Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/1/323830343a346235633a3a2f33322d3430203d3e20323637333031.roa
File:                     323830343a346235633a3a2f33322d3430203d3e20323637333031.roa (raw, json)
Hash identifier:          lvEHl8lSuiWRMFdcjvzRJ8ZMNsCOLRVyi5xUxgioKQg=
Subject key identifier:   95:9A:AD:AC:7C:23:22:70:22:DF:1B:33:66:3A:62:9A:CC:1A:D4:5A
Certificate issuer:       /CN=CC4EF52A3D67EA2750F3439B62452606C17C41A1
Certificate serial:       1A36D486BFBA21B033A75246AB07805A91FEBB3F
Authority key identifier: CC:4E:F5:2A:3D:67:EA:27:50:F3:43:9B:62:45:26:06:C1:7C:41:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC4EF52A3D67EA2750F3439B62452606C17C41A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/1/323830343a346235633a3a2f33322d3430203d3e20323637333031.roa
Signing time:             Thu 06 Mar 2025 04:00:13 +0000
ROA not before:           Thu 06 Mar 2025 03:55:13 +0000
ROA not after:            Thu 05 Mar 2026 04:00:13 +0000
asID:                     267301
IP address blocks:        2804:4b5c::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/1/CC4EF52A3D67EA2750F3439B62452606C17C41A1.crl
                          rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/1/CC4EF52A3D67EA2750F3439B62452606C17C41A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC4EF52A3D67EA2750F3439B62452606C17C41A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 12:08:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:36:d4:86:bf:ba:21:b0:33:a7:52:46:ab:07:80:5a:91:fe:bb:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC4EF52A3D67EA2750F3439B62452606C17C41A1
        Validity
            Not Before: Mar  6 03:55:13 2025 GMT
            Not After : Mar  5 04:00:13 2026 GMT
        Subject: CN=959AADAC7C23227022DF1B33663A629ACC1AD45A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ad:48:ea:60:4a:78:23:ef:c5:5b:7e:1f:a4:
                    d6:04:db:0d:12:4b:93:b3:84:d5:ae:6d:f0:73:f4:
                    85:97:c2:f1:db:92:4f:d0:83:e7:76:47:80:fb:93:
                    ed:f2:3e:99:70:7b:9e:d2:c2:26:c3:3a:a3:ae:a6:
                    e7:d9:52:6f:8f:f8:5b:06:a0:70:38:c6:31:84:81:
                    62:8c:09:a5:3b:cf:3d:39:55:f2:77:17:4d:f6:f5:
                    f6:3c:1e:c8:fc:95:6a:3c:f7:df:18:7c:95:1c:fb:
                    ed:f6:2f:26:73:4c:1e:eb:0d:70:9d:2e:54:c6:61:
                    05:5f:bb:57:34:cb:22:a5:19:34:7d:63:6e:51:07:
                    c7:5f:43:89:7f:eb:d2:a8:b6:dc:22:52:54:4e:7e:
                    12:65:ca:d5:3b:0a:75:b9:0f:bc:2e:7f:da:c3:86:
                    ef:d4:95:f8:92:b7:dd:18:50:81:62:88:98:2a:70:
                    32:92:e1:1c:97:6b:a6:b8:8c:15:f8:b6:1e:4c:f7:
                    33:17:90:34:af:d8:d6:90:08:08:9a:30:43:a9:1e:
                    32:ab:a8:2d:83:3c:fa:63:a2:85:45:72:42:50:91:
                    95:ca:3b:a6:44:04:0a:f0:e2:92:37:06:7e:fe:32:
                    e0:7f:93:bb:ad:5b:56:94:74:85:a4:ce:7e:51:e4:
                    3c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:9A:AD:AC:7C:23:22:70:22:DF:1B:33:66:3A:62:9A:CC:1A:D4:5A
            X509v3 Authority Key Identifier:
                keyid:CC:4E:F5:2A:3D:67:EA:27:50:F3:43:9B:62:45:26:06:C1:7C:41:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/1/CC4EF52A3D67EA2750F3439B62452606C17C41A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC4EF52A3D67EA2750F3439B62452606C17C41A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/1/323830343a346235633a3a2f33322d3430203d3e20323637333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b5c::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:00:2f:19:a6:1a:08:eb:cc:5e:a2:f5:a7:02:00:44:c3:35:
         e2:50:94:d7:9e:cc:14:8d:ce:fd:0a:3d:83:32:81:5a:98:a6:
         c2:5e:1f:48:00:92:76:84:b8:67:1c:1d:81:5c:31:f9:b8:84:
         11:0f:69:14:e1:99:2c:c8:eb:22:2a:3d:f4:d0:44:dd:d7:70:
         ca:2e:2b:5a:35:5f:d5:9c:d4:62:e0:9f:0b:eb:90:be:1c:24:
         af:b5:c0:a5:31:60:3a:34:ba:8f:0d:a1:22:1e:56:fd:bd:a9:
         28:9f:7f:f0:dd:90:40:a6:5a:0d:6b:26:06:f7:92:2b:c3:14:
         bb:fb:7c:95:89:90:f8:a6:0f:c5:7b:3c:fc:55:a8:49:ea:60:
         c1:02:d9:df:da:97:54:a9:a1:95:d4:12:19:9d:e0:03:e1:30:
         06:b0:8c:32:d8:57:3f:8f:c5:a7:1c:bb:b2:7c:60:0c:ca:2d:
         72:15:d0:bb:2a:3d:4d:e0:3f:8f:b2:82:2a:3e:f3:14:23:51:
         c1:9f:d8:8c:12:01:24:1d:12:13:7d:45:c0:f0:a6:cd:85:68:
         3e:77:8d:c8:cd:88:66:13:fc:d3:1c:b1:f2:3d:a7:51:eb:d6:
         cc:cc:de:39:2b:e5:64:99:56:5c:51:b6:f3:c3:84:71:aa:d7:
         13:ac:5c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:04:54 2025 by rpki-client on console.sobornost.net