Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/323830343a363136343a343030303a3a2f34382d3438203d3e20323632343234.roa
File:                     323830343a363136343a343030303a3a2f34382d3438203d3e20323632343234.roa (raw, json)
Hash identifier:          xT+0KS2CL8t62MKx8SK/fl+6PDTmvUEjrRC8MYDdEEs=
Subject key identifier:   43:A1:81:57:A3:6C:2E:FF:EF:B9:69:A9:F9:1F:B8:AF:E4:76:A6:83
Certificate issuer:       /CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
Certificate serial:       5BE1358471BBA9EDF8611AAD3A6F3BD5ED066C71
Authority key identifier: 75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/323830343a363136343a343030303a3a2f34382d3438203d3e20323632343234.roa
Signing time:             Wed 16 Apr 2025 14:25:41 +0000
ROA not before:           Wed 16 Apr 2025 14:20:41 +0000
ROA not after:            Wed 15 Apr 2026 14:25:41 +0000
asID:                     262424
IP address blocks:        2804:6164:4000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl
                          rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 22:25:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:e1:35:84:71:bb:a9:ed:f8:61:1a:ad:3a:6f:3b:d5:ed:06:6c:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
        Validity
            Not Before: Apr 16 14:20:41 2025 GMT
            Not After : Apr 15 14:25:41 2026 GMT
        Subject: CN=43A18157A36C2EFFEFB969A9F91FB8AFE476A683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:11:db:13:50:8e:02:e7:9f:9c:1a:ed:f9:7b:
                    82:fe:82:a4:29:b7:8a:6e:1c:60:e7:71:68:ff:56:
                    fa:d6:56:b7:96:27:a0:5e:6f:7f:45:8a:e2:c4:b2:
                    a4:57:14:33:dd:c9:61:43:bb:89:5c:bb:32:d6:09:
                    e6:a1:c1:5f:c8:1a:9b:88:57:ff:be:c6:9c:0a:f7:
                    16:e1:fa:44:57:59:d6:09:40:6c:18:e6:c8:93:c1:
                    1d:98:3f:be:85:bd:bf:7c:0a:f5:bb:9b:d0:f7:ff:
                    58:a5:ac:77:3e:35:87:cc:06:7a:e3:01:87:3f:e3:
                    ff:f2:4f:50:33:53:24:8a:37:d2:99:be:7b:bf:f5:
                    90:ee:03:20:7a:f6:f3:b9:2c:54:82:bb:92:bf:33:
                    34:9f:22:28:b3:50:cf:73:d4:5a:22:2d:97:e8:a6:
                    22:c7:3c:f9:06:83:26:9c:38:58:e2:4a:78:7a:6d:
                    cb:e1:83:16:55:52:6d:42:76:7d:e2:c9:b4:06:fd:
                    33:82:cd:7d:5a:1b:f6:4e:2c:b6:8f:63:be:ab:9b:
                    af:d6:3e:85:fd:6a:18:a0:a5:36:95:c4:0e:9d:55:
                    7c:ea:d3:ea:43:99:38:42:f5:4d:0e:ee:27:4d:78:
                    fe:c8:e8:8d:f8:bb:e5:de:51:23:0b:44:65:ea:c9:
                    d2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:A1:81:57:A3:6C:2E:FF:EF:B9:69:A9:F9:1F:B8:AF:E4:76:A6:83
            X509v3 Authority Key Identifier:
                keyid:75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/323830343a363136343a343030303a3a2f34382d3438203d3e20323632343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6164:4000::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:7a:ea:7c:3d:ab:e6:6d:75:57:8c:89:5c:de:45:fc:20:a5:
         52:ca:5e:38:96:10:ff:dc:40:48:e6:ef:83:54:96:8b:12:5c:
         35:4c:a6:90:42:52:d3:df:5c:ac:ab:e9:a9:80:de:9a:e1:51:
         7c:e1:c2:b2:2d:6f:b0:4c:8c:9b:ff:b6:2c:b7:72:48:51:5e:
         2d:59:03:5a:fa:c9:69:e5:ab:50:b0:05:fa:23:4a:37:5d:9a:
         35:ba:93:a6:72:fb:35:98:a5:52:6c:5c:ea:9a:61:d5:bd:0d:
         46:5b:7d:87:a1:14:0c:c7:d4:34:52:bd:17:ef:e3:d1:d6:6f:
         19:a8:d8:2f:e3:0f:f3:86:a9:a5:04:7f:4a:ea:72:c5:f8:b0:
         49:3a:28:81:6c:b2:df:c6:3e:52:f2:a3:08:df:01:75:7c:4a:
         02:64:30:b4:d2:cc:78:c5:79:80:45:ca:89:ed:bc:8b:7d:ed:
         55:bb:2e:b1:b0:00:dc:b2:34:fc:6f:46:0d:c5:27:c9:7c:86:
         f0:2a:f6:b7:4d:35:3a:0a:6b:12:a2:fb:57:03:ef:60:b3:bb:
         e4:19:3e:43:cd:cc:8c:20:7b:df:14:5f:dd:27:42:24:82:dc:
         b7:6e:bc:e1:5c:34:f4:03:f9:49:d3:6f:6b:74:0f:9e:dd:3b:
         4c:27:e5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:56 2025 by rpki-client on console.sobornost.net