Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a3132313a3a2f34382d3438203d3e20323639353636.roa
File:                     323830343a363638383a3132313a3a2f34382d3438203d3e20323639353636.roa (raw, json)
Hash identifier:          WxatfqTa0lIMrmV7ncF4vj0K30qmMXBmd2uCMPZcIJw=
Subject key identifier:   49:D1:8C:3C:57:77:42:96:90:4E:BD:31:8C:18:E6:B3:11:FC:24:47
Certificate issuer:       /CN=8B76B82695398F313AF28AE7E54FA9B6036F0B82
Certificate serial:       72F4B1205703E7EB25BC90FD341A7800D2176081
Authority key identifier: 8B:76:B8:26:95:39:8F:31:3A:F2:8A:E7:E5:4F:A9:B6:03:6F:0B:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B76B82695398F313AF28AE7E54FA9B6036F0B82.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a3132313a3a2f34382d3438203d3e20323639353636.roa
Signing time:             Sat 19 Apr 2025 20:27:02 +0000
ROA not before:           Sat 19 Apr 2025 20:22:02 +0000
ROA not after:            Sat 18 Apr 2026 20:27:02 +0000
asID:                     269566
IP address blocks:        2804:6688:121::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/8B76B82695398F313AF28AE7E54FA9B6036F0B82.crl
                          rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/8B76B82695398F313AF28AE7E54FA9B6036F0B82.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B76B82695398F313AF28AE7E54FA9B6036F0B82.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 06:05:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:f4:b1:20:57:03:e7:eb:25:bc:90:fd:34:1a:78:00:d2:17:60:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B76B82695398F313AF28AE7E54FA9B6036F0B82
        Validity
            Not Before: Apr 19 20:22:02 2025 GMT
            Not After : Apr 18 20:27:02 2026 GMT
        Subject: CN=49D18C3C57774296904EBD318C18E6B311FC2447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8f:4c:a2:d1:d5:58:98:ea:5c:72:44:b3:80:
                    39:fd:b2:ab:db:93:48:a5:97:90:1f:85:9e:cb:fc:
                    64:a0:06:86:b9:33:dd:e9:40:7b:ad:c5:17:04:52:
                    af:f8:ac:c4:aa:f3:8b:b2:4e:fc:fd:c2:ec:a1:c8:
                    07:db:eb:0f:61:40:f0:ae:4e:71:01:bd:2d:a5:59:
                    69:e7:5e:53:9b:2e:11:f2:2e:46:87:af:05:d3:e3:
                    8d:11:af:8c:4b:ef:42:5f:02:9b:69:34:f5:d1:a8:
                    a5:b6:0b:7f:70:d9:a0:73:22:2d:74:1e:91:16:86:
                    9e:bd:9e:3d:23:0c:12:50:8a:fc:32:ab:f9:9c:44:
                    af:bb:66:77:1f:df:82:93:d8:d0:a8:0b:cf:90:4b:
                    59:42:54:b9:ad:57:4d:b4:eb:84:bf:60:d4:cf:dc:
                    f9:23:9b:4b:05:04:b0:f0:85:c6:3a:1b:e2:78:62:
                    2e:bd:3d:b0:6e:d6:ea:20:14:da:d8:72:eb:0a:d3:
                    4d:bc:13:92:17:e1:db:48:91:1c:91:d5:6e:2d:e0:
                    e5:96:2c:60:60:76:88:ae:cb:37:9f:29:07:11:29:
                    8c:d9:43:30:29:88:e1:d8:c8:81:90:4a:4e:30:c8:
                    15:ba:00:c3:44:b7:0d:b4:38:94:77:2a:06:77:71:
                    50:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:D1:8C:3C:57:77:42:96:90:4E:BD:31:8C:18:E6:B3:11:FC:24:47
            X509v3 Authority Key Identifier:
                keyid:8B:76:B8:26:95:39:8F:31:3A:F2:8A:E7:E5:4F:A9:B6:03:6F:0B:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/8B76B82695398F313AF28AE7E54FA9B6036F0B82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B76B82695398F313AF28AE7E54FA9B6036F0B82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a3132313a3a2f34382d3438203d3e20323639353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6688:121::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:41:de:93:58:62:18:bc:4b:14:f2:91:64:95:40:fa:2b:b4:
         4b:7d:08:0c:62:32:3d:87:db:1c:71:92:20:e0:27:cd:4b:ba:
         aa:c2:81:a5:f5:e7:d4:25:82:b6:5e:6d:75:44:30:0e:4c:3d:
         4f:d0:cb:73:04:b6:f0:01:39:9d:26:e8:4a:93:44:a0:a1:f2:
         2a:18:15:3f:70:66:36:5e:19:85:75:b3:7a:a6:2b:e0:05:29:
         f1:5b:de:69:38:8e:41:1e:64:93:27:8c:cb:24:0f:0d:a7:a3:
         ec:51:eb:30:18:cd:18:61:cf:fe:ed:b5:ca:e1:68:b2:23:fb:
         c9:a9:9d:41:06:b4:72:10:1f:25:43:a1:be:a4:d5:5c:46:a9:
         7c:cc:ab:5f:96:51:b6:6f:ad:7f:51:89:bf:65:b4:68:84:64:
         ef:9f:f2:71:41:2b:fc:08:25:5c:ee:63:51:57:a7:be:48:a6:
         0c:24:b2:e6:67:a5:5c:f2:52:32:57:3e:d9:ff:77:79:a3:1e:
         12:04:39:bb:b3:b8:c8:71:6b:74:37:d3:d5:bd:34:70:32:a5:
         d9:71:87:c1:2f:2c:55:0f:38:2f:ca:d1:d0:75:02:4c:6f:a3:
         e5:9f:ba:0d:f3:0a:e5:d6:ba:0a:07:92:78:99:81:f0:e5:1d:
         9a:62:96:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:22:06 2025 by rpki-client on console.sobornost.net