Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/323830343a346431383a3a2f33332d3333203d3e20323637343132.roa
File:                     323830343a346431383a3a2f33332d3333203d3e20323637343132.roa (raw, json)
Hash identifier:          AbIf5fT9ADAf5CFnEAylPekmfWiuhHN80q+zT8c9tz8=
Subject key identifier:   4D:AE:8E:92:70:4E:0A:A8:64:79:E5:56:5D:2A:32:23:08:33:A5:58
Certificate issuer:       /CN=07FCA7D1215090422388794719E04DCE9A5F39AA
Certificate serial:       0E40D12131BA498460B8875E3B022A3C40DBC249
Authority key identifier: 07:FC:A7:D1:21:50:90:42:23:88:79:47:19:E0:4D:CE:9A:5F:39:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07FCA7D1215090422388794719E04DCE9A5F39AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/323830343a346431383a3a2f33332d3333203d3e20323637343132.roa
Signing time:             Mon 03 Feb 2025 17:48:35 +0000
ROA not before:           Mon 03 Feb 2025 17:43:35 +0000
ROA not after:            Mon 02 Feb 2026 17:48:35 +0000
asID:                     267412
IP address blocks:        2804:4d18::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/07FCA7D1215090422388794719E04DCE9A5F39AA.crl
                          rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/07FCA7D1215090422388794719E04DCE9A5F39AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07FCA7D1215090422388794719E04DCE9A5F39AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:03:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:40:d1:21:31:ba:49:84:60:b8:87:5e:3b:02:2a:3c:40:db:c2:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07FCA7D1215090422388794719E04DCE9A5F39AA
        Validity
            Not Before: Feb  3 17:43:35 2025 GMT
            Not After : Feb  2 17:48:35 2026 GMT
        Subject: CN=4DAE8E92704E0AA86479E5565D2A32230833A558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:85:da:d0:fd:67:04:7d:0f:d8:05:ed:cc:18:
                    31:48:45:f5:4c:6d:f3:18:8f:a5:ee:87:90:30:eb:
                    3c:8e:5f:66:92:21:48:ab:a4:a7:9a:a8:0a:1f:50:
                    2c:11:38:51:a2:cd:43:e1:4e:85:c0:b7:e2:84:45:
                    f6:16:6d:21:77:a5:60:b2:0b:8b:59:cd:42:16:b2:
                    5a:30:1b:fd:89:e2:75:0d:e9:f2:c6:c1:08:17:93:
                    27:78:84:4a:3d:87:a7:bd:aa:1c:e4:b1:e7:ee:4f:
                    54:aa:06:ea:03:5a:4e:9f:04:54:04:25:cd:05:00:
                    51:0f:b9:ab:06:04:a0:b3:ad:02:15:5e:06:89:38:
                    42:74:ca:9e:0f:87:9c:b7:8e:2d:50:5a:2f:b6:51:
                    65:ab:45:50:75:a8:4a:1a:5d:5f:13:2e:3e:13:ca:
                    fc:ad:bb:c1:3c:65:ac:7c:35:e6:13:c4:4a:ce:6b:
                    03:72:a7:05:cd:3e:3f:4a:09:65:cb:60:12:d2:ec:
                    f3:d9:6b:0b:85:7b:2c:3b:dd:5a:29:1f:d5:94:40:
                    ea:ac:e5:d6:e3:c2:a8:71:f9:e3:9c:38:9b:f1:34:
                    45:a3:f1:b6:5d:fc:2e:43:84:32:e3:bc:b2:c4:95:
                    7c:7a:23:d2:c2:b3:95:64:12:83:9b:2a:81:d1:af:
                    21:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:AE:8E:92:70:4E:0A:A8:64:79:E5:56:5D:2A:32:23:08:33:A5:58
            X509v3 Authority Key Identifier:
                keyid:07:FC:A7:D1:21:50:90:42:23:88:79:47:19:E0:4D:CE:9A:5F:39:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/07FCA7D1215090422388794719E04DCE9A5F39AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07FCA7D1215090422388794719E04DCE9A5F39AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/323830343a346431383a3a2f33332d3333203d3e20323637343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d18::/33

    Signature Algorithm: sha256WithRSAEncryption
         4e:43:27:2b:0a:72:82:5c:ae:92:1a:8a:6b:9d:ca:2a:54:3c:
         1b:74:2b:63:43:c3:86:34:cc:b4:10:32:66:50:b6:50:c1:de:
         6e:5b:15:b5:70:2e:c9:07:0b:9e:8e:5f:8f:0d:ea:eb:13:77:
         9d:ed:1c:91:04:41:da:9a:73:c8:a1:ca:a8:d3:ff:ba:22:47:
         53:67:c7:76:05:ed:6f:d2:c4:63:6b:40:af:fd:48:80:f7:a5:
         e7:3b:9e:a6:10:68:5f:1c:56:a0:65:23:a0:51:d7:46:7d:58:
         c4:47:66:25:3b:a4:42:9a:3e:22:9d:1c:e4:ba:43:08:ec:70:
         01:e3:3e:61:cc:2b:b6:e5:47:57:e9:b0:35:89:6c:77:45:6d:
         ab:26:e1:93:19:be:68:f9:32:1a:3a:34:10:2c:b8:a7:60:bf:
         e9:40:0e:a1:81:13:b6:18:24:9e:3e:95:09:de:bd:36:2d:a0:
         c2:27:1a:fa:1e:ca:08:fe:fe:41:a7:18:7f:28:ad:49:38:2b:
         c7:b7:22:bf:84:a1:cf:9f:46:5f:66:d7:cc:ab:48:e2:94:e0:
         ae:d1:c1:d1:50:65:98:85:6d:80:40:1e:88:df:ca:29:77:f6:
         df:12:9c:f9:19:20:f8:74:78:1b:99:c2:21:73:fb:4d:8e:d0:
         f8:7c:9c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:09 2025 by rpki-client on console.sobornost.net