Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/323830343a313333383a343a3a2f34382d3438203d3e20323633353232.roa
File:                     323830343a313333383a343a3a2f34382d3438203d3e20323633353232.roa (raw, json)
Hash identifier:          HRH0pNnnb3BHWgcBX3Um57IQkjFi7xF5gsaXkfQsQg8=
Subject key identifier:   4B:EB:36:58:92:0B:8D:2E:0C:DC:BA:BB:79:96:9A:F6:D5:B4:46:A9
Certificate issuer:       /CN=ADE62729B7C2F675CBB616815CBA292A798BEB4B
Certificate serial:       178366C812B4CF2F4283F8FCF3484EFBE42EE0AB
Authority key identifier: AD:E6:27:29:B7:C2:F6:75:CB:B6:16:81:5C:BA:29:2A:79:8B:EB:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/323830343a313333383a343a3a2f34382d3438203d3e20323633353232.roa
Signing time:             Mon 28 Apr 2025 11:08:20 +0000
ROA not before:           Mon 28 Apr 2025 11:03:20 +0000
ROA not after:            Mon 27 Apr 2026 11:08:20 +0000
asID:                     263522
IP address blocks:        2804:1338:4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.crl
                          rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 13:13:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:83:66:c8:12:b4:cf:2f:42:83:f8:fc:f3:48:4e:fb:e4:2e:e0:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADE62729B7C2F675CBB616815CBA292A798BEB4B
        Validity
            Not Before: Apr 28 11:03:20 2025 GMT
            Not After : Apr 27 11:08:20 2026 GMT
        Subject: CN=4BEB3658920B8D2E0CDCBABB79969AF6D5B446A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1a:3f:ed:e5:00:bc:ab:9d:f5:d2:b2:61:2f:
                    cc:3b:32:dc:e8:c1:7d:60:fb:1e:98:d9:b7:e8:47:
                    40:99:96:db:e8:49:84:c1:70:0a:28:89:65:bb:d2:
                    51:4d:59:fd:73:ab:d0:33:cc:35:43:0d:23:2b:32:
                    73:eb:6b:55:17:82:2d:b1:1b:2a:41:cc:c1:49:44:
                    74:84:83:80:c2:de:cb:2a:59:c0:4d:67:19:19:0f:
                    70:c8:e8:71:a8:65:3d:42:a2:61:f4:8f:ac:d2:c7:
                    ba:e6:a4:94:b0:94:9f:5f:ac:31:77:4b:ce:96:2d:
                    1b:78:be:45:0f:1b:de:5d:54:df:e1:ee:39:aa:f4:
                    e2:3a:c9:b3:f5:8f:1c:ea:d1:c9:ec:e8:01:5b:97:
                    ce:6d:3b:6f:e2:10:a6:c3:7d:6f:3b:6f:a9:5a:ac:
                    c6:c0:05:fc:71:92:23:a3:75:6c:f4:28:4a:08:32:
                    b0:f5:5e:85:7a:b6:b1:e6:29:cb:4c:ab:ea:b3:ba:
                    bc:db:a2:b7:b3:5a:61:0e:50:de:56:70:b8:6c:91:
                    a0:da:f9:cd:8c:60:aa:97:b4:34:ec:19:f2:03:8d:
                    9d:03:bb:6e:6b:c8:2b:6c:0e:fa:6c:55:c8:2a:e2:
                    2d:97:26:f3:66:87:c1:f9:f5:a1:f8:68:fa:41:75:
                    5a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:EB:36:58:92:0B:8D:2E:0C:DC:BA:BB:79:96:9A:F6:D5:B4:46:A9
            X509v3 Authority Key Identifier:
                keyid:AD:E6:27:29:B7:C2:F6:75:CB:B6:16:81:5C:BA:29:2A:79:8B:EB:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/323830343a313333383a343a3a2f34382d3438203d3e20323633353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1338:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:e0:a3:d7:d4:0c:85:f4:74:39:21:df:33:3c:5b:98:59:52:
         ed:15:b7:eb:7f:89:67:9d:da:92:26:c1:5b:40:1d:93:aa:80:
         07:3f:b8:d9:04:b0:0f:d3:b5:69:29:0d:eb:37:f5:60:3b:ac:
         1e:8a:39:98:fc:e9:b6:c4:36:ba:20:34:c2:86:cc:bc:cf:32:
         6e:6a:3b:e5:3b:89:f9:f4:4b:0e:84:ff:2d:99:8f:4b:62:bd:
         3c:46:e0:31:41:35:04:b7:a0:25:56:a2:6b:7b:d6:9f:97:af:
         5a:48:d1:62:1a:e3:e9:e0:28:ef:be:d0:dd:ff:1a:89:ee:ee:
         46:f2:5f:a8:15:3b:3f:5f:bc:a7:52:46:f2:c8:4a:35:0a:14:
         df:db:77:d4:04:d6:1f:13:30:c7:66:ab:e5:4c:d0:51:77:58:
         38:bf:6d:89:2e:34:b2:2d:cf:b1:05:55:87:cb:1d:68:86:d0:
         aa:08:fb:1b:f1:16:03:b7:e8:40:df:16:11:01:49:92:34:97:
         2b:1b:41:b3:64:66:97:0c:b4:c7:21:09:6e:c1:92:d7:14:88:
         57:70:42:28:b2:72:6e:db:fb:11:07:fa:a5:06:43:d3:c8:79:
         a3:37:c8:45:8e:d0:a3:fb:9d:36:da:71:04:44:87:42:61:dd:
         0a:00:fc:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:05:03 2025 by rpki-client on console.sobornost.net