Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/323830343a346166633a3a2f33342d3334203d3e203631363134.roa
File:                     323830343a346166633a3a2f33342d3334203d3e203631363134.roa (raw, json)
Hash identifier:          VmS8uwvQBPCfqzkMjm+h8XPkAkqSL07bEJM/u9/N/i8=
Subject key identifier:   7C:D6:A3:55:A1:E5:5B:55:61:02:42:65:77:09:E1:65:05:F6:EC:6B
Certificate issuer:       /CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
Certificate serial:       659F80454D005B52A40487B42EFF2780645B085E
Authority key identifier: A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/323830343a346166633a3a2f33342d3334203d3e203631363134.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     61614
IP address blocks:        2804:4afc::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl
                          rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:9f:80:45:4d:00:5b:52:a4:04:87:b4:2e:ff:27:80:64:5b:08:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c5:5b:35:76:ab:1a:7b:3d:0f:bb:0a:40:fe:
                    8b:48:57:23:8c:c3:43:54:a9:b7:4e:09:3d:1b:95:
                    5c:0e:4c:78:3c:c0:24:16:e5:ad:cf:49:a6:58:59:
                    43:d0:94:0e:8d:84:93:89:51:82:4d:01:4f:f3:86:
                    79:60:f4:64:23:96:59:20:b3:f2:82:c5:7a:b8:aa:
                    af:9b:d0:35:8e:44:9f:64:7b:56:14:99:dd:41:62:
                    64:53:90:3d:0a:ba:08:13:07:7c:aa:1c:63:ae:e4:
                    3f:aa:81:9d:93:33:1f:96:00:eb:df:1f:75:7e:2e:
                    5f:2a:1f:e4:22:6c:15:15:59:8e:22:ac:9f:ef:95:
                    ff:75:26:9a:58:af:74:a5:ee:c1:4b:08:5a:38:f7:
                    5f:39:bb:5a:26:06:dd:a6:e0:4e:07:21:ce:59:a1:
                    2c:54:ef:d1:5e:c2:53:89:a6:2a:9c:c9:8e:bb:2c:
                    f5:2a:92:bd:79:32:d3:3c:6d:6b:23:b2:4f:0d:e0:
                    73:cb:63:cb:63:4b:c4:55:18:47:ef:f5:c0:e9:75:
                    c8:40:c2:35:04:f9:71:64:e1:a9:14:e8:d2:7a:21:
                    18:a8:39:f5:e4:0b:8b:1a:6b:cb:d0:80:cd:d5:ae:
                    f9:60:db:0c:e6:b1:45:9d:db:6b:92:bf:91:0d:7a:
                    a1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D6:A3:55:A1:E5:5B:55:61:02:42:65:77:09:E1:65:05:F6:EC:6B
            X509v3 Authority Key Identifier:
                keyid:A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/323830343a346166633a3a2f33342d3334203d3e203631363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4afc::/34

    Signature Algorithm: sha256WithRSAEncryption
         73:91:3e:1f:67:e4:27:a7:78:a9:98:aa:79:2a:fc:d9:83:82:
         be:56:ac:05:80:50:a4:3a:b2:11:e8:4d:92:d4:35:c5:2e:d6:
         1d:4d:61:2c:3e:50:c1:38:c8:af:79:4f:64:a8:c0:98:8b:7a:
         dd:bb:af:2a:d0:0a:d0:e4:82:f4:99:dc:57:56:38:69:a9:87:
         9b:4b:01:45:62:9d:e0:c4:29:53:7c:74:27:b2:a3:01:e0:9c:
         c1:c3:e2:2c:2d:cb:06:85:67:8b:0a:e3:88:79:0c:9a:91:fa:
         e5:fd:8d:6d:98:0b:59:5a:cb:5b:ab:9f:f2:be:48:9f:81:64:
         87:2b:52:da:80:ab:8a:ef:37:24:d4:44:f1:29:40:6a:4e:e6:
         d6:a3:f7:27:d5:82:0f:23:58:b4:ca:1f:46:2e:af:76:4d:08:
         86:bf:9f:ec:72:15:02:4d:f4:08:ae:d3:9e:8e:2d:f1:0c:3d:
         a1:3a:b6:55:9b:bb:95:2c:9f:f4:8a:24:3d:b9:c1:f7:64:90:
         1c:f0:c3:f1:b5:62:10:68:70:af:85:13:de:93:6a:c6:eb:e1:
         af:78:74:db:df:53:2e:4f:51:7c:2b:d4:02:9b:98:9d:92:95:
         14:9b:b0:3b:f9:a2:28:05:4d:38:3b:36:af:ca:5c:c2:26:58:
         47:d1:ab:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:40:34 2025 by rpki-client on console.sobornost.net