Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a373030323a3a2f34382d3438203d3e20323634343232.roa
File:                     323830343a316535383a373030323a3a2f34382d3438203d3e20323634343232.roa (raw, json)
Hash identifier:          Wg73yePoW/FawBZ/cwkO1rX3p9Z71plIEjc/BlpsO1A=
Subject key identifier:   40:0B:3F:3A:30:E9:4B:98:8D:2C:58:C6:93:A4:45:A4:49:F1:C1:B7
Certificate issuer:       /CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
Certificate serial:       75686F96BF116F1DD9BD678F782E96DE816B07C0
Authority key identifier: 7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a373030323a3a2f34382d3438203d3e20323634343232.roa
Signing time:             Wed 16 Apr 2025 15:05:42 +0000
ROA not before:           Wed 16 Apr 2025 15:00:42 +0000
ROA not after:            Wed 15 Apr 2026 15:05:42 +0000
asID:                     264422
IP address blocks:        2804:1e58:7002::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl
                          rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 17:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:68:6f:96:bf:11:6f:1d:d9:bd:67:8f:78:2e:96:de:81:6b:07:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
        Validity
            Not Before: Apr 16 15:00:42 2025 GMT
            Not After : Apr 15 15:05:42 2026 GMT
        Subject: CN=400B3F3A30E94B988D2C58C693A445A449F1C1B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3f:95:3f:43:c1:73:52:51:71:2e:31:a3:e5:
                    95:8e:f0:10:c3:dc:a3:a5:81:23:0d:f5:68:d4:64:
                    87:86:38:04:cd:75:db:c9:65:39:66:3d:e3:6d:f8:
                    6a:d2:64:22:17:bc:20:2a:3b:e4:8e:e5:ec:4b:d4:
                    28:73:d0:bf:58:1d:c9:68:7d:e1:eb:ac:1e:15:5f:
                    50:3f:73:a9:d2:61:38:e1:d7:a4:83:67:ea:68:98:
                    8e:d3:49:00:bd:cc:72:b2:12:81:b1:a3:de:26:57:
                    30:03:7f:24:15:1d:7a:e9:96:0a:d9:30:2f:5c:2b:
                    ec:8f:3d:7a:7b:e3:ea:45:33:30:b0:60:56:3e:44:
                    74:4e:ef:a7:b9:77:95:66:50:04:da:c2:37:94:f7:
                    9f:27:4d:15:74:7f:0e:02:fe:99:99:8d:46:06:b5:
                    64:9e:31:8e:4f:31:e4:7a:3d:a2:54:ee:b1:2a:67:
                    4e:13:43:0e:fe:73:05:23:6a:b7:af:63:b8:d5:eb:
                    1d:35:cf:2e:8f:5e:a0:c2:32:ce:04:19:5a:5f:ed:
                    5f:d5:14:c9:3e:91:85:03:f1:9a:22:a4:5c:fe:05:
                    69:69:cb:3e:31:b7:6c:d6:b6:5e:0a:33:aa:f1:82:
                    08:29:88:89:23:22:e8:c6:3d:77:40:5b:86:29:a4:
                    3d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:0B:3F:3A:30:E9:4B:98:8D:2C:58:C6:93:A4:45:A4:49:F1:C1:B7
            X509v3 Authority Key Identifier:
                keyid:7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a373030323a3a2f34382d3438203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:7002::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:94:45:24:da:8e:5d:8f:bb:67:b3:e0:b0:1c:d4:da:cc:98:
         81:1b:27:42:c1:47:4e:35:a6:77:25:b1:9b:6a:f9:5a:23:7b:
         b1:0d:c7:99:10:ce:ff:f7:3f:fb:06:83:b0:21:51:35:51:65:
         4c:91:ce:3c:0c:9a:2c:d7:79:fe:84:ca:d5:81:09:61:f1:6d:
         88:09:f2:28:69:10:42:6d:1a:46:1d:de:fb:ac:90:08:dd:27:
         75:c9:46:cb:02:6a:09:ad:2b:71:bf:f6:fc:91:ec:7d:73:de:
         65:6d:27:c3:dd:2b:f7:bb:86:d7:b7:92:db:56:50:27:19:de:
         fa:74:32:64:d1:d7:aa:e7:4c:ca:69:d8:73:b8:f5:15:d7:49:
         4b:17:70:7c:df:ea:bc:1b:74:41:9a:7c:46:6a:68:5a:89:b7:
         15:3e:ae:80:f5:bb:51:58:56:29:07:aa:4b:e1:ce:26:b2:58:
         2e:48:a9:b9:09:15:a9:ad:06:33:ee:3a:bf:ee:c9:99:38:97:
         0a:b1:47:aa:15:95:06:30:05:72:b9:df:55:9e:e9:da:f8:42:
         77:84:8f:db:9f:75:e8:51:1b:99:91:eb:e6:90:87:63:4e:5f:
         11:83:a2:ad:00:e8:75:9a:f0:d4:7f:40:6b:e2:40:9a:b8:4b:
         66:ce:7b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:24:40 2025 by rpki-client on console.sobornost.net