Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/323830343a376536633a3a2f33322d313238203d3e20323731363233.roa
File:                     323830343a376536633a3a2f33322d313238203d3e20323731363233.roa (raw, json)
Hash identifier:          dMeIzUUgXYMifee7yUy6Z7Qqcq81KQpEhu3ht6d+GPM=
Subject key identifier:   15:39:B1:E9:CF:21:84:8C:C3:E0:B2:EE:09:0E:E8:70:88:74:3C:A2
Certificate issuer:       /CN=8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084
Certificate serial:       27AA93427DA3F0307DF5246B7FD409500CD14683
Authority key identifier: 8B:8B:4E:1F:32:9B:88:F7:0D:E3:5D:A3:30:FC:1F:9C:A2:B9:20:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/323830343a376536633a3a2f33322d313238203d3e20323731363233.roa
Signing time:             Fri 07 Mar 2025 01:53:30 +0000
ROA not before:           Fri 07 Mar 2025 01:48:30 +0000
ROA not after:            Fri 06 Mar 2026 01:53:30 +0000
asID:                     271623
IP address blocks:        2804:7e6c::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.crl
                          rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 15:19:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:aa:93:42:7d:a3:f0:30:7d:f5:24:6b:7f:d4:09:50:0c:d1:46:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084
        Validity
            Not Before: Mar  7 01:48:30 2025 GMT
            Not After : Mar  6 01:53:30 2026 GMT
        Subject: CN=1539B1E9CF21848CC3E0B2EE090EE87088743CA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:dd:dc:29:b4:11:db:d2:4b:1e:54:b7:ac:89:
                    2f:cc:59:4d:88:24:15:3e:8d:7b:d7:b6:48:32:2e:
                    d7:14:22:63:e0:3d:47:a2:87:8e:36:fe:1c:e5:0f:
                    fd:70:d5:55:08:61:93:be:0a:30:5a:c0:92:09:70:
                    6c:8a:53:f6:49:9a:03:bf:8a:28:6d:ab:c1:1c:e9:
                    c5:58:24:fb:5e:45:8b:8f:50:0e:70:5c:30:d7:be:
                    15:c1:66:ba:66:d7:34:03:2c:87:ef:4c:76:93:d6:
                    00:24:2d:91:ab:65:36:df:ec:bc:44:1c:06:6f:48:
                    34:08:4d:1b:7e:0c:e8:0a:f2:12:0b:f5:80:3e:f8:
                    79:cd:da:ca:ba:d0:d1:6f:43:24:d4:63:49:4d:eb:
                    cb:b3:bb:ca:9c:8d:9b:09:da:e0:a4:32:4d:fd:74:
                    96:fe:22:30:7f:e8:46:a1:71:40:ac:97:23:5c:82:
                    6e:b7:85:81:a7:68:2e:19:90:e3:82:bb:f9:17:00:
                    7d:f9:05:fd:0d:e5:85:18:9a:96:84:1e:f4:83:b9:
                    74:a5:ab:8c:c4:aa:53:8a:78:ac:71:f8:60:2a:8c:
                    bf:ff:f6:54:bd:a4:90:7f:94:17:10:b4:38:d8:a4:
                    78:8d:90:08:57:2c:96:64:99:43:89:89:94:83:bf:
                    bf:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:39:B1:E9:CF:21:84:8C:C3:E0:B2:EE:09:0E:E8:70:88:74:3C:A2
            X509v3 Authority Key Identifier:
                keyid:8B:8B:4E:1F:32:9B:88:F7:0D:E3:5D:A3:30:FC:1F:9C:A2:B9:20:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/323830343a376536633a3a2f33322d313238203d3e20323731363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e6c::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:f5:d0:f4:49:07:53:30:b8:4b:84:fe:fe:03:96:f6:af:04:
         cb:d2:14:fc:f8:4d:89:0b:f0:7f:cf:75:d9:8a:03:9d:12:e5:
         c7:60:9a:9c:4b:c0:df:f6:1b:c4:4e:b0:19:a4:e7:99:59:14:
         3a:c9:fe:5d:84:c3:ec:17:aa:31:0a:7f:af:0e:e2:b1:e6:52:
         3d:94:f1:3d:61:5f:e8:6e:be:24:3a:55:c0:71:33:00:89:b4:
         b2:8c:48:87:75:ef:f2:fe:38:84:2b:41:57:bd:b1:0e:54:0c:
         d7:ac:62:52:08:5c:72:b9:d5:b4:96:b2:2b:24:84:85:57:a0:
         89:ed:3c:ac:55:b4:63:a8:a9:2b:ea:ac:57:61:34:dc:60:f7:
         b0:df:80:01:f3:89:d3:52:f4:00:c1:ab:58:e1:f5:d3:a3:76:
         d4:45:93:84:e4:57:ae:80:7b:09:99:66:f5:35:08:c1:c4:8e:
         ba:a6:7d:26:80:18:d4:30:ed:17:c0:10:c3:9d:05:6d:46:bb:
         d5:96:b0:b8:cd:90:0a:14:ab:61:db:69:3f:e0:57:c3:f4:5b:
         56:9a:57:4c:98:9a:f9:aa:54:50:e7:54:a6:c8:bf:4c:70:1f:
         75:f0:b1:6d:d9:a4:55:58:fc:25:24:d8:cf:69:93:52:95:0e:
         ed:c3:6a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:18 2025 by rpki-client on console.sobornost.net