Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a3132303a3a2f34382d3438203d3e20323639353636.roa
File:                     323830343a363638383a3132303a3a2f34382d3438203d3e20323639353636.roa (raw, json)
Hash identifier:          3J4i8ymovwXdrrKseP13m5fKULRUap3gznd7ea+IUVI=
Subject key identifier:   C3:3E:EB:54:D3:21:66:07:9A:F2:EB:69:71:96:44:39:0F:41:2D:F0
Certificate issuer:       /CN=8B76B82695398F313AF28AE7E54FA9B6036F0B82
Certificate serial:       5F2562EA09A39CAABD38212FC504BDA55F23F86E
Authority key identifier: 8B:76:B8:26:95:39:8F:31:3A:F2:8A:E7:E5:4F:A9:B6:03:6F:0B:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B76B82695398F313AF28AE7E54FA9B6036F0B82.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a3132303a3a2f34382d3438203d3e20323639353636.roa
Signing time:             Sat 19 Apr 2025 20:26:53 +0000
ROA not before:           Sat 19 Apr 2025 20:21:53 +0000
ROA not after:            Sat 18 Apr 2026 20:26:53 +0000
asID:                     269566
IP address blocks:        2804:6688:120::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/8B76B82695398F313AF28AE7E54FA9B6036F0B82.crl
                          rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/8B76B82695398F313AF28AE7E54FA9B6036F0B82.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B76B82695398F313AF28AE7E54FA9B6036F0B82.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 06:05:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:25:62:ea:09:a3:9c:aa:bd:38:21:2f:c5:04:bd:a5:5f:23:f8:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B76B82695398F313AF28AE7E54FA9B6036F0B82
        Validity
            Not Before: Apr 19 20:21:53 2025 GMT
            Not After : Apr 18 20:26:53 2026 GMT
        Subject: CN=C33EEB54D32166079AF2EB69719644390F412DF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:07:9e:0a:28:3c:e3:6c:8a:72:7d:a8:2e:d3:
                    09:4b:e2:d5:89:aa:b7:94:39:f9:55:2a:23:67:1f:
                    64:b7:2c:b6:58:d2:00:cb:1c:c8:1e:f7:d0:03:f9:
                    ff:36:0c:20:f6:cb:d1:c7:11:6d:72:ab:70:87:e1:
                    77:3d:0b:88:52:c5:1c:5e:b9:e0:16:24:bc:be:11:
                    1e:5a:2f:1c:6a:60:ac:94:37:02:84:9b:f6:a4:6a:
                    2d:df:e7:81:51:a9:70:e4:a0:b6:1f:a5:58:fb:19:
                    bb:1d:fd:67:29:ac:64:31:6c:f6:80:86:d8:45:69:
                    5a:81:75:cf:5e:09:5d:a5:51:ef:c0:71:2d:3f:cb:
                    73:34:81:44:7d:0b:b4:d3:4b:ec:cb:2f:2e:e0:43:
                    3c:c8:c9:50:fc:a9:f7:40:5c:04:5b:ca:a2:cb:89:
                    c0:74:31:08:c7:a3:6a:dd:8c:da:9b:e0:81:8f:91:
                    91:16:dc:59:53:17:11:8f:a7:48:a4:82:52:e7:8a:
                    a5:df:f4:98:7a:46:c0:36:cb:d6:e5:38:07:78:b9:
                    a8:59:11:c3:84:98:9c:bf:43:f0:15:8a:21:01:b0:
                    a7:51:d2:af:a1:22:fc:72:91:55:ee:45:f1:45:f5:
                    b6:e1:55:0a:6c:d1:55:9b:2f:53:2b:5b:56:50:09:
                    b0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:3E:EB:54:D3:21:66:07:9A:F2:EB:69:71:96:44:39:0F:41:2D:F0
            X509v3 Authority Key Identifier:
                keyid:8B:76:B8:26:95:39:8F:31:3A:F2:8A:E7:E5:4F:A9:B6:03:6F:0B:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/8B76B82695398F313AF28AE7E54FA9B6036F0B82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B76B82695398F313AF28AE7E54FA9B6036F0B82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a3132303a3a2f34382d3438203d3e20323639353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6688:120::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:0a:b5:19:bf:62:31:49:a8:05:9b:0e:85:06:15:bd:2f:bd:
         1a:4c:c2:b3:03:93:b1:00:99:5a:4b:b1:2b:05:ec:bc:ec:89:
         6b:a5:5e:b0:4b:15:75:55:47:4a:f6:5d:93:45:5e:e8:bb:1e:
         04:24:9a:25:b3:82:65:16:19:d9:65:d5:60:42:72:d6:51:09:
         b8:33:aa:19:ff:2e:46:75:cd:eb:d6:ae:eb:6e:0e:f2:fa:6d:
         39:af:14:85:67:59:1f:c4:83:bf:b8:d5:4b:40:76:33:bc:13:
         09:59:00:82:eb:55:d5:85:69:81:91:88:71:d6:d5:4e:c9:7b:
         2e:55:ee:36:9f:93:a2:6d:7b:fd:e9:41:6d:f7:32:e0:a2:8a:
         ed:9d:87:e1:9a:2f:02:80:00:2a:59:1a:f3:88:64:be:e3:f4:
         2c:8f:c9:48:43:06:14:a9:a0:92:a9:3a:ac:5e:62:f7:85:33:
         1f:23:19:7d:d3:d8:bd:ca:bf:e9:a0:83:af:21:dc:d5:69:a2:
         3b:73:32:de:a7:2d:44:64:a7:2f:fa:5f:54:22:ac:a0:91:98:
         22:e1:0e:1f:e8:f7:00:1f:4e:79:85:0b:53:75:e7:40:ac:9c:
         7c:68:ce:c9:2f:cf:bf:9f:9b:51:b5:61:49:4b:fe:50:37:0f:
         bc:3b:33:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:22:06 2025 by rpki-client on console.sobornost.net