Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a373030333a3a2f34382d3438203d3e20323634343232.roa
File:                     323830343a316535383a373030333a3a2f34382d3438203d3e20323634343232.roa (raw, json)
Hash identifier:          LKsKCxUKVy27MZ7qy6hKiw3ycQJdn9yazDXPhwZw2YI=
Subject key identifier:   71:68:20:A7:D3:39:CA:68:44:5D:DF:94:9E:83:56:89:AC:FE:87:F5
Certificate issuer:       /CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
Certificate serial:       365C99E820B6904E78C62EF01F0A8A648AB55516
Authority key identifier: 7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a373030333a3a2f34382d3438203d3e20323634343232.roa
Signing time:             Wed 16 Apr 2025 15:05:35 +0000
ROA not before:           Wed 16 Apr 2025 15:00:35 +0000
ROA not after:            Wed 15 Apr 2026 15:05:35 +0000
asID:                     264422
IP address blocks:        2804:1e58:7003::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl
                          rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 05:59:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:5c:99:e8:20:b6:90:4e:78:c6:2e:f0:1f:0a:8a:64:8a:b5:55:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
        Validity
            Not Before: Apr 16 15:00:35 2025 GMT
            Not After : Apr 15 15:05:35 2026 GMT
        Subject: CN=716820A7D339CA68445DDF949E835689ACFE87F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d2:ac:13:ec:20:d1:fc:ee:5b:5d:94:e3:5f:
                    25:d2:8d:79:f3:b8:d6:be:4f:52:f1:f8:30:4e:a3:
                    01:e3:38:e1:f7:e9:48:19:95:89:56:16:44:57:13:
                    0a:c7:39:64:a7:88:17:30:07:a4:77:74:7b:14:12:
                    02:26:95:07:28:a9:07:45:58:38:46:c9:f6:ba:82:
                    26:46:40:b8:c8:ca:f4:e3:87:a6:74:ef:a4:40:ba:
                    c1:81:be:72:00:55:2f:fe:1f:97:30:1f:64:48:18:
                    fc:0f:ba:d2:37:40:4a:a5:da:f7:09:ec:4c:47:5b:
                    8d:a8:0d:00:89:e1:68:94:4b:e4:ba:cb:94:df:4b:
                    8d:dc:5e:e2:ff:fd:e6:c4:92:ae:02:4e:01:71:a8:
                    be:4a:8d:8a:d9:70:39:43:57:87:33:f9:7d:58:88:
                    69:18:3c:67:49:25:d5:cd:24:99:79:02:ed:af:e1:
                    32:eb:77:93:87:bd:67:ae:23:80:1d:7d:b1:a1:ba:
                    2c:e7:b0:f4:45:e3:97:d1:6c:1d:f7:b9:77:ad:eb:
                    7b:93:93:a7:d6:4c:88:9d:e1:f8:5a:d4:68:33:e0:
                    5a:51:6d:1f:0c:09:0f:3e:8d:0c:f0:84:39:cd:27:
                    36:5b:11:02:68:c1:ad:94:80:5c:96:5e:89:c4:cb:
                    36:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:68:20:A7:D3:39:CA:68:44:5D:DF:94:9E:83:56:89:AC:FE:87:F5
            X509v3 Authority Key Identifier:
                keyid:7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a373030333a3a2f34382d3438203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:7003::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:fe:2c:79:94:9e:7b:1a:02:49:2a:4c:15:c3:5b:12:a3:65:
         a4:b4:ba:6a:57:a1:12:fc:25:43:0a:c3:b3:9e:93:cc:14:f4:
         2d:db:30:19:20:a5:ff:ca:7e:eb:38:87:8d:30:56:9e:28:60:
         a9:f8:34:a2:d2:29:ee:18:b7:98:5d:b1:a5:da:4b:cf:1f:0d:
         55:ac:2b:48:15:ec:aa:53:f2:3d:44:a6:93:b8:2f:b1:fe:d2:
         47:b6:43:b4:11:42:ef:98:79:a5:60:fc:a2:d6:f3:c4:83:6d:
         db:f7:d7:55:38:be:3c:39:52:40:bb:d6:0c:ba:ed:8d:c1:5f:
         2c:a7:46:d7:a8:14:1f:99:46:8f:e8:9a:cf:87:90:c7:c9:f4:
         7e:f8:5c:5d:42:af:6b:f7:f3:ec:c0:ff:b7:da:55:2f:c9:8b:
         53:bf:9c:c0:c8:0f:99:e6:fa:7b:c7:5d:2d:93:bd:57:2c:4e:
         19:5b:f4:68:0f:00:f3:77:81:9a:92:68:ab:e3:68:01:30:68:
         0b:3b:ce:93:df:8d:19:48:08:08:4a:00:d0:db:15:47:28:61:
         f3:4f:48:18:43:56:92:d3:4b:93:17:f9:84:20:77:b3:02:09:
         dd:61:59:80:6b:1e:be:9d:5e:93:df:a6:ea:bd:fd:0e:ae:54:
         ad:d3:b0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:52 2025 by rpki-client on console.sobornost.net