Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6c1NPPUnc4C5JpXw4j6N6M16BHFdDmD1soH7TniCgZbz/0/323830343a346332343a3a2f33322d3438203d3e20323633313033.roa
File:                     323830343a346332343a3a2f33322d3438203d3e20323633313033.roa (raw, json)
Hash identifier:          rL5ogqb3msM3yy4PhZKCM5MWQcY6iaH9w50Bkl+LG0M=
Subject key identifier:   87:CA:13:0C:F2:CB:C4:D9:EB:8E:7E:4D:3B:7A:D6:B2:AA:8E:1A:14
Certificate issuer:       /CN=00645880B1F7617180805DD76753D47FE99FB546
Certificate serial:       203917DB8211A6BE35F5086FBF40C266399038E2
Authority key identifier: 00:64:58:80:B1:F7:61:71:80:80:5D:D7:67:53:D4:7F:E9:9F:B5:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00645880B1F7617180805DD76753D47FE99FB546.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6c1NPPUnc4C5JpXw4j6N6M16BHFdDmD1soH7TniCgZbz/0/323830343a346332343a3a2f33322d3438203d3e20323633313033.roa
Signing time:             Thu 10 Apr 2025 14:14:58 +0000
ROA not before:           Thu 10 Apr 2025 14:09:58 +0000
ROA not after:            Thu 09 Apr 2026 14:14:58 +0000
asID:                     263103
IP address blocks:        2804:4c24::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6c1NPPUnc4C5JpXw4j6N6M16BHFdDmD1soH7TniCgZbz/0/00645880B1F7617180805DD76753D47FE99FB546.crl
                          rsync://rpki-repo.registro.br/repo/6c1NPPUnc4C5JpXw4j6N6M16BHFdDmD1soH7TniCgZbz/0/00645880B1F7617180805DD76753D47FE99FB546.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00645880B1F7617180805DD76753D47FE99FB546.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 04:59:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:39:17:db:82:11:a6:be:35:f5:08:6f:bf:40:c2:66:39:90:38:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00645880B1F7617180805DD76753D47FE99FB546
        Validity
            Not Before: Apr 10 14:09:58 2025 GMT
            Not After : Apr  9 14:14:58 2026 GMT
        Subject: CN=87CA130CF2CBC4D9EB8E7E4D3B7AD6B2AA8E1A14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:54:1d:90:61:53:6b:c0:32:32:e4:d3:c5:5d:
                    42:2b:e5:7e:80:bb:9c:e9:70:ba:25:4f:14:76:95:
                    fd:f6:65:da:d7:86:0a:a4:af:cb:b5:a8:66:dd:8f:
                    73:40:07:4c:ec:8f:91:2c:a9:48:cf:69:c3:88:09:
                    3f:16:a3:df:02:cb:2e:84:ba:8b:dc:9b:b8:7e:8a:
                    20:a9:95:68:f3:2b:d7:5d:5a:8b:85:16:d1:47:38:
                    51:12:ce:d9:d8:31:0b:9e:dd:87:73:27:94:be:1e:
                    73:f3:ce:0b:03:c4:9e:e8:35:97:c4:c6:c4:27:22:
                    da:08:31:fa:3a:e5:53:d6:f6:27:69:93:9a:1d:a1:
                    fc:fa:1e:32:46:0a:80:2e:90:a8:b2:65:50:c4:e4:
                    e0:d1:e6:da:fa:39:dd:9e:f2:ea:8a:b9:26:a0:7f:
                    47:3c:b6:00:e2:3a:e7:7b:39:cf:09:bf:f9:36:a0:
                    63:d1:81:9c:59:42:55:c0:de:37:89:21:99:56:7d:
                    2c:ac:dc:cd:34:05:a8:c2:87:25:db:f6:2f:48:de:
                    bc:96:92:5e:bb:6f:d6:7b:03:2d:8d:fd:02:d5:a3:
                    48:94:55:b5:19:fb:8c:ea:a2:f4:47:12:e7:30:8e:
                    c3:d4:7d:81:41:76:91:fd:ca:3b:16:a3:68:63:7b:
                    76:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:CA:13:0C:F2:CB:C4:D9:EB:8E:7E:4D:3B:7A:D6:B2:AA:8E:1A:14
            X509v3 Authority Key Identifier:
                keyid:00:64:58:80:B1:F7:61:71:80:80:5D:D7:67:53:D4:7F:E9:9F:B5:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6c1NPPUnc4C5JpXw4j6N6M16BHFdDmD1soH7TniCgZbz/0/00645880B1F7617180805DD76753D47FE99FB546.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00645880B1F7617180805DD76753D47FE99FB546.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6c1NPPUnc4C5JpXw4j6N6M16BHFdDmD1soH7TniCgZbz/0/323830343a346332343a3a2f33322d3438203d3e20323633313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c24::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:92:8c:3c:3c:96:22:f3:a4:38:db:b1:00:c1:42:08:fb:76:
         5a:93:ef:56:f0:a0:3c:e2:df:2d:f9:d5:8a:15:21:2b:32:c8:
         04:0a:75:cb:0e:da:69:8b:35:09:04:94:51:94:cc:66:76:ee:
         16:18:b4:76:6a:4f:54:2e:79:1f:11:dc:f4:3d:40:8c:44:b0:
         d0:79:70:c8:e6:0a:4d:eb:8b:75:79:c3:2a:6b:fe:20:8f:9c:
         4e:b7:fc:fb:12:b4:c8:d2:47:2f:15:d4:e2:1e:8b:ac:74:1f:
         64:86:78:01:c8:5c:a6:48:09:81:91:85:59:8c:e8:df:b1:df:
         03:02:42:28:22:12:11:49:63:58:47:af:8c:b9:f7:0f:bf:98:
         a3:34:9e:04:f0:05:20:76:05:21:a3:f7:ab:10:3d:93:43:3c:
         9c:59:d9:06:ae:97:be:ea:97:3b:a9:30:f0:af:b8:c6:97:6d:
         dd:63:8c:06:6f:cd:f3:74:57:72:7c:07:59:17:ec:25:14:5c:
         93:4e:1e:ab:94:b9:1c:5a:88:c8:7c:f3:f8:f8:7a:54:48:50:
         7d:a3:9c:2c:56:31:25:19:4b:2f:d8:32:8d:b3:44:49:5f:27:
         29:9e:f5:df:3a:27:4a:09:77:c9:94:70:97:b0:43:38:f0:3c:
         48:a5:58:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:14:47 2025 by rpki-client on console.sobornost.net