Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ELV7EmnPN2DqhE196sFJRwCGnw9hCXbWp6vCKLuPM9Zm/1/323830343a3763383a3a2f33322d3438203d3e20323632333233.roa
File:                     323830343a3763383a3a2f33322d3438203d3e20323632333233.roa (raw, json)
Hash identifier:          l950bbEUZPcnD55/3yLCXCEnimr49Pmo8z9UDAMkfkk=
Subject key identifier:   51:09:02:9B:14:31:65:3C:0A:7D:50:A4:C5:C0:1D:0C:94:AB:64:71
Certificate issuer:       /CN=BF6A5837C3F4344BD78A072E1B9834FDE6824283
Certificate serial:       0FA7CA24346D1B0A146A8FC7822222EB79B47798
Authority key identifier: BF:6A:58:37:C3:F4:34:4B:D7:8A:07:2E:1B:98:34:FD:E6:82:42:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF6A5837C3F4344BD78A072E1B9834FDE6824283.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ELV7EmnPN2DqhE196sFJRwCGnw9hCXbWp6vCKLuPM9Zm/1/323830343a3763383a3a2f33322d3438203d3e20323632333233.roa
Signing time:             Thu 06 Mar 2025 09:19:45 +0000
ROA not before:           Thu 06 Mar 2025 09:14:45 +0000
ROA not after:            Thu 05 Mar 2026 09:19:45 +0000
asID:                     262323
IP address blocks:        2804:7c8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ELV7EmnPN2DqhE196sFJRwCGnw9hCXbWp6vCKLuPM9Zm/1/BF6A5837C3F4344BD78A072E1B9834FDE6824283.crl
                          rsync://rpki-repo.registro.br/repo/ELV7EmnPN2DqhE196sFJRwCGnw9hCXbWp6vCKLuPM9Zm/1/BF6A5837C3F4344BD78A072E1B9834FDE6824283.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF6A5837C3F4344BD78A072E1B9834FDE6824283.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:a7:ca:24:34:6d:1b:0a:14:6a:8f:c7:82:22:22:eb:79:b4:77:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF6A5837C3F4344BD78A072E1B9834FDE6824283
        Validity
            Not Before: Mar  6 09:14:45 2025 GMT
            Not After : Mar  5 09:19:45 2026 GMT
        Subject: CN=5109029B1431653C0A7D50A4C5C01D0C94AB6471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:70:a5:28:20:be:9f:1f:31:61:5d:5b:0d:04:
                    94:6c:bc:cf:c7:b3:db:05:d5:1f:67:5f:1b:df:6a:
                    04:8d:94:5a:07:a3:c3:d0:57:06:cb:5c:d6:b3:d9:
                    8c:1b:28:de:66:36:28:0e:4b:24:81:b9:9e:63:3b:
                    e6:eb:db:72:d9:f2:95:34:45:38:4f:1e:80:e8:77:
                    ef:25:41:0c:67:f9:f2:7a:6f:3a:53:44:23:4b:9a:
                    78:ef:55:a1:fe:a6:9d:dd:c9:5a:84:e4:4e:7a:64:
                    bb:8d:02:36:5d:2a:37:aa:47:b1:61:71:92:99:64:
                    57:26:c1:b8:9b:0c:80:94:e1:7b:20:50:bc:5b:fd:
                    4d:30:78:ec:93:bb:06:2a:82:23:c8:5d:80:ea:ec:
                    10:59:0e:3a:41:d7:99:ed:f9:5e:f3:ed:54:07:81:
                    1e:ce:48:50:1a:09:5a:20:46:17:19:7c:89:bc:08:
                    1b:50:b4:f1:65:d9:91:ff:bb:0f:31:01:8e:4e:b8:
                    69:a9:2c:90:93:35:69:17:a6:4c:d6:9b:c6:9e:da:
                    f5:52:3a:cb:7d:c4:cc:37:5b:37:7f:4f:5a:12:e3:
                    2c:af:37:b5:10:77:9c:a8:01:d9:69:87:26:f0:15:
                    33:cc:3b:f9:87:3b:f6:8e:0a:9a:a6:12:35:ef:36:
                    cf:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:09:02:9B:14:31:65:3C:0A:7D:50:A4:C5:C0:1D:0C:94:AB:64:71
            X509v3 Authority Key Identifier:
                keyid:BF:6A:58:37:C3:F4:34:4B:D7:8A:07:2E:1B:98:34:FD:E6:82:42:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ELV7EmnPN2DqhE196sFJRwCGnw9hCXbWp6vCKLuPM9Zm/1/BF6A5837C3F4344BD78A072E1B9834FDE6824283.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF6A5837C3F4344BD78A072E1B9834FDE6824283.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ELV7EmnPN2DqhE196sFJRwCGnw9hCXbWp6vCKLuPM9Zm/1/323830343a3763383a3a2f33322d3438203d3e20323632333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:4c:2d:61:79:d9:5c:d5:77:dc:a0:ca:81:bb:8d:82:0a:7b:
         12:b0:91:71:d3:c3:05:f0:e4:6c:d1:5f:0e:9d:87:36:83:65:
         7f:52:49:47:28:79:cc:3a:01:64:70:0a:22:cf:35:f7:3c:a0:
         c9:b5:aa:36:2d:62:bc:df:74:20:e1:4b:77:37:9d:a0:59:c8:
         e0:c8:0f:ba:cf:71:10:83:20:77:d3:18:39:f2:cd:a9:67:9e:
         42:d4:c4:60:08:c4:81:99:72:a1:7a:ec:2f:cc:0c:a8:1d:48:
         36:0d:c0:4f:9f:2f:33:e9:a0:65:a1:e0:f0:80:ea:f5:6b:c5:
         30:ff:7d:a4:21:74:8a:ac:32:82:c9:37:b2:57:e1:cc:44:7f:
         99:9a:74:5d:27:93:67:35:dc:e4:24:c6:c4:b3:cb:eb:13:33:
         c4:90:50:de:f1:7f:79:53:38:5b:3f:72:03:42:09:63:c3:da:
         80:c6:88:4b:de:50:d0:96:4d:be:d2:46:d2:98:85:c5:6c:85:
         b0:84:e3:9f:74:cf:5c:46:70:30:2a:94:36:3d:13:a1:85:46:
         12:c9:03:e4:31:ae:a8:ee:fb:e0:97:6c:af:47:c8:71:ac:79:
         e4:f0:1f:95:84:77:cf:d9:0a:06:39:cb:8a:07:f4:d1:e2:73:
         0c:57:59:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:39 2025 by rpki-client on console.sobornost.net