Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/323830343a346431383a343030303a3a2f33342d3334203d3e20323637343132.roa
File:                     323830343a346431383a343030303a3a2f33342d3334203d3e20323637343132.roa (raw, json)
Hash identifier:          8RntSgkcNpjYTAo5oeJ6k68JNAwNrOudjy9MEkxJ7/M=
Subject key identifier:   31:3B:94:EB:E7:4E:C8:F4:EA:BB:91:77:EE:8E:75:99:79:19:CF:0D
Certificate issuer:       /CN=07FCA7D1215090422388794719E04DCE9A5F39AA
Certificate serial:       49215A9927E6515B205481E1673E6B31BD0D8C36
Authority key identifier: 07:FC:A7:D1:21:50:90:42:23:88:79:47:19:E0:4D:CE:9A:5F:39:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07FCA7D1215090422388794719E04DCE9A5F39AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/323830343a346431383a343030303a3a2f33342d3334203d3e20323637343132.roa
Signing time:             Mon 03 Feb 2025 17:49:11 +0000
ROA not before:           Mon 03 Feb 2025 17:44:11 +0000
ROA not after:            Mon 02 Feb 2026 17:49:11 +0000
asID:                     267412
IP address blocks:        2804:4d18:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/07FCA7D1215090422388794719E04DCE9A5F39AA.crl
                          rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/07FCA7D1215090422388794719E04DCE9A5F39AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07FCA7D1215090422388794719E04DCE9A5F39AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:03:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:21:5a:99:27:e6:51:5b:20:54:81:e1:67:3e:6b:31:bd:0d:8c:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07FCA7D1215090422388794719E04DCE9A5F39AA
        Validity
            Not Before: Feb  3 17:44:11 2025 GMT
            Not After : Feb  2 17:49:11 2026 GMT
        Subject: CN=313B94EBE74EC8F4EABB9177EE8E75997919CF0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fc:b6:42:d5:91:7a:ae:97:c1:37:09:26:7a:
                    6d:46:da:b2:cb:4a:5d:e1:0c:dc:2e:03:47:43:1d:
                    ff:44:f6:e4:ae:aa:79:7b:a6:b1:39:1e:f2:08:d1:
                    3a:5e:68:71:c3:38:c6:89:49:f0:01:e3:b1:20:a6:
                    a7:4f:a6:a4:56:a1:97:c1:f8:b1:6c:26:c4:29:2c:
                    3d:91:6b:9b:c8:55:69:52:99:1d:dc:98:b7:1c:93:
                    c9:aa:72:29:fe:14:43:c8:29:94:f2:93:dc:ff:d5:
                    6f:5d:ca:1e:4a:3e:30:75:d9:f3:20:cf:a1:30:af:
                    6d:68:c4:12:17:7b:0e:2c:9b:60:4c:20:d2:e6:58:
                    e0:d1:51:c7:2c:12:35:01:69:4b:db:5e:a3:9b:8c:
                    31:89:be:88:11:4d:8c:5f:b2:fe:26:3a:3b:82:07:
                    11:3c:5b:33:48:06:d1:a6:ff:ce:75:c8:17:4c:a1:
                    ba:e7:4d:d6:c5:49:b4:c0:62:e3:22:20:e3:6f:17:
                    67:9e:81:11:3c:a1:c9:f2:6a:a4:c9:bc:9a:c7:1d:
                    18:ba:bd:15:ed:9b:9e:54:ed:a8:c7:45:c6:f3:f3:
                    46:22:f9:8f:27:18:5e:a8:0a:c1:33:d1:48:69:8f:
                    58:0e:45:dc:46:fe:4c:a3:33:0e:eb:31:0a:6f:34:
                    16:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:3B:94:EB:E7:4E:C8:F4:EA:BB:91:77:EE:8E:75:99:79:19:CF:0D
            X509v3 Authority Key Identifier:
                keyid:07:FC:A7:D1:21:50:90:42:23:88:79:47:19:E0:4D:CE:9A:5F:39:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/07FCA7D1215090422388794719E04DCE9A5F39AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07FCA7D1215090422388794719E04DCE9A5F39AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/323830343a346431383a343030303a3a2f33342d3334203d3e20323637343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d18:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         61:84:e3:e0:9a:69:48:ab:d1:7d:18:99:65:6c:a9:1a:9e:de:
         6e:d6:02:ed:6d:ce:20:c0:a7:c5:1a:bf:99:af:bc:22:05:b6:
         da:b9:82:84:e1:2b:63:3d:d8:21:af:41:a9:5f:e8:c1:6b:12:
         de:11:56:41:d7:60:f0:e3:1b:41:d3:bb:c3:a6:66:d3:7b:b3:
         2b:1f:50:b3:e4:45:34:1e:c5:7c:8a:63:e6:d7:9e:5c:d2:e0:
         9a:6c:6a:93:4b:e8:ea:de:d3:e8:14:6f:e5:86:fa:97:7c:f2:
         54:f8:bf:27:c9:bf:0d:57:d7:0a:13:6b:4f:df:30:53:2d:c5:
         f3:67:53:ec:3c:f4:fb:16:1f:9e:4c:f4:ea:87:e2:54:3b:ca:
         c8:20:2b:0c:f4:d6:8d:be:12:10:de:50:2f:af:4d:b5:bd:ac:
         6c:ae:ec:0f:50:b1:ad:99:67:df:c8:0e:65:e2:c7:a0:30:0b:
         1e:a6:98:ad:c1:44:36:5d:19:ea:9b:e6:a2:ab:b0:59:be:10:
         f2:46:8b:68:d8:81:06:ec:74:a7:a4:64:96:b2:2d:c1:0d:c9:
         b7:ef:0a:5e:c6:41:bc:54:28:3f:42:ae:a8:f2:e0:e7:a3:d8:
         89:36:1f:af:5e:55:40:6b:b2:a9:7f:0e:71:63:60:ec:84:c8:
         71:82:34:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:09 2025 by rpki-client on console.sobornost.net