Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ExamRGe3zBiJppCRBT5AXU2Ww5FUb4tYhmUHyL3NRcph/1/323830343a386434303a3a2f33322d3438203d3e20323733333435.roa
File:                     323830343a386434303a3a2f33322d3438203d3e20323733333435.roa (raw, json)
Hash identifier:          KcrDKrgcxtqr+UNhLYe3eNiV3QjEZIzC1dV0eRkguyE=
Subject key identifier:   B2:7C:85:C2:E6:4F:92:A0:E2:EE:36:92:BF:1E:91:35:E5:23:9F:FD
Certificate issuer:       /CN=A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4
Certificate serial:       5285FD2D58D22E8274A5FC8F681FDB7C474DD9
Authority key identifier: A0:A8:EF:33:7A:CF:86:96:4B:1E:46:A7:D6:BA:5B:0F:94:D8:74:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ExamRGe3zBiJppCRBT5AXU2Ww5FUb4tYhmUHyL3NRcph/1/323830343a386434303a3a2f33322d3438203d3e20323733333435.roa
Signing time:             Thu 06 Mar 2025 18:23:47 +0000
ROA not before:           Thu 06 Mar 2025 18:18:47 +0000
ROA not after:            Thu 05 Mar 2026 18:23:47 +0000
asID:                     273345
IP address blocks:        2804:8d40::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ExamRGe3zBiJppCRBT5AXU2Ww5FUb4tYhmUHyL3NRcph/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.crl
                          rsync://rpki-repo.registro.br/repo/ExamRGe3zBiJppCRBT5AXU2Ww5FUb4tYhmUHyL3NRcph/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:85:fd:2d:58:d2:2e:82:74:a5:fc:8f:68:1f:db:7c:47:4d:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4
        Validity
            Not Before: Mar  6 18:18:47 2025 GMT
            Not After : Mar  5 18:23:47 2026 GMT
        Subject: CN=B27C85C2E64F92A0E2EE3692BF1E9135E5239FFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3f:ff:8d:53:ad:c2:4c:80:00:3a:00:a9:4d:
                    b7:9e:02:69:98:fc:ea:a2:56:3b:55:8c:d3:19:b9:
                    59:40:bf:83:50:c4:48:df:05:eb:f4:66:91:ae:c9:
                    87:2d:ed:dc:c6:cf:54:93:58:67:01:59:fd:c1:02:
                    fe:fe:8d:af:cd:a1:8a:de:42:f0:c2:4f:ea:36:4d:
                    c0:58:4a:8c:6a:33:07:c7:c9:bb:4b:8c:2c:23:7b:
                    b9:53:68:dd:44:b2:f0:3c:49:e9:a2:dd:a0:cf:1c:
                    82:8f:22:3a:85:77:c6:7d:14:56:57:c2:54:25:a3:
                    50:39:df:cb:a7:a5:85:51:33:f2:b0:18:cc:5c:fa:
                    b1:2c:90:dd:a8:fb:e3:b3:2c:c7:01:81:ed:e1:92:
                    d0:8e:73:83:cc:c5:d3:e9:6b:18:4e:46:0d:b7:e6:
                    00:41:97:40:df:7e:c6:cc:4c:3e:47:3b:69:6e:d4:
                    98:19:a3:3f:01:95:0d:10:48:e8:b0:be:b3:20:a9:
                    f2:d2:2d:49:8c:cb:33:d8:b3:d1:ec:a1:c7:1d:63:
                    7a:09:f8:fc:04:75:a6:f0:c1:42:2d:a6:aa:fb:2b:
                    57:ad:96:09:da:20:81:d1:05:4a:c4:42:ea:83:4b:
                    4a:7f:16:27:b1:eb:1b:ea:f7:e3:60:d3:55:ff:e2:
                    be:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:7C:85:C2:E6:4F:92:A0:E2:EE:36:92:BF:1E:91:35:E5:23:9F:FD
            X509v3 Authority Key Identifier:
                keyid:A0:A8:EF:33:7A:CF:86:96:4B:1E:46:A7:D6:BA:5B:0F:94:D8:74:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ExamRGe3zBiJppCRBT5AXU2Ww5FUb4tYhmUHyL3NRcph/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ExamRGe3zBiJppCRBT5AXU2Ww5FUb4tYhmUHyL3NRcph/1/323830343a386434303a3a2f33322d3438203d3e20323733333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8d40::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:23:c9:57:fd:7c:71:a4:0a:e5:82:9d:20:e8:fe:b2:e4:aa:
         0f:e8:fa:28:7d:6e:13:27:30:36:b3:73:e5:bd:1f:e1:a5:14:
         ab:9e:e2:6e:ec:62:40:3f:2d:92:54:61:ab:e8:eb:09:b3:2a:
         39:15:68:cd:d9:c2:7c:ea:ff:d0:8f:7d:a7:ff:c3:08:8c:d0:
         9e:c4:c6:d8:ac:48:d3:3d:3c:f5:aa:69:89:77:d7:f6:7d:21:
         88:7e:ef:52:f2:49:88:d9:9d:2e:eb:f1:9f:df:80:fd:eb:b4:
         c6:0e:06:7d:f3:cb:f6:ba:43:3f:3c:22:df:6d:54:08:46:44:
         43:0f:f6:da:88:29:f6:60:13:9c:43:9b:d5:57:29:dd:95:bd:
         31:f4:73:59:49:0b:80:30:11:eb:81:96:60:92:56:5a:72:15:
         7c:a0:84:7d:eb:6f:af:44:4d:d2:26:2f:d6:b5:a5:92:ce:db:
         cb:d4:18:2c:b3:85:51:6d:25:78:f5:a8:24:5e:6b:07:9c:1a:
         f1:87:be:d1:16:1c:6a:cd:93:24:8a:7b:29:7f:87:fc:d8:d2:
         2a:74:7e:c2:2a:07:bd:f4:4b:e1:2f:7e:64:14:6f:3e:47:6a:
         26:52:ab:09:07:9a:02:84:e7:f7:a5:90:f5:af:58:1f:97:31:
         8c:22:a6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:40:45 2025 by rpki-client on console.sobornost.net