Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/1/323830343a386235383a3a2f33322d313238203d3e20323733373237.roa
File:                     323830343a386235383a3a2f33322d313238203d3e20323733373237.roa (raw, json)
Hash identifier:          /FOAutYWZzsnbWC4Nqdxqv/tDu+98Wh+rhe0TZEfFrI=
Subject key identifier:   ED:B6:08:44:88:33:64:60:E0:54:C9:44:48:AB:0B:F6:AD:9A:33:2E
Certificate issuer:       /CN=3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE
Certificate serial:       54D0B024DE6F1CC5BB3F6A21E0EC8585F0E240FE
Authority key identifier: 3C:0F:B6:F8:3D:6C:A4:9D:A6:6C:B1:CE:15:9A:49:38:5C:83:0F:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/1/323830343a386235383a3a2f33322d313238203d3e20323733373237.roa
Signing time:             Fri 07 Mar 2025 04:58:16 +0000
ROA not before:           Fri 07 Mar 2025 04:53:16 +0000
ROA not after:            Fri 06 Mar 2026 04:58:16 +0000
asID:                     273727
IP address blocks:        2804:8b58::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/1/3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE.crl
                          rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/1/3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 02:27:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:d0:b0:24:de:6f:1c:c5:bb:3f:6a:21:e0:ec:85:85:f0:e2:40:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE
        Validity
            Not Before: Mar  7 04:53:16 2025 GMT
            Not After : Mar  6 04:58:16 2026 GMT
        Subject: CN=EDB6084488336460E054C94448AB0BF6AD9A332E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f3:8a:d3:9c:36:3a:7b:41:67:8c:df:b2:53:
                    d0:38:b4:1c:27:84:35:22:ef:1d:1e:71:2a:61:44:
                    a7:fe:50:0b:54:9d:4c:4e:a4:78:23:8d:0c:36:10:
                    3d:69:48:ca:38:2d:ed:0a:f3:db:e2:6c:34:00:ae:
                    ce:ce:f2:79:6a:80:17:32:7e:a3:18:e7:34:11:81:
                    80:cf:cf:39:b1:cc:2c:3a:eb:61:04:95:83:c4:24:
                    12:7c:5a:36:3d:e5:70:88:59:79:bd:5c:f3:f1:6d:
                    a0:de:d9:2f:74:47:f6:3c:ab:4a:7a:45:5c:8a:10:
                    33:ae:a0:7f:49:66:f6:5a:7d:36:67:6a:29:b3:55:
                    6d:b9:1d:3f:98:ab:e2:32:d2:f8:5a:ef:9e:8a:46:
                    6b:09:47:9e:02:ee:92:fb:2a:3a:34:9c:71:84:b5:
                    8b:8f:91:b6:1c:a4:74:97:26:a8:17:32:91:9d:ce:
                    05:37:3d:1e:e0:47:69:24:ec:b6:7d:22:f7:62:2e:
                    fb:94:6b:c5:06:23:cb:c9:8b:84:f4:78:12:06:c8:
                    40:4e:15:79:44:83:9c:f0:5d:84:9d:9d:94:89:29:
                    78:fb:2f:9c:0e:dd:bf:c3:1d:f8:37:46:8e:63:32:
                    6e:e5:5b:9e:1e:22:1d:b8:52:8c:53:c1:60:71:04:
                    e0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B6:08:44:88:33:64:60:E0:54:C9:44:48:AB:0B:F6:AD:9A:33:2E
            X509v3 Authority Key Identifier:
                keyid:3C:0F:B6:F8:3D:6C:A4:9D:A6:6C:B1:CE:15:9A:49:38:5C:83:0F:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/1/3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/1/323830343a386235383a3a2f33322d313238203d3e20323733373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b58::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:8f:82:4e:74:fc:01:81:49:44:07:15:dd:6f:3e:0e:e0:a2:
         fa:60:c2:85:24:11:40:a3:4b:7e:2b:18:d1:ae:c4:44:c6:b7:
         19:e1:ac:c5:63:63:aa:3f:51:75:68:84:eb:18:ab:99:e9:75:
         d0:4d:a5:27:4f:e2:fb:6e:c7:d2:fc:35:c7:8f:77:10:2a:18:
         e3:5a:6b:67:ee:4d:ef:fa:77:da:d4:7f:48:cc:8b:c8:fd:eb:
         c9:d7:be:ca:66:a4:3e:89:90:cb:ca:4e:f7:d8:99:a6:b1:28:
         68:ee:d7:df:bd:32:25:da:51:5f:4e:34:cf:0a:49:51:0c:ba:
         d9:ea:67:3a:d6:09:6b:d9:2f:76:26:e3:77:f0:3b:00:c0:df:
         d7:0b:3c:37:df:c1:be:4d:2c:5f:1c:3d:8c:9e:6f:33:ff:0b:
         e4:e0:9b:2d:0a:f8:a8:ca:b5:b4:14:d5:83:9e:90:0c:74:06:
         28:8c:ae:79:b4:12:3b:0f:0a:ad:88:32:f7:60:74:75:c0:9a:
         25:66:70:b9:a1:08:d7:ac:f9:e4:bc:78:6e:05:5a:60:6a:11:
         67:b6:7a:3a:a7:75:31:90:2f:9a:c2:40:f3:8e:00:dd:19:0a:
         59:ce:80:b6:f5:52:c7:30:38:6a:79:17:41:c3:5c:b3:a2:2c:
         aa:c5:d9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:20 2025 by rpki-client on console.sobornost.net