Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/323830343a313261303a3332303a3a2f34382d3438203d3e203631393030.roa
File:                     323830343a313261303a3332303a3a2f34382d3438203d3e203631393030.roa (raw, json)
Hash identifier:          k3nYr0UYK/VqYYH1q7Hr1OwgUwC+dI50mPL3nouxXiY=
Subject key identifier:   62:79:4A:1E:8C:BF:AC:10:F3:2F:5A:BA:51:95:C6:CB:81:05:FA:6E
Certificate issuer:       /CN=717D62DB604520975DE382D0D3273E1BDB591D67
Certificate serial:       3E7539EDA7BA195667E114A5A837C8CAE443283D
Authority key identifier: 71:7D:62:DB:60:45:20:97:5D:E3:82:D0:D3:27:3E:1B:DB:59:1D:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/717D62DB604520975DE382D0D3273E1BDB591D67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/323830343a313261303a3332303a3a2f34382d3438203d3e203631393030.roa
Signing time:             Wed 16 Apr 2025 14:07:37 +0000
ROA not before:           Wed 16 Apr 2025 14:02:37 +0000
ROA not after:            Wed 15 Apr 2026 14:07:37 +0000
asID:                     61900
IP address blocks:        2804:12a0:320::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/717D62DB604520975DE382D0D3273E1BDB591D67.crl
                          rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/717D62DB604520975DE382D0D3273E1BDB591D67.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/717D62DB604520975DE382D0D3273E1BDB591D67.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 20:16:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:75:39:ed:a7:ba:19:56:67:e1:14:a5:a8:37:c8:ca:e4:43:28:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=717D62DB604520975DE382D0D3273E1BDB591D67
        Validity
            Not Before: Apr 16 14:02:37 2025 GMT
            Not After : Apr 15 14:07:37 2026 GMT
        Subject: CN=62794A1E8CBFAC10F32F5ABA5195C6CB8105FA6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:97:6f:a0:54:c1:68:70:1c:cc:96:da:77:6b:
                    c6:c4:ba:2e:4b:28:73:8d:a4:50:fe:7b:ed:cf:77:
                    08:03:23:63:ec:9b:6b:06:c8:e5:01:21:75:ff:3b:
                    00:da:3b:5b:22:37:14:cc:6a:32:46:7b:cd:75:37:
                    fc:6e:e7:65:6d:1c:b9:cb:67:45:0a:2e:6b:14:ad:
                    31:9d:9a:49:1d:43:db:e5:33:2c:ec:7f:8e:7b:a0:
                    ea:7e:9f:02:0d:f2:fc:71:ad:ac:5f:cf:66:43:c5:
                    7e:09:10:ad:28:1d:af:1b:1d:c1:3f:9a:20:5f:41:
                    25:23:06:ff:b1:b3:a2:f9:2d:65:b7:db:ea:7b:15:
                    e8:5a:ba:e4:d0:2e:ff:4e:08:ad:3e:fd:62:d6:d2:
                    cc:e3:72:82:5a:17:4a:d9:82:1f:83:2c:c9:38:dd:
                    ff:ce:42:1e:c2:f9:15:64:07:96:72:2e:6e:c3:fb:
                    1e:56:27:04:0a:ef:a3:b0:23:54:81:7d:2a:df:ab:
                    5b:86:bd:57:27:73:bb:cf:b1:b4:3e:3a:bd:5b:e5:
                    01:ec:e3:5d:0d:bc:05:e0:1f:1e:42:2c:74:95:e6:
                    5d:fd:3d:43:07:34:6c:45:87:a4:b2:b6:5c:88:29:
                    c8:c9:a8:57:e7:e0:b4:e5:fe:55:92:2f:9f:1b:23:
                    9e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:79:4A:1E:8C:BF:AC:10:F3:2F:5A:BA:51:95:C6:CB:81:05:FA:6E
            X509v3 Authority Key Identifier:
                keyid:71:7D:62:DB:60:45:20:97:5D:E3:82:D0:D3:27:3E:1B:DB:59:1D:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/717D62DB604520975DE382D0D3273E1BDB591D67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/717D62DB604520975DE382D0D3273E1BDB591D67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/323830343a313261303a3332303a3a2f34382d3438203d3e203631393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:12a0:320::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:83:c1:c9:36:dc:fc:4f:6c:53:32:0e:3d:fc:dd:9f:80:92:
         d7:01:50:d6:0e:a8:af:4e:49:d9:34:3f:ea:8e:c8:9c:f5:99:
         bc:10:a4:7b:c9:c0:1a:bb:e8:b3:af:ff:0d:ec:c4:39:d7:ab:
         e0:91:6e:8b:9b:88:80:0f:0e:59:36:04:92:55:08:f4:04:1a:
         f4:e8:40:c1:3c:79:0e:34:dd:46:a2:00:3c:d4:3c:4a:73:93:
         92:c7:06:44:c7:8b:f8:5d:f0:eb:f2:83:2d:76:d9:01:d4:7c:
         8c:6d:be:ff:88:77:e8:18:a8:df:a8:75:14:06:c9:54:4a:46:
         bb:a6:1b:18:89:a3:ac:e8:56:43:19:e9:eb:30:20:14:91:98:
         16:9c:4c:02:93:d4:8e:33:ee:88:b2:52:be:f2:2e:bd:0b:2e:
         83:7f:d6:31:df:7e:08:97:fe:41:aa:21:f4:46:07:43:84:bd:
         a4:02:d4:75:3d:07:6d:8c:2f:33:52:9b:d3:01:20:0a:5d:f3:
         e0:38:f0:85:3c:64:4c:f8:6b:f1:e1:32:a6:bc:9c:f9:55:15:
         4b:05:cd:cd:14:c6:4f:56:c9:27:a6:b6:c3:16:49:b0:78:30:
         02:56:e8:62:1b:25:ae:28:11:a0:46:58:cf:1f:6a:6a:25:f5:
         85:f7:6f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:37 2025 by rpki-client on console.sobornost.net