Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/323830343a353738383a3a2f33322d3332203d3e20323638303730.roa
File:                     323830343a353738383a3a2f33322d3332203d3e20323638303730.roa (raw, json)
Hash identifier:          o6aKjMyRWJfVL9apXBhu1tUXbfnEBTsKjmmOhE/Nytg=
Subject key identifier:   7F:40:39:E4:FB:11:D5:33:7E:76:89:6D:0E:CD:2F:5A:E6:77:0C:1E
Certificate issuer:       /CN=2EC42055AFC59A104B87FD6706375331B8F6BF55
Certificate serial:       6D51CC56C393BA5776155679079700215611DED9
Authority key identifier: 2E:C4:20:55:AF:C5:9A:10:4B:87:FD:67:06:37:53:31:B8:F6:BF:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/323830343a353738383a3a2f33322d3332203d3e20323638303730.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     268070
IP address blocks:        2804:5788::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.crl
                          rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 19:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:51:cc:56:c3:93:ba:57:76:15:56:79:07:97:00:21:56:11:de:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EC42055AFC59A104B87FD6706375331B8F6BF55
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9d:36:d4:18:13:c3:d5:1f:15:5b:ac:ce:0b:
                    28:5f:5c:f2:ab:98:29:33:8d:37:1c:39:c6:31:50:
                    7f:96:f1:64:9e:65:a9:a0:fc:ea:93:49:6b:52:fa:
                    f2:eb:31:c1:0a:a8:e6:db:e6:28:ba:61:42:02:dc:
                    fb:35:68:71:ad:07:68:7e:ca:24:ec:f3:39:72:c4:
                    9d:28:33:c5:72:11:00:d8:d3:b5:8f:7b:57:54:77:
                    ed:02:2f:fa:0b:eb:16:c7:9e:bc:fd:14:cc:94:28:
                    b0:2c:ee:84:c2:5d:7a:00:9e:72:c9:b4:57:e3:50:
                    6b:4f:be:f5:93:80:97:20:e5:64:0d:77:1e:36:dc:
                    3a:c7:21:d8:8d:2c:24:88:cc:84:ba:ac:35:56:8d:
                    4f:89:81:c0:09:a4:2e:b1:8e:df:e7:15:d8:b4:c6:
                    3c:da:b8:49:4f:03:4e:8a:4c:a7:04:2f:8c:f1:18:
                    fb:c1:46:54:c2:7c:67:24:02:c9:48:23:d1:d8:0a:
                    32:91:81:eb:2b:f9:8b:73:29:2d:e0:c5:91:0a:12:
                    fb:c9:db:8b:06:58:a8:26:99:d5:86:73:84:ca:59:
                    89:f7:92:cd:ea:28:17:57:f3:df:f3:6b:83:bb:a9:
                    fd:82:e4:7b:74:59:43:63:1f:67:00:44:69:75:27:
                    7a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:40:39:E4:FB:11:D5:33:7E:76:89:6D:0E:CD:2F:5A:E6:77:0C:1E
            X509v3 Authority Key Identifier:
                keyid:2E:C4:20:55:AF:C5:9A:10:4B:87:FD:67:06:37:53:31:B8:F6:BF:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/323830343a353738383a3a2f33322d3332203d3e20323638303730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5788::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:d0:fb:2c:3b:50:d4:91:11:3f:8b:08:f8:cc:ff:a6:e2:b0:
         f6:e5:0f:4d:41:ee:c9:9d:b4:07:d5:92:fd:b3:e7:31:53:f1:
         84:60:cb:7f:34:ba:73:17:96:d4:66:e8:c1:91:23:9a:7c:63:
         4b:b1:e8:ff:b4:03:87:47:f0:a3:ee:39:3a:d5:a4:4d:fe:4d:
         71:a7:43:1d:cd:86:10:b1:37:bf:62:2c:31:ae:05:58:4c:5b:
         fe:59:be:82:43:c2:40:84:5c:42:93:dc:57:3a:f5:c2:ac:27:
         4c:f8:79:3e:74:37:a9:b7:89:4b:9b:6d:b5:6d:07:8a:ce:72:
         8d:62:a0:53:96:db:88:89:9e:99:5f:c8:6d:11:64:c7:64:d6:
         ee:dc:de:43:a8:64:a4:e8:b7:fb:a9:2e:d3:18:d5:fe:1c:94:
         06:a3:ac:99:70:91:c6:a6:8e:03:7b:43:17:bc:19:20:19:21:
         9d:ba:f2:55:f9:05:23:2b:b3:20:f1:87:e5:50:f3:66:3c:aa:
         99:81:61:dd:89:fb:b0:53:e6:36:e5:60:72:99:a9:a8:7e:04:
         92:6d:39:72:6b:d3:5d:ad:a1:f3:ab:6d:b6:31:6f:e4:08:e4:
         79:53:a8:43:12:47:66:33:51:d6:6e:8d:56:42:6b:0e:e8:04:
         df:1b:41:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:48:09 2025 by rpki-client on console.sobornost.net