Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/323830343a333664343a383030303a3a2f33342d3334203d3e20323636333735.roa
File:                     323830343a333664343a383030303a3a2f33342d3334203d3e20323636333735.roa (raw, json)
Hash identifier:          dEKit6bCSIWBlvHeTloK73JpqUkCL6qVxPkJBCv2mWw=
Subject key identifier:   CA:9B:A6:92:5F:43:91:6B:1B:89:1E:70:FE:8E:0A:3A:26:8B:C4:ED
Certificate issuer:       /CN=D6A90BECE8B023958D9E4927F946B5C29F86D4EA
Certificate serial:       4F707EBE80CD08DB5249F51F16FB320A807C00A1
Authority key identifier: D6:A9:0B:EC:E8:B0:23:95:8D:9E:49:27:F9:46:B5:C2:9F:86:D4:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6A90BECE8B023958D9E4927F946B5C29F86D4EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/323830343a333664343a383030303a3a2f33342d3334203d3e20323636333735.roa
Signing time:             Mon 07 Apr 2025 17:27:59 +0000
ROA not before:           Mon 07 Apr 2025 17:22:59 +0000
ROA not after:            Mon 06 Apr 2026 17:27:59 +0000
asID:                     266375
IP address blocks:        2804:36d4:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/D6A90BECE8B023958D9E4927F946B5C29F86D4EA.crl
                          rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/D6A90BECE8B023958D9E4927F946B5C29F86D4EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6A90BECE8B023958D9E4927F946B5C29F86D4EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 21:26:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:70:7e:be:80:cd:08:db:52:49:f5:1f:16:fb:32:0a:80:7c:00:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6A90BECE8B023958D9E4927F946B5C29F86D4EA
        Validity
            Not Before: Apr  7 17:22:59 2025 GMT
            Not After : Apr  6 17:27:59 2026 GMT
        Subject: CN=CA9BA6925F43916B1B891E70FE8E0A3A268BC4ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:17:ee:59:c8:0a:0e:aa:78:4a:20:d1:ac:61:
                    d1:32:37:29:70:db:e4:5e:5f:7a:9a:26:11:d8:f0:
                    1b:db:8f:c9:d8:79:5d:9e:d3:17:4f:fe:0d:db:22:
                    72:d2:c5:18:cb:c8:af:10:ac:aa:53:50:7c:57:34:
                    35:c4:41:d4:70:2e:51:a7:7b:f8:d6:b7:12:ca:58:
                    8d:c6:0b:b0:05:3c:9e:cf:7d:36:e5:d3:7a:cb:78:
                    3d:58:8c:de:41:a5:79:47:f3:49:90:a7:94:ae:fd:
                    2e:87:97:63:88:bd:3f:85:83:b1:48:52:f4:d6:38:
                    9c:ed:b1:c2:32:00:f4:81:89:51:44:71:6a:0b:3c:
                    41:79:05:1c:0c:de:0f:8c:bd:98:3b:31:c1:37:b5:
                    d3:37:38:a4:37:cc:05:d9:da:73:37:74:4e:2d:bb:
                    e9:46:db:27:22:45:6e:a0:8b:91:d2:f4:fa:fd:87:
                    f9:9e:6b:c6:5d:e0:00:84:12:66:c6:e7:bb:5f:c5:
                    cf:c3:31:d7:ed:f7:96:ab:2f:1a:b3:90:1f:0d:44:
                    37:9b:72:98:a0:07:ed:69:15:9d:f0:cb:6f:5c:e6:
                    a6:bb:85:c5:ed:7f:be:fa:f3:cb:c4:d4:2e:a5:8a:
                    72:3d:5f:d2:89:59:85:21:28:e9:a7:ab:6e:a4:a9:
                    7c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:9B:A6:92:5F:43:91:6B:1B:89:1E:70:FE:8E:0A:3A:26:8B:C4:ED
            X509v3 Authority Key Identifier:
                keyid:D6:A9:0B:EC:E8:B0:23:95:8D:9E:49:27:F9:46:B5:C2:9F:86:D4:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/D6A90BECE8B023958D9E4927F946B5C29F86D4EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6A90BECE8B023958D9E4927F946B5C29F86D4EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/323830343a333664343a383030303a3a2f33342d3334203d3e20323636333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:36d4:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         43:77:2f:02:0e:7c:d3:9d:54:e0:f3:ec:19:89:97:8d:70:55:
         f8:92:79:c0:c1:b9:f2:b2:f5:a2:e8:7b:f6:03:a0:0e:0d:78:
         c9:85:45:36:6b:82:e1:37:a1:2c:bf:d7:78:d2:25:20:02:5f:
         65:03:b1:06:f7:2a:10:a2:5d:28:0f:71:80:70:75:88:4e:cf:
         06:3b:df:c3:49:37:a1:fb:08:36:6b:ca:08:dd:9b:25:ed:9d:
         f3:47:2b:f8:a6:04:ff:22:9b:ac:d5:b2:58:dc:8c:b6:18:25:
         a6:5f:2b:cc:3a:0c:e1:42:32:e8:0e:3d:44:bf:0f:dc:16:2d:
         b1:01:ae:fc:68:94:4b:48:55:d7:68:c9:3a:7a:d2:10:92:bd:
         7e:2e:af:0b:87:66:54:01:9f:bb:13:c7:78:f4:21:31:bb:85:
         ea:92:f8:6e:43:0d:42:47:5e:1f:c2:60:39:c7:08:09:76:31:
         33:5b:06:48:bd:31:ac:65:6c:14:ed:4f:69:9e:ec:5b:13:0d:
         2d:fc:b3:62:4a:47:e9:00:c8:27:e5:d4:38:2b:ab:1d:9b:4c:
         08:78:b2:79:75:4a:be:90:41:6c:2a:20:e0:82:53:26:5b:cd:
         03:02:bf:0f:d1:97:7c:0d:57:45:10:65:83:98:21:62:d9:9c:
         c3:a9:48:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:56 2025 by rpki-client on console.sobornost.net