Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/323830343a316239343a3a2f33322d3430203d3e203532393734.roa
File:                     323830343a316239343a3a2f33322d3430203d3e203532393734.roa (raw, json)
Hash identifier:          IaERRdzyQFlbCCESvCZjFoKI54okQy8OjnwOI9G81EU=
Subject key identifier:   6C:E8:B6:A6:E7:00:15:79:E0:2C:E1:32:6D:BC:64:95:FF:EA:87:05
Certificate issuer:       /CN=E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68
Certificate serial:       65DA6C70EC45C45A4F108DD547C337F5F39988A3
Authority key identifier: E0:B7:8B:98:B4:09:4A:86:E5:8E:4F:A9:EA:D0:06:4F:2A:8C:CF:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/323830343a316239343a3a2f33322d3430203d3e203532393734.roa
Signing time:             Fri 14 Mar 2025 13:08:15 +0000
ROA not before:           Fri 14 Mar 2025 13:03:15 +0000
ROA not after:            Fri 13 Mar 2026 13:08:15 +0000
asID:                     52974
IP address blocks:        2804:1b94::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.crl
                          rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 20:59:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:da:6c:70:ec:45:c4:5a:4f:10:8d:d5:47:c3:37:f5:f3:99:88:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68
        Validity
            Not Before: Mar 14 13:03:15 2025 GMT
            Not After : Mar 13 13:08:15 2026 GMT
        Subject: CN=6CE8B6A6E7001579E02CE1326DBC6495FFEA8705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ef:f3:a9:54:69:37:b4:9d:4f:00:17:e1:9b:
                    33:df:f6:b5:9a:3c:d5:1f:7c:76:e0:95:db:90:2d:
                    26:0c:b1:8c:33:63:cb:f5:01:d2:f0:a7:8d:cb:35:
                    1c:aa:76:28:3c:5d:ea:2b:76:77:76:70:ac:84:be:
                    2d:a6:21:8c:9d:87:fb:36:8f:7f:e2:34:f3:22:47:
                    bf:1c:67:56:3d:59:6c:78:5e:66:5a:66:18:f7:df:
                    2f:fb:b3:ef:ec:1d:53:f6:6a:fd:3d:72:70:4b:f9:
                    bd:44:6c:92:14:d2:e5:0e:f1:82:bc:7e:60:c9:99:
                    24:57:b6:36:3a:b5:64:86:25:02:5b:af:cb:5e:6d:
                    12:cf:fb:e0:2d:ea:b0:07:fb:7f:b3:dc:33:4b:e1:
                    97:43:54:06:6e:f6:51:23:33:63:c8:96:3c:30:6c:
                    b9:c2:9c:1b:7d:3f:70:a6:a8:2d:07:99:c5:3a:77:
                    da:3b:01:20:40:5a:0e:ca:6c:e7:aa:98:bd:e1:66:
                    89:b5:7d:d1:8e:c6:1f:d5:65:af:57:61:26:72:ef:
                    11:44:02:fa:6e:ae:9b:62:a0:d8:25:44:7d:db:16:
                    9a:fe:c0:b0:df:a9:43:5d:b9:7a:39:14:6d:53:1c:
                    de:59:a2:5c:17:33:de:ec:58:ad:f2:a4:8d:80:32:
                    30:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E8:B6:A6:E7:00:15:79:E0:2C:E1:32:6D:BC:64:95:FF:EA:87:05
            X509v3 Authority Key Identifier:
                keyid:E0:B7:8B:98:B4:09:4A:86:E5:8E:4F:A9:EA:D0:06:4F:2A:8C:CF:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/323830343a316239343a3a2f33322d3430203d3e203532393734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b94::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:98:54:c6:6d:e7:df:4a:cf:82:dd:b9:ce:1b:b4:ca:8e:56:
         39:86:cd:6f:41:69:f1:33:91:a0:d2:85:77:e3:2d:ab:a1:cb:
         33:39:9e:21:dd:65:24:fb:18:7d:1b:1f:87:17:2f:bd:b0:07:
         ec:e0:48:31:ed:67:2c:f2:5f:89:40:4e:ef:e9:92:9f:a5:38:
         c9:56:6c:6f:c1:44:f3:1b:57:15:e7:4b:a3:34:4b:df:cf:5a:
         c9:0e:78:c4:78:b1:bb:7e:74:78:61:8e:09:80:e7:c4:41:87:
         f7:c7:38:08:29:cf:2b:5a:3c:57:6e:54:bb:cb:1a:7c:2e:34:
         01:97:ec:63:45:44:6f:ff:3e:8f:2a:57:8b:2b:a1:84:cd:fe:
         22:97:12:38:11:f6:0f:44:36:20:47:a4:62:6b:4f:7b:73:3a:
         7d:80:c0:3d:18:4b:16:94:1d:3d:ce:a2:42:bb:cf:9e:8e:17:
         f6:b5:90:0f:41:28:26:92:4b:19:59:50:3d:32:ba:b0:5f:77:
         2a:d0:f4:12:9f:7c:aa:46:30:ed:39:45:6d:a1:d6:90:ac:a3:
         af:13:c0:d0:20:e5:85:49:2e:21:78:fd:30:62:ce:a0:e4:d6:
         d7:e1:51:1c:5c:56:ca:2c:63:40:cb:a6:50:bb:19:4d:68:6c:
         e7:9c:c3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:41 2025 by rpki-client on console.sobornost.net