Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/323830343a3462633a3a2f33322d3438203d3e20323632343632.roa
File:                     323830343a3462633a3a2f33322d3438203d3e20323632343632.roa (raw, json)
Hash identifier:          KsXhP23LyKhP+VwMJBww4wupe8AMjKmkTFxDx5EaaaA=
Subject key identifier:   DC:DE:EC:28:E5:E6:F1:B8:3B:7D:46:92:0E:49:B5:09:7A:17:A1:90
Certificate issuer:       /CN=94C8960DB5853BB60A49187478AA5E61DA0D3288
Certificate serial:       6AC69A2A79719406247C10B24DB5E78BEE74B9EA
Authority key identifier: 94:C8:96:0D:B5:85:3B:B6:0A:49:18:74:78:AA:5E:61:DA:0D:32:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/323830343a3462633a3a2f33322d3438203d3e20323632343632.roa
Signing time:             Fri 07 Mar 2025 05:11:16 +0000
ROA not before:           Fri 07 Mar 2025 05:06:16 +0000
ROA not after:            Fri 06 Mar 2026 05:11:16 +0000
asID:                     262462
IP address blocks:        2804:4bc::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.crl
                          rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 16:24:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:c6:9a:2a:79:71:94:06:24:7c:10:b2:4d:b5:e7:8b:ee:74:b9:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94C8960DB5853BB60A49187478AA5E61DA0D3288
        Validity
            Not Before: Mar  7 05:06:16 2025 GMT
            Not After : Mar  6 05:11:16 2026 GMT
        Subject: CN=DCDEEC28E5E6F1B83B7D46920E49B5097A17A190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b9:b7:d1:1a:f0:68:3d:cd:5c:02:c3:a5:fb:
                    33:45:e8:cd:73:66:e2:e2:d7:f6:69:c2:04:bc:c4:
                    4d:31:1d:e2:2f:02:a9:63:18:56:bc:d9:61:11:27:
                    1b:ea:ab:d0:f6:6f:8b:55:49:88:8d:c7:24:54:e7:
                    63:f9:ed:ad:af:ef:56:91:c3:bd:5b:3b:3a:cf:96:
                    c1:94:9a:43:34:79:00:2b:df:a9:e2:ce:17:b0:03:
                    30:3a:81:0d:79:cd:a3:1c:7a:71:29:22:16:3c:44:
                    55:b3:b1:ec:8f:ae:b6:f6:f4:a8:b8:ec:92:fd:28:
                    6a:3f:54:b8:b4:4d:72:8a:43:18:ff:d1:c8:46:15:
                    e6:70:79:07:c3:72:86:ef:b3:24:07:aa:d0:c4:ff:
                    ff:64:28:d1:2d:79:55:bf:1e:a6:3c:a9:1f:63:af:
                    42:bb:34:67:06:e8:34:ea:9f:42:c6:58:be:f3:04:
                    25:52:cc:ab:30:cf:b2:93:1a:0f:53:8e:a3:16:74:
                    f4:e2:c0:77:08:b5:b8:1e:43:73:91:b3:7a:44:8d:
                    ef:6c:f9:d9:44:c6:01:af:56:84:ff:ef:85:44:53:
                    59:da:b6:48:87:ad:28:da:e5:e0:77:97:2f:2d:cf:
                    00:ac:91:a6:cd:d0:a0:16:08:99:b9:3b:b0:dc:8d:
                    9a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:DE:EC:28:E5:E6:F1:B8:3B:7D:46:92:0E:49:B5:09:7A:17:A1:90
            X509v3 Authority Key Identifier:
                keyid:94:C8:96:0D:B5:85:3B:B6:0A:49:18:74:78:AA:5E:61:DA:0D:32:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/323830343a3462633a3a2f33322d3438203d3e20323632343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:3a:7e:19:3b:d2:dc:ab:5e:61:39:38:75:2c:86:b8:e2:3f:
         54:c2:ba:73:09:bf:2c:b9:9a:26:bb:ae:1f:b0:2d:f5:76:0e:
         5d:33:21:96:65:f5:82:de:ea:e1:09:e6:c8:ed:f6:6e:f8:0f:
         f7:60:17:d4:36:ea:5c:12:ef:3c:8f:0d:66:7f:d3:d8:43:12:
         54:d2:18:b4:0f:be:ef:78:af:12:f6:48:31:52:c3:b4:e4:ec:
         25:f3:7f:d9:f6:c5:e2:0b:67:bf:ff:d0:0e:88:ed:ef:73:89:
         16:e3:e0:48:46:75:b3:a2:58:d5:e1:7b:17:29:bc:99:f7:39:
         65:ec:0c:5c:02:87:5f:07:7b:7c:39:15:67:37:34:ed:e4:a0:
         99:c7:b3:54:ab:f1:97:f6:56:3a:0f:5c:de:2b:cc:af:63:52:
         4b:aa:d7:0a:26:83:3b:81:4f:f4:4b:1a:fd:ac:0d:25:ed:13:
         fc:1e:af:87:31:d9:1b:b1:ff:6a:11:04:00:38:0b:63:a0:9d:
         9b:0f:07:16:3f:7a:76:d8:f9:95:53:10:24:11:ae:5f:de:8d:
         c8:a8:5f:45:79:62:fb:71:5b:4b:24:3d:eb:fb:14:60:52:cd:
         f0:5a:67:44:2c:c3:ad:d4:c5:e1:ba:eb:64:38:ea:a6:0f:3d:
         a0:3a:dc:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:08 2025 by rpki-client on console.sobornost.net