Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHTEcZxWriVWwwXs86nmWKrUp6aNapzsBn4WatXUNxe9/0/323830343a376462383a3a2f33322d313238203d3e20323731353738.roa
File:                     323830343a376462383a3a2f33322d313238203d3e20323731353738.roa (raw, json)
Hash identifier:          QV4bak4yJbutgIlmji9b6+UXVDaNSeP7XojS+orZIb4=
Subject key identifier:   DF:66:DE:E3:88:D8:05:10:28:5A:99:A4:D0:2E:54:13:8E:32:EE:17
Certificate issuer:       /CN=020B6025D315CBAEB1AA6B20873494F4BD2ED003
Certificate serial:       0E62AD095B993CB8386FB08C8D21D9AAF69831F6
Authority key identifier: 02:0B:60:25:D3:15:CB:AE:B1:AA:6B:20:87:34:94:F4:BD:2E:D0:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/020B6025D315CBAEB1AA6B20873494F4BD2ED003.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHTEcZxWriVWwwXs86nmWKrUp6aNapzsBn4WatXUNxe9/0/323830343a376462383a3a2f33322d313238203d3e20323731353738.roa
Signing time:             Fri 11 Apr 2025 21:02:01 +0000
ROA not before:           Fri 11 Apr 2025 20:57:01 +0000
ROA not after:            Fri 10 Apr 2026 21:02:01 +0000
asID:                     271578
IP address blocks:        2804:7db8::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FHTEcZxWriVWwwXs86nmWKrUp6aNapzsBn4WatXUNxe9/0/020B6025D315CBAEB1AA6B20873494F4BD2ED003.crl
                          rsync://rpki-repo.registro.br/repo/FHTEcZxWriVWwwXs86nmWKrUp6aNapzsBn4WatXUNxe9/0/020B6025D315CBAEB1AA6B20873494F4BD2ED003.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/020B6025D315CBAEB1AA6B20873494F4BD2ED003.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 22:19:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:62:ad:09:5b:99:3c:b8:38:6f:b0:8c:8d:21:d9:aa:f6:98:31:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=020B6025D315CBAEB1AA6B20873494F4BD2ED003
        Validity
            Not Before: Apr 11 20:57:01 2025 GMT
            Not After : Apr 10 21:02:01 2026 GMT
        Subject: CN=DF66DEE388D80510285A99A4D02E54138E32EE17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c9:93:62:b5:2a:e8:01:3d:e3:88:44:99:2f:
                    5d:a1:7e:fa:ef:db:a7:4f:a1:d2:ed:3f:24:80:2c:
                    23:2c:46:40:24:04:23:9b:bb:62:99:4c:98:f4:c3:
                    11:d6:12:ef:01:fa:04:b2:53:63:a5:a3:89:af:55:
                    75:5e:32:4c:ba:87:24:a4:84:63:ee:e9:7b:f8:a3:
                    d4:c5:c3:2c:bd:08:55:d3:1f:cd:d9:d8:55:d4:5d:
                    1d:68:d7:c1:08:06:57:73:ae:86:5e:5a:94:a1:65:
                    52:bb:3a:13:b9:5f:4f:46:17:de:2d:b1:10:ab:af:
                    39:af:3b:ae:e0:d7:07:58:e4:7d:dd:60:87:f0:27:
                    22:dd:b0:98:96:68:46:9e:3c:e3:16:7c:f4:c9:10:
                    01:f3:11:ef:45:cb:cb:88:85:ee:d9:f8:7e:02:f5:
                    89:a5:4e:ba:86:9d:ea:7e:cb:b8:13:14:cc:e8:a7:
                    fb:c5:c5:c0:1e:78:5f:b8:5b:11:55:58:c6:79:01:
                    f7:69:46:e9:7b:2b:4b:de:be:3f:40:01:9e:18:6a:
                    f0:03:54:01:96:2b:2e:bd:af:d1:30:36:dd:72:f3:
                    6d:1c:ec:20:3c:50:98:e7:ed:eb:56:d6:e0:86:d5:
                    5f:be:e1:7a:dc:a5:87:62:44:93:f7:6a:ad:73:50:
                    be:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:66:DE:E3:88:D8:05:10:28:5A:99:A4:D0:2E:54:13:8E:32:EE:17
            X509v3 Authority Key Identifier:
                keyid:02:0B:60:25:D3:15:CB:AE:B1:AA:6B:20:87:34:94:F4:BD:2E:D0:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHTEcZxWriVWwwXs86nmWKrUp6aNapzsBn4WatXUNxe9/0/020B6025D315CBAEB1AA6B20873494F4BD2ED003.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/020B6025D315CBAEB1AA6B20873494F4BD2ED003.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHTEcZxWriVWwwXs86nmWKrUp6aNapzsBn4WatXUNxe9/0/323830343a376462383a3a2f33322d313238203d3e20323731353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7db8::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:e7:b4:07:96:ad:3c:b0:7a:86:72:f5:47:99:02:fa:5d:cc:
         a9:67:da:81:8f:38:95:e2:0b:4f:6e:36:e3:06:79:10:57:8d:
         52:16:19:db:23:f6:b7:f3:91:8e:c5:e9:da:41:d8:5c:76:85:
         6c:ce:07:19:5c:9c:b1:0f:df:d5:31:b0:76:52:d5:78:5c:ef:
         a5:a6:fb:0c:65:66:0c:2d:35:fd:1e:94:62:b7:7c:52:32:f6:
         6d:28:59:7f:25:64:0f:9e:eb:30:e6:cd:e5:d4:8e:7b:cb:ad:
         a2:9b:1e:6d:33:9b:ca:2c:c3:fa:c6:e6:47:c3:45:72:68:d9:
         7e:7a:8a:b9:e6:d3:4f:75:0c:41:32:be:55:d5:c4:de:64:73:
         8f:42:e7:80:a8:6e:e0:f2:06:9e:02:a6:1a:95:42:81:ef:93:
         d7:23:6c:52:ff:50:29:b4:b5:04:db:12:5c:ab:bd:aa:32:ab:
         1c:d3:17:9f:35:96:39:a3:e9:da:ed:4b:ef:18:e1:61:8b:fc:
         65:8e:30:da:ef:d8:ed:e1:2e:cf:3f:0a:ae:c5:31:8c:b2:49:
         6d:70:25:54:44:2b:44:5d:20:34:45:8c:e5:c3:60:39:f5:27:
         a9:14:b3:ec:23:ec:0b:94:15:52:0c:10:6b:37:7a:df:f8:84:
         1e:cc:bc:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:13:26 2025 by rpki-client on console.sobornost.net