Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a3a2f34362d3436203d3e20323634343232.roa
File:                     323830343a316535383a3a2f34362d3436203d3e20323634343232.roa (raw, json)
Hash identifier:          WrxgZ7qlzsgoaA63fPgzCHzhuiseGzHwWk6n4oi1AEA=
Subject key identifier:   1E:FA:AF:CF:2C:43:8E:3C:F0:DA:4B:9D:80:49:DE:70:BD:CF:5B:BB
Certificate issuer:       /CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
Certificate serial:       1DD7802FA2F88B82A864669D7AD857F02080F651
Authority key identifier: 7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a3a2f34362d3436203d3e20323634343232.roa
Signing time:             Wed 16 Apr 2025 15:05:35 +0000
ROA not before:           Wed 16 Apr 2025 15:00:35 +0000
ROA not after:            Wed 15 Apr 2026 15:05:35 +0000
asID:                     264422
IP address blocks:        2804:1e58::/46 maxlen: 46

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl
                          rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 17:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:d7:80:2f:a2:f8:8b:82:a8:64:66:9d:7a:d8:57:f0:20:80:f6:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
        Validity
            Not Before: Apr 16 15:00:35 2025 GMT
            Not After : Apr 15 15:05:35 2026 GMT
        Subject: CN=1EFAAFCF2C438E3CF0DA4B9D8049DE70BDCF5BBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:01:89:1d:b6:c5:52:83:98:5c:8b:aa:b2:5c:
                    9a:ec:11:01:66:90:1c:ad:56:ad:99:81:51:ef:cb:
                    1f:80:bc:0e:c9:1c:91:63:c7:6b:52:00:39:e0:e7:
                    3d:99:22:19:4b:9e:4d:79:11:d4:32:ba:85:c3:ce:
                    5d:f7:04:20:72:9f:9b:01:56:82:12:0c:d1:6a:58:
                    ae:00:f6:49:c3:3e:3e:41:7a:06:96:c2:63:5b:0b:
                    9d:06:ee:12:aa:97:96:a0:19:b9:c7:3e:cf:9d:ad:
                    05:f5:c2:20:eb:75:7d:ab:a0:15:d9:47:2a:12:9e:
                    01:a6:dd:28:42:a4:ad:4d:a4:aa:44:ab:f4:25:41:
                    ed:5e:9c:5b:f2:24:90:a7:4d:53:af:2a:06:11:b0:
                    be:5c:ea:fb:3f:44:01:6f:ec:5b:c8:e3:63:67:3b:
                    be:fe:33:ff:6e:27:ae:00:d1:18:c1:14:33:bd:eb:
                    b8:ad:9e:4f:b5:3e:33:99:56:7a:d6:4d:e7:60:82:
                    9f:3d:30:99:cd:39:65:f4:f7:8f:74:42:cb:9f:75:
                    12:8d:f0:07:b0:05:19:e5:82:51:12:10:84:4a:7d:
                    b4:aa:f3:d0:e3:66:61:6d:bc:b7:78:dd:16:95:dc:
                    2a:34:fe:e3:d7:dd:d0:2c:5e:f3:ad:10:48:45:09:
                    3a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:FA:AF:CF:2C:43:8E:3C:F0:DA:4B:9D:80:49:DE:70:BD:CF:5B:BB
            X509v3 Authority Key Identifier:
                keyid:7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a3a2f34362d3436203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58::/46

    Signature Algorithm: sha256WithRSAEncryption
         29:c2:26:35:91:63:7d:d7:7d:48:09:78:21:b2:a6:df:9a:87:
         39:7c:0a:23:71:ee:a9:e2:d8:11:8b:73:2a:92:00:af:a5:5b:
         e2:ba:64:e9:d8:d4:17:e1:01:22:39:a4:64:1d:f6:d0:65:33:
         26:9e:b1:ec:ab:cf:bc:f7:8a:41:bb:24:08:9e:6d:ad:fc:03:
         17:b8:52:8f:81:52:d6:b1:01:ec:8f:96:17:93:a8:66:a0:d8:
         77:bb:76:1a:64:a8:47:fe:ed:e4:7b:4c:ac:56:11:84:44:96:
         76:7a:a7:f0:15:db:19:52:8a:67:cc:95:12:37:79:21:02:78:
         03:ba:36:0c:ec:27:69:7a:4e:e2:fe:12:09:48:4e:07:6e:e9:
         c2:6d:9c:0f:c4:5b:14:60:20:62:d7:cc:80:6a:f6:3f:b3:9f:
         c8:74:4c:f9:23:26:99:8c:05:30:b4:13:b3:42:19:ee:98:73:
         e9:03:23:21:bd:21:1c:7e:af:1c:ec:ce:03:9a:22:57:e0:40:
         22:71:10:c8:9c:a4:31:1c:fa:31:09:5d:45:2e:8e:85:28:01:
         e4:14:14:96:a2:e4:4b:1d:f5:ff:86:87:f1:a7:06:f7:8a:13:
         03:44:44:25:b6:98:dc:87:08:3a:57:70:d4:bc:a6:9d:e2:1f:
         8b:5e:90:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:24:40 2025 by rpki-client on console.sobornost.net