Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/323830343a313261303a383061303a3a2f34382d3438203d3e203631393030.roa
File:                     323830343a313261303a383061303a3a2f34382d3438203d3e203631393030.roa (raw, json)
Hash identifier:          KXSX4UqpfCBweElx6if/xedb9UP1WRyzFvRR0DtW4og=
Subject key identifier:   E6:0E:4F:9F:60:1A:A7:13:E8:16:6D:32:2A:3F:1F:8A:FE:F2:0F:DC
Certificate issuer:       /CN=717D62DB604520975DE382D0D3273E1BDB591D67
Certificate serial:       480B75968D2866E010624A9F2D38C5D081374E4C
Authority key identifier: 71:7D:62:DB:60:45:20:97:5D:E3:82:D0:D3:27:3E:1B:DB:59:1D:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/717D62DB604520975DE382D0D3273E1BDB591D67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/323830343a313261303a383061303a3a2f34382d3438203d3e203631393030.roa
Signing time:             Wed 16 Apr 2025 14:07:40 +0000
ROA not before:           Wed 16 Apr 2025 14:02:40 +0000
ROA not after:            Wed 15 Apr 2026 14:07:40 +0000
asID:                     61900
IP address blocks:        2804:12a0:80a0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/717D62DB604520975DE382D0D3273E1BDB591D67.crl
                          rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/717D62DB604520975DE382D0D3273E1BDB591D67.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/717D62DB604520975DE382D0D3273E1BDB591D67.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 20:16:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:0b:75:96:8d:28:66:e0:10:62:4a:9f:2d:38:c5:d0:81:37:4e:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=717D62DB604520975DE382D0D3273E1BDB591D67
        Validity
            Not Before: Apr 16 14:02:40 2025 GMT
            Not After : Apr 15 14:07:40 2026 GMT
        Subject: CN=E60E4F9F601AA713E8166D322A3F1F8AFEF20FDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:26:87:54:fd:7a:b9:63:25:36:c2:a3:de:e5:
                    f6:f2:12:f8:49:c8:22:4c:55:e7:d6:73:cd:4e:cb:
                    95:ef:a1:c1:9f:80:fb:7b:83:89:03:fa:f3:03:81:
                    5d:04:62:89:e2:64:5f:44:9c:43:52:f9:b2:f6:95:
                    ca:29:b2:a3:f5:49:78:0d:a4:9b:88:71:89:e0:52:
                    c4:f2:f1:a5:c4:51:e5:37:45:d5:36:59:c6:c6:fe:
                    05:a9:9c:3f:42:ec:b7:39:be:1f:64:5b:d1:f6:5c:
                    fc:5e:a7:68:cb:4b:8e:80:e2:d7:c1:2e:0c:65:ab:
                    40:cf:72:47:79:43:62:52:35:b7:3b:e6:6d:22:83:
                    f0:d9:e4:98:5e:ea:fa:c3:4c:5d:76:df:2b:cc:96:
                    56:c7:22:86:67:4a:33:d9:35:a5:31:f4:51:58:50:
                    f9:1c:7e:1f:88:e2:8b:91:82:ed:fa:21:48:b0:26:
                    f1:cd:7a:99:df:95:5e:38:c4:6d:8c:10:5d:87:82:
                    cd:c7:00:d9:8b:cc:af:eb:0d:5b:b9:20:cb:71:d6:
                    ff:36:5b:4c:60:56:02:13:04:7c:4a:bd:e9:07:9c:
                    a7:0f:e7:c0:90:b5:0c:32:54:f0:65:4d:51:67:7f:
                    83:37:6e:22:18:5b:8d:83:50:ef:fb:71:76:f5:1c:
                    81:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:0E:4F:9F:60:1A:A7:13:E8:16:6D:32:2A:3F:1F:8A:FE:F2:0F:DC
            X509v3 Authority Key Identifier:
                keyid:71:7D:62:DB:60:45:20:97:5D:E3:82:D0:D3:27:3E:1B:DB:59:1D:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/717D62DB604520975DE382D0D3273E1BDB591D67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/717D62DB604520975DE382D0D3273E1BDB591D67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/323830343a313261303a383061303a3a2f34382d3438203d3e203631393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:12a0:80a0::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:8e:8e:b6:e1:01:fc:39:ab:29:16:e5:ec:a4:41:a4:76:33:
         90:18:05:60:16:bb:0d:df:5c:c4:7f:9c:22:35:39:09:92:d9:
         e3:15:58:f7:73:b2:54:49:c5:19:e2:bb:d8:aa:71:bb:28:1e:
         48:7c:9d:bf:1a:95:3b:e8:96:6f:9b:af:f1:8c:5e:f9:36:de:
         7e:18:c2:01:05:56:13:0d:61:b8:14:df:66:e5:42:8e:96:e2:
         d4:da:5e:1b:9a:72:63:40:7c:91:3b:06:b4:cb:df:b7:b2:63:
         d3:5b:d6:e0:1d:14:cd:b6:fc:07:cd:24:d8:f5:01:0b:4a:51:
         fe:71:7c:d9:77:01:ff:01:aa:7d:9d:d0:cd:fe:4b:eb:ae:7a:
         24:43:f5:a6:b0:18:ac:03:25:a7:44:7a:8b:6a:4c:22:84:b9:
         f8:ea:80:a6:b9:08:8b:bc:90:72:5f:09:84:8e:26:32:77:ec:
         de:f7:5c:9b:c3:20:19:04:c5:20:d2:74:25:1e:50:68:be:a0:
         f1:6b:08:80:bb:ec:13:79:9a:25:52:cd:fa:5e:0a:e9:54:c5:
         9c:9c:1b:8e:31:2e:56:e8:15:13:86:93:ee:85:82:67:75:4b:
         dd:e3:7a:5f:33:c2:8c:67:62:93:03:8a:a4:33:07:e3:2a:05:
         30:23:5c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:37 2025 by rpki-client on console.sobornost.net