Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/323830343a353839343a383030303a3a2f33342d3334203d3e20323638313337.roa
File:                     323830343a353839343a383030303a3a2f33342d3334203d3e20323638313337.roa (raw, json)
Hash identifier:          ibpKzGLBhdMOnQXrZXah2wzdNkXLRH1QXQLXsrxUGUI=
Subject key identifier:   24:B3:D8:EB:EE:26:39:3A:F9:3E:E2:C4:78:91:E5:40:46:81:9B:07
Certificate issuer:       /CN=3DC690C0DE80131B223BEE70D7F6FF990A15F341
Certificate serial:       07C1D4B49187CA4C9C50EA7786F7B677E13A1580
Authority key identifier: 3D:C6:90:C0:DE:80:13:1B:22:3B:EE:70:D7:F6:FF:99:0A:15:F3:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/323830343a353839343a383030303a3a2f33342d3334203d3e20323638313337.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     268137
IP address blocks:        2804:5894:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.crl
                          rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:c1:d4:b4:91:87:ca:4c:9c:50:ea:77:86:f7:b6:77:e1:3a:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DC690C0DE80131B223BEE70D7F6FF990A15F341
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject: CN=24B3D8EBEE26393AF93EE2C47891E54046819B07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b2:9d:e1:31:b0:46:36:66:e9:d7:a6:fe:07:
                    82:5b:4f:fa:04:24:5e:e3:35:22:c5:a7:b9:ff:60:
                    ed:65:7c:ad:dc:bf:58:69:ff:1b:5e:d8:42:04:e5:
                    b8:c7:d8:97:ae:4a:4c:b6:04:d4:6b:f3:cd:3f:06:
                    78:0c:cb:bf:75:d9:e4:ce:3b:c7:06:b5:e0:e8:f1:
                    4a:28:4f:7c:06:cb:2e:b4:25:93:bc:73:42:80:aa:
                    c7:1a:08:84:fe:af:ae:4d:3a:c0:96:0b:3f:30:7d:
                    55:c1:f3:cd:ce:d4:c2:3f:6e:a0:14:95:4f:6e:b8:
                    bb:07:a8:5d:00:cc:8d:d6:00:04:3e:8d:4f:37:c6:
                    04:1e:9f:61:4f:86:a6:22:cd:39:f7:4d:87:dc:d9:
                    d7:9f:3f:d3:2d:4c:9a:db:f0:a7:8d:de:12:11:7a:
                    76:cb:b4:52:ff:37:cd:cd:57:e4:28:6a:79:8b:dc:
                    86:98:95:88:dc:9e:d1:cb:53:71:1b:ca:cc:39:2a:
                    48:e6:96:da:ac:34:c3:0d:51:8d:86:9e:42:a3:d8:
                    c7:7d:37:2f:3a:05:e9:99:21:60:86:0a:a5:3b:0e:
                    3d:f6:c1:36:54:4f:fb:aa:41:fb:ad:8a:86:e7:95:
                    ef:39:9d:16:4d:ce:a3:bd:64:50:f9:b4:34:8f:e7:
                    85:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B3:D8:EB:EE:26:39:3A:F9:3E:E2:C4:78:91:E5:40:46:81:9B:07
            X509v3 Authority Key Identifier:
                keyid:3D:C6:90:C0:DE:80:13:1B:22:3B:EE:70:D7:F6:FF:99:0A:15:F3:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/323830343a353839343a383030303a3a2f33342d3334203d3e20323638313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5894:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         76:f9:29:d0:4f:3a:c8:79:a1:10:44:98:51:b6:90:8f:8a:27:
         5c:ed:72:a8:4e:2c:a2:15:80:4a:0c:7a:94:31:d3:fc:d4:f7:
         4d:77:9b:9c:f3:58:cb:12:ca:7c:46:67:62:12:52:f2:36:09:
         8b:7b:b1:80:73:ce:78:3d:66:95:15:a6:2f:1e:6d:5e:8b:55:
         e5:dc:d2:82:cb:48:fc:fd:51:1f:cf:e8:c1:c0:2e:90:f3:9f:
         30:02:f4:84:ea:31:cf:69:92:ae:1c:c0:6f:22:54:35:f7:e9:
         30:b4:f5:5e:96:7d:c3:e7:4b:21:50:04:64:76:e7:b9:39:54:
         84:45:57:41:04:a4:06:9c:07:c9:63:90:5e:2a:f0:b0:ac:03:
         5e:f8:7f:4a:48:3b:8d:4e:05:92:93:49:f3:15:4e:6d:30:ec:
         09:b5:25:61:b1:59:17:89:4d:46:4b:26:c7:b8:06:69:bd:24:
         26:1f:9c:8c:76:01:72:16:10:f4:af:00:19:b3:e5:af:cb:1f:
         77:17:79:eb:58:65:ac:65:aa:06:26:cd:25:a0:fb:dc:47:03:
         02:bf:22:f3:0d:eb:37:7b:08:69:4b:07:f6:fb:5f:2a:ac:92:
         9f:27:dc:aa:88:d3:4d:11:36:50:ba:d8:47:5f:20:1b:83:17:
         6f:4c:76:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:49 2025 by rpki-client on console.sobornost.net