Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3PwF4A7jEdUBuGEmPghQNexoE48LJ5gjLE5nzb6xuF77/0/323830343a363464303a3a2f33322d3336203d3e20323639343530.roa
File:                     323830343a363464303a3a2f33322d3336203d3e20323639343530.roa (raw, json)
Hash identifier:          lckuNSqqWB3pvhCFoqsJPlFyvGMl64irzmGzSWX7Ek0=
Subject key identifier:   49:6B:2F:93:F8:37:83:85:AD:D7:62:8D:D4:80:D4:E5:88:88:BC:7C
Certificate issuer:       /CN=BEF25DBD3AC7F344FE086C16B051C5B219A969C1
Certificate serial:       4C7C538E50AA57E1C9D3B48C59C0863B753AF6EA
Authority key identifier: BE:F2:5D:BD:3A:C7:F3:44:FE:08:6C:16:B0:51:C5:B2:19:A9:69:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEF25DBD3AC7F344FE086C16B051C5B219A969C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3PwF4A7jEdUBuGEmPghQNexoE48LJ5gjLE5nzb6xuF77/0/323830343a363464303a3a2f33322d3336203d3e20323639343530.roa
Signing time:             Thu 17 Apr 2025 18:19:41 +0000
ROA not before:           Thu 17 Apr 2025 18:14:41 +0000
ROA not after:            Thu 16 Apr 2026 18:19:41 +0000
asID:                     269450
IP address blocks:        2804:64d0::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3PwF4A7jEdUBuGEmPghQNexoE48LJ5gjLE5nzb6xuF77/0/BEF25DBD3AC7F344FE086C16B051C5B219A969C1.crl
                          rsync://rpki-repo.registro.br/repo/3PwF4A7jEdUBuGEmPghQNexoE48LJ5gjLE5nzb6xuF77/0/BEF25DBD3AC7F344FE086C16B051C5B219A969C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEF25DBD3AC7F344FE086C16B051C5B219A969C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 23:03:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:7c:53:8e:50:aa:57:e1:c9:d3:b4:8c:59:c0:86:3b:75:3a:f6:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEF25DBD3AC7F344FE086C16B051C5B219A969C1
        Validity
            Not Before: Apr 17 18:14:41 2025 GMT
            Not After : Apr 16 18:19:41 2026 GMT
        Subject: CN=496B2F93F8378385ADD7628DD480D4E58888BC7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:12:b5:3c:ef:da:b7:e1:da:cb:14:7b:34:66:
                    1d:33:43:f7:c4:4b:9d:28:fa:08:5d:45:10:c1:67:
                    3e:63:82:a1:84:e0:16:93:14:d7:df:e9:24:69:02:
                    08:5d:2b:2a:1b:08:56:f1:63:34:a5:18:9d:31:7b:
                    0b:e2:5d:c3:be:8d:e5:b7:cc:7c:4b:c5:b6:bd:f2:
                    9d:d2:9a:32:34:ca:c0:5b:74:5e:11:cd:3b:0c:21:
                    93:4b:ba:b5:57:25:d2:be:ab:11:36:30:ce:8f:2b:
                    55:7f:52:aa:2d:23:f1:4a:e5:4f:3b:09:61:80:87:
                    3b:06:3d:82:b0:53:71:40:86:92:7c:03:07:5e:8b:
                    75:8e:d2:2c:fa:8c:df:52:9b:6e:c0:3c:19:fd:7f:
                    de:98:1b:36:27:81:5a:c4:4c:b2:70:25:dd:f0:b0:
                    06:2e:b8:21:24:8e:b1:52:bc:b4:ca:07:9f:84:12:
                    90:5f:b2:89:b1:7f:53:2e:31:be:9e:43:b2:83:67:
                    d9:18:14:c3:af:37:91:78:40:f9:45:3b:92:c3:d2:
                    20:52:9c:2f:f1:a6:24:4b:96:ef:cf:72:30:a7:3f:
                    11:71:e4:aa:f0:e4:80:76:6f:b0:ff:18:43:34:a7:
                    36:b8:50:ff:83:a1:62:fa:cc:2f:b0:0f:51:a4:28:
                    ba:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:6B:2F:93:F8:37:83:85:AD:D7:62:8D:D4:80:D4:E5:88:88:BC:7C
            X509v3 Authority Key Identifier:
                keyid:BE:F2:5D:BD:3A:C7:F3:44:FE:08:6C:16:B0:51:C5:B2:19:A9:69:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3PwF4A7jEdUBuGEmPghQNexoE48LJ5gjLE5nzb6xuF77/0/BEF25DBD3AC7F344FE086C16B051C5B219A969C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEF25DBD3AC7F344FE086C16B051C5B219A969C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3PwF4A7jEdUBuGEmPghQNexoE48LJ5gjLE5nzb6xuF77/0/323830343a363464303a3a2f33322d3336203d3e20323639343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:64d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         af:42:e5:2d:a8:5f:d9:4f:95:d8:03:b5:41:f6:b1:d1:aa:95:
         7c:ba:79:44:94:8c:59:a2:37:38:c1:67:b2:58:be:f6:ab:f6:
         f2:cf:cc:1f:b4:c4:ac:79:be:ae:61:e1:da:ff:1a:7d:76:ba:
         2c:e8:a8:93:b7:68:1f:8f:d3:f7:62:6a:00:82:6f:81:b6:e5:
         a1:b4:c4:a1:72:91:b6:86:21:39:01:e8:c0:17:c5:45:27:21:
         96:e6:30:ce:2e:40:35:dd:3b:b9:02:18:82:d0:44:17:bd:20:
         ba:24:6c:43:f3:c1:8a:71:8c:14:4b:2c:ef:63:7f:fe:6c:78:
         1d:a6:0f:49:b6:aa:af:87:e6:38:c0:9c:81:b5:be:e9:43:7a:
         be:71:35:cb:2c:09:6b:bd:b6:37:5d:cc:00:84:3d:24:50:62:
         6c:53:2d:ac:1a:94:a4:d3:ee:f2:81:7b:ac:e2:24:cd:90:c8:
         f2:9d:e7:84:62:c9:57:6a:55:ec:51:c7:4d:00:73:58:4a:7e:
         76:82:77:6c:11:83:9b:59:44:37:67:a3:8e:81:7a:ac:0b:c7:
         db:83:ad:27:22:c0:2d:02:9f:fa:4e:e3:0b:12:cc:cc:2a:27:
         63:db:0d:f0:90:3b:ef:89:27:f1:61:ba:98:3f:ce:06:22:c4:
         a8:a7:53:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:14:34 2025 by rpki-client on console.sobornost.net