Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/323830343a366261303a633030303a3a2f33342d3334203d3e20323730343133.roa
File:                     323830343a366261303a633030303a3a2f33342d3334203d3e20323730343133.roa (raw, json)
Hash identifier:          k+piroAlieR9Bf0Tjl7+8vsH2QUeBjnyPSSxkIUlL2w=
Subject key identifier:   B0:8A:AC:A4:58:70:52:4B:77:21:47:5F:02:24:25:1C:61:25:66:45
Certificate issuer:       /CN=BE6164348043E6AA537C7ED74D50CC40298757FC
Certificate serial:       41C5A618DB88232590BE7FE51AC60B4E7BD29052
Authority key identifier: BE:61:64:34:80:43:E6:AA:53:7C:7E:D7:4D:50:CC:40:29:87:57:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/323830343a366261303a633030303a3a2f33342d3334203d3e20323730343133.roa
Signing time:             Thu 03 Oct 2024 13:44:00 +0000
ROA not before:           Thu 03 Oct 2024 13:39:00 +0000
ROA not after:            Thu 02 Oct 2025 13:44:00 +0000
asID:                     270413
IP address blocks:        2804:6ba0:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.crl
                          rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 12:46:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:c5:a6:18:db:88:23:25:90:be:7f:e5:1a:c6:0b:4e:7b:d2:90:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE6164348043E6AA537C7ED74D50CC40298757FC
        Validity
            Not Before: Oct  3 13:39:00 2024 GMT
            Not After : Oct  2 13:44:00 2025 GMT
        Subject: CN=B08AACA45870524B7721475F0224251C61256645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:88:ee:42:e6:f5:c1:53:9f:44:41:1d:85:5e:
                    bd:3d:72:f7:19:dd:e4:77:b4:e8:86:f6:c7:aa:36:
                    d5:61:75:aa:81:e0:e1:21:fa:03:23:30:21:a6:18:
                    36:8d:db:07:fb:68:31:8e:ca:33:6a:87:57:5a:40:
                    61:8b:4d:07:c2:f7:f5:40:e6:28:14:79:87:3f:3f:
                    61:57:d5:c5:b6:f7:98:92:54:59:de:d3:d1:94:43:
                    3e:77:80:ba:a0:22:ab:84:96:7a:40:dd:c9:ac:65:
                    c6:24:8a:f6:b0:02:12:3c:00:c9:ab:d8:06:ce:36:
                    9d:28:b1:5e:b7:07:2d:69:7c:c6:a2:da:be:40:ef:
                    a5:b4:11:2b:c2:df:7d:12:02:90:d5:ad:fd:82:22:
                    46:d7:28:e0:d7:4e:b6:dd:32:30:ce:9d:4f:7c:f8:
                    79:c0:07:1d:0b:3c:fb:5e:9a:34:98:85:33:f2:48:
                    cb:63:92:48:cc:44:4b:07:76:98:ce:3c:e2:51:df:
                    c7:5d:b0:34:05:12:ea:0d:12:37:f4:1d:30:2b:9a:
                    a4:68:94:c7:34:63:e1:34:f8:c3:4f:22:f4:e2:0b:
                    48:b7:ab:94:44:12:af:ec:85:3f:fc:04:b6:9a:0d:
                    a9:ff:b3:f3:e7:64:b2:79:29:47:96:95:a0:4a:a3:
                    16:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:8A:AC:A4:58:70:52:4B:77:21:47:5F:02:24:25:1C:61:25:66:45
            X509v3 Authority Key Identifier:
                keyid:BE:61:64:34:80:43:E6:AA:53:7C:7E:D7:4D:50:CC:40:29:87:57:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/323830343a366261303a633030303a3a2f33342d3334203d3e20323730343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ba0:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         22:d7:f3:73:1a:28:9d:92:0d:36:92:6f:37:a9:c5:08:41:b6:
         48:df:cc:15:fd:b5:ad:1c:51:f2:13:95:f8:82:98:fd:a8:40:
         41:35:ee:4e:2b:25:d9:33:9c:7f:7f:d4:0c:a6:22:2b:1b:65:
         e6:34:e3:ca:cb:3e:aa:eb:2c:08:86:9c:4b:06:c3:44:93:71:
         35:75:10:ca:fa:61:8e:7a:de:40:32:46:e5:45:bf:fc:f8:56:
         79:59:f7:06:ed:ba:68:0b:0c:be:71:ae:9c:ae:06:59:82:75:
         8c:74:11:ae:7e:27:0e:ab:cb:11:de:34:7e:19:0e:49:27:7c:
         b5:af:95:48:f9:39:9a:be:a3:70:6a:25:1e:bc:86:8e:a3:11:
         99:e6:3b:a1:ea:ce:17:be:95:77:eb:8b:44:f8:a8:c7:61:0d:
         87:e9:7d:7b:53:76:93:e6:91:da:14:58:98:92:3b:2d:46:89:
         7c:f4:35:3c:95:d0:a6:30:03:f5:ef:55:c6:d4:bb:e2:3e:31:
         25:ea:d9:83:38:a9:1e:0a:ee:ad:ea:55:fa:90:e4:3f:35:c5:
         51:2e:80:82:34:33:be:99:4b:f7:b4:79:87:e5:eb:43:7a:8c:
         8f:ac:8d:f7:6b:0a:7e:0a:e0:93:6c:8b:a2:ab:bd:38:ab:df:
         cf:67:72:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:06 2025 by rpki-client on console.sobornost.net