Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a383030303a3a2f34382d3438203d3e20323635393139.roa
File:                     323830343a336664383a383030303a3a2f34382d3438203d3e20323635393139.roa (raw, json)
Hash identifier:          b1gZhZrJmm4cAB3Zj7ij8jUnkBaGb8MQjdmSsKh3Joo=
Subject key identifier:   CE:12:CF:34:6F:C4:12:66:22:CC:03:78:17:8B:C4:78:FD:1D:BD:C9
Certificate issuer:       /CN=1D4739886A145524D2F84E7F6704B0D6AFFC2AE9
Certificate serial:       29C2671D664791C8F3D2FB8CA30C079F29452190
Authority key identifier: 1D:47:39:88:6A:14:55:24:D2:F8:4E:7F:67:04:B0:D6:AF:FC:2A:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D4739886A145524D2F84E7F6704B0D6AFFC2AE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a383030303a3a2f34382d3438203d3e20323635393139.roa
Signing time:             Fri 28 Feb 2025 14:53:51 +0000
ROA not before:           Fri 28 Feb 2025 14:48:51 +0000
ROA not after:            Fri 27 Feb 2026 14:53:51 +0000
asID:                     265919
IP address blocks:        2804:3fd8:8000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/1D4739886A145524D2F84E7F6704B0D6AFFC2AE9.crl
                          rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/1D4739886A145524D2F84E7F6704B0D6AFFC2AE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D4739886A145524D2F84E7F6704B0D6AFFC2AE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 21:12:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:c2:67:1d:66:47:91:c8:f3:d2:fb:8c:a3:0c:07:9f:29:45:21:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D4739886A145524D2F84E7F6704B0D6AFFC2AE9
        Validity
            Not Before: Feb 28 14:48:51 2025 GMT
            Not After : Feb 27 14:53:51 2026 GMT
        Subject: CN=CE12CF346FC4126622CC0378178BC478FD1DBDC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:79:02:06:8e:9f:59:91:5a:54:ec:98:65:a2:
                    0f:b6:24:75:96:f1:03:a0:c2:90:b3:be:3c:e8:02:
                    8c:62:18:68:0f:5c:ad:e1:10:ce:7d:2e:b6:bf:31:
                    76:f0:51:55:00:ae:c7:81:22:cc:d0:d8:10:c2:42:
                    20:2c:6a:0d:53:42:02:0e:02:ce:0e:f8:55:1f:b9:
                    8b:8d:80:cc:1e:51:5b:04:18:44:89:e4:c6:9e:9e:
                    d0:8d:3e:91:a1:9d:5e:90:5d:c9:3b:9d:65:71:4c:
                    0b:a6:f3:4e:3e:1a:43:b7:69:85:1d:34:21:43:54:
                    89:6e:ff:e0:0c:3e:30:b0:08:db:af:73:e8:11:01:
                    14:b8:a8:2a:03:bb:81:18:1d:74:fe:a4:16:9b:45:
                    f4:78:85:9e:7a:4a:8f:36:e1:38:64:bd:22:83:26:
                    69:d5:5a:30:fe:05:75:cf:18:29:d1:01:24:eb:e5:
                    8a:f5:bb:d5:fe:04:75:f2:9e:49:9b:e1:4c:69:0b:
                    83:91:98:33:00:2f:e2:75:1b:71:64:ad:f5:42:74:
                    07:6d:31:cc:c3:33:cd:8f:4a:9c:fb:3a:ed:59:89:
                    f6:67:a9:39:8b:7e:fc:e4:6a:97:06:25:12:fe:c7:
                    97:36:06:ed:55:7d:c5:42:5a:6b:10:5e:45:0c:1a:
                    ca:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:12:CF:34:6F:C4:12:66:22:CC:03:78:17:8B:C4:78:FD:1D:BD:C9
            X509v3 Authority Key Identifier:
                keyid:1D:47:39:88:6A:14:55:24:D2:F8:4E:7F:67:04:B0:D6:AF:FC:2A:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/1D4739886A145524D2F84E7F6704B0D6AFFC2AE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D4739886A145524D2F84E7F6704B0D6AFFC2AE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a383030303a3a2f34382d3438203d3e20323635393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3fd8:8000::/48

    Signature Algorithm: sha256WithRSAEncryption
         cc:d1:bd:c5:0d:14:4f:86:35:88:f4:e9:64:41:05:bd:69:42:
         ca:25:2c:a4:de:20:f0:4b:c2:36:1e:42:34:de:30:8c:10:f4:
         b6:e9:51:7f:f2:a1:bb:84:75:5d:4b:d0:3a:15:74:23:ea:73:
         d1:04:b2:70:29:d7:be:81:7e:5e:a8:8c:6d:35:06:d0:a6:ae:
         f6:2a:ee:b8:b9:fd:b1:aa:82:4c:e7:27:f8:e6:a3:34:d2:d5:
         b4:e6:1f:12:55:d5:16:1b:09:a8:9c:07:4e:7e:6d:47:8c:84:
         3a:6d:1c:2f:a3:4e:b7:1a:67:6c:58:8a:ca:1f:1a:9f:6b:a9:
         47:50:34:e9:75:37:ed:a1:45:4f:e3:6b:80:ae:97:e4:25:2c:
         1c:5d:cd:3e:79:e8:30:9e:6e:e5:a1:a8:83:e7:d3:70:a8:cb:
         2e:d9:1b:d9:18:c1:be:71:ff:c1:cb:dd:8b:d0:07:99:9e:2a:
         ef:73:ac:e5:a0:08:eb:f0:81:01:81:32:33:aa:dd:0e:22:49:
         29:a3:a7:51:52:c3:59:dd:88:d5:56:f8:1c:4a:bd:e3:43:08:
         b1:73:d3:71:5c:7b:0c:e7:12:f7:55:81:16:6d:fe:90:06:79:
         b9:a3:61:de:ec:c0:03:e0:44:95:53:01:53:0b:63:b5:2c:70:
         b2:e5:fa:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:00:15 2025 by rpki-client on console.sobornost.net