Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a663030323a3a2f34382d3438203d3e20323634343232.roa
File:                     323830343a316535383a663030323a3a2f34382d3438203d3e20323634343232.roa (raw, json)
Hash identifier:          wWJhSfQsH9ypBZq0twHH7HVIoMiRePLVa3dj2qC1z/4=
Subject key identifier:   FB:53:3B:98:0B:DB:74:EF:F1:7A:B0:D9:E6:13:93:7F:EF:BD:A4:F2
Certificate issuer:       /CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
Certificate serial:       6D248231D0DC7E47DD1F5939D4FD7CAD25D7BB94
Authority key identifier: 7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a663030323a3a2f34382d3438203d3e20323634343232.roa
Signing time:             Wed 16 Apr 2025 15:05:44 +0000
ROA not before:           Wed 16 Apr 2025 15:00:44 +0000
ROA not after:            Wed 15 Apr 2026 15:05:44 +0000
asID:                     264422
IP address blocks:        2804:1e58:f002::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl
                          rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 17:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:24:82:31:d0:dc:7e:47:dd:1f:59:39:d4:fd:7c:ad:25:d7:bb:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
        Validity
            Not Before: Apr 16 15:00:44 2025 GMT
            Not After : Apr 15 15:05:44 2026 GMT
        Subject: CN=FB533B980BDB74EFF17AB0D9E613937FEFBDA4F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a0:9e:ef:80:dd:6a:ec:f2:a6:6b:d2:b4:61:
                    99:1d:74:f7:97:3e:80:2d:c4:fb:0c:5c:2e:45:f2:
                    81:23:c9:bb:06:21:a1:6d:65:b4:08:52:2e:f8:e1:
                    ce:3e:d8:70:7d:82:be:cd:74:85:e4:0f:90:b5:77:
                    a8:f6:3a:1a:82:9c:2c:a6:82:23:cf:ad:11:6d:65:
                    e3:09:73:c0:28:bb:6c:b1:a4:05:43:cb:89:eb:79:
                    ce:3f:ab:b8:97:63:1f:88:01:10:80:bd:e1:fb:12:
                    87:4d:7b:af:18:9d:ed:b8:92:28:7d:f5:6d:09:ed:
                    71:94:c0:48:20:51:3f:17:91:b4:60:fe:b5:85:ce:
                    a1:28:0e:19:45:86:58:1f:3c:75:1f:9a:1e:45:62:
                    eb:0b:ce:35:74:1a:bc:2a:9b:c9:68:2e:26:17:3b:
                    a0:b1:b0:40:57:ea:e6:0d:91:dd:de:95:19:09:f1:
                    3d:70:c1:a6:0a:5f:17:87:31:21:ba:4b:4f:e3:03:
                    9b:dd:5d:0e:64:b0:f1:26:55:1d:e4:b1:10:91:b3:
                    26:dd:e6:48:58:e3:08:6d:6a:48:48:30:60:70:0b:
                    39:2b:a8:8e:bd:a3:60:15:59:99:fc:3e:f1:bf:ee:
                    09:1a:e6:89:8b:a6:d2:af:9b:2b:20:cd:0e:67:ef:
                    db:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:53:3B:98:0B:DB:74:EF:F1:7A:B0:D9:E6:13:93:7F:EF:BD:A4:F2
            X509v3 Authority Key Identifier:
                keyid:7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a663030323a3a2f34382d3438203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:f002::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:83:a3:ef:18:5e:66:9a:01:5a:b6:f2:38:eb:d0:47:f3:3c:
         6d:08:02:4a:00:33:a7:f6:a0:fb:57:15:c5:e0:de:89:69:aa:
         36:1f:92:51:7b:b2:a6:47:26:02:d5:46:82:07:66:4d:48:28:
         8d:7f:3a:e9:67:b1:90:75:ea:98:30:20:0d:64:c8:f3:94:46:
         fd:7f:bb:38:a2:3d:10:7c:97:a5:96:59:15:99:12:47:5b:01:
         1a:cb:fa:79:8e:c9:96:a4:19:ee:80:9e:5b:45:e1:ef:0e:3b:
         d7:b4:f2:9b:89:c3:ab:6e:60:b2:1f:50:66:d5:fa:04:b4:e3:
         71:72:4f:50:49:a1:86:86:a9:12:06:8b:88:ef:63:77:07:da:
         c2:67:72:5a:56:5a:ad:13:51:a2:7e:9f:02:e1:df:e6:2a:70:
         46:f2:34:58:fd:d3:09:f3:1c:7d:33:40:78:82:ff:9d:56:60:
         73:d0:95:8d:94:93:85:d3:d6:92:7b:81:67:f1:ac:5d:d8:ae:
         f7:99:c2:0d:a8:40:98:51:59:90:81:c9:80:b2:2c:ef:2d:5c:
         c0:56:09:14:42:7a:10:63:53:68:21:c3:4b:de:72:86:d9:1c:
         e6:28:c8:12:05:6f:8e:c5:1d:de:65:54:4c:82:c7:9c:f4:a8:
         b4:7d:7d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:24:40 2025 by rpki-client on console.sobornost.net