Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4P1h6uGnHnXCCM6S3DLyZPMRqbfjcpSGq6DGWAj9ZzqK/0/323830343a336433343a383030303a3a2f34352d3435203d3e20323636323630.roa
File:                     323830343a336433343a383030303a3a2f34352d3435203d3e20323636323630.roa (raw, json)
Hash identifier:          AAp08ZT58yDge3Lffsy2oOlkK2nR4seoKCWF/EdfLD8=
Subject key identifier:   85:FD:28:C2:0D:2C:E4:62:68:8B:79:FD:1F:F4:87:5F:68:CA:EF:97
Certificate issuer:       /CN=BEED82E271E59A3284851FDC2DD7DDE90749BC67
Certificate serial:       0C418DD1D3528629081060AB1829B9AAD2FAAA81
Authority key identifier: BE:ED:82:E2:71:E5:9A:32:84:85:1F:DC:2D:D7:DD:E9:07:49:BC:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BEED82E271E59A3284851FDC2DD7DDE90749BC67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4P1h6uGnHnXCCM6S3DLyZPMRqbfjcpSGq6DGWAj9ZzqK/0/323830343a336433343a383030303a3a2f34352d3435203d3e20323636323630.roa
Signing time:             Tue 09 Jan 2024 14:19:26 +0000
ROA not before:           Tue 09 Jan 2024 14:14:26 +0000
ROA not after:            Tue 07 Jan 2025 14:19:26 +0000
asID:                     266260
IP address blocks:        2804:3d34:8000::/45 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4P1h6uGnHnXCCM6S3DLyZPMRqbfjcpSGq6DGWAj9ZzqK/0/BEED82E271E59A3284851FDC2DD7DDE90749BC67.crl
                          rsync://rpki-repo.registro.br/repo/4P1h6uGnHnXCCM6S3DLyZPMRqbfjcpSGq6DGWAj9ZzqK/0/BEED82E271E59A3284851FDC2DD7DDE90749BC67.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BEED82E271E59A3284851FDC2DD7DDE90749BC67.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 16:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:41:8d:d1:d3:52:86:29:08:10:60:ab:18:29:b9:aa:d2:fa:aa:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEED82E271E59A3284851FDC2DD7DDE90749BC67
        Validity
            Not Before: Jan  9 14:14:26 2024 GMT
            Not After : Jan  7 14:19:26 2025 GMT
        Subject: CN=85FD28C20D2CE462688B79FD1FF4875F68CAEF97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:21:2b:8c:9b:b8:fb:ee:21:24:89:76:56:4c:
                    1a:ee:b7:aa:58:9a:4d:2e:56:a2:63:9d:14:26:83:
                    69:31:e0:65:b2:a5:3a:06:45:ad:49:cc:e5:90:af:
                    77:be:f6:6c:c3:94:4e:69:86:eb:cc:61:e8:fc:7b:
                    a9:08:04:35:2f:5d:70:e0:23:8d:53:aa:43:8e:7b:
                    70:d8:95:7d:ae:8b:f1:1a:67:08:0c:c3:77:ac:6f:
                    42:3d:81:93:a4:43:69:7b:c4:f1:7f:24:2b:f9:14:
                    60:13:92:31:cc:bd:1a:3d:a5:37:11:64:5f:e0:fa:
                    c5:e7:6d:02:9f:c5:05:67:34:ba:ff:cd:8a:d0:02:
                    c9:9f:60:b8:d9:ca:15:d0:ac:85:91:33:b7:47:26:
                    6c:07:ec:ad:0d:1d:26:d5:7d:94:03:ea:53:a6:64:
                    ee:28:3c:bc:65:7a:e8:ea:93:9f:07:af:06:f6:8f:
                    5f:29:b5:ff:05:04:91:a7:64:76:77:07:3c:f7:b6:
                    3c:1a:a5:91:fb:e8:d1:3c:55:5f:0e:65:09:8f:a4:
                    e7:36:cc:fd:ea:46:a6:d4:b7:19:c5:f8:7b:ea:e5:
                    65:c5:60:6a:3e:98:20:00:33:9c:1d:74:74:bb:f6:
                    fe:8b:f3:08:66:dc:bf:ef:97:f8:bc:ff:3c:d8:a1:
                    30:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:FD:28:C2:0D:2C:E4:62:68:8B:79:FD:1F:F4:87:5F:68:CA:EF:97
            X509v3 Authority Key Identifier:
                keyid:BE:ED:82:E2:71:E5:9A:32:84:85:1F:DC:2D:D7:DD:E9:07:49:BC:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4P1h6uGnHnXCCM6S3DLyZPMRqbfjcpSGq6DGWAj9ZzqK/0/BEED82E271E59A3284851FDC2DD7DDE90749BC67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BEED82E271E59A3284851FDC2DD7DDE90749BC67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4P1h6uGnHnXCCM6S3DLyZPMRqbfjcpSGq6DGWAj9ZzqK/0/323830343a336433343a383030303a3a2f34352d3435203d3e20323636323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d34:8000::/45

    Signature Algorithm: sha256WithRSAEncryption
         01:64:f0:d0:de:08:5f:27:8f:9a:89:a1:6c:5a:ff:60:6d:2d:
         79:3d:35:4f:5a:d8:5c:90:a3:5f:b0:8d:19:41:c6:8c:bb:31:
         7a:c5:a8:4e:8e:fb:6a:65:77:8e:25:fb:73:d9:0f:65:83:fc:
         0f:23:90:d7:4d:ba:05:ef:4f:9c:1e:3e:23:af:f3:66:4b:c1:
         98:b5:6e:60:53:e3:3d:3e:41:3d:b9:8a:a5:c2:de:bd:f4:01:
         fe:09:65:a7:52:2f:d4:00:69:1f:d4:b8:a6:85:61:97:45:c2:
         fd:fd:75:58:73:51:5b:0f:1d:68:41:2b:03:7a:c9:ed:c0:8e:
         a1:59:c6:10:d1:30:2f:71:ae:ad:79:62:92:1c:64:51:aa:24:
         ea:b9:ea:be:bd:72:85:c9:98:b1:f2:b8:0e:bf:78:0f:bf:e4:
         75:9a:e9:59:be:0e:3f:c8:6e:98:5d:ed:d1:58:96:fb:52:3f:
         8d:99:50:b4:fc:63:6f:7b:6d:8d:c9:2a:26:e7:18:3a:c0:55:
         21:43:df:08:e7:8f:83:50:df:1f:3a:4f:80:50:7a:da:58:7d:
         a1:48:07:b9:03:29:9a:db:fc:0d:ad:cc:69:4e:8e:17:78:5b:
         f7:74:ba:54:68:91:ef:99:68:78:9c:d5:c8:f6:20:d6:5d:86:
         b0:36:a2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 15:58:12 2024 by rpki-client on console.sobornost.net