Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8c2xLVxTcD1c6R8guTk5pJuhN9yxpi3ugTgbPNCw7Q1/0/323830343a386366343a383030303a3a2f33332d3333203d3e20323733333235.roa
File:                     323830343a386366343a383030303a3a2f33332d3333203d3e20323733333235.roa (raw, json)
Hash identifier:          J6Qp5uU5hutDEUWZ9KpyqjSnnQmG6l1+W8dNMFprSPk=
Subject key identifier:   9E:90:C0:E5:E2:F7:51:81:33:00:E6:ED:4C:6B:E2:6D:7B:25:60:55
Certificate issuer:       /CN=6EBCB17E8382700D64AF4E4ACB6EC0C30BAC4027
Certificate serial:       25FD896F37D02EB80748795F0FD8BF0ABE982F34
Authority key identifier: 6E:BC:B1:7E:83:82:70:0D:64:AF:4E:4A:CB:6E:C0:C3:0B:AC:40:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EBCB17E8382700D64AF4E4ACB6EC0C30BAC4027.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8c2xLVxTcD1c6R8guTk5pJuhN9yxpi3ugTgbPNCw7Q1/0/323830343a386366343a383030303a3a2f33332d3333203d3e20323733333235.roa
Signing time:             Tue 18 Mar 2025 20:00:00 +0000
ROA not before:           Tue 18 Mar 2025 19:55:00 +0000
ROA not after:            Tue 17 Mar 2026 20:00:00 +0000
asID:                     273325
IP address blocks:        2804:8cf4:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G8c2xLVxTcD1c6R8guTk5pJuhN9yxpi3ugTgbPNCw7Q1/0/6EBCB17E8382700D64AF4E4ACB6EC0C30BAC4027.crl
                          rsync://rpki-repo.registro.br/repo/G8c2xLVxTcD1c6R8guTk5pJuhN9yxpi3ugTgbPNCw7Q1/0/6EBCB17E8382700D64AF4E4ACB6EC0C30BAC4027.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EBCB17E8382700D64AF4E4ACB6EC0C30BAC4027.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 15:30:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:fd:89:6f:37:d0:2e:b8:07:48:79:5f:0f:d8:bf:0a:be:98:2f:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EBCB17E8382700D64AF4E4ACB6EC0C30BAC4027
        Validity
            Not Before: Mar 18 19:55:00 2025 GMT
            Not After : Mar 17 20:00:00 2026 GMT
        Subject: CN=9E90C0E5E2F751813300E6ED4C6BE26D7B256055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:19:51:e9:e3:eb:93:e4:44:2e:b1:28:57:a3:
                    8b:c9:0d:d3:db:ca:ac:3f:5c:4b:62:f4:5c:bf:ad:
                    fd:9f:5d:af:bb:b6:5f:9c:9e:78:22:35:3a:c2:fc:
                    e0:a2:e7:99:da:22:00:ea:3a:c6:e9:62:a0:8a:a8:
                    79:79:4d:d1:99:a6:a7:6f:d9:a3:73:25:16:4d:e4:
                    0e:e8:b1:5e:23:84:4e:9c:7a:fe:5a:7b:8e:59:6d:
                    bd:23:ee:30:3e:db:1a:3a:bb:81:74:87:50:ce:8b:
                    05:23:15:db:df:d2:0b:a4:c4:a4:04:02:29:92:be:
                    f5:3a:f0:18:18:18:04:26:7c:e6:5d:52:b6:5e:0d:
                    b5:a0:5e:05:ec:f2:19:3c:72:d2:3f:f0:40:c0:9c:
                    33:ea:78:84:d8:32:6b:9e:02:8f:62:05:d9:5e:12:
                    33:75:95:26:6f:03:28:ed:13:c5:d2:48:b4:8a:0f:
                    db:39:1d:67:42:3c:30:0d:0f:e6:6f:70:92:8f:4b:
                    4e:6a:ac:27:b3:e3:d7:7b:0a:50:0c:d7:86:68:b5:
                    b8:c6:0a:ad:6a:1d:68:00:db:6d:5b:07:ef:f9:50:
                    e6:83:92:96:ec:c2:1b:66:6b:89:9d:e6:1d:35:10:
                    d2:3e:8b:66:fb:98:48:ad:9d:f9:9d:92:89:04:65:
                    b0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:90:C0:E5:E2:F7:51:81:33:00:E6:ED:4C:6B:E2:6D:7B:25:60:55
            X509v3 Authority Key Identifier:
                keyid:6E:BC:B1:7E:83:82:70:0D:64:AF:4E:4A:CB:6E:C0:C3:0B:AC:40:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8c2xLVxTcD1c6R8guTk5pJuhN9yxpi3ugTgbPNCw7Q1/0/6EBCB17E8382700D64AF4E4ACB6EC0C30BAC4027.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EBCB17E8382700D64AF4E4ACB6EC0C30BAC4027.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8c2xLVxTcD1c6R8guTk5pJuhN9yxpi3ugTgbPNCw7Q1/0/323830343a386366343a383030303a3a2f33332d3333203d3e20323733333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8cf4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         af:7b:fc:d8:d3:23:c3:1e:e4:12:e9:8e:a2:93:72:59:2e:a2:
         cb:75:e5:c3:10:00:65:cd:fd:27:67:29:63:86:12:fc:ee:bb:
         0b:77:e2:95:9c:fb:ad:07:76:7d:d7:c6:e9:e3:5d:72:63:98:
         ce:db:b0:6a:65:a9:38:48:cf:ad:4a:12:46:5e:e1:5a:ef:a4:
         48:2d:72:02:2d:72:ae:94:b2:c9:09:86:30:52:16:2f:a6:48:
         a8:b2:02:b5:03:e0:0a:71:8e:ab:a5:5f:12:3b:2a:6d:2f:eb:
         35:a8:fb:3b:8f:ee:3e:ff:82:61:a7:58:4d:ee:c3:5d:50:96:
         94:cb:e2:1f:de:56:6e:ed:5e:95:47:80:d6:41:82:4b:cd:16:
         89:a4:d4:34:0c:95:4a:f0:82:57:a1:a2:77:32:46:d0:49:ae:
         4c:32:d4:79:ad:88:27:a1:8b:cd:4c:1d:f5:f7:c9:96:7a:3e:
         04:9c:8c:70:f9:57:be:41:be:b2:dd:b7:cc:5d:46:5b:74:5d:
         5a:a5:27:be:33:85:df:89:9f:95:18:84:66:49:b8:ce:ad:1d:
         10:cf:26:03:c0:bc:50:cf:c3:e5:3d:93:32:a6:1f:ed:87:c9:
         de:ea:30:b4:cb:3f:92:37:ef:5d:8b:d7:9e:af:cb:2a:0b:7d:
         b3:fb:d5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:18:22 2025 by rpki-client on console.sobornost.net