Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6pHVdiTXxFxtTaxbPTr74ArtFrbxUDB9oKQKmBcnb14Q/1/323830343a323333303a3a2f33322d3332203d3e20323634313437.roa
File:                     323830343a323333303a3a2f33322d3332203d3e20323634313437.roa (raw, json)
Hash identifier:          EhbVZAXm/w8uVgUOpmUzrunkUStjAYFpZ7/CupdVDpo=
Subject key identifier:   B2:3C:B2:73:0D:B9:91:2F:30:DE:41:AF:68:95:21:D7:77:51:D8:CC
Certificate issuer:       /CN=58DB7364C67F7BC31B4F7854DCF1B0550C5CFC08
Certificate serial:       1C9FC80CA2F3C5F3969C8CFA0845E99EAE474987
Authority key identifier: 58:DB:73:64:C6:7F:7B:C3:1B:4F:78:54:DC:F1:B0:55:0C:5C:FC:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58DB7364C67F7BC31B4F7854DCF1B0550C5CFC08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6pHVdiTXxFxtTaxbPTr74ArtFrbxUDB9oKQKmBcnb14Q/1/323830343a323333303a3a2f33322d3332203d3e20323634313437.roa
Signing time:             Thu 06 Mar 2025 20:17:01 +0000
ROA not before:           Thu 06 Mar 2025 20:12:01 +0000
ROA not after:            Thu 05 Mar 2026 20:17:01 +0000
asID:                     264147
IP address blocks:        2804:2330::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6pHVdiTXxFxtTaxbPTr74ArtFrbxUDB9oKQKmBcnb14Q/1/58DB7364C67F7BC31B4F7854DCF1B0550C5CFC08.crl
                          rsync://rpki-repo.registro.br/repo/6pHVdiTXxFxtTaxbPTr74ArtFrbxUDB9oKQKmBcnb14Q/1/58DB7364C67F7BC31B4F7854DCF1B0550C5CFC08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58DB7364C67F7BC31B4F7854DCF1B0550C5CFC08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 03:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:9f:c8:0c:a2:f3:c5:f3:96:9c:8c:fa:08:45:e9:9e:ae:47:49:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58DB7364C67F7BC31B4F7854DCF1B0550C5CFC08
        Validity
            Not Before: Mar  6 20:12:01 2025 GMT
            Not After : Mar  5 20:17:01 2026 GMT
        Subject: CN=B23CB2730DB9912F30DE41AF689521D77751D8CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:2c:20:34:c8:ac:5d:d4:00:32:8b:05:a1:b2:
                    9e:dd:e5:9f:ba:c8:6b:3c:c0:42:0c:87:68:a2:74:
                    f6:95:6a:cc:52:eb:85:a1:ac:51:87:80:f4:ef:ef:
                    fb:38:6e:8e:05:cf:96:1a:fd:81:48:6b:ad:71:ab:
                    70:03:89:af:32:62:4e:c3:a9:74:cc:81:6b:ef:5f:
                    ce:b9:d9:26:a7:b8:6b:3a:d6:0f:37:87:f4:0e:04:
                    2b:ff:eb:e7:26:e1:7d:f9:44:94:fb:cd:2f:0d:db:
                    db:9a:ef:b4:51:fd:42:0c:c9:b8:4e:43:07:6d:3f:
                    5d:05:75:aa:18:ae:f1:d1:e9:95:1a:c5:15:27:64:
                    60:e5:5d:d5:52:45:6b:63:3a:5d:5b:d6:ac:bb:42:
                    1f:e0:01:31:ae:2d:b9:df:9e:f7:78:f8:6d:b7:c8:
                    b0:5b:3e:69:71:10:3a:1e:27:f4:4e:79:7d:ef:18:
                    b2:95:d4:79:44:1a:11:a9:0d:b3:5d:00:31:e9:a5:
                    c0:8f:16:0d:76:9d:ba:28:a9:af:5c:66:b0:d7:c0:
                    cc:f9:6b:9d:fd:f9:ab:f2:fd:02:f9:dc:2c:f4:d5:
                    e5:99:44:cf:10:14:f0:ee:db:d2:e0:9e:2b:d2:91:
                    e2:28:e3:6b:84:70:ee:be:86:e6:a4:eb:76:4d:ac:
                    48:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:3C:B2:73:0D:B9:91:2F:30:DE:41:AF:68:95:21:D7:77:51:D8:CC
            X509v3 Authority Key Identifier:
                keyid:58:DB:73:64:C6:7F:7B:C3:1B:4F:78:54:DC:F1:B0:55:0C:5C:FC:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6pHVdiTXxFxtTaxbPTr74ArtFrbxUDB9oKQKmBcnb14Q/1/58DB7364C67F7BC31B4F7854DCF1B0550C5CFC08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58DB7364C67F7BC31B4F7854DCF1B0550C5CFC08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6pHVdiTXxFxtTaxbPTr74ArtFrbxUDB9oKQKmBcnb14Q/1/323830343a323333303a3a2f33322d3332203d3e20323634313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2330::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:ae:3a:0f:52:f8:94:57:5d:f3:1c:63:63:f3:b8:0e:59:41:
         cb:40:03:ea:94:69:c2:89:03:20:dc:af:76:e2:84:9c:ec:e4:
         1c:48:87:08:3f:7a:fb:00:5e:4f:4d:9d:14:64:00:df:40:7a:
         c5:fb:26:62:24:a7:96:43:e8:9d:ac:b7:02:c2:99:62:b7:dd:
         6f:5d:13:51:49:bf:bd:bb:be:b2:3a:21:58:91:ac:09:53:b1:
         e9:54:b4:e5:38:89:23:33:51:fc:23:22:6c:3c:d0:34:51:88:
         15:77:d9:e2:58:55:61:b2:71:bd:37:a2:40:33:7a:27:c6:46:
         1b:fd:16:4f:3b:09:17:8e:c0:14:ce:75:c6:65:e2:05:48:b9:
         97:62:cd:41:39:c3:30:b0:6f:41:38:5a:a8:69:e5:00:88:32:
         1b:08:ed:6b:d2:29:33:0c:b7:7d:7d:d0:95:18:df:5e:8a:87:
         cf:51:1c:e0:4c:07:49:6b:73:d4:07:6d:b1:a2:01:7f:0c:6c:
         90:27:60:22:53:3d:26:0c:36:e7:3c:24:4d:26:55:7e:00:20:
         54:bf:64:22:8e:92:01:8b:cf:f0:1e:63:75:d3:ad:15:02:30:
         6b:27:4a:08:a9:e6:d9:c3:28:bd:2c:b7:27:51:33:a8:b4:41:
         bb:00:12:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:52 2025 by rpki-client on console.sobornost.net