Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DrBd9WfdMDD6DMVy8g3BCDPYPd7vAhLevV4T6ieuL4PP/0/323830343a333638383a3a2f33322d313238203d3e20323636333534.roa
File:                     323830343a333638383a3a2f33322d313238203d3e20323636333534.roa (raw, json)
Hash identifier:          5e4PtWJE1JNCvFBktUB0aUCXkqsFWXWXDbyTbJ5oZI8=
Subject key identifier:   7F:8B:D2:5A:0A:E1:E0:94:D6:CA:0F:6F:4D:FE:59:45:3F:ED:67:E9
Certificate issuer:       /CN=ED62B4CB4459F020268CC72F16E49EE6126BDB5F
Certificate serial:       73350BCFF74820BF27A68E52B6A92B82ACBF731C
Authority key identifier: ED:62:B4:CB:44:59:F0:20:26:8C:C7:2F:16:E4:9E:E6:12:6B:DB:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED62B4CB4459F020268CC72F16E49EE6126BDB5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DrBd9WfdMDD6DMVy8g3BCDPYPd7vAhLevV4T6ieuL4PP/0/323830343a333638383a3a2f33322d313238203d3e20323636333534.roa
Signing time:             Tue 15 Apr 2025 19:12:08 +0000
ROA not before:           Tue 15 Apr 2025 19:07:08 +0000
ROA not after:            Tue 14 Apr 2026 19:12:08 +0000
asID:                     266354
IP address blocks:        2804:3688::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DrBd9WfdMDD6DMVy8g3BCDPYPd7vAhLevV4T6ieuL4PP/0/ED62B4CB4459F020268CC72F16E49EE6126BDB5F.crl
                          rsync://rpki-repo.registro.br/repo/DrBd9WfdMDD6DMVy8g3BCDPYPd7vAhLevV4T6ieuL4PP/0/ED62B4CB4459F020268CC72F16E49EE6126BDB5F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED62B4CB4459F020268CC72F16E49EE6126BDB5F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 20:20:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:35:0b:cf:f7:48:20:bf:27:a6:8e:52:b6:a9:2b:82:ac:bf:73:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED62B4CB4459F020268CC72F16E49EE6126BDB5F
        Validity
            Not Before: Apr 15 19:07:08 2025 GMT
            Not After : Apr 14 19:12:08 2026 GMT
        Subject: CN=7F8BD25A0AE1E094D6CA0F6F4DFE59453FED67E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6a:46:25:56:ec:18:0c:b9:c4:d4:6d:c0:aa:
                    a5:80:94:1a:00:b3:c1:0f:73:60:a5:18:b2:48:07:
                    b3:1c:69:fc:24:61:8a:d9:1b:da:8a:c3:44:41:aa:
                    e2:02:b1:41:06:12:36:52:93:c0:4a:e1:bf:91:32:
                    ac:72:71:ce:b9:d9:78:e2:33:fd:8c:e0:4e:05:07:
                    99:5c:11:bd:2f:43:e2:9a:9f:01:04:0c:2a:24:f3:
                    89:99:9b:94:c4:63:16:e7:dc:3a:cd:6e:a2:99:d3:
                    ff:51:1f:8d:72:71:9f:ab:67:90:60:62:98:02:28:
                    aa:f6:ca:c9:d8:bb:6a:c0:12:d2:31:71:54:dc:ac:
                    4c:ba:95:a9:59:f8:f1:71:8f:67:ec:94:dd:5b:89:
                    87:b1:d1:4d:32:3d:e8:3c:dc:50:ef:18:de:53:79:
                    1c:07:2d:bf:3f:f3:44:0f:38:12:6b:ac:63:43:d3:
                    c6:01:68:e4:78:a5:dd:1a:c2:d7:5e:ef:52:50:08:
                    93:2d:6a:33:b4:fb:b1:d2:16:ef:05:7b:22:6d:8b:
                    bc:c7:ad:e9:49:0a:72:dc:7b:40:17:b5:d9:16:84:
                    b8:c8:82:23:ed:9d:a3:55:2f:9a:8e:e3:7a:51:63:
                    c5:f5:f4:3b:53:e8:fc:65:95:9a:d7:b8:f7:3e:b4:
                    a3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:8B:D2:5A:0A:E1:E0:94:D6:CA:0F:6F:4D:FE:59:45:3F:ED:67:E9
            X509v3 Authority Key Identifier:
                keyid:ED:62:B4:CB:44:59:F0:20:26:8C:C7:2F:16:E4:9E:E6:12:6B:DB:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DrBd9WfdMDD6DMVy8g3BCDPYPd7vAhLevV4T6ieuL4PP/0/ED62B4CB4459F020268CC72F16E49EE6126BDB5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED62B4CB4459F020268CC72F16E49EE6126BDB5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DrBd9WfdMDD6DMVy8g3BCDPYPd7vAhLevV4T6ieuL4PP/0/323830343a333638383a3a2f33322d313238203d3e20323636333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3688::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:f9:da:a5:31:fe:6b:e7:6d:19:f8:ef:aa:a0:83:3d:95:0b:
         4d:eb:7b:6f:22:42:e6:66:95:c1:7d:8c:25:d4:1b:d6:d7:fa:
         75:74:bc:f7:1c:1d:36:7e:6f:09:ea:ac:f9:24:76:ed:21:a1:
         35:45:69:29:c4:a5:4a:4e:8d:7b:43:9f:6c:35:f7:b1:7a:2f:
         7d:d2:37:ff:d6:f0:7c:51:ef:a7:d1:70:19:d7:ec:9e:ff:13:
         46:6e:b4:7e:09:18:de:f2:3f:79:e7:f1:42:02:f4:bb:d5:9a:
         ec:c1:3f:84:71:c8:a9:87:1e:01:05:07:f5:1e:54:10:57:84:
         3b:82:cb:9a:13:99:e5:65:a0:e0:66:71:79:9b:31:10:72:7a:
         10:02:c2:04:ca:1b:f1:ed:4d:5f:6f:47:68:48:49:bd:8b:5b:
         8b:8c:3e:14:69:4d:71:92:71:be:2d:e7:45:47:d9:7c:7a:12:
         c6:04:fb:1f:ad:3b:c7:88:f3:f6:b6:58:6a:e2:23:62:9e:9b:
         1c:c0:11:8e:4b:8c:a1:3a:54:82:f7:f1:4f:ec:c7:86:5c:a0:
         a8:3c:18:83:95:68:d6:18:63:a8:7c:0b:03:32:68:26:c9:61:
         a3:34:6c:7a:09:05:9c:cf:84:8b:24:34:04:c7:a9:d7:5a:74:
         c8:48:fa:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:42 2025 by rpki-client on console.sobornost.net