Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/323030313a313239633a3a2f33322d3438203d3e203232333536.roa
File:                     323030313a313239633a3a2f33322d3438203d3e203232333536.roa (raw, json)
Hash identifier:          euHAp7+9vRWrpVJOCBtQMlM0mKiy4FhOArKfKYePGc4=
Subject key identifier:   15:10:6C:E5:46:43:C5:24:13:CD:16:4F:AE:68:7F:98:31:36:47:FD
Certificate issuer:       /CN=968400C9DFC16D643EF5C94C34F993F17C7568AA
Certificate serial:       4280FECC1A9568805E136B40DC28998B4B4DD9E8
Authority key identifier: 96:84:00:C9:DF:C1:6D:64:3E:F5:C9:4C:34:F9:93:F1:7C:75:68:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968400C9DFC16D643EF5C94C34F993F17C7568AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/323030313a313239633a3a2f33322d3438203d3e203232333536.roa
Signing time:             Fri 18 Apr 2025 14:30:50 +0000
ROA not before:           Fri 18 Apr 2025 14:25:50 +0000
ROA not after:            Fri 17 Apr 2026 14:30:50 +0000
asID:                     22356
IP address blocks:        2001:129c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.crl
                          rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968400C9DFC16D643EF5C94C34F993F17C7568AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:80:fe:cc:1a:95:68:80:5e:13:6b:40:dc:28:99:8b:4b:4d:d9:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=968400C9DFC16D643EF5C94C34F993F17C7568AA
        Validity
            Not Before: Apr 18 14:25:50 2025 GMT
            Not After : Apr 17 14:30:50 2026 GMT
        Subject: CN=15106CE54643C52413CD164FAE687F98313647FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ec:54:3b:fd:b2:79:75:8d:5f:ed:1a:d4:8c:
                    0e:8e:dd:95:1f:a4:cf:13:e4:05:e3:0f:2e:b6:e2:
                    bd:1b:28:8d:d6:93:bc:a3:72:c6:fc:4f:db:51:2a:
                    fb:63:d8:15:99:03:81:0b:a1:94:72:bb:e3:c1:34:
                    32:67:80:53:1e:3f:cf:f0:ff:22:1f:3c:13:bc:0c:
                    8f:a1:a6:1a:36:b5:7d:5d:27:a6:be:d4:46:7e:40:
                    09:c6:e7:3f:3f:8f:83:02:28:4a:ca:9c:e9:be:85:
                    c6:50:56:fe:cd:8b:dd:a0:b1:17:bb:e1:73:89:a1:
                    c0:da:67:49:90:b2:8f:41:5d:88:15:94:be:e4:8f:
                    65:ee:7c:5f:ea:15:98:70:9b:cf:8d:04:ae:60:89:
                    45:28:06:77:56:a2:1e:b6:9d:a4:72:4f:69:e2:a9:
                    3e:e9:a7:0b:c6:70:1e:a0:cf:ee:56:78:56:35:b4:
                    8e:d2:70:b6:1c:4f:52:1b:b7:c3:4d:19:50:c6:36:
                    6c:99:a9:e8:fa:1d:9f:f1:45:fc:4c:72:c6:1b:aa:
                    33:f0:8e:f4:8f:68:5c:7e:f3:d7:0c:ba:6e:15:91:
                    ca:29:ec:27:21:0d:00:3e:f3:46:fe:dd:7c:1e:10:
                    6c:ca:0b:d7:b4:6f:56:2b:9c:ae:73:b4:f0:67:1a:
                    82:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:10:6C:E5:46:43:C5:24:13:CD:16:4F:AE:68:7F:98:31:36:47:FD
            X509v3 Authority Key Identifier:
                keyid:96:84:00:C9:DF:C1:6D:64:3E:F5:C9:4C:34:F9:93:F1:7C:75:68:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968400C9DFC16D643EF5C94C34F993F17C7568AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/323030313a313239633a3a2f33322d3438203d3e203232333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:129c::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:1b:14:bc:6b:e4:32:cf:f3:ba:b1:9d:0b:0d:e4:ba:e7:6a:
         c1:65:60:b8:3b:34:3b:dd:1d:2e:7c:e7:9e:6d:ac:d7:62:19:
         66:40:1e:d4:58:63:a8:be:28:fb:a8:0b:12:d8:c0:41:9b:3c:
         3d:c9:e7:ca:52:1a:95:a9:09:81:42:9e:21:6a:96:52:2b:da:
         e3:26:6d:b0:fd:09:e8:1c:16:a8:bd:01:7a:0c:30:13:72:0e:
         64:35:a8:af:e9:97:db:c1:5a:0d:68:4f:1a:46:bb:5d:f7:63:
         83:f0:f9:8f:fe:68:18:81:05:5a:1e:62:f8:6f:c2:02:c2:2c:
         d8:65:82:12:c2:98:db:34:69:fa:00:b1:fc:1e:47:6b:22:48:
         8d:a9:9c:fd:56:b7:ea:a6:78:29:e2:00:7e:54:93:80:42:a3:
         f6:cc:69:95:e5:a1:84:a2:b8:37:7a:ac:00:5e:71:80:5a:69:
         73:d5:d5:02:20:81:d9:84:c6:8b:6a:92:65:40:c6:ce:d9:86:
         79:cd:61:27:a7:d0:e1:57:76:e5:a0:b1:85:d7:16:1f:d3:84:
         62:8e:dc:96:cd:c4:6c:c9:73:56:3c:73:7b:21:92:f0:a9:59:
         8e:7d:6b:ec:55:33:0d:11:78:eb:5e:be:35:17:5b:d3:cc:e6:
         c1:34:b5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:47 2025 by rpki-client on console.sobornost.net