Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/1/323830343a353934303a3a2f33322d3332203d3e20323638313739.roa
File:                     323830343a353934303a3a2f33322d3332203d3e20323638313739.roa (raw, json)
Hash identifier:          NfxsXVyOd3rKDYTUYvdfeaMgnhbQtQG/Cn15GYtSnfM=
Subject key identifier:   CB:1B:68:DE:52:33:BA:29:49:23:AB:64:3C:82:72:F7:65:03:45:40
Certificate issuer:       /CN=7CB4975FBB425123F7AC986A071279CDA92B5BCD
Certificate serial:       3B88C58C2BC936907F49CC088F9AF7BE95956ED9
Authority key identifier: 7C:B4:97:5F:BB:42:51:23:F7:AC:98:6A:07:12:79:CD:A9:2B:5B:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CB4975FBB425123F7AC986A071279CDA92B5BCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/1/323830343a353934303a3a2f33322d3332203d3e20323638313739.roa
Signing time:             Thu 06 Mar 2025 11:52:47 +0000
ROA not before:           Thu 06 Mar 2025 11:47:47 +0000
ROA not after:            Thu 05 Mar 2026 11:52:47 +0000
asID:                     268179
IP address blocks:        2804:5940::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/1/7CB4975FBB425123F7AC986A071279CDA92B5BCD.crl
                          rsync://rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/1/7CB4975FBB425123F7AC986A071279CDA92B5BCD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CB4975FBB425123F7AC986A071279CDA92B5BCD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:88:c5:8c:2b:c9:36:90:7f:49:cc:08:8f:9a:f7:be:95:95:6e:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB4975FBB425123F7AC986A071279CDA92B5BCD
        Validity
            Not Before: Mar  6 11:47:47 2025 GMT
            Not After : Mar  5 11:52:47 2026 GMT
        Subject: CN=CB1B68DE5233BA294923AB643C8272F765034540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:33:84:67:56:04:f8:7d:2d:b9:86:e8:8c:dd:
                    3e:5a:2d:96:89:4f:15:43:08:d9:9f:71:f6:69:19:
                    a3:41:ab:9c:78:64:a6:34:34:a0:2b:57:01:90:73:
                    4c:b5:3c:54:ea:e9:4c:88:d1:6f:f6:5c:fc:2d:49:
                    a6:8d:17:cf:4e:d0:09:22:26:92:67:94:7f:17:8b:
                    38:f3:ee:b3:56:d6:1e:47:dc:66:6d:01:90:9f:0a:
                    d5:14:b5:a1:e9:9a:c0:ec:17:2a:38:fb:21:ff:cd:
                    12:39:30:b1:3e:e3:b0:6a:2b:9d:e7:91:f9:03:e6:
                    dc:65:b5:93:27:3b:88:be:ce:48:a8:67:66:cb:2e:
                    b7:ff:31:c8:c1:26:b0:14:af:4e:3e:42:f8:a9:da:
                    0b:69:47:12:b4:3c:ba:b1:d1:3d:07:94:fd:b3:64:
                    d4:d0:16:bb:f9:c3:ea:3f:23:bb:c8:78:08:fa:f9:
                    a8:ff:76:6a:15:d2:0f:2f:42:2f:05:cd:fd:5d:d0:
                    2c:60:21:d8:cf:e1:99:a8:4c:be:4f:06:36:ba:f9:
                    41:50:c2:96:e3:a9:62:ab:5d:5b:f2:21:5a:44:43:
                    32:53:95:d5:a5:29:97:f3:5f:9f:d7:66:99:bd:3a:
                    84:33:f0:ca:45:3c:18:a9:64:76:34:07:f8:32:f2:
                    db:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:1B:68:DE:52:33:BA:29:49:23:AB:64:3C:82:72:F7:65:03:45:40
            X509v3 Authority Key Identifier:
                keyid:7C:B4:97:5F:BB:42:51:23:F7:AC:98:6A:07:12:79:CD:A9:2B:5B:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/1/7CB4975FBB425123F7AC986A071279CDA92B5BCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CB4975FBB425123F7AC986A071279CDA92B5BCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/1/323830343a353934303a3a2f33322d3332203d3e20323638313739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5940::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:e0:03:93:b1:75:7e:16:e7:18:c1:f6:5b:f8:00:fd:e4:52:
         06:cf:47:47:31:f6:ab:dd:55:58:03:93:0b:96:9d:ca:90:f3:
         1d:6f:6b:6a:63:f6:34:01:a5:3c:42:a1:aa:81:e8:c3:3b:52:
         1f:0a:1b:a7:4d:d6:31:0c:e5:bc:56:6e:16:02:b4:34:4f:16:
         ab:4a:4c:51:67:97:ad:1b:88:d1:8b:81:13:3a:5a:28:f9:8f:
         72:be:15:2b:35:08:36:be:3c:54:7f:a4:44:23:3a:ec:6b:c1:
         9d:44:12:71:6e:77:13:f5:22:05:91:e3:11:de:5c:6c:90:e1:
         c0:10:82:bb:93:f0:5a:bc:cc:4f:ca:24:db:55:bf:40:52:8a:
         e5:6b:09:d0:5c:70:eb:f0:b5:22:f0:09:e5:73:3e:61:af:c4:
         ab:b1:f1:f2:94:25:02:0e:24:97:08:27:7d:4a:f8:76:15:3e:
         36:63:42:4d:c1:3d:37:3f:22:ac:81:1d:32:f3:03:09:d6:f9:
         5b:1a:02:f8:a8:83:db:5e:87:68:57:a0:e1:66:e9:cd:a3:c2:
         47:ca:74:c6:b9:61:28:27:d4:dd:36:43:df:4b:10:f3:91:76:
         44:a9:b0:d6:5f:37:4a:55:c5:a4:c4:ea:25:84:a1:3e:0b:2b:
         28:1b:2e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:26:54 2025 by rpki-client on console.sobornost.net