Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/323830343a323939303a363430303a3a2f33382d3338203d3e20323634303232.roa
File:                     323830343a323939303a363430303a3a2f33382d3338203d3e20323634303232.roa (raw, json)
Hash identifier:          Hhp7hBgjUh/XWdgiB85CwZeYQzr5LV7NdgONXI2fuxQ=
Subject key identifier:   51:AE:E2:AF:E7:8D:7F:E5:FB:86:49:56:8A:6A:FC:FC:1E:DE:00:99
Certificate issuer:       /CN=F63047CFCA73277026C41BFD930CC304F5F342B7
Certificate serial:       322D687D9C56E85330903333EDAE24C27EBDA340
Authority key identifier: F6:30:47:CF:CA:73:27:70:26:C4:1B:FD:93:0C:C3:04:F5:F3:42:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F63047CFCA73277026C41BFD930CC304F5F342B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/323830343a323939303a363430303a3a2f33382d3338203d3e20323634303232.roa
Signing time:             Fri 25 Apr 2025 14:05:04 +0000
ROA not before:           Fri 25 Apr 2025 14:00:04 +0000
ROA not after:            Fri 24 Apr 2026 14:05:04 +0000
asID:                     264022
IP address blocks:        2804:2990:6400::/38 maxlen: 38

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/F63047CFCA73277026C41BFD930CC304F5F342B7.crl
                          rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/F63047CFCA73277026C41BFD930CC304F5F342B7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F63047CFCA73277026C41BFD930CC304F5F342B7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 16:45:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:2d:68:7d:9c:56:e8:53:30:90:33:33:ed:ae:24:c2:7e:bd:a3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F63047CFCA73277026C41BFD930CC304F5F342B7
        Validity
            Not Before: Apr 25 14:00:04 2025 GMT
            Not After : Apr 24 14:05:04 2026 GMT
        Subject: CN=51AEE2AFE78D7FE5FB8649568A6AFCFC1EDE0099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f8:f6:f2:64:b6:b1:1a:23:bf:c0:cb:28:76:
                    2f:83:2c:ea:2f:94:40:ba:f0:81:5f:cf:f0:88:fd:
                    fa:68:53:ef:e7:c3:5a:32:a8:2c:bd:34:d8:4a:13:
                    0f:95:73:e4:ce:96:a8:86:a9:b5:22:1e:cb:19:b4:
                    89:f6:17:5c:8b:2a:0d:de:cf:45:fb:d1:dc:c4:98:
                    c6:c8:cf:bc:96:e9:22:d7:59:c2:f4:59:05:3c:70:
                    da:5c:ad:5e:e2:6f:f3:b6:85:0b:91:d1:29:97:94:
                    60:f6:82:8b:f5:d4:5d:13:0e:de:81:d8:a5:6b:e3:
                    65:af:02:6e:e9:59:07:50:08:dd:98:1c:1e:75:68:
                    aa:dc:23:de:ca:d4:51:db:0c:a7:49:f0:35:a4:92:
                    2d:88:41:62:2d:b9:e4:15:6f:5f:0b:23:3e:8f:10:
                    80:86:06:ba:b6:5b:23:6b:f3:de:5d:90:04:12:b9:
                    15:ee:9d:89:91:ed:20:ee:38:74:a0:15:a4:79:85:
                    e1:ad:8f:23:c6:b4:10:70:83:bc:20:b0:e3:e7:02:
                    92:ed:0e:5b:40:e7:6b:a9:dd:09:81:d8:8c:21:3f:
                    e0:71:2f:98:f2:59:bc:54:63:d1:47:28:8b:aa:db:
                    e0:c3:ab:2b:33:af:42:cb:85:99:ac:65:a2:a9:3f:
                    d1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:AE:E2:AF:E7:8D:7F:E5:FB:86:49:56:8A:6A:FC:FC:1E:DE:00:99
            X509v3 Authority Key Identifier:
                keyid:F6:30:47:CF:CA:73:27:70:26:C4:1B:FD:93:0C:C3:04:F5:F3:42:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/F63047CFCA73277026C41BFD930CC304F5F342B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F63047CFCA73277026C41BFD930CC304F5F342B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/323830343a323939303a363430303a3a2f33382d3338203d3e20323634303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2990:6400::/38

    Signature Algorithm: sha256WithRSAEncryption
         a6:5b:fb:11:a1:f3:28:bc:3a:66:62:66:e8:47:a6:bf:85:94:
         e8:6f:01:50:d7:77:d1:49:41:df:0f:ac:f0:8e:17:c1:19:08:
         db:8c:bd:38:d5:4d:cd:d7:fa:e9:c6:ec:75:82:3e:17:dc:e6:
         95:ef:99:f5:44:e2:e6:3d:ec:c1:54:96:31:57:c1:b6:6d:a6:
         c3:b8:b7:2f:e8:75:3d:67:19:ac:5e:4f:6a:f1:29:c6:15:6d:
         8d:58:23:22:34:e5:92:e3:c7:0e:c9:5e:4d:00:37:45:4d:c2:
         c0:88:ee:d5:95:fd:04:18:df:19:10:9b:f5:05:1d:07:ff:cc:
         8a:33:ce:75:23:ea:c4:07:f0:e5:56:d4:46:74:30:ba:71:1a:
         7d:ba:84:a4:e4:f5:ef:83:b5:db:d2:15:d5:66:59:50:e8:64:
         f6:57:98:e4:d4:c4:5f:9d:e3:5e:3e:ad:c3:77:6f:7b:2f:25:
         9a:76:cb:16:b6:52:f4:52:06:cf:ed:50:11:6b:21:bb:5f:dd:
         38:77:4a:2d:05:d7:98:cf:e9:9d:9c:4d:07:96:cf:1f:a8:37:
         55:67:1a:47:bb:d0:7c:01:1f:40:e0:6d:b4:30:f8:64:7b:e2:
         f4:e0:ed:c7:ee:89:94:ad:64:b4:e7:aa:48:e5:53:de:bd:22:
         7d:70:08:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:08 2025 by rpki-client on console.sobornost.net