Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/323830343a386566383a3a2f33322d3334203d3e20323733343539.roa
File:                     323830343a386566383a3a2f33322d3334203d3e20323733343539.roa (raw, json)
Hash identifier:          o6rrOmZ1ZwXVdm/MOlZIGvPaCfuDPYFCvLyfCMGUEAg=
Subject key identifier:   28:2D:7C:CB:AC:B2:BB:D9:FE:52:9A:76:E6:D0:02:39:BF:0C:FC:52
Certificate issuer:       /CN=60394DEF47E6D547EE9A7D8544543C8F0B072BDA
Certificate serial:       1340FF61E1334BD99E785ECB4156E7308626A9FD
Authority key identifier: 60:39:4D:EF:47:E6:D5:47:EE:9A:7D:85:44:54:3C:8F:0B:07:2B:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60394DEF47E6D547EE9A7D8544543C8F0B072BDA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/323830343a386566383a3a2f33322d3334203d3e20323733343539.roa
Signing time:             Thu 13 Mar 2025 05:07:33 +0000
ROA not before:           Thu 13 Mar 2025 05:02:33 +0000
ROA not after:            Thu 12 Mar 2026 05:07:33 +0000
asID:                     273459
IP address blocks:        2804:8ef8::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/60394DEF47E6D547EE9A7D8544543C8F0B072BDA.crl
                          rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/60394DEF47E6D547EE9A7D8544543C8F0B072BDA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60394DEF47E6D547EE9A7D8544543C8F0B072BDA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 13:53:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:40:ff:61:e1:33:4b:d9:9e:78:5e:cb:41:56:e7:30:86:26:a9:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60394DEF47E6D547EE9A7D8544543C8F0B072BDA
        Validity
            Not Before: Mar 13 05:02:33 2025 GMT
            Not After : Mar 12 05:07:33 2026 GMT
        Subject: CN=282D7CCBACB2BBD9FE529A76E6D00239BF0CFC52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3c:12:26:ef:2a:9a:7c:44:fe:5a:8a:04:95:
                    0b:6c:ec:eb:a8:08:1c:f9:ef:92:a7:71:16:0b:23:
                    41:e6:43:c9:89:ad:9e:eb:e7:30:e7:02:ee:03:d0:
                    ec:0d:cf:91:13:6c:9d:4b:c0:ac:90:4c:5e:fc:f6:
                    b6:37:6b:05:0e:a6:54:b5:4c:e5:8a:3b:37:38:d4:
                    84:65:de:ee:44:42:9b:9f:51:17:27:d7:88:a8:7d:
                    7e:97:28:f3:d9:2c:cb:f5:5a:b6:5a:c6:c3:1a:7f:
                    d6:20:c5:8d:a0:e4:5b:9e:28:2e:82:4f:18:2a:3f:
                    63:90:7a:cf:f1:4d:d1:9b:71:e2:ae:e3:32:fc:fa:
                    c3:b9:e0:a9:69:a8:65:ae:4a:9f:37:8d:7f:c8:86:
                    e3:bb:0a:62:b1:60:64:bd:64:2b:6e:44:4f:8d:e8:
                    51:72:c7:bb:0b:49:47:a7:a8:1f:ef:63:db:89:38:
                    2c:90:36:6c:27:20:97:bc:42:36:75:14:04:1e:b6:
                    c1:69:21:b1:57:ed:4c:25:63:8e:17:03:10:6b:e1:
                    a4:62:09:28:27:fd:b3:8c:bd:9e:1c:a9:09:b9:6e:
                    39:fc:85:43:cd:ce:94:3f:62:05:0d:ab:55:cc:6a:
                    25:85:06:8d:a7:e9:a9:50:7f:cd:92:ae:27:3a:c7:
                    4a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:2D:7C:CB:AC:B2:BB:D9:FE:52:9A:76:E6:D0:02:39:BF:0C:FC:52
            X509v3 Authority Key Identifier:
                keyid:60:39:4D:EF:47:E6:D5:47:EE:9A:7D:85:44:54:3C:8F:0B:07:2B:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/60394DEF47E6D547EE9A7D8544543C8F0B072BDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60394DEF47E6D547EE9A7D8544543C8F0B072BDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/323830343a386566383a3a2f33322d3334203d3e20323733343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ef8::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:9a:25:f8:ad:cf:5f:f4:8b:3e:c2:a4:97:9d:e8:0e:d1:b8:
         d6:49:2e:69:7f:c3:54:a3:d1:33:08:8f:d3:54:aa:58:01:96:
         11:01:9a:c0:65:89:86:52:64:6a:c7:b7:9f:20:70:a5:68:f8:
         59:a0:3a:4e:08:49:76:07:6a:ab:f0:de:ec:2e:7b:0c:68:8a:
         d3:f7:93:6b:49:66:8f:70:de:e3:f3:ff:7d:99:3f:71:1b:a0:
         21:84:b4:74:04:67:64:52:f4:ed:a4:5d:23:f6:44:4b:24:2f:
         d3:30:3a:31:fb:77:1d:42:f9:a4:79:31:56:63:38:9b:4d:e5:
         10:07:27:fa:09:a3:8c:2c:f4:cd:1d:f7:e3:dc:13:26:7b:8b:
         ab:aa:31:41:0f:9e:4c:ab:f8:53:a2:77:73:9f:49:bb:8e:93:
         2d:51:f5:2d:e6:e8:78:3a:9d:99:3d:0d:96:e1:70:b7:3d:da:
         05:9d:66:8e:ca:96:11:ee:87:53:8c:4e:3f:7c:82:9c:e0:78:
         31:58:87:8c:5a:d5:12:27:a1:ed:5a:a8:bb:47:32:1d:5f:af:
         8b:8d:a1:e9:36:8d:62:c9:6c:22:9f:38:2e:bb:8c:1a:65:44:
         3d:68:8e:1c:02:36:18:c5:a2:13:fa:cd:16:fa:5c:1c:c3:7e:
         f6:ff:59:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:04:15 2025 by rpki-client on console.sobornost.net