Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/323830343a323763303a3a2f33342d3334203d3e20323633393230.roa
File:                     323830343a323763303a3a2f33342d3334203d3e20323633393230.roa (raw, json)
Hash identifier:          Ubv+GPbAJJWjSV/PVtX/98dmEHf5vzUAOR4AL02BrMo=
Subject key identifier:   C2:2E:3F:C0:91:FC:AD:0C:65:86:DC:05:A8:B4:34:F7:07:4A:65:2D
Certificate issuer:       /CN=CE122135E9291251C3E65EDC261A4CC410CF3BD5
Certificate serial:       1509853354CDFB0CDBAF43AE9E98CD48E88E747E
Authority key identifier: CE:12:21:35:E9:29:12:51:C3:E6:5E:DC:26:1A:4C:C4:10:CF:3B:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE122135E9291251C3E65EDC261A4CC410CF3BD5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/323830343a323763303a3a2f33342d3334203d3e20323633393230.roa
Signing time:             Tue 15 Apr 2025 01:57:06 +0000
ROA not before:           Tue 15 Apr 2025 01:52:06 +0000
ROA not after:            Tue 14 Apr 2026 01:57:06 +0000
asID:                     263920
IP address blocks:        2804:27c0::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/CE122135E9291251C3E65EDC261A4CC410CF3BD5.crl
                          rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/CE122135E9291251C3E65EDC261A4CC410CF3BD5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE122135E9291251C3E65EDC261A4CC410CF3BD5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 11:41:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:09:85:33:54:cd:fb:0c:db:af:43:ae:9e:98:cd:48:e8:8e:74:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE122135E9291251C3E65EDC261A4CC410CF3BD5
        Validity
            Not Before: Apr 15 01:52:06 2025 GMT
            Not After : Apr 14 01:57:06 2026 GMT
        Subject: CN=C22E3FC091FCAD0C6586DC05A8B434F7074A652D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:42:25:0d:22:96:fe:b5:c5:5f:40:94:7d:bd:
                    ff:fc:e5:6e:6a:6d:db:46:02:a7:df:19:34:39:11:
                    41:93:64:0f:58:ad:a8:e6:cc:14:ed:7c:a4:80:00:
                    5d:27:32:8a:0c:18:9c:3b:98:93:db:86:45:c7:06:
                    d7:91:c8:7f:7d:04:f9:08:18:55:24:e1:d8:a5:a9:
                    70:0a:06:b6:ce:8a:39:c5:20:1b:a9:6d:97:48:9c:
                    29:71:af:5e:5c:c2:d1:01:ed:45:86:90:d4:3d:43:
                    f4:e3:e8:66:1f:62:6c:bd:8d:a4:5e:48:be:3f:c8:
                    34:dc:6b:73:2c:32:d4:31:4d:6e:70:34:ce:d9:16:
                    51:97:be:83:3c:d0:bc:79:e7:10:79:f2:3f:64:75:
                    4c:0b:18:49:3b:55:bd:d7:31:1b:1f:89:8f:9e:7a:
                    d8:2f:7e:fd:38:9c:22:f5:58:48:c8:04:b7:7f:f7:
                    a7:48:88:54:8f:94:2a:bd:02:4f:af:64:d9:11:57:
                    76:90:cb:77:09:e1:48:52:38:11:46:f8:70:98:32:
                    a9:50:44:e8:d2:ec:b1:a9:56:03:09:04:bd:12:73:
                    d5:f8:fb:77:3f:ca:cb:7c:46:80:c2:67:d7:f8:25:
                    d8:68:7b:6a:c2:5c:64:f0:71:c3:a3:f9:57:a7:d1:
                    9b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:2E:3F:C0:91:FC:AD:0C:65:86:DC:05:A8:B4:34:F7:07:4A:65:2D
            X509v3 Authority Key Identifier:
                keyid:CE:12:21:35:E9:29:12:51:C3:E6:5E:DC:26:1A:4C:C4:10:CF:3B:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/CE122135E9291251C3E65EDC261A4CC410CF3BD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE122135E9291251C3E65EDC261A4CC410CF3BD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/323830343a323763303a3a2f33342d3334203d3e20323633393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27c0::/34

    Signature Algorithm: sha256WithRSAEncryption
         82:ee:31:39:9d:3c:6d:9a:6e:e3:70:a6:21:2a:41:35:be:bd:
         5f:e3:3d:41:72:9a:1a:1a:15:44:e7:2d:7c:d1:92:cf:ca:92:
         94:f3:ed:08:fd:4a:56:cd:f6:03:81:c7:c0:1e:71:b5:81:d2:
         d7:a7:d7:2e:19:88:b6:e4:f9:4e:f6:c9:e0:06:99:fd:38:03:
         2d:ba:29:8d:de:01:fc:af:e2:00:20:b5:bf:15:e7:21:e4:63:
         f1:28:f4:50:c9:5a:83:53:f4:df:1e:74:7d:39:0d:47:0f:7b:
         74:6c:cc:4b:c5:9b:a6:cc:8c:44:ea:16:47:78:30:ad:19:14:
         dd:f0:ec:55:3e:5e:2f:23:b4:e5:5c:f9:8b:e0:da:92:0c:7d:
         40:f3:7b:46:8f:92:0d:d4:b9:60:2f:b7:72:05:00:45:6f:3e:
         08:63:e4:b3:ea:e6:bf:22:8a:48:40:d6:1c:e3:04:b4:65:f1:
         f8:28:e0:cb:46:a6:60:1c:3a:fe:71:31:66:15:34:37:28:fe:
         09:38:a2:24:d8:83:f2:87:d1:30:1f:43:cc:5f:54:de:d2:a8:
         de:79:92:08:03:24:7f:f3:89:62:c3:04:e6:1e:8f:8f:4c:bd:
         49:fc:d8:c0:27:79:5e:ab:4c:c5:31:a7:05:63:2e:da:a6:02:
         5a:d3:a5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:26 2025 by rpki-client on console.sobornost.net