d8:
                    df:61:af:1b:99:70:17:83:cd:4c:77:60:ca:0f:e6:
                    f4:87:1c:7d:77:ab:19:76:c2:71:56:57:aa:c2:e5:
                    10:b1:c4:cd:fb:72:1f:b3:19:95:ca:19:ce:2f:14:
                    70:9a:ba:c3:1d:e0:41:6c:cd:df:4a:ad:d3:7c:32:
                    09:49:0b:07:fb:b1:8e:f7:4b:ff:67:45:dd:5a:0c:
                    33:b5:32:72:ba:92:6d:f1:5d:fe:c5:d3:2c:1c:9c:
                    1e:0a:ab:d2:a9:50:8e:11:c2:4b:35:51:dd:6f:58:
                    c1:68:e0:79:3b:09:3d:75:5c:fc:8a:d0:8d:a7:65:
                    f5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:C0:80:8C:E0:7F:4B:FB:D7:11:5E:0D:62:DA:47:5D:8C:80:01:9D
            X509v3 Authority Key Identifier:
                keyid:17:53:84:09:2A:BA:D3:D1:52:DC:A9:76:39:AC:50:68:FE:84:B7:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/175384092ABAD3D152DCA97639AC5068FE84B741.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/175384092ABAD3D152DCA97639AC5068FE84B741.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/323830343a376532633a3a2f33322d3332203d3e20323731363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:92:aa:28:9c:83:12:95:0a:58:e3:36:2c:33:79:9d:0e:3c:
         08:34:09:ad:ec:01:6a:af:a4:c1:0a:89:1e:c7:f7:ff:7e:02:
         f0:d0:88:5a:d0:df:7e:38:e1:86:71:29:9f:22:5c:43:e5:7d:
         4a:f9:64:6a:ec:9f:15:e5:12:4b:68:53:4e:85:4e:4c:70:76:
         42:8b:ef:d4:0e:82:8a:83:31:0e:96:56:57:93:4d:3b:a3:dd:
         41:e7:5a:bb:cd:98:e4:b1:6e:a2:70:ce:a8:f6:d1:aa:01:e3:
         b7:3e:f2:ef:cd:27:f0:bd:4e:b8:5b:ce:9e:a7:c3:44:3f:13:
         4a:c5:43:67:94:2b:f8:8f:f2:e7:a1:c8:de:85:6e:33:92:b6:
         ab:bc:3f:f7:08:69:87:73:20:3b:66:71:15:a5:69:93:92:0d:
         4d:f3:06:02:56:a7:9f:92:eb:ee:b9:26:a9:c8:b2:43:3a:e3:
         e7:41:21:f2:ae:61:fd:d3:a1:74:cf:c4:c0:90:45:bf:5f:11:
         0e:30:91:cc:d0:9f:6a:65:9d:a2:40:b8:8e:6c:73:19:b8:2e:
         11:5b:a4:06:77:e5:83:1a:9c:76:18:ea:eb:97:c8:92:66:9c:
         d2:25:d3:9d:64:ac:80:84:1e:94:7b:c2:0e:5f:9d:50:df:59:
         ce:7c:5f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:53 2025 by rpki-client on console.sobornost.net