Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/323830343a333131633a3a2f33322d3438203d3e20323634393933.roa
File:                     323830343a333131633a3a2f33322d3438203d3e20323634393933.roa (raw, json)
Hash identifier:          Bzk4dZzrNC2Jl6ZUDrTLxTfoojkN5yomvgAkgomW3v0=
Subject key identifier:   D0:72:E1:D8:D3:C7:78:4E:40:91:59:BF:71:58:AB:81:E6:EB:C4:98
Certificate issuer:       /CN=068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D
Certificate serial:       137D7F2AD910800849CC81E347A53E57771D1E11
Authority key identifier: 06:8F:DF:C5:A2:B7:BE:13:87:BD:BD:BF:1E:8D:51:EA:F4:D2:0F:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/323830343a333131633a3a2f33322d3438203d3e20323634393933.roa
Signing time:             Thu 06 Mar 2025 17:43:40 +0000
ROA not before:           Thu 06 Mar 2025 17:38:40 +0000
ROA not after:            Thu 05 Mar 2026 17:43:40 +0000
asID:                     264993
IP address blocks:        2804:311c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.crl
                          rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 18:10:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:7d:7f:2a:d9:10:80:08:49:cc:81:e3:47:a5:3e:57:77:1d:1e:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D
        Validity
            Not Before: Mar  6 17:38:40 2025 GMT
            Not After : Mar  5 17:43:40 2026 GMT
        Subject: CN=D072E1D8D3C7784E409159BF7158AB81E6EBC498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:70:43:0a:70:9e:c2:f2:5b:76:34:f3:76:59:
                    86:d4:5a:7a:c8:e2:70:1d:10:f5:0d:f6:10:3f:7c:
                    c6:8e:04:af:24:53:a6:e2:04:c9:43:02:17:0f:59:
                    5a:d5:37:67:56:1b:c0:c6:ea:7b:2f:ac:3d:b7:47:
                    fe:46:fa:07:dc:41:2c:08:e8:95:61:8c:f8:e0:2c:
                    b0:bd:8b:24:c1:6d:3b:6e:65:73:95:b2:5d:80:6c:
                    17:ea:7b:c5:65:88:29:d2:d1:5b:ff:17:bb:eb:ac:
                    9f:c6:d5:fa:43:6f:32:7e:a9:8b:e8:6d:3e:36:db:
                    51:20:6b:e7:63:81:4a:2a:c8:78:19:f9:32:f4:9e:
                    eb:04:9a:5a:b7:17:55:99:7d:f2:70:4c:47:dd:52:
                    1d:93:c2:eb:16:41:49:f3:3b:20:a1:7f:03:30:53:
                    93:1d:bf:b9:0f:b7:78:43:ae:d3:2b:11:8d:07:9f:
                    cd:68:99:55:0f:f2:11:81:bc:34:9f:fe:b9:d8:47:
                    2b:75:42:9c:76:b0:5b:92:a4:61:a6:66:ce:5f:89:
                    0c:8f:7c:65:17:e2:c3:79:ab:43:52:60:9f:c8:c0:
                    c0:ac:aa:6c:94:25:29:b4:65:37:48:f0:ab:c2:9c:
                    ed:9a:2d:0f:e1:ef:43:aa:a3:2e:d3:37:66:2b:47:
                    49:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:72:E1:D8:D3:C7:78:4E:40:91:59:BF:71:58:AB:81:E6:EB:C4:98
            X509v3 Authority Key Identifier:
                keyid:06:8F:DF:C5:A2:B7:BE:13:87:BD:BD:BF:1E:8D:51:EA:F4:D2:0F:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/323830343a333131633a3a2f33322d3438203d3e20323634393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:311c::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:80:f0:81:ef:bb:4b:b3:bf:d2:5f:24:b6:42:d7:f6:93:25:
         68:ed:46:c9:19:2e:9e:fd:00:fe:03:b9:48:bf:54:c1:42:d3:
         2b:c2:4e:47:97:78:a6:e3:1c:4b:14:b2:11:4e:96:3d:fd:d3:
         10:6d:7b:c5:60:dc:40:ab:ac:fc:bc:1f:f8:a0:f3:1d:84:d4:
         db:7e:7e:8a:d0:67:36:82:0b:1e:9c:46:23:d1:df:ec:fe:32:
         76:cd:6a:b1:36:75:50:10:67:41:a2:f5:18:3f:81:bb:f3:d8:
         80:04:3f:ff:2e:fd:45:63:07:ab:1d:86:ed:35:82:bb:08:1b:
         9e:af:b9:b2:7b:01:79:d7:33:4f:d4:34:9a:57:12:a3:91:1e:
         a9:96:5c:f3:e0:54:98:dd:a8:ec:2b:60:4d:7b:e0:03:0a:2a:
         15:bd:e0:e6:d8:6e:c4:60:93:7d:56:1d:f4:08:d9:15:ad:37:
         fd:dd:d3:03:69:ae:25:a9:14:3f:ac:1a:c9:a9:0c:ed:95:e2:
         4a:f6:c5:e1:ca:65:30:4a:ee:59:4d:c6:d9:03:c5:fc:2d:73:
         31:96:36:da:c6:6a:eb:c3:7c:d7:de:74:50:77:d4:e1:a7:40:
         d0:5b:d4:22:e9:ef:bb:3f:6b:e3:28:5d:45:9f:74:4d:db:c7:
         65:5e:4b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:24:53 2025 by rpki-client on console.sobornost.net