Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2xxGCZw9M48eUJsHJGURaQkp6rNdP9itEmwpH4hzEmeL/0/323830313a38313a61303a3a2f34382d3438203d3e20323734363736.roa
File:                     323830313a38313a61303a3a2f34382d3438203d3e20323734363736.roa (raw, json)
Hash identifier:          VWKRp5iosaknzhh7g4MZu6pLZzNWNSkoELcA8XS5qg8=
Subject key identifier:   3D:41:D0:25:42:07:56:32:68:13:65:E0:AA:E8:C9:8B:B1:83:E3:66
Certificate issuer:       /CN=6CA8F2E376D51B5B94371C8CF853DE6986BA4AF5
Certificate serial:       22CA7C67BB23643CADB4FC7134C0F4025AA6F902
Authority key identifier: 6C:A8:F2:E3:76:D5:1B:5B:94:37:1C:8C:F8:53:DE:69:86:BA:4A:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CA8F2E376D51B5B94371C8CF853DE6986BA4AF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2xxGCZw9M48eUJsHJGURaQkp6rNdP9itEmwpH4hzEmeL/0/323830313a38313a61303a3a2f34382d3438203d3e20323734363736.roa
Signing time:             Tue 10 Dec 2024 12:38:09 +0000
ROA not before:           Tue 10 Dec 2024 12:33:09 +0000
ROA not after:            Tue 09 Dec 2025 12:38:09 +0000
asID:                     274676
IP address blocks:        2801:81:a0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2xxGCZw9M48eUJsHJGURaQkp6rNdP9itEmwpH4hzEmeL/0/6CA8F2E376D51B5B94371C8CF853DE6986BA4AF5.crl
                          rsync://rpki-repo.registro.br/repo/2xxGCZw9M48eUJsHJGURaQkp6rNdP9itEmwpH4hzEmeL/0/6CA8F2E376D51B5B94371C8CF853DE6986BA4AF5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CA8F2E376D51B5B94371C8CF853DE6986BA4AF5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 16:22:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:ca:7c:67:bb:23:64:3c:ad:b4:fc:71:34:c0:f4:02:5a:a6:f9:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CA8F2E376D51B5B94371C8CF853DE6986BA4AF5
        Validity
            Not Before: Dec 10 12:33:09 2024 GMT
            Not After : Dec  9 12:38:09 2025 GMT
        Subject: CN=3D41D02542075632681365E0AAE8C98BB183E366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2a:48:bb:01:19:a6:b1:8a:ce:98:7b:c6:fd:
                    ff:f0:32:32:88:1e:d2:72:c6:35:9c:a8:06:01:21:
                    3b:2b:30:2d:83:47:b8:1a:3d:8e:96:99:f1:29:8c:
                    5c:c4:9e:6f:70:22:62:db:77:43:50:cc:21:b4:71:
                    b1:e3:59:71:17:bd:9b:ca:82:22:99:5b:04:bb:c8:
                    b2:30:60:48:cf:f5:ac:47:05:e3:f4:58:8b:3a:37:
                    10:78:26:b8:70:01:f9:c4:56:76:77:c3:51:b5:52:
                    42:62:8e:98:b9:7e:5c:49:02:86:b8:78:a7:ca:b9:
                    e6:ac:da:06:d5:b5:26:ef:48:4e:86:6a:ab:56:2c:
                    a2:7f:7c:9c:0e:92:fd:ad:16:fd:03:3e:91:07:ee:
                    5f:9f:cb:0d:26:a5:ed:01:71:fa:2f:bc:33:9f:0b:
                    7d:96:5d:a7:7a:ae:93:b0:60:6b:20:0b:e5:b5:18:
                    6f:c8:4d:15:16:1d:e5:69:e9:c3:43:14:0a:70:a1:
                    30:23:11:1b:6a:90:4e:cd:ef:b2:0e:b9:fc:a7:2e:
                    e3:73:60:46:cb:11:28:47:41:d3:68:54:79:4f:fa:
                    2c:e9:9d:63:fc:d2:55:cb:39:ce:d9:fe:8d:94:3c:
                    07:41:f0:4a:d8:7e:b8:26:13:f5:90:fb:31:78:a2:
                    94:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:41:D0:25:42:07:56:32:68:13:65:E0:AA:E8:C9:8B:B1:83:E3:66
            X509v3 Authority Key Identifier:
                keyid:6C:A8:F2:E3:76:D5:1B:5B:94:37:1C:8C:F8:53:DE:69:86:BA:4A:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2xxGCZw9M48eUJsHJGURaQkp6rNdP9itEmwpH4hzEmeL/0/6CA8F2E376D51B5B94371C8CF853DE6986BA4AF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CA8F2E376D51B5B94371C8CF853DE6986BA4AF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2xxGCZw9M48eUJsHJGURaQkp6rNdP9itEmwpH4hzEmeL/0/323830313a38313a61303a3a2f34382d3438203d3e20323734363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:81:a0::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:47:14:e7:b0:cd:b3:a8:c4:08:f3:0c:75:a5:69:6b:90:5d:
         95:8d:81:19:22:6b:70:a5:5a:7f:ab:fd:88:c8:41:9f:34:3c:
         cc:99:81:7d:5e:89:ac:6f:17:c4:0f:e0:7f:ee:08:97:15:41:
         41:e6:f1:c4:c1:58:42:b4:8a:c1:9f:e1:4d:03:ac:f5:18:05:
         5d:4e:5f:a4:f9:50:54:90:d4:90:d0:92:85:fc:85:58:3b:85:
         a7:e8:e4:a7:8e:8e:f4:f5:54:f7:0a:b2:50:ae:85:a8:15:aa:
         cc:dc:cc:d3:60:47:3b:b9:da:cc:da:0d:b6:dc:ca:92:6a:80:
         23:c5:17:83:91:68:d0:fa:96:df:6b:e9:1a:de:c9:21:5e:cb:
         17:a2:4a:b9:b5:47:9e:f4:f8:54:3c:99:b8:b3:de:db:4f:d8:
         6f:5d:ff:7e:77:ff:e7:ec:9d:8a:43:26:38:53:e9:0d:e8:8a:
         23:03:4f:57:6f:ab:6f:ea:57:71:e1:9a:2b:34:c7:99:61:15:
         4a:62:fd:17:9a:b3:6e:e7:c5:3f:b9:dd:6c:2f:d4:ac:82:43:
         2a:03:2a:cf:4f:53:c1:92:33:c0:b2:3d:77:36:36:94:93:22:
         05:e3:2d:23:52:c4:6e:47:3f:4f:71:37:6f:e4:c2:d6:67:c4:
         c9:67:e9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 15:50:42 2025 by rpki-client on console.sobornost.net