Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3336303a3a2f34332d3433203d3e20323635313837.roa
File:                     323830343a326330303a3336303a3a2f34332d3433203d3e20323635313837.roa (raw, json)
Hash identifier:          eYqbn9g5KjzgIwYdWwMpMUg9WCXGQFV5sS/eNuJQsvU=
Subject key identifier:   27:19:F8:BA:BD:E9:07:81:24:31:73:14:26:D6:C7:C9:6E:98:F9:EA
Certificate issuer:       /CN=F455D0BE5138AE552B4857270EED2A7CE5B5C6F2
Certificate serial:       1704C73C2BE7A8418E67FAD7C7B21C12FAA63B0C
Authority key identifier: F4:55:D0:BE:51:38:AE:55:2B:48:57:27:0E:ED:2A:7C:E5:B5:C6:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3336303a3a2f34332d3433203d3e20323635313837.roa
Signing time:             Sat 01 Feb 2025 20:31:11 +0000
ROA not before:           Sat 01 Feb 2025 20:26:11 +0000
ROA not after:            Sat 31 Jan 2026 20:31:11 +0000
asID:                     265187
IP address blocks:        2804:2c00:360::/43 maxlen: 43

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.crl
                          rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:04:c7:3c:2b:e7:a8:41:8e:67:fa:d7:c7:b2:1c:12:fa:a6:3b:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F455D0BE5138AE552B4857270EED2A7CE5B5C6F2
        Validity
            Not Before: Feb  1 20:26:11 2025 GMT
            Not After : Jan 31 20:31:11 2026 GMT
        Subject: CN=2719F8BABDE907812431731426D6C7C96E98F9EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:03:9d:80:ce:bf:20:0e:8b:ca:ee:13:a5:ed:
                    b8:5a:12:4c:bd:83:0c:15:7d:fd:da:2b:bc:be:f5:
                    a7:d9:6e:05:1e:48:4e:84:4b:81:0a:f8:31:5a:ed:
                    7c:ed:b7:d8:c9:9f:0b:92:0d:5b:67:bc:9f:5d:0d:
                    18:58:64:4c:dc:bb:43:57:ef:be:27:c1:f7:f2:b4:
                    32:94:0e:d3:82:01:34:a1:8f:dd:6a:b0:ad:40:29:
                    33:df:6d:b6:5b:1e:9d:42:a9:6e:11:cb:21:22:2f:
                    6f:63:e2:49:b6:d0:90:cc:ce:c1:b9:16:46:d8:7b:
                    35:9f:29:50:64:44:6a:55:fc:68:9b:d3:de:1b:78:
                    f0:f0:5b:a2:8a:c6:38:43:0b:f3:d9:40:2b:4d:13:
                    1d:68:f3:f9:ee:12:c7:41:d1:33:73:9b:e4:ce:d1:
                    51:e9:b3:ca:38:af:eb:fc:01:35:ef:30:cc:4d:6c:
                    b7:ba:6e:bb:45:53:0b:dd:21:05:2f:07:0b:db:72:
                    db:bc:47:b7:fa:13:76:0d:ed:67:70:1b:99:5b:7b:
                    ea:ce:fb:ce:b4:24:17:bb:0c:6a:5c:45:d1:05:26:
                    90:bf:87:7a:82:77:7b:4f:f3:89:f9:d9:e7:49:ae:
                    e2:2c:fd:04:6f:56:29:da:71:e0:68:af:30:4a:2a:
                    97:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:19:F8:BA:BD:E9:07:81:24:31:73:14:26:D6:C7:C9:6E:98:F9:EA
            X509v3 Authority Key Identifier:
                keyid:F4:55:D0:BE:51:38:AE:55:2B:48:57:27:0E:ED:2A:7C:E5:B5:C6:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3336303a3a2f34332d3433203d3e20323635313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c00:360::/43

    Signature Algorithm: sha256WithRSAEncryption
         01:c1:03:40:b0:bd:7e:5f:99:84:3b:ff:9c:90:20:ba:69:23:
         43:ad:f1:08:a2:d5:60:8b:9a:62:d3:76:1a:b0:85:fe:1e:28:
         3c:24:75:05:4d:33:ea:2c:98:a8:d6:34:52:b2:e5:38:42:9d:
         34:22:6c:50:b5:47:95:95:8d:b7:7f:09:ff:fa:3c:4d:1d:e9:
         ed:78:88:a3:db:d3:5c:7a:23:0a:5e:ce:11:7a:47:ef:02:d5:
         fd:65:88:c7:f4:d2:06:08:6b:c8:10:6e:d6:3a:db:69:22:02:
         fd:6c:ed:d0:38:06:b6:86:24:fb:4c:18:88:cc:f3:39:18:a7:
         32:47:ba:27:ae:37:02:10:9c:12:a1:54:5d:3c:0c:cb:e5:84:
         c7:52:45:fc:13:da:d5:17:3b:c1:54:99:b1:ce:d9:b6:92:a5:
         12:c6:88:36:d5:d9:9e:b5:00:12:d9:4e:ea:94:26:e3:8f:3c:
         f9:a8:59:f7:e5:aa:9a:16:aa:c1:d5:5c:50:c6:63:fb:00:bd:
         59:84:74:19:e7:30:86:cc:eb:3f:47:9e:ab:b2:8b:4b:e1:82:
         a2:21:1f:ee:69:1e:a3:a5:e5:a7:db:e5:cd:49:c7:e4:42:21:
         ea:34:8b:c0:ad:6a:7e:1b:cb:f3:c4:66:9e:e9:0a:af:44:2a:
         d6:d5:e8:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:31 2025 by rpki-client on console.sobornost.net