Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/323830343a343663633a3a2f33322d3335203d3e20323637303132.roa
File:                     323830343a343663633a3a2f33322d3335203d3e20323637303132.roa (raw, json)
Hash identifier:          hUJ3ViYjtOTPqVLKnHpcCJMKqWz/nzvrgDJaIzS7JxY=
Subject key identifier:   42:4C:E8:FC:2B:C7:AC:3C:C2:62:BB:8C:0E:9F:6C:C9:48:95:92:AD
Certificate issuer:       /CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
Certificate serial:       3D534A305C39B1A2F1A99085A101AFE728B1C42D
Authority key identifier: D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/323830343a343663633a3a2f33322d3335203d3e20323637303132.roa
Signing time:             Thu 05 Dec 2024 13:14:52 +0000
ROA not before:           Thu 05 Dec 2024 13:09:52 +0000
ROA not after:            Thu 04 Dec 2025 13:14:52 +0000
asID:                     267012
IP address blocks:        2804:46cc::/32 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 13:40:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:53:4a:30:5c:39:b1:a2:f1:a9:90:85:a1:01:af:e7:28:b1:c4:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
        Validity
            Not Before: Dec  5 13:09:52 2024 GMT
            Not After : Dec  4 13:14:52 2025 GMT
        Subject: CN=424CE8FC2BC7AC3CC262BB8C0E9F6CC9489592AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:79:d0:5e:81:3d:8e:91:29:98:13:da:e2:46:
                    17:ef:77:10:d2:25:f4:96:0d:be:45:10:e0:ac:7c:
                    97:a8:db:96:7e:f6:5e:aa:22:64:4b:6c:d7:9a:bf:
                    e7:b6:df:60:cf:ed:f5:64:cd:3c:07:b8:b5:1c:c5:
                    e3:4e:ba:9c:a7:79:75:10:b6:03:59:4b:09:c6:46:
                    4d:dc:16:42:15:54:67:eb:3a:32:13:27:63:8b:a6:
                    b5:8c:c8:f9:86:a9:ab:39:c0:59:21:35:db:2e:64:
                    2f:6c:2d:1d:b9:73:0f:af:23:f7:c2:57:17:b4:6f:
                    09:3e:c7:45:8a:ca:66:90:be:74:56:c1:2b:9c:ec:
                    98:7f:45:69:92:1f:a0:5e:c4:3d:1b:08:3f:6f:93:
                    0a:d0:a7:e4:81:fe:33:db:6a:94:0d:5b:73:d8:8e:
                    e5:6d:2e:ac:b7:35:4e:ac:48:ed:1c:cd:19:23:b3:
                    11:ae:b5:14:4c:9f:9f:07:17:21:63:ef:6f:05:31:
                    9c:27:98:94:a1:5a:73:83:21:8a:d3:28:03:d8:9c:
                    4b:89:2a:fd:58:dd:3c:d8:49:d1:ec:49:00:b0:a8:
                    a1:b1:23:78:d7:6e:69:53:5e:25:29:09:fe:52:5e:
                    d1:f8:b3:4b:c1:8c:7f:68:99:69:e8:81:a0:68:87:
                    bb:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:4C:E8:FC:2B:C7:AC:3C:C2:62:BB:8C:0E:9F:6C:C9:48:95:92:AD
            X509v3 Authority Key Identifier:
                keyid:D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/323830343a343663633a3a2f33322d3335203d3e20323637303132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:46cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:50:12:f1:12:21:e8:fc:a3:cb:ac:a4:72:75:28:c2:84:20:
         83:8c:92:60:95:8c:2f:05:c2:06:5b:e5:15:64:e9:f4:c7:e5:
         d4:93:82:aa:57:b4:19:c6:9a:5f:04:7f:56:c5:1f:66:49:74:
         f4:2a:a4:6b:ab:43:6c:ef:88:c6:f0:f1:2f:a7:6a:99:05:8d:
         38:61:eb:0c:3b:9b:16:23:52:cf:5f:b1:c9:78:24:9a:36:57:
         e6:be:2e:79:12:0d:ad:4e:4e:f5:e0:0d:73:d3:f3:63:3d:16:
         5a:3b:5c:c3:e2:ec:57:d3:7a:73:46:20:67:2e:ad:a9:db:88:
         22:5a:60:28:19:01:59:06:7f:a2:c4:d7:8d:b8:42:41:80:6d:
         83:bd:e6:02:47:ca:ca:d9:8c:0e:07:7b:1d:4d:3d:2f:5b:a2:
         84:d2:5d:0b:39:ef:24:3c:9c:f1:3f:44:fe:b9:b6:c7:1d:5e:
         18:23:89:97:62:0c:f6:56:a4:42:6a:45:30:db:90:f9:68:ff:
         e4:97:f7:df:59:4e:7a:6e:20:35:99:09:d5:f5:ae:5b:e8:7b:
         97:b6:c1:7a:b8:f1:2e:76:57:8a:e2:30:a2:a3:4b:96:82:de:
         32:f4:49:58:28:35:ac:bc:5b:a2:e0:13:d9:31:a8:77:cb:56:
         48:0a:64:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:37:14 2025 by rpki-client on console.sobornost.net