Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/323830343a323763303a383030303a3a2f33342d3334203d3e20323633393230.roa
File:                     323830343a323763303a383030303a3a2f33342d3334203d3e20323633393230.roa (raw, json)
Hash identifier:          Y9K3TLnVGa24oMtj0s5p+JueLu1qvw0adNG4BtUCv5g=
Subject key identifier:   16:14:47:26:D8:49:83:6D:34:62:FB:61:B2:48:02:A7:B5:DE:D1:74
Certificate issuer:       /CN=CE122135E9291251C3E65EDC261A4CC410CF3BD5
Certificate serial:       7609FE0518D48FF99EB2B9B4B764935536992782
Authority key identifier: CE:12:21:35:E9:29:12:51:C3:E6:5E:DC:26:1A:4C:C4:10:CF:3B:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE122135E9291251C3E65EDC261A4CC410CF3BD5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/323830343a323763303a383030303a3a2f33342d3334203d3e20323633393230.roa
Signing time:             Tue 15 Apr 2025 01:57:06 +0000
ROA not before:           Tue 15 Apr 2025 01:52:06 +0000
ROA not after:            Tue 14 Apr 2026 01:57:06 +0000
asID:                     263920
IP address blocks:        2804:27c0:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/CE122135E9291251C3E65EDC261A4CC410CF3BD5.crl
                          rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/CE122135E9291251C3E65EDC261A4CC410CF3BD5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE122135E9291251C3E65EDC261A4CC410CF3BD5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 11:41:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:09:fe:05:18:d4:8f:f9:9e:b2:b9:b4:b7:64:93:55:36:99:27:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE122135E9291251C3E65EDC261A4CC410CF3BD5
        Validity
            Not Before: Apr 15 01:52:06 2025 GMT
            Not After : Apr 14 01:57:06 2026 GMT
        Subject: CN=16144726D849836D3462FB61B24802A7B5DED174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b2:48:e7:1a:f4:b8:5b:a9:fa:b2:3b:09:d3:
                    9b:2a:83:bc:73:1e:c6:2d:ef:69:9a:59:2e:3a:66:
                    5f:5d:00:54:6b:c8:d7:ed:72:1f:db:d5:81:a8:4c:
                    8c:42:ca:7b:15:48:ed:3b:37:45:ae:2b:ec:79:f1:
                    94:65:0a:14:95:7b:00:f1:52:65:99:d2:9c:77:7d:
                    33:e9:50:b8:e5:67:33:b6:85:b7:21:8a:0e:80:35:
                    53:78:c8:f4:f2:b1:db:85:10:06:1a:a7:e2:5f:99:
                    c3:f6:8f:37:b1:92:50:76:98:1a:87:f2:ea:e8:b3:
                    69:47:2f:be:fa:29:24:f0:30:2e:c4:82:a0:5c:c6:
                    11:47:c7:1f:55:af:45:e1:c5:ae:f9:ce:a7:d5:68:
                    82:e3:c5:1d:bf:97:49:f8:15:5d:9e:41:a1:e6:2e:
                    d2:b1:49:24:58:e4:31:7a:ac:3a:e9:df:ef:70:c6:
                    4e:6f:5b:66:c0:c7:c2:d8:a9:69:4a:35:43:15:3c:
                    17:3f:22:df:33:d3:a1:05:f5:90:f1:d4:e4:da:3f:
                    e4:e4:b1:27:b3:ce:90:ac:66:57:29:cb:af:8a:e1:
                    ad:0b:0d:11:9e:68:6d:d3:e3:98:7e:9c:49:dc:57:
                    5c:39:b4:3d:a5:37:ca:ef:9a:84:64:84:6a:28:41:
                    e9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:14:47:26:D8:49:83:6D:34:62:FB:61:B2:48:02:A7:B5:DE:D1:74
            X509v3 Authority Key Identifier:
                keyid:CE:12:21:35:E9:29:12:51:C3:E6:5E:DC:26:1A:4C:C4:10:CF:3B:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/CE122135E9291251C3E65EDC261A4CC410CF3BD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE122135E9291251C3E65EDC261A4CC410CF3BD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/323830343a323763303a383030303a3a2f33342d3334203d3e20323633393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27c0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         53:2a:68:a2:7a:be:d3:f4:28:4b:6f:7c:6b:80:5a:b0:90:b4:
         2a:5a:b3:01:cd:06:5a:ba:9e:37:42:29:a6:dd:cd:6c:c0:9c:
         c4:df:4d:9c:37:49:f5:22:2b:d7:21:83:f1:9c:0b:c3:61:15:
         f3:a6:9e:de:ed:03:ac:5f:22:c4:66:a0:51:14:26:cb:6d:51:
         f7:e5:e4:ef:b3:3c:96:07:f8:15:b9:1f:d2:c8:33:8e:44:f2:
         08:7f:ad:8f:56:7e:62:cd:8b:60:06:dd:9c:0a:89:b8:85:1f:
         8d:20:f9:2c:48:1b:55:0c:b2:2b:f5:7c:6e:e7:b6:b4:88:ca:
         85:96:1c:5b:8f:f9:86:12:5e:ba:6d:db:cc:f7:1b:91:41:9d:
         bf:a5:a0:3d:c6:a1:67:68:f5:bf:24:83:16:07:c9:fb:34:45:
         fa:66:50:16:f0:fa:fc:00:5d:23:2d:ec:6a:d2:1c:82:fa:9b:
         90:59:46:06:c1:f9:c0:1f:e0:cb:2b:d6:b4:18:a6:41:cb:c0:
         a4:d5:67:eb:cd:42:3f:14:2b:91:ba:d9:e1:03:93:39:12:dd:
         f5:c6:3a:d4:48:92:3b:88:d6:4a:1f:25:7d:e9:5a:c7:c3:44:
         68:e2:2b:97:1d:0a:e3:18:1c:d1:ef:8d:0b:9b:2b:02:21:02:
         a6:a7:41:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:26 2025 by rpki-client on console.sobornost.net