Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/323830343a346363343a3a2f33322d3438203d3e20323637333930.roa
File:                     323830343a346363343a3a2f33322d3438203d3e20323637333930.roa (raw, json)
Hash identifier:          hv7GJnPJJH69UkfbyS/UqD3tSNA9O787umB0YeWkrcY=
Subject key identifier:   6E:7E:CA:41:15:23:08:36:AB:80:F6:1C:C3:24:F1:93:9C:37:36:AA
Certificate issuer:       /CN=66DCAA5522EEEC15CC978DE673986E897244B698
Certificate serial:       2E63DF27A97B57129FD298FE7AB7F2338DF1A920
Authority key identifier: 66:DC:AA:55:22:EE:EC:15:CC:97:8D:E6:73:98:6E:89:72:44:B6:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66DCAA5522EEEC15CC978DE673986E897244B698.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/323830343a346363343a3a2f33322d3438203d3e20323637333930.roa
Signing time:             Mon 07 Apr 2025 14:01:29 +0000
ROA not before:           Mon 07 Apr 2025 13:56:29 +0000
ROA not after:            Mon 06 Apr 2026 14:01:29 +0000
asID:                     267390
IP address blocks:        2804:4cc4::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/66DCAA5522EEEC15CC978DE673986E897244B698.crl
                          rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/66DCAA5522EEEC15CC978DE673986E897244B698.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66DCAA5522EEEC15CC978DE673986E897244B698.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:63:df:27:a9:7b:57:12:9f:d2:98:fe:7a:b7:f2:33:8d:f1:a9:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66DCAA5522EEEC15CC978DE673986E897244B698
        Validity
            Not Before: Apr  7 13:56:29 2025 GMT
            Not After : Apr  6 14:01:29 2026 GMT
        Subject: CN=6E7ECA4115230836AB80F61CC324F1939C3736AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:59:36:c4:3f:14:97:05:84:a0:bc:d4:a7:75:
                    9e:90:de:87:97:6a:5e:ef:92:59:7b:e6:b6:32:ad:
                    33:90:9d:5f:d4:b3:4a:e7:7f:ce:05:21:6a:75:b6:
                    05:bc:f0:9c:b7:e7:24:14:48:df:f4:25:f1:2e:f4:
                    aa:96:83:bf:cc:3f:05:02:ee:bd:63:cd:e6:ab:40:
                    3b:2a:4e:c5:89:30:b4:2c:db:b4:b0:7a:2b:5f:48:
                    fc:bb:49:58:5b:57:50:8f:9c:3b:c1:7f:be:fd:7f:
                    79:cc:ea:91:d0:d0:9e:5c:f1:aa:55:a5:8c:42:3f:
                    9e:94:c9:aa:8c:d0:80:5a:f8:22:67:67:ad:ac:61:
                    ae:2d:8b:1f:49:98:e7:7f:fa:0e:15:76:c0:45:b0:
                    e9:b9:47:de:50:58:c4:07:e8:87:ba:63:af:37:4c:
                    33:af:e2:a9:59:fe:94:c0:0a:33:ad:4f:42:e7:64:
                    23:ab:37:0e:8b:5c:8d:5d:0d:cc:8b:83:c4:b8:4d:
                    36:82:ba:1f:b5:22:f2:33:69:36:a0:c4:83:6c:13:
                    6c:de:8a:f7:3f:93:03:0c:fd:76:d7:d4:a3:b4:19:
                    1e:09:4a:22:ae:28:8b:4e:05:8b:67:51:df:80:eb:
                    62:ad:28:e4:f6:27:dc:95:44:7a:c2:48:d3:fd:07:
                    da:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:7E:CA:41:15:23:08:36:AB:80:F6:1C:C3:24:F1:93:9C:37:36:AA
            X509v3 Authority Key Identifier:
                keyid:66:DC:AA:55:22:EE:EC:15:CC:97:8D:E6:73:98:6E:89:72:44:B6:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/66DCAA5522EEEC15CC978DE673986E897244B698.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66DCAA5522EEEC15CC978DE673986E897244B698.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/323830343a346363343a3a2f33322d3438203d3e20323637333930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4cc4::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:6d:8c:ab:3c:aa:8e:62:cc:53:e7:9e:59:cd:5c:c1:d7:48:
         06:dd:e9:b1:9c:ec:fb:29:32:22:1f:07:dc:2a:ce:5d:50:38:
         70:69:af:3f:2c:e2:73:04:22:f4:ac:c9:1e:8c:1c:0f:39:23:
         cf:a0:3a:ce:79:d2:78:4e:af:58:ca:e0:e4:af:e0:f2:93:49:
         d5:f8:db:70:7f:87:06:01:34:e3:a9:7d:06:cd:e1:24:73:c1:
         bb:5d:fa:4b:66:b0:c5:d7:83:eb:cc:5e:9a:a8:61:9d:e3:fc:
         a9:3d:f2:0e:d7:a9:0c:ea:f2:f5:2c:bc:ec:bb:20:d2:cd:7a:
         26:37:df:bf:d6:ad:30:dd:bf:34:39:7f:a3:45:10:c7:cd:a4:
         b0:79:4e:4b:97:08:89:63:5e:77:65:25:78:64:02:dc:a6:3b:
         f2:3e:62:e2:70:09:b3:e9:e4:5d:bc:93:fc:ca:f1:77:4c:ca:
         16:87:a5:b8:e3:da:bf:48:a1:e7:eb:25:32:d2:f6:04:34:ac:
         d5:60:9f:6e:4c:75:e4:4b:e8:91:55:37:f7:58:b5:d1:da:51:
         b1:5b:25:5b:52:80:55:62:b2:29:69:d5:0c:44:9e:5f:72:99:
         44:1f:99:bd:66:36:35:58:4a:21:55:ed:b1:b2:79:d7:43:a5:
         dd:98:e8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:29 2025 by rpki-client on console.sobornost.net