Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/323830343a323330343a633030303a3a2f33342d3334203d3e20323634313337.roa
File:                     323830343a323330343a633030303a3a2f33342d3334203d3e20323634313337.roa (raw, json)
Hash identifier:          143ISqXv38etx3zhTjHzkNYHjuZSDd1ZUeVyogfmHws=
Subject key identifier:   BF:20:3E:CE:9E:B2:A0:E3:06:3A:F6:DD:F0:85:CA:B9:F5:E7:DD:C5
Certificate issuer:       /CN=D7080B960E96CCD866F1D9C57D82B5BA55120E0A
Certificate serial:       23B582EA5D417FA7933B16D52985C54CFB8E06C6
Authority key identifier: D7:08:0B:96:0E:96:CC:D8:66:F1:D9:C5:7D:82:B5:BA:55:12:0E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/323830343a323330343a633030303a3a2f33342d3334203d3e20323634313337.roa
Signing time:             Thu 06 Mar 2025 08:09:46 +0000
ROA not before:           Thu 06 Mar 2025 08:04:46 +0000
ROA not after:            Thu 05 Mar 2026 08:09:46 +0000
asID:                     264137
IP address blocks:        2804:2304:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.crl
                          rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 06:23:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:b5:82:ea:5d:41:7f:a7:93:3b:16:d5:29:85:c5:4c:fb:8e:06:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7080B960E96CCD866F1D9C57D82B5BA55120E0A
        Validity
            Not Before: Mar  6 08:04:46 2025 GMT
            Not After : Mar  5 08:09:46 2026 GMT
        Subject: CN=BF203ECE9EB2A0E3063AF6DDF085CAB9F5E7DDC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:29:d4:46:c3:7b:2b:74:39:8b:c5:f4:e2:fe:
                    54:5a:f2:cd:19:ed:b6:a8:9a:1c:68:c5:bf:5c:a0:
                    15:1f:03:da:e1:69:bd:85:30:7d:fc:8a:47:92:c4:
                    ec:6b:5f:ce:7e:6d:46:58:1f:9f:ff:46:7d:16:11:
                    7d:77:bd:8f:04:36:68:b5:ca:44:df:6d:4c:63:a0:
                    19:85:a6:5d:18:90:24:d6:a8:57:93:4a:26:69:15:
                    ef:a5:cb:84:68:be:65:b8:b0:2e:5c:51:70:f4:cf:
                    93:53:0e:4c:1e:21:6a:59:e0:15:16:43:a5:5c:28:
                    9e:49:d8:3d:ce:b2:e3:1a:f4:9b:80:1e:94:63:6c:
                    dd:41:47:c2:a0:10:7c:fe:cc:f7:b2:35:84:e1:c9:
                    62:bc:df:91:1f:6a:2d:42:8d:94:1c:96:6f:5d:81:
                    94:7b:da:68:b9:d6:0c:66:62:32:4c:49:f6:ba:2e:
                    2e:42:f5:66:af:1d:1d:64:0f:a6:d5:7d:a9:a1:06:
                    87:10:48:30:7c:62:d0:fb:a8:b1:01:a0:d4:32:06:
                    d6:02:54:31:67:73:b4:01:75:61:6a:e3:7b:25:2e:
                    ee:ac:6d:e4:ac:19:cb:e0:a2:e2:e2:35:da:29:62:
                    51:ce:be:4d:ab:88:67:e2:28:89:bc:38:40:9f:dd:
                    74:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:20:3E:CE:9E:B2:A0:E3:06:3A:F6:DD:F0:85:CA:B9:F5:E7:DD:C5
            X509v3 Authority Key Identifier:
                keyid:D7:08:0B:96:0E:96:CC:D8:66:F1:D9:C5:7D:82:B5:BA:55:12:0E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/323830343a323330343a633030303a3a2f33342d3334203d3e20323634313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2304:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         70:7d:57:df:fe:89:ed:65:81:e6:9f:7f:66:37:98:34:44:04:
         ef:19:d5:4f:b4:47:d7:75:c1:ed:ab:f6:72:a6:a4:43:09:61:
         9e:51:f6:57:3f:66:50:b0:b9:39:97:7e:04:f5:c1:13:f5:e1:
         cd:90:ca:9a:c4:1b:b7:78:d8:27:1c:8b:55:ed:94:51:3f:39:
         84:28:98:70:20:79:53:99:2f:4b:ad:28:6b:11:5a:40:ae:43:
         bb:09:2b:88:16:13:aa:97:30:e4:b9:aa:da:bf:a9:a5:03:7b:
         45:7d:9f:c2:9b:2c:c0:46:1e:64:f7:27:49:18:30:d5:6d:f0:
         34:b1:db:0b:e5:51:df:81:eb:ce:fb:db:58:11:f0:8f:b8:7e:
         7f:d0:9c:cf:64:00:48:a7:18:db:dd:74:e0:ea:bd:14:bd:0e:
         fa:ac:83:37:66:63:20:97:42:00:98:e9:8c:c6:4d:6f:6f:9f:
         9c:84:2d:91:06:a4:6e:13:e4:32:4d:e0:f4:3a:46:74:6a:8d:
         19:4a:eb:61:19:04:96:d1:e2:8b:b6:95:71:55:39:39:95:6b:
         66:7d:88:7e:8e:0b:62:21:cb:0b:0b:f9:d8:09:55:fe:1c:52:
         60:29:24:4c:98:f4:cb:7e:e1:f4:1c:0c:bc:81:ce:e2:a7:f0:
         35:55:d9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:22:05 2025 by rpki-client on console.sobornost.net