Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/323830343a6561383a3a2f33322d3438203d3e20323632393636.roa
File:                     323830343a6561383a3a2f33322d3438203d3e20323632393636.roa (raw, json)
Hash identifier:          k3mQQh+jFVJ+W9lI5qcYz2pIEXAoMKMazd3p9xRcR90=
Subject key identifier:   81:AE:12:BD:46:19:FE:E5:E4:BC:FC:1A:2C:1E:40:A5:8B:DA:A3:4D
Certificate issuer:       /CN=DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229
Certificate serial:       5EC30086783CBC6495499B287608AD62A13730E0
Authority key identifier: DB:60:11:3D:B8:47:EE:4F:DF:EC:F8:E7:B3:2D:8C:B0:A2:8A:42:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/323830343a6561383a3a2f33322d3438203d3e20323632393636.roa
Signing time:             Thu 06 Mar 2025 20:46:03 +0000
ROA not before:           Thu 06 Mar 2025 20:41:03 +0000
ROA not after:            Thu 05 Mar 2026 20:46:03 +0000
asID:                     262966
IP address blocks:        2804:ea8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.crl
                          rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 15:11:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:c3:00:86:78:3c:bc:64:95:49:9b:28:76:08:ad:62:a1:37:30:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229
        Validity
            Not Before: Mar  6 20:41:03 2025 GMT
            Not After : Mar  5 20:46:03 2026 GMT
        Subject: CN=81AE12BD4619FEE5E4BCFC1A2C1E40A58BDAA34D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e0:ba:b0:06:ae:b2:46:f1:e1:b1:5e:fb:c1:
                    7f:5c:59:be:0a:fd:ee:36:75:42:29:86:c1:57:6f:
                    ec:61:d7:59:fd:d9:ef:80:bb:5d:64:4c:b9:14:2e:
                    7d:98:4f:3b:ef:2a:fe:e6:7b:fc:59:61:ce:04:86:
                    50:2d:63:98:2d:86:79:91:28:79:f8:18:6a:a4:2f:
                    af:b2:0c:f7:a5:12:10:7a:70:e0:53:fc:d4:93:b1:
                    af:70:01:b6:fa:31:21:05:63:3b:61:5b:c8:16:1f:
                    4c:86:95:ba:78:6c:1d:5a:73:06:4b:5e:18:f4:c6:
                    df:a0:8e:d3:78:18:45:4e:d3:c5:28:80:08:57:34:
                    9b:d6:27:48:7c:23:8b:e9:ee:28:77:73:04:dd:b6:
                    43:05:d3:4e:80:e5:60:66:b5:82:8f:cf:a1:75:a8:
                    c3:94:eb:7b:bd:39:23:6f:49:e6:7a:4b:64:2e:d8:
                    51:69:d1:45:2e:c1:95:70:45:30:0c:2c:3b:b5:02:
                    02:52:dd:f5:90:08:28:12:c6:3c:14:27:98:1c:54:
                    f9:cf:5e:f2:cd:8d:fb:cc:c3:ce:0f:c0:c9:f6:eb:
                    d3:17:78:4b:a3:47:7b:2a:30:a6:75:d7:fe:a3:45:
                    50:2c:b2:1f:b6:87:65:a3:06:f3:f7:b6:06:6e:0f:
                    fc:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:AE:12:BD:46:19:FE:E5:E4:BC:FC:1A:2C:1E:40:A5:8B:DA:A3:4D
            X509v3 Authority Key Identifier:
                keyid:DB:60:11:3D:B8:47:EE:4F:DF:EC:F8:E7:B3:2D:8C:B0:A2:8A:42:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/323830343a6561383a3a2f33322d3438203d3e20323632393636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ea8::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:73:64:1a:96:fc:a0:26:4e:db:d6:4b:27:d1:72:e0:ea:43:
         f1:86:10:a0:3b:d5:55:67:24:b4:5c:3b:5d:b5:f4:a7:23:fd:
         11:f2:af:9f:63:1a:8c:f7:94:76:bc:31:c1:f2:cf:f2:45:1c:
         a4:94:65:2e:6e:c7:33:7c:08:a1:aa:5e:a1:4f:d4:af:45:61:
         cf:e6:a7:b3:ad:cc:7b:42:f4:5d:c7:3d:b2:36:57:ce:5f:7f:
         04:96:ff:08:8d:92:58:29:a2:8b:ea:35:74:b4:c9:e9:d3:ce:
         93:a0:75:e7:98:48:b8:bc:04:35:78:d7:d1:3e:d4:97:9b:a2:
         cd:05:f6:e8:11:51:46:ba:17:4e:7a:8b:e9:e2:a3:d7:b6:71:
         14:01:63:84:7c:e1:ed:f8:b2:7c:7c:d8:65:c9:a7:c6:c4:ef:
         28:0d:64:f5:5f:0e:cb:7e:87:41:bd:26:8b:a5:ab:f6:d3:3a:
         3c:06:0d:07:b5:d2:22:3c:00:9e:2d:e6:19:5b:22:37:0f:0f:
         70:b3:d0:d6:ea:1e:2b:ab:dd:62:77:0d:6d:e9:2d:ed:9d:a9:
         39:79:5f:ba:98:8c:3c:53:f3:1a:77:05:20:aa:e7:06:ed:80:
         a5:a7:d4:e2:c6:51:71:0c:2f:b5:f2:9e:98:54:1f:0c:f5:cc:
         6c:8a:ac:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:54:23 2025 by rpki-client on console.sobornost.net