Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a333a3a2f34382d3438203d3e20323634343232.roa
File:                     323830343a316535383a333a3a2f34382d3438203d3e20323634343232.roa (raw, json)
Hash identifier:          po8O26YHcmMAOQIQir7s7fjB80zjRihiJ8ZaOYNXoas=
Subject key identifier:   BB:71:46:35:7A:6F:F3:4F:16:B5:05:7F:8A:3C:E3:3B:49:88:E7:23
Certificate issuer:       /CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
Certificate serial:       14C831CC9520EE3D5FA957CA3003243FF4E207CF
Authority key identifier: 7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a333a3a2f34382d3438203d3e20323634343232.roa
Signing time:             Wed 16 Apr 2025 15:05:36 +0000
ROA not before:           Wed 16 Apr 2025 15:00:36 +0000
ROA not after:            Wed 15 Apr 2026 15:05:36 +0000
asID:                     264422
IP address blocks:        2804:1e58:3::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl
                          rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 17:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:c8:31:cc:95:20:ee:3d:5f:a9:57:ca:30:03:24:3f:f4:e2:07:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
        Validity
            Not Before: Apr 16 15:00:36 2025 GMT
            Not After : Apr 15 15:05:36 2026 GMT
        Subject: CN=BB7146357A6FF34F16B5057F8A3CE33B4988E723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0c:c9:5f:3d:3c:6b:c4:75:d5:02:75:83:8d:
                    cf:6a:74:b8:57:12:c1:5b:48:ff:88:45:f6:9c:d0:
                    85:b9:1b:6a:b2:59:f5:82:2b:ba:a5:3d:95:34:cd:
                    f9:62:53:f5:65:2f:63:f6:f8:7c:23:98:99:87:78:
                    9b:dc:d1:b5:0a:0d:04:d5:40:fa:b3:41:d4:31:fb:
                    83:e5:ae:c1:8b:da:84:fc:63:b1:c6:f2:41:a1:e9:
                    34:01:da:db:6e:10:63:d2:d6:63:a9:14:f8:33:9a:
                    c8:e7:b5:e2:83:a5:a5:a1:7b:7c:81:32:6b:aa:85:
                    13:de:fb:ed:e4:c1:ca:c6:c8:0a:e2:1f:f4:59:ab:
                    c5:2e:3e:06:e4:01:8f:eb:43:74:7d:ca:43:cd:7e:
                    f3:5a:ba:eb:92:06:c8:71:b6:b7:ec:ec:ed:80:60:
                    ad:c2:8f:48:9f:f7:75:e5:38:e4:14:68:19:1b:9e:
                    67:14:0c:e9:dd:25:ed:30:61:76:fe:42:96:3a:fb:
                    0d:79:60:ca:f0:ed:8b:a6:c2:2d:77:f2:ed:3d:34:
                    0e:7d:4d:57:b9:d1:e4:7d:53:2f:a3:cc:65:09:b9:
                    db:e4:6f:7b:36:eb:1a:ae:3f:aa:ac:e0:d4:8b:5b:
                    09:d6:0c:3c:9a:80:11:c1:39:f1:17:f7:c3:eb:96:
                    14:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:71:46:35:7A:6F:F3:4F:16:B5:05:7F:8A:3C:E3:3B:49:88:E7:23
            X509v3 Authority Key Identifier:
                keyid:7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a333a3a2f34382d3438203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:07:8f:ac:aa:c9:88:1a:bf:df:a3:84:48:d4:06:3b:93:6e:
         a9:7e:26:3e:fe:62:76:78:7b:25:3f:10:89:bb:ba:f5:1d:99:
         b3:7c:84:ea:41:0c:83:35:8b:09:11:d9:e0:8e:d7:98:b0:8d:
         23:25:2f:cb:d1:b7:d5:7e:85:9d:a1:04:74:e9:1f:c5:60:ea:
         4d:5f:50:68:00:ef:92:67:34:aa:fc:bd:98:45:27:0a:6f:ee:
         2b:ac:5f:8b:6e:42:06:97:75:d6:c9:91:5f:de:00:bc:5a:15:
         55:2b:c8:c1:f0:c1:0a:b4:64:5c:04:78:91:8a:74:b5:0e:fe:
         a1:e3:a0:e4:77:f7:dd:9b:f7:33:e4:47:e8:23:48:5f:82:4a:
         61:84:17:71:60:79:06:c9:47:ad:c9:bd:bb:34:04:7e:96:d4:
         3c:96:8c:95:74:de:34:11:cf:f4:f6:41:aa:df:ae:96:10:62:
         25:f8:d2:22:09:dd:af:65:51:7d:fb:36:34:c9:02:64:50:51:
         90:dc:f2:70:42:17:db:1b:93:1e:31:17:88:4b:c0:3c:af:7c:
         a1:1e:92:99:09:42:b5:f7:f4:83:c6:e0:f6:75:22:83:94:d7:
         cb:e1:17:2f:58:e2:0f:eb:96:13:bd:95:f6:9e:5d:ee:42:b2:
         a1:2f:d3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:24:40 2025 by rpki-client on console.sobornost.net