Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a323a3a2f34382d3438203d3e20323634343232.roa
File:                     323830343a316535383a323a3a2f34382d3438203d3e20323634343232.roa (raw, json)
Hash identifier:          8qNv+Zmw7Icb0hRJfgINpr3TQIMwkEvXOdQLoj3Lxcs=
Subject key identifier:   57:35:2F:0D:CA:07:9B:4A:48:DF:5D:36:DD:C3:E9:7A:FC:9A:6A:53
Certificate issuer:       /CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
Certificate serial:       0347153F1753F32EB23107F0320D80B8918C9CC5
Authority key identifier: 7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a323a3a2f34382d3438203d3e20323634343232.roa
Signing time:             Wed 16 Apr 2025 15:05:39 +0000
ROA not before:           Wed 16 Apr 2025 15:00:39 +0000
ROA not after:            Wed 15 Apr 2026 15:05:39 +0000
asID:                     264422
IP address blocks:        2804:1e58:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl
                          rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 17:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:47:15:3f:17:53:f3:2e:b2:31:07:f0:32:0d:80:b8:91:8c:9c:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
        Validity
            Not Before: Apr 16 15:00:39 2025 GMT
            Not After : Apr 15 15:05:39 2026 GMT
        Subject: CN=57352F0DCA079B4A48DF5D36DDC3E97AFC9A6A53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:44:9f:29:f8:a3:20:d9:cd:f0:7f:ca:22:cd:
                    f7:05:56:d1:97:ed:eb:71:a0:dd:b6:d8:47:87:d8:
                    15:33:c1:7f:aa:b1:3f:59:ba:95:89:c6:4a:bf:37:
                    5b:71:4e:8f:e0:d6:26:49:54:2b:90:47:2f:90:f1:
                    89:14:60:50:a1:1e:67:6b:e2:57:39:c0:4d:79:33:
                    3c:c6:62:81:a4:2a:fb:0c:6b:59:97:4c:bb:49:b1:
                    5c:27:da:12:1b:10:bf:66:ad:94:e0:02:0a:94:0b:
                    16:ee:5b:43:bf:3a:01:e8:7c:7e:62:d0:98:ee:c3:
                    51:5c:5d:f4:c9:cf:c0:d7:ce:24:d6:42:7d:24:94:
                    c9:a8:98:d9:03:0e:60:e2:fd:7c:43:50:a4:cb:54:
                    32:2b:99:10:5b:bc:0e:52:45:3b:3d:98:1b:b3:42:
                    98:58:d0:10:c4:a6:52:3d:66:55:7c:d7:20:5c:60:
                    7f:ed:04:87:ec:e9:bb:16:15:11:85:f7:6c:5b:9e:
                    49:f8:84:f1:5e:32:50:da:5a:1f:ff:2b:28:76:a8:
                    16:d0:f2:6e:80:76:04:d0:c9:96:59:72:31:c3:ed:
                    09:a1:85:c0:57:ea:61:38:42:64:18:97:36:a7:6f:
                    4b:6a:4c:32:1b:ae:20:c6:48:c8:9f:01:4f:88:fb:
                    a4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:35:2F:0D:CA:07:9B:4A:48:DF:5D:36:DD:C3:E9:7A:FC:9A:6A:53
            X509v3 Authority Key Identifier:
                keyid:7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a323a3a2f34382d3438203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:38:cd:e8:73:a2:81:b1:3e:ea:de:0a:86:d9:ee:ff:1e:a6:
         85:a2:1e:37:b1:0b:bf:5e:94:27:6f:35:72:67:9a:80:3f:48:
         c3:a3:c1:be:45:af:67:b4:48:66:74:31:89:79:f6:3d:09:80:
         65:69:85:2f:ec:44:f2:d8:52:90:e0:37:c4:cf:2c:40:c5:9c:
         d1:74:2e:d6:98:dd:09:26:68:8f:19:0d:5b:dc:41:32:7b:2e:
         d0:40:d1:5a:d2:d9:f1:19:2a:9f:06:e9:be:4a:0c:ea:82:5c:
         4c:ab:b9:39:cb:10:88:9b:0d:85:85:1c:f2:40:3b:32:cb:19:
         76:e1:17:a5:4c:f9:99:76:e6:34:4a:dd:55:d7:fd:ae:b4:72:
         fc:24:f8:f0:0e:59:92:b6:7a:31:df:b2:53:ee:7f:64:23:db:
         18:1c:1a:84:58:4c:75:ef:dc:6a:66:9a:bc:91:1e:48:f8:a9:
         07:ba:dd:2b:4c:f6:fc:93:a8:97:ac:e7:e1:e0:fb:3c:1c:98:
         17:72:4b:83:a5:b0:a5:67:97:b3:7f:b8:f5:81:de:56:c0:d9:
         02:ae:a8:f5:21:8c:a3:5b:38:5c:b2:12:43:3d:4f:d4:13:1b:
         c5:e3:b7:8f:6b:0c:f6:f4:88:38:e2:0c:a2:36:89:fb:2c:78:
         86:ec:74:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:24:40 2025 by rpki-client on console.sobornost.net