Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/323830343a313333383a373a3a2f34382d3438203d3e20323633353232.roa
File:                     323830343a313333383a373a3a2f34382d3438203d3e20323633353232.roa (raw, json)
Hash identifier:          DENN7m6gcYD4666nHaDedYHkqOmr06izN5wXZmkBX/c=
Subject key identifier:   43:E7:DE:31:2D:3C:A0:FE:AD:C8:35:47:90:42:D9:B0:43:37:9F:5F
Certificate issuer:       /CN=ADE62729B7C2F675CBB616815CBA292A798BEB4B
Certificate serial:       0A67B13D5D6EB17373D56CB40B073C79115F4425
Authority key identifier: AD:E6:27:29:B7:C2:F6:75:CB:B6:16:81:5C:BA:29:2A:79:8B:EB:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/323830343a313333383a373a3a2f34382d3438203d3e20323633353232.roa
Signing time:             Mon 28 Apr 2025 11:08:26 +0000
ROA not before:           Mon 28 Apr 2025 11:03:26 +0000
ROA not after:            Mon 27 Apr 2026 11:08:26 +0000
asID:                     263522
IP address blocks:        2804:1338:7::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.crl
                          rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 13:13:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:67:b1:3d:5d:6e:b1:73:73:d5:6c:b4:0b:07:3c:79:11:5f:44:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADE62729B7C2F675CBB616815CBA292A798BEB4B
        Validity
            Not Before: Apr 28 11:03:26 2025 GMT
            Not After : Apr 27 11:08:26 2026 GMT
        Subject: CN=43E7DE312D3CA0FEADC835479042D9B043379F5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:dd:31:0f:a7:38:88:13:fd:58:6c:35:c2:5b:
                    7a:ab:d9:f6:33:93:d4:dc:34:dd:23:d9:e2:a5:2b:
                    b0:94:6a:82:43:d2:29:51:f5:76:cd:70:65:4a:5f:
                    a1:ad:93:33:df:2b:d3:76:05:d3:a5:76:9c:0f:54:
                    71:dc:9b:f1:55:55:81:56:cd:1c:0e:25:11:06:76:
                    17:49:de:8c:1f:5f:69:00:71:65:d2:86:26:f2:2c:
                    1d:89:16:a4:93:c1:b3:3c:31:c3:23:45:55:04:69:
                    8e:e1:dc:3a:3b:6e:ac:35:04:fa:ea:3c:6c:76:54:
                    5e:be:7f:ca:74:94:30:80:35:5a:c4:3d:6d:35:1b:
                    dc:38:0a:e6:9c:1f:e3:e1:09:5c:e4:cb:43:e9:b4:
                    00:5c:2d:60:69:45:70:43:23:0e:be:c5:fa:fd:74:
                    e8:68:ae:7f:18:19:6b:09:60:b5:73:f6:fb:ab:44:
                    f6:c4:d9:3e:31:2a:e1:0d:ec:b0:10:7c:f8:da:dc:
                    12:6d:12:c0:fe:a0:e2:67:b4:45:1f:f1:2c:62:8c:
                    70:94:9d:35:16:50:9f:df:d3:4f:28:c1:dd:e3:bd:
                    f6:90:ae:dd:86:86:8f:39:31:30:44:bc:49:f1:1d:
                    22:e4:80:c8:b7:0f:b9:95:64:d8:1e:c1:5f:30:cd:
                    5a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E7:DE:31:2D:3C:A0:FE:AD:C8:35:47:90:42:D9:B0:43:37:9F:5F
            X509v3 Authority Key Identifier:
                keyid:AD:E6:27:29:B7:C2:F6:75:CB:B6:16:81:5C:BA:29:2A:79:8B:EB:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/323830343a313333383a373a3a2f34382d3438203d3e20323633353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1338:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:95:43:14:27:ab:b0:fb:c9:13:40:9f:8c:e3:59:b8:0f:31:
         62:a9:84:71:c5:60:57:e5:dc:c5:ca:aa:59:d0:05:fc:cc:f6:
         45:93:64:0f:c1:18:79:86:14:79:47:58:08:dd:18:1d:02:38:
         40:2c:fa:cd:79:58:26:c4:79:79:0f:a0:5f:ac:35:6e:dc:cf:
         4e:3c:a0:5c:73:01:68:13:3b:76:24:03:47:f6:7f:3d:ca:1f:
         8b:06:35:e6:5b:77:4d:a1:6d:1c:86:d1:53:ef:d2:f3:96:a3:
         2f:7d:98:89:6b:90:b3:d2:e5:76:1d:e9:db:b3:0e:ae:fd:b1:
         8b:4c:7a:59:58:65:60:88:a1:b0:7c:e1:fb:e2:02:d8:57:12:
         74:77:bc:70:88:ef:b0:6c:b5:89:1f:ee:c6:c9:70:d3:48:88:
         3d:55:a8:67:28:ff:62:36:8d:0c:e6:c0:ce:3c:35:e7:ab:ed:
         c9:73:1c:28:24:d9:4d:61:60:74:79:8d:1d:76:2a:c4:91:d2:
         21:2b:61:9e:04:1d:a9:a0:f7:a8:ff:fb:0c:6d:22:93:c5:be:
         de:2c:1c:7b:38:84:0a:71:7c:4e:92:21:a2:4e:24:6e:ac:e1:
         3a:3b:f9:fa:5d:c4:5c:27:5c:8e:cc:5f:64:63:f3:45:bb:e5:
         5e:06:f8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:05:03 2025 by rpki-client on console.sobornost.net