Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a343033633a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a343033633a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          sav374C584023kSAqqLS6CEoQQU97W4L6CGUMNsXbIU=
Subject key identifier:   BE:7B:8B:B8:55:4B:01:69:9F:0E:30:AC:77:4B:05:8B:7B:3D:E1:DC
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       0F4A3383855CD2B1D93E436BCE449C6D82A1F9B5
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a343033633a3a2f34382d3438203d3e203532373036.roa
Signing time:             Thu 17 Apr 2025 18:08:26 +0000
ROA not before:           Thu 17 Apr 2025 18:03:26 +0000
ROA not after:            Thu 16 Apr 2026 18:08:26 +0000
asID:                     52706
IP address blocks:        2804:c70:403c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 13:53:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:4a:33:83:85:5c:d2:b1:d9:3e:43:6b:ce:44:9c:6d:82:a1:f9:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Apr 17 18:03:26 2025 GMT
            Not After : Apr 16 18:08:26 2026 GMT
        Subject: CN=BE7B8BB8554B01699F0E30AC774B058B7B3DE1DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f6:d7:9b:4a:67:e9:33:cb:e6:a3:c0:93:61:
                    d0:af:a0:77:c8:76:d3:1c:d8:e7:8a:09:00:52:7b:
                    89:9b:75:94:e3:eb:d5:0a:bb:9d:05:e9:c8:15:61:
                    5b:d7:69:9a:21:43:ac:fc:0b:fb:5a:89:d6:7d:ee:
                    c6:4a:37:62:f4:28:32:e2:98:3a:fc:47:0a:45:57:
                    5f:eb:83:e4:ea:f9:97:9d:29:63:4d:aa:1e:65:8e:
                    36:8c:12:1f:fb:40:ba:bb:68:9d:8e:0c:3a:43:db:
                    5e:24:a9:92:15:60:9d:e5:fa:9a:b1:1a:e7:b5:d6:
                    b5:fa:c5:ba:a5:39:4e:23:c9:38:8e:87:22:49:81:
                    60:cb:b1:fc:5b:9c:b9:13:1b:3f:19:08:7e:71:1a:
                    04:7a:34:a3:97:3f:be:c1:a6:30:5f:12:24:ce:f7:
                    6e:fd:7f:f1:84:c9:8c:1e:25:16:56:a2:ca:87:38:
                    6e:6c:1b:5e:71:d5:79:a7:40:da:cc:3b:5f:52:63:
                    55:52:d3:e7:e5:d6:58:de:1c:e8:06:51:e2:32:d5:
                    b1:59:32:e4:4a:56:d0:4e:ca:5d:1a:9b:24:35:4b:
                    e7:d9:ac:66:79:b9:f5:32:85:a2:ee:23:a4:f5:fb:
                    78:07:06:c4:0f:43:55:02:4d:d5:68:dc:8b:b1:19:
                    fc:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:7B:8B:B8:55:4B:01:69:9F:0E:30:AC:77:4B:05:8B:7B:3D:E1:DC
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a343033633a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:403c::/48

    Signature Algorithm: sha256WithRSAEncryption
         a4:23:41:32:34:f7:d2:d5:33:9b:ef:83:7f:4d:1b:de:10:a7:
         3e:10:95:3c:91:51:3c:54:02:3f:4b:fb:6c:54:6a:41:48:ac:
         16:c0:65:41:51:d8:89:28:6b:4c:5c:90:eb:8c:1b:57:ec:61:
         a0:2c:b8:7b:83:45:da:88:91:64:6d:b2:74:6a:32:12:fd:6c:
         72:af:6a:ca:e3:fa:f8:a1:f6:27:26:2e:5d:96:63:f5:46:13:
         5f:28:65:c8:58:b6:1f:07:11:1e:0a:6b:9e:50:33:5e:e0:36:
         f9:6f:76:20:26:76:6d:64:b1:a1:80:b7:8b:0f:71:f8:20:0b:
         01:80:dc:13:b2:7e:1d:2b:61:e3:7f:b1:97:6b:a7:7e:72:d7:
         1a:96:4e:95:06:37:69:74:86:8e:81:c9:39:9a:87:23:cf:06:
         2b:ac:60:47:d9:e8:71:b1:72:fa:aa:3a:90:97:b1:ea:9b:43:
         8d:8f:6d:10:dd:c6:02:6f:b8:68:34:b6:42:6e:85:8f:6b:e4:
         e4:20:fb:b8:c1:41:2b:f0:25:11:04:35:9a:f8:7c:33:2b:ff:
         c9:bf:5b:80:d0:7e:36:b3:84:c3:04:b6:52:a8:bc:e4:2b:ef:
         c5:78:b9:d2:0c:31:d2:a4:cf:93:b6:e1:74:ab:0c:ad:cc:af:
         8e:eb:b7:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:50:41 2025 by rpki-client on console.sobornost.net