Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/323830343a323161303a3a2f33322d3438203d3e20323634353635.roa
File:                     323830343a323161303a3a2f33322d3438203d3e20323634353635.roa (raw, json)
Hash identifier:          NiYQ1Oj4jlQxAf7CG9stE44f6zRfyXp+SMr92oO0Sk4=
Subject key identifier:   A2:CA:27:12:90:79:48:33:67:C9:CD:74:2F:45:9F:B3:E9:65:D6:B0
Certificate issuer:       /CN=AC40A1FA2C73E550F9412754FDDAA22E993A0D26
Certificate serial:       34F0C705895DD58945998B135221F4F212078649
Authority key identifier: AC:40:A1:FA:2C:73:E5:50:F9:41:27:54:FD:DA:A2:2E:99:3A:0D:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/323830343a323161303a3a2f33322d3438203d3e20323634353635.roa
Signing time:             Fri 07 Mar 2025 00:39:05 +0000
ROA not before:           Fri 07 Mar 2025 00:34:05 +0000
ROA not after:            Fri 06 Mar 2026 00:39:05 +0000
asID:                     264565
IP address blocks:        2804:21a0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.crl
                          rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 16:56:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:f0:c7:05:89:5d:d5:89:45:99:8b:13:52:21:f4:f2:12:07:86:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC40A1FA2C73E550F9412754FDDAA22E993A0D26
        Validity
            Not Before: Mar  7 00:34:05 2025 GMT
            Not After : Mar  6 00:39:05 2026 GMT
        Subject: CN=A2CA27129079483367C9CD742F459FB3E965D6B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5a:05:05:d0:3e:58:9e:9e:ce:a8:50:8b:65:
                    5c:4b:fa:04:d7:94:dd:ac:8d:d8:35:6b:5a:c0:19:
                    95:cb:e0:42:be:84:94:fb:21:31:f2:dd:04:52:8e:
                    4b:b4:de:3c:11:25:64:ee:8d:7d:0e:24:ef:e7:e7:
                    2d:7b:f9:e7:c7:27:bc:78:59:00:e0:fc:f0:bf:4f:
                    7b:5e:b8:0b:9f:18:79:a4:3b:18:ff:85:36:64:92:
                    d7:4d:46:bb:1c:52:8c:97:4a:7b:6a:0a:7a:9f:e3:
                    fe:65:70:bd:27:6c:0a:31:f1:6e:bb:c0:70:23:1a:
                    9c:ec:d5:7e:51:3c:a7:7d:3b:58:89:88:ad:93:ee:
                    9d:08:ad:89:21:6a:9a:32:df:f4:3b:7c:94:8e:57:
                    d5:df:fe:26:84:e7:4b:08:1b:73:17:f0:90:da:99:
                    f8:7f:ab:11:c1:fa:69:54:92:7d:56:53:ad:15:aa:
                    bd:70:24:c3:66:6e:af:30:e4:9a:3d:72:bc:8c:bd:
                    af:89:dc:ec:e9:d1:d0:b0:3a:74:ea:45:36:02:46:
                    3f:89:ac:1d:6b:2f:f2:80:de:13:e9:d3:79:84:a7:
                    fa:1c:bd:13:8d:37:cc:33:ce:91:78:fa:49:57:33:
                    15:ee:ff:99:55:c2:54:5e:07:ec:09:7c:00:57:53:
                    19:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:CA:27:12:90:79:48:33:67:C9:CD:74:2F:45:9F:B3:E9:65:D6:B0
            X509v3 Authority Key Identifier:
                keyid:AC:40:A1:FA:2C:73:E5:50:F9:41:27:54:FD:DA:A2:2E:99:3A:0D:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/323830343a323161303a3a2f33322d3438203d3e20323634353635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:21a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:7d:83:20:55:e0:18:86:38:85:21:d0:c0:b2:9f:47:b6:1c:
         f6:b6:9a:7d:f3:4b:df:bf:42:b1:28:3e:e2:6c:e4:4e:ad:a5:
         00:78:31:0f:c5:d2:51:04:cc:c2:e8:71:ed:3c:ff:d9:ed:4f:
         99:83:1d:fa:be:c2:d8:32:b1:f6:1b:a8:92:fe:c7:5f:ff:08:
         1f:be:f5:db:34:a5:7b:68:e5:2c:1c:80:30:a8:e2:59:e4:14:
         86:03:0d:a2:9e:45:5b:cb:fa:8a:fb:01:29:fb:bf:db:60:22:
         7b:7d:5a:f8:4e:81:23:bb:e7:f5:75:54:e3:b4:84:07:65:d0:
         3e:92:4b:5b:b2:cb:02:67:3b:b5:f7:54:39:45:49:b8:9d:c1:
         77:16:d5:1f:5f:5f:50:89:e4:a4:5d:3a:79:69:85:55:1d:8e:
         5f:d1:5f:aa:4f:5c:a4:4a:27:74:79:71:b6:77:1f:4c:5b:b9:
         9e:ba:70:76:98:5a:6c:47:de:b5:ca:37:8e:b6:c7:f3:dc:0d:
         8f:b2:81:6a:ce:37:1c:f1:fc:8b:6f:e2:81:55:e2:eb:45:22:
         6f:db:35:b5:ab:80:17:96:68:7e:7e:15:a4:5e:d2:69:d1:b9:
         be:bc:65:7d:2a:44:57:fa:b3:87:21:da:46:5e:4c:63:a2:d0:
         34:2f:b4:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:07 2025 by rpki-client on console.sobornost.net