Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/323830343a363062303a3a2f33322d3430203d3e20323639313834.roa
File:                     323830343a363062303a3a2f33322d3430203d3e20323639313834.roa (raw, json)
Hash identifier:          /rhTp7cAUkfwcSsOM4bufZ4hzfY9DaqMVKYmLOYscFo=
Subject key identifier:   FC:A7:F1:04:66:3B:94:4A:77:CE:7A:28:71:A3:6A:C7:3E:5B:B7:3B
Certificate issuer:       /CN=2A9CB99D98C11F7AF1A405B5D0507506E6F808A7
Certificate serial:       3F353D7DAB8D47D6D0DA8EAC2BA65A3F4FBD1BB0
Authority key identifier: 2A:9C:B9:9D:98:C1:1F:7A:F1:A4:05:B5:D0:50:75:06:E6:F8:08:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/323830343a363062303a3a2f33322d3430203d3e20323639313834.roa
Signing time:             Fri 07 Mar 2025 03:00:37 +0000
ROA not before:           Fri 07 Mar 2025 02:55:37 +0000
ROA not after:            Fri 06 Mar 2026 03:00:37 +0000
asID:                     269184
IP address blocks:        2804:60b0::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.crl
                          rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 02:54:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:35:3d:7d:ab:8d:47:d6:d0:da:8e:ac:2b:a6:5a:3f:4f:bd:1b:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A9CB99D98C11F7AF1A405B5D0507506E6F808A7
        Validity
            Not Before: Mar  7 02:55:37 2025 GMT
            Not After : Mar  6 03:00:37 2026 GMT
        Subject: CN=FCA7F104663B944A77CE7A2871A36AC73E5BB73B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:11:7e:86:db:bc:56:12:88:47:af:81:23:cf:
                    e4:ee:bd:77:90:f6:26:23:32:a0:3f:26:c0:5a:10:
                    67:a7:a6:e5:1b:f8:fa:71:b2:87:cc:81:eb:82:41:
                    bb:94:8a:92:67:fc:af:48:36:e8:63:a9:14:27:ea:
                    32:22:09:dd:95:cf:c8:95:62:99:ff:fd:4f:cf:37:
                    23:88:be:3b:fe:98:d0:2c:d1:a9:6f:50:f1:de:24:
                    bd:ad:8a:7a:7e:e8:be:57:ca:8c:ce:0e:19:6d:60:
                    1d:a9:66:cd:44:26:1b:46:7b:db:96:eb:ba:3d:0d:
                    5e:ae:0b:bb:dc:c3:70:ef:a7:82:19:96:64:1c:3d:
                    c3:fb:61:b2:22:f7:88:dd:15:53:1e:13:34:00:81:
                    09:84:54:dc:b4:c5:43:91:64:6c:e4:e9:82:45:e2:
                    cd:da:f8:3c:a6:11:8f:7c:c5:2a:7e:2d:27:22:b6:
                    12:5f:6b:9f:77:85:27:40:47:db:98:db:30:d8:39:
                    92:98:18:69:fa:01:7c:17:27:93:97:92:49:5a:56:
                    a8:30:82:11:e0:ff:f0:d8:63:25:18:25:ae:11:f9:
                    75:48:a0:ea:ee:b0:4d:4d:61:cb:dc:e1:ff:ac:f4:
                    6c:fc:ed:6b:e7:b3:74:52:f4:34:2e:13:41:fa:87:
                    28:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A7:F1:04:66:3B:94:4A:77:CE:7A:28:71:A3:6A:C7:3E:5B:B7:3B
            X509v3 Authority Key Identifier:
                keyid:2A:9C:B9:9D:98:C1:1F:7A:F1:A4:05:B5:D0:50:75:06:E6:F8:08:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/323830343a363062303a3a2f33322d3430203d3e20323639313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:77:2d:bc:58:ee:b0:e6:50:b7:19:fa:24:55:05:ae:3a:f8:
         7e:9a:83:4a:0e:43:52:e5:0a:f2:3e:1b:d3:ca:d5:df:45:51:
         fc:78:9c:48:6a:6d:f0:1a:07:8f:9a:28:c6:9d:5a:cc:75:fc:
         b9:54:2b:1c:91:a2:3e:ca:d1:4c:46:d9:56:5b:46:d1:e4:dc:
         d0:57:31:48:1a:4f:e2:9c:94:ee:bd:84:2b:30:e2:d0:61:02:
         9d:75:c3:1c:3c:2d:e5:5f:25:34:a3:36:a3:e2:de:64:7c:15:
         4b:d1:b2:9a:62:3b:53:a9:6b:8c:aa:7f:cf:3d:1b:2b:44:3e:
         8f:57:20:8a:98:03:2a:da:69:d3:b1:0a:f4:82:18:64:99:e2:
         15:4d:ab:2a:25:b8:b2:38:fe:43:27:74:94:b2:04:b4:5a:6b:
         c8:17:53:84:d7:02:eb:9b:49:a3:6a:c2:79:78:95:33:7a:cf:
         3c:42:5c:65:22:88:84:40:4c:0c:2f:85:38:94:80:1b:e7:09:
         7d:1d:7d:3a:df:97:2b:ff:ff:56:b3:20:d3:37:4e:79:89:60:
         c3:e0:b2:f5:aa:0f:76:1c:80:a0:cb:1f:e3:a7:6e:0c:4b:2b:
         b7:83:52:ec:49:bf:2c:6d:71:f7:6b:91:53:e3:ee:1c:6b:3a:
         cb:aa:f7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:15:24 2025 by rpki-client on console.sobornost.net