Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/323830343a333630303a3a2f33342d3334203d3e20323636333230.roa
File:                     323830343a333630303a3a2f33342d3334203d3e20323636333230.roa (raw, json)
Hash identifier:          kiMV50dIYWNCzAjNDMVjqQXUdQof1dv7Jlh3deD3nQ0=
Subject key identifier:   0F:0E:2C:79:9C:86:94:35:E1:FE:0D:9D:BE:A3:4C:5F:69:8B:10:54
Certificate issuer:       /CN=1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30
Certificate serial:       2938CFA86D358F2BEC57C6DFB1C02D9A857100DF
Authority key identifier: 1C:7D:83:8F:1B:59:89:9D:44:B4:FC:40:0F:BC:1D:DA:3C:0B:3D:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/323830343a333630303a3a2f33342d3334203d3e20323636333230.roa
Signing time:             Wed 05 Mar 2025 19:00:02 +0000
ROA not before:           Wed 05 Mar 2025 18:55:02 +0000
ROA not after:            Wed 04 Mar 2026 19:00:02 +0000
asID:                     266320
IP address blocks:        2804:3600::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.crl
                          rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 17:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:38:cf:a8:6d:35:8f:2b:ec:57:c6:df:b1:c0:2d:9a:85:71:00:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30
        Validity
            Not Before: Mar  5 18:55:02 2025 GMT
            Not After : Mar  4 19:00:02 2026 GMT
        Subject: CN=0F0E2C799C869435E1FE0D9DBEA34C5F698B1054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f1:78:7e:0e:c1:12:ed:85:8a:3f:f4:56:43:
                    75:89:03:b6:4d:dc:7b:99:db:f7:4f:ef:87:f8:df:
                    f0:57:cd:a1:01:f4:b6:f2:a9:f3:46:57:53:31:e1:
                    8c:8f:e8:fc:59:1e:26:99:e7:f6:96:20:03:14:39:
                    16:61:26:8f:e2:58:c1:7c:1b:08:2a:fb:30:9d:c4:
                    97:df:9a:9c:45:d7:d9:84:0b:a2:66:dc:2d:ef:6d:
                    fb:9b:ed:7b:41:74:ed:5c:3a:e9:b7:ff:cd:c1:c4:
                    2f:97:34:75:17:e1:2c:4e:93:6d:98:a5:25:48:23:
                    a7:e5:e1:3e:b3:03:bc:e6:fc:ec:fd:e1:bb:36:b6:
                    fb:49:9b:b6:b5:8c:15:c6:31:ac:f9:92:bd:c2:c7:
                    13:97:51:b6:3c:af:ea:30:29:a7:68:04:82:6a:b5:
                    a8:3b:1d:60:01:61:44:c1:66:2c:b8:20:c1:3e:b8:
                    08:93:7f:ae:3b:ae:57:ff:11:f4:f5:d6:77:54:43:
                    5e:c8:0a:92:76:02:08:12:90:a7:bd:d9:fc:d9:36:
                    cb:00:28:4b:86:9b:41:f5:84:4b:d0:3a:6d:1e:0f:
                    26:32:02:af:0e:e0:f8:27:d3:22:04:52:51:01:0f:
                    33:b8:6f:f0:5d:6b:75:32:ff:bb:3e:4f:ee:8a:4e:
                    aa:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:0E:2C:79:9C:86:94:35:E1:FE:0D:9D:BE:A3:4C:5F:69:8B:10:54
            X509v3 Authority Key Identifier:
                keyid:1C:7D:83:8F:1B:59:89:9D:44:B4:FC:40:0F:BC:1D:DA:3C:0B:3D:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/323830343a333630303a3a2f33342d3334203d3e20323636333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3600::/34

    Signature Algorithm: sha256WithRSAEncryption
         c8:b4:5d:99:98:fb:36:f2:a6:0d:15:3a:c6:ed:41:6c:62:8b:
         84:c8:4e:c2:0c:b1:de:36:c9:9c:dc:4a:3f:e5:bf:68:6c:10:
         2e:95:e3:e9:eb:58:f0:55:ae:4c:12:25:4f:79:fe:79:9e:33:
         3f:e3:fb:0e:fd:3d:2c:b2:36:54:e5:64:bc:70:b0:0b:a4:c0:
         2a:b8:5f:20:70:f2:ea:6f:30:ea:60:d0:28:66:98:d2:85:9b:
         49:4e:96:b2:bc:a7:73:1f:29:5e:55:97:76:cb:3c:5c:2a:83:
         ea:93:a3:f6:c9:05:3c:31:c6:45:90:4e:81:db:1f:3d:97:ba:
         e7:20:b6:52:64:59:bd:d9:d8:45:a9:13:a7:2d:2d:e6:b0:b5:
         0b:6a:cd:0d:3f:84:11:27:a4:5f:c5:c5:60:ca:98:7a:11:a2:
         1b:90:8a:7f:20:86:87:95:59:fb:5c:01:76:ae:44:50:d8:ce:
         1e:66:5f:ca:c3:f8:b0:91:7c:b8:52:50:0d:79:03:d9:e2:95:
         07:f7:c3:35:21:23:07:70:e4:0c:66:a7:e0:42:ac:f0:91:3f:
         5c:d4:4d:4f:aa:77:84:b7:19:b6:68:77:74:71:de:e0:1e:12:
         23:21:d9:af:24:67:36:56:f2:be:16:3d:21:df:0b:c4:7a:38:
         e2:9c:2b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:28 2025 by rpki-client on console.sobornost.net