Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2rW8WXcbdDCWtwg2kndmiuzaZGr6u1HTmuuwjNEikY3d/0/323830343a373331633a3a2f33332d3333203d3e20323730383936.roa
File:                     323830343a373331633a3a2f33332d3333203d3e20323730383936.roa (raw, json)
Hash identifier:          34d1lBSAfktGpOwVCLmVlZsdC+a3y3iChFyIPiP4L8g=
Subject key identifier:   F3:F9:F7:F3:45:66:49:F1:0B:86:0D:31:DA:E0:D0:3F:23:9F:79:FE
Certificate issuer:       /CN=1642ED1962DD5C84CEF56FE031F3682E90A6BFB4
Certificate serial:       74CD4229638432D10C1A5690569E9CFB9DAF28D7
Authority key identifier: 16:42:ED:19:62:DD:5C:84:CE:F5:6F:E0:31:F3:68:2E:90:A6:BF:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1642ED1962DD5C84CEF56FE031F3682E90A6BFB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2rW8WXcbdDCWtwg2kndmiuzaZGr6u1HTmuuwjNEikY3d/0/323830343a373331633a3a2f33332d3333203d3e20323730383936.roa
Signing time:             Wed 16 Apr 2025 12:18:33 +0000
ROA not before:           Wed 16 Apr 2025 12:13:33 +0000
ROA not after:            Wed 15 Apr 2026 12:18:33 +0000
asID:                     270896
IP address blocks:        2804:731c::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2rW8WXcbdDCWtwg2kndmiuzaZGr6u1HTmuuwjNEikY3d/0/1642ED1962DD5C84CEF56FE031F3682E90A6BFB4.crl
                          rsync://rpki-repo.registro.br/repo/2rW8WXcbdDCWtwg2kndmiuzaZGr6u1HTmuuwjNEikY3d/0/1642ED1962DD5C84CEF56FE031F3682E90A6BFB4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1642ED1962DD5C84CEF56FE031F3682E90A6BFB4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 20:17:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:cd:42:29:63:84:32:d1:0c:1a:56:90:56:9e:9c:fb:9d:af:28:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1642ED1962DD5C84CEF56FE031F3682E90A6BFB4
        Validity
            Not Before: Apr 16 12:13:33 2025 GMT
            Not After : Apr 15 12:18:33 2026 GMT
        Subject: CN=F3F9F7F3456649F10B860D31DAE0D03F239F79FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ac:f3:7d:51:10:12:de:a7:01:0d:41:0a:4c:
                    48:4f:2b:23:e4:4e:3d:88:af:49:f3:23:38:13:30:
                    01:0b:81:61:8c:63:82:84:bf:27:37:0c:29:6f:07:
                    77:41:03:7f:c5:b3:0a:8a:c3:3b:06:40:04:24:5a:
                    3b:f8:c5:55:0f:dd:ce:8a:55:f1:40:49:3b:82:79:
                    41:3a:01:fb:06:0d:f7:77:42:a3:a2:f0:0f:e7:4c:
                    85:03:54:5e:52:dd:d6:9c:5e:30:a4:03:14:a1:07:
                    85:37:c4:62:85:9f:ce:51:c0:e1:bb:cc:ab:f9:f0:
                    4d:0d:47:f5:ca:1a:af:92:72:94:f3:20:16:b7:97:
                    4e:30:6a:1c:3e:8c:f3:27:f6:7a:6c:71:cf:5b:fa:
                    84:35:7f:4e:0d:5f:1e:2c:b2:e4:c1:64:49:db:b7:
                    ca:bc:30:37:59:0b:76:c2:68:da:86:d4:bc:0d:ac:
                    b7:cf:dc:7b:5c:0c:c8:fc:97:7c:07:80:3a:14:a1:
                    d1:07:24:5d:18:35:84:68:bd:94:e3:69:c7:70:4b:
                    31:76:45:5e:7c:fd:88:ad:d1:43:e3:74:7e:d0:c4:
                    41:c9:2f:8c:f2:44:a9:a8:4b:2d:7f:05:dd:92:22:
                    df:b9:83:8b:a1:7a:49:5e:5e:cc:d0:0a:77:e9:05:
                    01:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F9:F7:F3:45:66:49:F1:0B:86:0D:31:DA:E0:D0:3F:23:9F:79:FE
            X509v3 Authority Key Identifier:
                keyid:16:42:ED:19:62:DD:5C:84:CE:F5:6F:E0:31:F3:68:2E:90:A6:BF:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2rW8WXcbdDCWtwg2kndmiuzaZGr6u1HTmuuwjNEikY3d/0/1642ED1962DD5C84CEF56FE031F3682E90A6BFB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1642ED1962DD5C84CEF56FE031F3682E90A6BFB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2rW8WXcbdDCWtwg2kndmiuzaZGr6u1HTmuuwjNEikY3d/0/323830343a373331633a3a2f33332d3333203d3e20323730383936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:731c::/33

    Signature Algorithm: sha256WithRSAEncryption
         7e:a6:81:ef:1d:d3:26:84:a0:5c:0e:36:a1:f9:65:73:23:a8:
         4e:0d:6c:bd:ba:fc:81:97:b7:2d:52:73:29:6c:20:03:38:d1:
         72:fc:32:ee:5d:15:ba:f6:7e:29:de:b1:a1:b8:bc:5e:5e:30:
         50:6f:6a:82:f3:c8:50:0d:da:5f:a5:57:b4:4f:6a:21:c7:ed:
         bd:7a:30:6e:f7:bd:2e:f9:2d:cb:96:96:56:8e:7a:14:f9:1c:
         b1:a8:08:87:3e:71:87:2e:6f:12:13:ea:7a:9e:18:a5:a6:f8:
         07:88:76:76:1c:31:42:1d:fc:ca:1d:34:f5:c5:da:31:9b:7d:
         bf:82:db:b1:99:b4:7e:f9:30:c0:95:34:2c:fd:f2:9c:2c:d0:
         4f:d1:4b:9a:3f:21:13:0e:2b:8b:09:bf:dc:08:f1:e5:7e:74:
         59:a0:b4:08:26:7b:be:bb:16:d3:33:2e:5f:63:c1:4f:1d:68:
         ca:b3:80:59:a3:24:2b:9c:83:99:f1:d5:f2:3e:31:b4:e1:4d:
         15:2a:7a:6d:19:31:b0:c4:bb:85:ba:cc:de:24:cd:6f:23:17:
         13:ec:a8:8e:f7:68:00:60:62:e7:cd:c1:2c:5e:9d:08:98:35:
         c2:3c:9b:90:6e:b8:82:ff:77:38:7c:50:76:22:56:0b:6b:93:
         73:27:a9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:27 2025 by rpki-client on console.sobornost.net