Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/323830343a323763303a3a2f33322d3332203d3e20323633393230.roa
File:                     323830343a323763303a3a2f33322d3332203d3e20323633393230.roa (raw, json)
Hash identifier:          V+Uf4I14RrOnwOwvvRLa8h8yWlsQzUWpqjmEVz1SEtg=
Subject key identifier:   97:18:66:03:29:34:46:D1:C6:8F:8E:7C:77:37:E3:0C:E5:22:5B:DD
Certificate issuer:       /CN=CE122135E9291251C3E65EDC261A4CC410CF3BD5
Certificate serial:       238F5A11C1A02ED0E7BA4BB307C933C972B83F8F
Authority key identifier: CE:12:21:35:E9:29:12:51:C3:E6:5E:DC:26:1A:4C:C4:10:CF:3B:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE122135E9291251C3E65EDC261A4CC410CF3BD5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/323830343a323763303a3a2f33322d3332203d3e20323633393230.roa
Signing time:             Tue 15 Apr 2025 01:57:08 +0000
ROA not before:           Tue 15 Apr 2025 01:52:08 +0000
ROA not after:            Tue 14 Apr 2026 01:57:08 +0000
asID:                     263920
IP address blocks:        2804:27c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/CE122135E9291251C3E65EDC261A4CC410CF3BD5.crl
                          rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/CE122135E9291251C3E65EDC261A4CC410CF3BD5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE122135E9291251C3E65EDC261A4CC410CF3BD5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 11:41:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:8f:5a:11:c1:a0:2e:d0:e7:ba:4b:b3:07:c9:33:c9:72:b8:3f:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE122135E9291251C3E65EDC261A4CC410CF3BD5
        Validity
            Not Before: Apr 15 01:52:08 2025 GMT
            Not After : Apr 14 01:57:08 2026 GMT
        Subject: CN=97186603293446D1C68F8E7C7737E30CE5225BDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:41:ed:cb:e3:f2:f9:04:a3:84:e9:3d:9d:6b:
                    e6:c6:a4:97:cf:f5:f0:a6:fd:88:0e:3f:73:6b:3b:
                    ad:20:1a:d7:77:f4:9c:27:b1:15:c8:cc:5e:2e:a4:
                    a3:6a:16:ef:93:a5:ee:31:78:c7:39:69:bb:ee:6d:
                    44:3b:bf:e7:a5:e2:e5:3b:26:e6:4d:9b:58:13:63:
                    9f:db:1c:f2:3d:74:d7:9e:99:0b:c1:b3:93:5f:a8:
                    e1:af:f5:f8:6f:36:3e:96:41:9f:22:c8:24:b3:00:
                    f3:cf:8c:91:e9:7b:75:b0:b3:11:1d:3e:b0:b5:3c:
                    f5:4e:16:0e:32:2b:aa:b0:93:c1:1f:94:0c:07:1d:
                    f6:e6:c6:34:bb:24:04:3f:5a:9b:48:47:c3:0b:13:
                    57:89:34:b1:bb:35:f2:9d:9f:51:24:b9:cc:cc:39:
                    7f:58:61:d4:fe:a6:a9:8a:a1:68:f5:22:93:33:57:
                    3e:78:28:cf:6d:1f:69:9d:cf:90:68:5b:61:d0:06:
                    9b:8f:ee:30:8a:63:0c:5a:73:28:6e:43:06:6b:b0:
                    d3:56:16:cf:ee:ba:2c:e1:31:b2:19:ed:bb:b6:74:
                    10:f2:af:2b:40:98:6a:79:65:81:37:5c:f7:2b:02:
                    a2:08:eb:14:5c:aa:18:65:45:23:20:c2:e8:2b:47:
                    04:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:18:66:03:29:34:46:D1:C6:8F:8E:7C:77:37:E3:0C:E5:22:5B:DD
            X509v3 Authority Key Identifier:
                keyid:CE:12:21:35:E9:29:12:51:C3:E6:5E:DC:26:1A:4C:C4:10:CF:3B:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/CE122135E9291251C3E65EDC261A4CC410CF3BD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE122135E9291251C3E65EDC261A4CC410CF3BD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/323830343a323763303a3a2f33322d3332203d3e20323633393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:7a:81:e2:2c:82:02:69:ed:4d:af:80:67:15:9d:88:18:cd:
         c5:5c:fa:7a:1a:17:b3:ed:5a:ad:3c:2f:f9:fa:46:45:d3:bd:
         31:b2:a6:16:49:87:ed:40:a9:58:32:9c:16:d0:8b:d6:d4:8a:
         43:62:b1:6a:fa:96:27:b2:52:b1:45:21:d7:36:9a:83:1c:ac:
         fb:f6:49:f7:b0:a2:28:00:8f:6b:2c:a9:05:cb:3b:0a:02:37:
         8c:01:64:44:a6:e4:59:cb:d5:99:65:ba:52:42:b4:9b:fa:b7:
         cb:f6:81:9d:ad:91:dd:72:10:6c:c0:44:da:60:4f:fc:96:1d:
         46:91:a3:6a:ec:97:44:1d:2f:ea:5c:90:18:f0:f9:39:15:cb:
         1f:4d:f6:c8:66:25:d9:fe:62:d7:c7:46:49:4e:57:91:01:14:
         56:ee:79:37:5b:dc:d7:ab:cb:8c:57:d6:19:b4:9e:05:d0:42:
         3c:43:c9:79:cc:2b:0f:9b:21:a7:65:dd:8d:7b:48:70:b9:40:
         28:e2:cf:57:61:3d:c4:b0:87:0a:d0:93:02:a6:c0:d3:a6:cd:
         bb:0a:c5:82:f7:3e:dd:ba:cc:8c:9f:4a:cb:31:66:12:78:4e:
         91:4c:74:6f:a0:72:31:b5:0c:14:13:e6:8f:83:95:89:3e:d5:
         2b:d6:e7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:26 2025 by rpki-client on console.sobornost.net