Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a643030303a3a2f33372d3337203d3e20323730343430.roa
File:                     323830343a366330343a643030303a3a2f33372d3337203d3e20323730343430.roa (raw, json)
Hash identifier:          J7YvLo2KiFtRKR3USLUyuUu0354hmeVIiEbDTBRhdts=
Subject key identifier:   29:1A:26:7A:90:48:47:1F:AC:DA:AA:4C:05:5E:6A:1D:FC:C5:1E:66
Certificate issuer:       /CN=2E8459987E9776F5848158AEADDA7C12BA642F8E
Certificate serial:       0C9A08754A4311A714BDFD1DC32FECBCD84EE4E0
Authority key identifier: 2E:84:59:98:7E:97:76:F5:84:81:58:AE:AD:DA:7C:12:BA:64:2F:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8459987E9776F5848158AEADDA7C12BA642F8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a643030303a3a2f33372d3337203d3e20323730343430.roa
Signing time:             Thu 20 Mar 2025 12:36:14 +0000
ROA not before:           Thu 20 Mar 2025 12:31:14 +0000
ROA not after:            Thu 19 Mar 2026 12:36:14 +0000
asID:                     270440
IP address blocks:        2804:6c04:d000::/37 maxlen: 37

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/2E8459987E9776F5848158AEADDA7C12BA642F8E.crl
                          rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/2E8459987E9776F5848158AEADDA7C12BA642F8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8459987E9776F5848158AEADDA7C12BA642F8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 18:29:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:9a:08:75:4a:43:11:a7:14:bd:fd:1d:c3:2f:ec:bc:d8:4e:e4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E8459987E9776F5848158AEADDA7C12BA642F8E
        Validity
            Not Before: Mar 20 12:31:14 2025 GMT
            Not After : Mar 19 12:36:14 2026 GMT
        Subject: CN=291A267A9048471FACDAAA4C055E6A1DFCC51E66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d7:58:e0:08:8c:d5:6a:95:41:f4:22:8f:cc:
                    41:9f:9c:2a:68:e3:67:15:8e:e7:50:8e:4e:24:86:
                    1b:9c:49:18:0e:c0:4b:eb:40:93:52:6e:2f:90:a8:
                    18:4c:ee:e7:1a:53:2a:80:d9:81:e2:37:db:43:64:
                    10:ea:48:4b:ee:a8:8b:ca:4f:bb:8f:32:eb:47:fa:
                    67:ad:3a:08:f3:e6:92:d9:0c:ed:dd:7b:f5:ff:ef:
                    9b:91:42:0d:d3:9f:40:a9:81:d4:d0:22:9e:75:6b:
                    d6:12:3d:1a:99:d9:cb:23:21:a8:82:17:06:3e:0a:
                    5f:a7:dd:13:63:69:bd:0f:40:6f:0a:e1:1f:58:e8:
                    9e:41:b5:22:23:4a:65:aa:14:91:21:5c:45:bc:2c:
                    3d:14:d6:00:d9:d8:6d:86:aa:28:4d:0d:dd:6b:e9:
                    41:85:c4:c4:32:01:a3:69:51:01:ee:01:54:10:a6:
                    69:1f:5b:b6:cc:57:8d:0a:60:5f:b2:48:0b:7b:93:
                    5e:51:e1:b4:df:5e:74:3a:8f:49:2b:05:ea:d9:e6:
                    29:d9:c2:13:3e:c7:61:38:b5:f0:95:b8:6e:ee:b8:
                    a6:a3:fb:ea:1b:8a:db:b8:93:d9:85:c2:f3:e6:d1:
                    17:d0:ef:80:9c:02:19:d2:c6:67:14:b3:6c:50:c0:
                    c3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:1A:26:7A:90:48:47:1F:AC:DA:AA:4C:05:5E:6A:1D:FC:C5:1E:66
            X509v3 Authority Key Identifier:
                keyid:2E:84:59:98:7E:97:76:F5:84:81:58:AE:AD:DA:7C:12:BA:64:2F:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/2E8459987E9776F5848158AEADDA7C12BA642F8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8459987E9776F5848158AEADDA7C12BA642F8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a643030303a3a2f33372d3337203d3e20323730343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c04:d000::/37

    Signature Algorithm: sha256WithRSAEncryption
         80:f0:7e:4d:1a:2c:ef:bf:26:63:1b:99:17:5c:c3:b2:e6:ef:
         7e:fb:8c:63:ea:54:48:8c:e0:fc:52:03:10:6a:24:be:99:bb:
         4c:38:e7:e0:5d:23:6f:66:70:87:de:f9:56:2c:cc:03:fe:74:
         17:70:5c:b2:f7:0c:05:6f:ec:ea:6e:b8:07:2c:b6:8e:cf:b1:
         20:e0:49:f1:fe:84:b5:87:cd:fd:ab:dd:13:2c:7e:7e:4c:43:
         28:e3:cf:11:bb:fb:60:dc:b1:fd:ec:ae:14:1b:03:34:02:b0:
         ac:fc:6b:15:9b:57:a4:b7:41:53:04:4b:97:c7:57:af:95:f3:
         89:fa:84:08:9a:67:ed:23:6d:06:e0:ea:71:e0:d9:9c:9b:93:
         87:f4:4c:79:b3:d6:8d:a5:38:b6:dc:5c:47:cb:9c:cd:0e:46:
         ee:99:a6:49:7e:b4:cf:4a:20:63:aa:e8:2c:72:d4:8d:27:7e:
         f0:30:c9:13:35:98:bc:e7:78:e1:61:6c:6a:a4:4c:81:f6:9c:
         87:40:7c:4b:7a:de:bb:d5:a1:67:68:4d:3a:89:27:dd:54:21:
         ff:1d:c8:16:99:e7:1b:a8:5a:50:a8:ae:19:a8:e6:7a:33:ae:
         6b:bd:55:19:3d:e2:84:d5:27:bb:8d:1a:59:0b:ee:00:54:4d:
         86:33:2e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:46 2025 by rpki-client on console.sobornost.net