Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/323830343a373636383a3a2f33322d3438203d3e20323731313130.roa
File:                     323830343a373636383a3a2f33322d3438203d3e20323731313130.roa (raw, json)
Hash identifier:          hQb+4bJCLueZdw9zMe8maPJ2VFU86LTKiK7lH2fIgzA=
Subject key identifier:   26:C0:4C:7E:1D:06:FD:98:67:7B:B1:15:FB:BE:51:93:F7:15:FA:67
Certificate issuer:       /CN=0330D9252D48F6AC52A800FF3C2E654C5837DA05
Certificate serial:       28E828E63459772B653BCFC3D1EFC2CA86D13A00
Authority key identifier: 03:30:D9:25:2D:48:F6:AC:52:A8:00:FF:3C:2E:65:4C:58:37:DA:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0330D9252D48F6AC52A800FF3C2E654C5837DA05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/323830343a373636383a3a2f33322d3438203d3e20323731313130.roa
Signing time:             Wed 04 Dec 2024 19:21:24 +0000
ROA not before:           Wed 04 Dec 2024 19:16:24 +0000
ROA not after:            Wed 03 Dec 2025 19:21:24 +0000
asID:                     271110
IP address blocks:        2804:7668::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.crl
                          rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0330D9252D48F6AC52A800FF3C2E654C5837DA05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 20:46:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:e8:28:e6:34:59:77:2b:65:3b:cf:c3:d1:ef:c2:ca:86:d1:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0330D9252D48F6AC52A800FF3C2E654C5837DA05
        Validity
            Not Before: Dec  4 19:16:24 2024 GMT
            Not After : Dec  3 19:21:24 2025 GMT
        Subject: CN=26C04C7E1D06FD98677BB115FBBE5193F715FA67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8a:07:55:8e:6d:95:9d:f4:ef:05:0f:85:c0:
                    3f:0d:e2:04:ec:ac:01:e2:b7:60:9a:fc:7e:49:ec:
                    84:5c:ab:0e:4b:6f:9d:5e:f7:f3:1d:c6:22:22:ba:
                    38:f4:da:e1:be:8e:6b:20:e7:2b:d2:d7:6a:aa:08:
                    10:53:64:4f:95:aa:8f:e4:43:21:d3:53:7d:84:8b:
                    2c:c9:99:19:06:ff:54:62:56:7a:72:d9:d4:d1:ee:
                    f9:16:32:df:ca:10:eb:2f:bb:88:b0:62:e8:ab:dd:
                    48:9c:5a:59:10:81:87:3c:d0:8b:5e:aa:6c:19:38:
                    ac:99:d6:93:00:41:ca:62:5b:c5:04:fc:e5:68:d7:
                    66:94:6d:c6:33:e2:e6:c4:73:e9:da:cc:a5:5d:6d:
                    53:45:d6:7a:fa:ae:0d:fb:b1:e9:e5:fb:73:92:3d:
                    19:a9:06:0b:ba:fe:a1:b1:10:57:e0:34:0b:69:c2:
                    bc:8c:36:0e:bf:14:93:93:a4:ba:cc:d7:71:6f:b0:
                    25:a2:ef:e3:a3:d3:ad:f9:d6:06:71:e1:1a:18:5f:
                    ca:ae:9e:1c:d3:e1:11:0a:ec:c1:75:17:4b:88:5d:
                    98:ea:e4:92:0b:c1:9c:09:89:d7:92:b3:59:a9:0e:
                    00:65:82:b8:7a:b8:2a:f4:0a:b5:bd:84:5c:62:67:
                    30:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C0:4C:7E:1D:06:FD:98:67:7B:B1:15:FB:BE:51:93:F7:15:FA:67
            X509v3 Authority Key Identifier:
                keyid:03:30:D9:25:2D:48:F6:AC:52:A8:00:FF:3C:2E:65:4C:58:37:DA:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0330D9252D48F6AC52A800FF3C2E654C5837DA05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/323830343a373636383a3a2f33322d3438203d3e20323731313130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7668::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:c4:b9:84:50:a9:c1:2c:c8:5d:fd:90:ae:a6:b1:cd:72:f6:
         5c:86:8f:2c:f8:6f:95:df:ab:03:0a:cb:15:c2:01:f8:9a:26:
         24:26:4e:f3:93:3b:b6:f8:8b:42:1a:29:41:69:04:e6:4e:f3:
         33:34:50:27:1f:47:83:92:81:66:9c:f9:b3:16:95:23:05:a9:
         df:12:02:a7:b5:8b:79:09:06:82:3b:c3:a9:8a:d6:82:c7:25:
         13:1b:35:74:80:7f:4a:99:d9:2b:62:2d:13:2d:b7:a7:09:d8:
         df:80:67:60:e6:1f:bb:b0:90:1c:85:e5:f7:ac:ff:a5:17:39:
         6f:2f:50:37:16:3e:b6:16:66:a1:0f:ad:a7:16:08:10:81:c7:
         20:8f:b4:c4:1c:3c:5c:3f:98:d9:7d:15:20:7b:fa:22:5a:b1:
         5d:fa:fa:4e:86:b1:78:31:1a:77:33:bc:da:9e:27:11:ff:cd:
         72:ae:b4:f4:5e:cd:84:b3:4a:11:da:04:1d:7d:92:78:bf:0e:
         a5:c6:76:48:cf:d3:10:c4:c8:14:1b:7f:bb:40:c0:9c:42:0a:
         4c:69:83:fc:e8:48:5f:99:95:3c:3a:b6:fe:45:1c:5c:37:18:
         39:90:b3:31:f3:85:18:23:3d:44:8f:8c:b2:91:3e:bb:22:7f:
         ea:75:9f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:56 2025 by rpki-client on console.sobornost.net