Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FVMNfbMJRdPuZm33wrSQPhuaojM5DEFnFPvNa21hQnCq/0/323830343a373738303a3a2f33322d3336203d3e20323731313832.roa
File:                     323830343a373738303a3a2f33322d3336203d3e20323731313832.roa (raw, json)
Hash identifier:          e7oyueUbzc0jnkJ9m/zFP2O9nhQs7u9mRaVhrJJIRQo=
Subject key identifier:   9E:6F:33:0A:A1:2C:38:F0:87:8E:4E:36:6C:9C:5C:64:FE:96:A6:CF
Certificate issuer:       /CN=928E3532313B68B88D73621D23280068103FA0CC
Certificate serial:       344C9E9292E3ED0B53980DE0C0842B0A2FBBC6B3
Authority key identifier: 92:8E:35:32:31:3B:68:B8:8D:73:62:1D:23:28:00:68:10:3F:A0:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/928E3532313B68B88D73621D23280068103FA0CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FVMNfbMJRdPuZm33wrSQPhuaojM5DEFnFPvNa21hQnCq/0/323830343a373738303a3a2f33322d3336203d3e20323731313832.roa
Signing time:             Mon 21 Apr 2025 13:01:15 +0000
ROA not before:           Mon 21 Apr 2025 12:56:15 +0000
ROA not after:            Mon 20 Apr 2026 13:01:15 +0000
asID:                     271182
IP address blocks:        2804:7780::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FVMNfbMJRdPuZm33wrSQPhuaojM5DEFnFPvNa21hQnCq/0/928E3532313B68B88D73621D23280068103FA0CC.crl
                          rsync://rpki-repo.registro.br/repo/FVMNfbMJRdPuZm33wrSQPhuaojM5DEFnFPvNa21hQnCq/0/928E3532313B68B88D73621D23280068103FA0CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/928E3532313B68B88D73621D23280068103FA0CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 22:19:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:4c:9e:92:92:e3:ed:0b:53:98:0d:e0:c0:84:2b:0a:2f:bb:c6:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=928E3532313B68B88D73621D23280068103FA0CC
        Validity
            Not Before: Apr 21 12:56:15 2025 GMT
            Not After : Apr 20 13:01:15 2026 GMT
        Subject: CN=9E6F330AA12C38F0878E4E366C9C5C64FE96A6CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9b:81:92:7c:d5:a5:1c:d0:c6:94:51:40:37:
                    c9:d5:87:fb:6c:3d:6a:8c:b5:f3:72:31:88:9d:fc:
                    09:b3:84:83:a3:11:50:dc:97:07:32:9e:98:f3:20:
                    cf:0b:f7:fb:dc:57:fa:b6:34:e5:db:89:60:bb:6e:
                    fd:77:d7:dd:b7:3a:6d:26:8d:4f:33:49:dd:2f:b7:
                    e7:f1:75:e3:35:47:3c:fc:ee:73:f3:ba:05:20:b9:
                    36:57:02:5f:0c:81:9a:ab:37:e9:0c:57:cb:e5:ce:
                    a9:de:b4:e7:af:04:32:fe:13:37:88:bd:d0:09:c4:
                    f6:9a:c8:49:fe:d1:ee:b2:1c:07:e0:5b:35:b4:e0:
                    fa:87:09:ca:2c:e0:ea:31:e6:4e:53:be:82:a3:a3:
                    d2:c6:b1:24:5b:14:9d:3e:38:c6:01:c0:cc:fe:86:
                    74:cc:38:4a:00:54:fc:e4:5d:a1:bf:14:c9:88:09:
                    c0:25:9f:56:f2:61:45:15:f0:9a:bc:73:93:76:9f:
                    39:d9:8d:70:fa:a2:48:43:1d:d8:2f:27:0a:9e:6c:
                    9c:c0:5f:19:a8:62:1b:99:71:c6:71:52:3d:3f:91:
                    71:7a:99:c7:ed:bb:98:65:de:e5:04:12:3a:b2:2b:
                    67:9a:dc:94:2d:33:8b:c7:94:ee:34:06:91:4b:8c:
                    1a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:6F:33:0A:A1:2C:38:F0:87:8E:4E:36:6C:9C:5C:64:FE:96:A6:CF
            X509v3 Authority Key Identifier:
                keyid:92:8E:35:32:31:3B:68:B8:8D:73:62:1D:23:28:00:68:10:3F:A0:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FVMNfbMJRdPuZm33wrSQPhuaojM5DEFnFPvNa21hQnCq/0/928E3532313B68B88D73621D23280068103FA0CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/928E3532313B68B88D73621D23280068103FA0CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FVMNfbMJRdPuZm33wrSQPhuaojM5DEFnFPvNa21hQnCq/0/323830343a373738303a3a2f33322d3336203d3e20323731313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7780::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:51:f3:cf:a0:ca:a5:c0:36:ac:cd:ec:47:bb:43:80:ce:28:
         fd:73:c1:56:eb:94:ca:8b:6d:ca:0d:4f:b7:d1:24:fd:bc:08:
         55:5e:2c:15:6e:00:a2:ac:b2:45:29:31:09:f2:de:4f:54:6c:
         fe:fc:03:d0:91:fd:c0:fe:8a:2b:8f:2f:52:37:17:36:00:8f:
         05:28:36:a9:bd:db:c7:47:9f:8b:ff:0b:54:55:64:9b:c3:4f:
         4c:a9:69:59:0d:93:e0:bc:b3:b7:44:35:b7:65:7a:46:27:50:
         74:cd:23:27:4a:3f:8a:cc:1c:42:48:dd:84:2f:4a:ee:c4:bb:
         87:16:49:c6:77:da:b4:c6:0b:ea:e8:6a:f6:ab:66:11:bf:75:
         b0:88:c1:ea:4f:54:43:7c:17:d7:21:00:ce:95:14:06:c2:67:
         72:0e:35:24:e0:3e:1a:f1:b6:c9:b0:d1:ec:46:a6:ff:00:1a:
         6b:f8:12:ff:fe:a9:a4:88:b6:e4:d9:b3:78:cf:da:a3:34:5a:
         23:6c:62:c8:12:71:a2:91:21:08:0a:c3:de:03:cb:9d:ed:80:
         3f:77:c2:77:7a:92:2c:38:1c:f9:2b:25:f2:3c:c6:d0:b4:59:
         f6:5a:88:a1:d0:2f:cb:f1:29:51:3b:47:84:98:ea:e5:d0:cc:
         f7:20:69:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:00:22 2025 by rpki-client on console.sobornost.net