Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/323830343a323463303a3a2f33322d313238203d3e20323632323930.roa
File:                     323830343a323463303a3a2f33322d313238203d3e20323632323930.roa (raw, json)
Hash identifier:          jUzfIEDBAA0bHDG7CrL3ZTGi6yLVZcdsmfZFefY3od4=
Subject key identifier:   E7:0A:65:92:48:EB:37:13:01:11:DA:47:82:55:D7:D6:5B:1D:7E:32
Certificate issuer:       /CN=63CF3814814F9F8799D1D11C2BBD8F541A383E8E
Certificate serial:       311C4175435933290200A4A6D18FF4F2A3EA8CBC
Authority key identifier: 63:CF:38:14:81:4F:9F:87:99:D1:D1:1C:2B:BD:8F:54:1A:38:3E:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63CF3814814F9F8799D1D11C2BBD8F541A383E8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/323830343a323463303a3a2f33322d313238203d3e20323632323930.roa
Signing time:             Tue 22 Apr 2025 12:51:06 +0000
ROA not before:           Tue 22 Apr 2025 12:46:06 +0000
ROA not after:            Tue 21 Apr 2026 12:51:06 +0000
asID:                     262290
IP address blocks:        2804:24c0::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/63CF3814814F9F8799D1D11C2BBD8F541A383E8E.crl
                          rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/63CF3814814F9F8799D1D11C2BBD8F541A383E8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63CF3814814F9F8799D1D11C2BBD8F541A383E8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 05:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:1c:41:75:43:59:33:29:02:00:a4:a6:d1:8f:f4:f2:a3:ea:8c:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63CF3814814F9F8799D1D11C2BBD8F541A383E8E
        Validity
            Not Before: Apr 22 12:46:06 2025 GMT
            Not After : Apr 21 12:51:06 2026 GMT
        Subject: CN=E70A659248EB37130111DA478255D7D65B1D7E32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:67:d1:3a:23:63:3e:9d:60:a9:f0:ba:64:f7:
                    8b:aa:34:f8:33:27:0a:0c:e6:90:2a:a0:97:03:79:
                    b6:ae:c5:ba:69:0d:51:94:bb:ab:79:5e:7a:b2:dc:
                    e3:03:ff:73:98:1c:a4:88:3e:36:0a:1f:d1:cd:c6:
                    c4:63:a6:d2:69:b7:43:9d:05:18:85:fd:e5:7f:29:
                    e1:ce:8d:ea:f4:a4:29:37:ea:d5:92:8f:10:45:6b:
                    66:f3:13:f1:21:59:6d:a1:39:21:36:e3:e3:da:7f:
                    15:43:50:c8:cc:13:fe:91:ba:27:f8:b3:8b:3b:ce:
                    05:49:c9:3b:2a:45:d9:df:c1:4e:cd:f5:e7:32:3b:
                    ef:e9:a1:a0:5e:5e:be:70:d4:f6:1e:1c:c4:ff:a5:
                    61:f4:12:f8:bf:96:60:24:c6:cd:8f:f6:99:5d:3f:
                    8c:87:99:e8:91:98:70:2b:56:59:69:74:5f:3a:20:
                    b1:e9:f4:27:03:13:3a:de:c7:43:67:29:1b:ca:cd:
                    f4:7d:42:4e:74:8c:4d:cd:53:da:c8:fc:8d:a2:6f:
                    18:18:a3:5e:9d:dd:eb:5e:3a:94:3c:3f:8e:07:41:
                    33:db:e9:df:39:24:2b:e2:64:ca:0c:dc:d3:51:d6:
                    88:16:ee:4d:fc:2b:2a:73:e9:5d:67:1d:d2:c6:33:
                    6b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:0A:65:92:48:EB:37:13:01:11:DA:47:82:55:D7:D6:5B:1D:7E:32
            X509v3 Authority Key Identifier:
                keyid:63:CF:38:14:81:4F:9F:87:99:D1:D1:1C:2B:BD:8F:54:1A:38:3E:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/63CF3814814F9F8799D1D11C2BBD8F541A383E8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63CF3814814F9F8799D1D11C2BBD8F541A383E8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/323830343a323463303a3a2f33322d313238203d3e20323632323930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:e6:46:13:14:ab:4c:c1:2a:54:c1:45:31:83:ef:77:4d:ad:
         c0:d4:a1:bf:46:92:b9:2b:3b:d8:e4:91:89:88:a3:15:f7:ac:
         68:33:f4:6e:ae:96:c4:e5:af:31:d2:75:96:29:1f:22:08:d3:
         94:f2:a4:4a:f9:61:ae:a9:60:c7:30:73:e5:43:87:63:8f:74:
         f2:cb:1e:e0:ee:25:b9:31:6a:dd:ba:04:22:19:cc:b6:5c:53:
         e2:75:bc:78:1f:44:bc:fa:a7:c9:61:22:5a:bf:91:2b:06:92:
         ee:3b:af:0c:a5:68:cf:74:56:c5:a8:6f:9a:4f:2a:cf:ba:6c:
         75:8e:b4:bd:77:f9:04:43:d9:18:87:1c:2f:b1:77:32:74:b6:
         0d:d8:29:74:a6:6d:78:a8:06:05:ca:c5:98:92:08:ea:0f:05:
         31:d1:cf:92:e2:2b:7c:23:53:89:e0:d3:7c:2d:95:22:13:71:
         22:44:62:2c:f9:8e:22:df:fd:d5:0d:a6:f1:ee:09:64:ed:cd:
         89:57:18:0b:38:5d:3a:93:17:5f:17:d3:11:d7:4f:e7:65:14:
         a1:d5:04:d6:35:d7:57:0b:44:2c:c4:ea:f7:b4:bd:ef:d3:e2:
         e0:13:69:0d:ea:c9:d7:d1:18:2a:3f:20:dd:99:c5:44:9a:a5:
         23:ff:10:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:46:32 2025 by rpki-client on console.sobornost.net