Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a313030303a3a2f33362d3336203d3e20323634343232.roa
File:                     323830343a316535383a313030303a3a2f33362d3336203d3e20323634343232.roa (raw, json)
Hash identifier:          SIB3fdAoP1gCPrDsbl7yjEYf8yAC4yuk8AEUjkEA7e4=
Subject key identifier:   E1:AD:65:06:C1:9D:80:42:15:E0:91:F6:A3:53:B7:CC:CF:37:21:D1
Certificate issuer:       /CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
Certificate serial:       5426483C63758171937659C809D8476245B7E319
Authority key identifier: 7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a313030303a3a2f33362d3336203d3e20323634343232.roa
Signing time:             Wed 16 Apr 2025 15:05:42 +0000
ROA not before:           Wed 16 Apr 2025 15:00:42 +0000
ROA not after:            Wed 15 Apr 2026 15:05:42 +0000
asID:                     264422
IP address blocks:        2804:1e58:1000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl
                          rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 17:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:26:48:3c:63:75:81:71:93:76:59:c8:09:d8:47:62:45:b7:e3:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
        Validity
            Not Before: Apr 16 15:00:42 2025 GMT
            Not After : Apr 15 15:05:42 2026 GMT
        Subject: CN=E1AD6506C19D804215E091F6A353B7CCCF3721D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:74:f7:a3:89:4f:09:c6:3e:ef:c5:15:30:21:
                    f3:24:4a:fe:ae:6d:bc:2d:0c:66:0f:f3:99:40:af:
                    b1:e6:92:39:8e:1c:87:4f:94:87:3a:68:95:d9:d9:
                    a6:16:3d:6c:60:9d:58:33:2a:f1:9f:49:a7:a0:41:
                    0f:09:fc:e2:1e:c7:8d:cb:e1:0d:a2:5a:f6:e8:d8:
                    8f:f7:76:30:63:5e:f8:ff:ca:e2:41:f2:ed:0f:4c:
                    b8:c6:26:4f:3b:b6:90:97:80:2e:e6:98:b4:64:94:
                    ac:dd:e4:c5:ed:22:90:6d:30:4d:1e:13:74:48:20:
                    93:7c:a7:ab:00:76:e1:ff:7b:48:04:e2:0f:94:d9:
                    55:d7:ae:4b:d8:63:b6:ef:3f:d3:be:20:2e:d4:0d:
                    8d:f8:4d:aa:81:66:c6:9e:d6:e3:70:93:e6:d7:14:
                    9a:f2:d9:cd:18:4b:f2:cf:a6:9a:bf:e2:e1:a9:d8:
                    ed:0b:86:90:eb:5b:58:7c:97:48:94:e4:ca:50:11:
                    27:b7:55:fc:a5:ec:22:15:36:f3:01:e2:98:7f:b9:
                    2b:d3:cf:2a:96:2c:ca:ec:60:7a:c7:f5:13:92:12:
                    0d:b4:52:8a:e9:07:c3:80:a7:34:13:09:d8:f0:92:
                    97:25:73:22:11:ed:b0:fe:18:b6:76:98:21:7c:20:
                    13:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:AD:65:06:C1:9D:80:42:15:E0:91:F6:A3:53:B7:CC:CF:37:21:D1
            X509v3 Authority Key Identifier:
                keyid:7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a313030303a3a2f33362d3336203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7f:4f:bb:57:fe:9b:a8:0d:2a:ce:4c:b3:24:f4:46:bd:37:14:
         a2:84:24:de:78:20:ef:88:77:0c:12:66:31:a3:71:ab:03:8e:
         da:88:06:59:e6:74:42:11:1e:b9:f9:60:ce:1f:b4:6a:62:c5:
         4e:35:ef:95:c1:67:10:57:f7:22:eb:0a:2a:77:90:74:96:c3:
         65:5c:a5:88:91:d0:ce:ac:01:4d:00:21:e5:1e:09:43:65:e4:
         c6:6b:cf:a5:18:12:e6:17:ad:3b:39:af:7e:7b:e2:e6:eb:d8:
         cf:aa:c4:6b:86:ea:31:37:ce:97:1d:69:e1:e1:2c:e8:53:9c:
         14:6f:c8:78:c9:91:dc:66:b3:75:ed:94:06:04:fc:91:4a:c3:
         9d:d8:01:54:ad:15:75:95:16:00:9a:17:c0:3f:68:9a:84:fc:
         05:56:a6:41:f6:db:ef:e3:3b:44:e4:44:5c:f2:3e:73:fb:c6:
         70:2e:6c:2c:ad:58:0a:04:ff:ca:0c:6c:24:5f:93:27:5c:af:
         59:50:1f:de:cc:8e:59:4f:33:5d:b2:1a:4d:ac:0d:90:47:47:
         0c:11:ac:e0:7e:ea:02:e4:12:bd:c3:41:c0:f8:fc:53:62:ff:
         98:3e:36:dd:2d:e8:7f:fc:e9:0f:fb:c5:9e:a8:87:68:b5:6a:
         19:de:26:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:24:40 2025 by rpki-client on console.sobornost.net