Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6xYiBUTjvvupUkk8pBCiJ8R2VWtzTLYu9JyQMbrCh4NM/0/323830343a393231343a3a2f33322d3438203d3e20323734363838.roa
File:                     323830343a393231343a3a2f33322d3438203d3e20323734363838.roa (raw, json)
Hash identifier:          7+wj3ybHTAxcvjKGU5USE+CADDhYGBe6BQmcqWc8xwQ=
Subject key identifier:   08:59:73:CE:FF:16:94:8C:E4:9B:FB:A0:EE:B3:30:73:72:FE:B2:55
Certificate issuer:       /CN=AD595D204511E7BF9500B295B9BA709FBECD3FA3
Certificate serial:       7DAB17E2D37A492BBBA8D2DDAB98E22403C21633
Authority key identifier: AD:59:5D:20:45:11:E7:BF:95:00:B2:95:B9:BA:70:9F:BE:CD:3F:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD595D204511E7BF9500B295B9BA709FBECD3FA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6xYiBUTjvvupUkk8pBCiJ8R2VWtzTLYu9JyQMbrCh4NM/0/323830343a393231343a3a2f33322d3438203d3e20323734363838.roa
Signing time:             Mon 24 Feb 2025 12:56:28 +0000
ROA not before:           Mon 24 Feb 2025 12:51:28 +0000
ROA not after:            Mon 23 Feb 2026 12:56:28 +0000
asID:                     274688
IP address blocks:        2804:9214::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6xYiBUTjvvupUkk8pBCiJ8R2VWtzTLYu9JyQMbrCh4NM/0/AD595D204511E7BF9500B295B9BA709FBECD3FA3.crl
                          rsync://rpki-repo.registro.br/repo/6xYiBUTjvvupUkk8pBCiJ8R2VWtzTLYu9JyQMbrCh4NM/0/AD595D204511E7BF9500B295B9BA709FBECD3FA3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD595D204511E7BF9500B295B9BA709FBECD3FA3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 11:29:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:ab:17:e2:d3:7a:49:2b:bb:a8:d2:dd:ab:98:e2:24:03:c2:16:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD595D204511E7BF9500B295B9BA709FBECD3FA3
        Validity
            Not Before: Feb 24 12:51:28 2025 GMT
            Not After : Feb 23 12:56:28 2026 GMT
        Subject: CN=085973CEFF16948CE49BFBA0EEB3307372FEB255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:50:18:45:35:7b:b6:45:0d:76:08:b3:2f:58:
                    5c:29:60:2a:b6:19:ad:30:c2:cb:3b:51:b6:1d:00:
                    30:c8:ab:c9:d4:ce:84:22:17:dc:d7:e6:1b:79:49:
                    89:7b:9f:9a:4b:63:99:58:da:05:00:24:c9:19:9e:
                    b9:19:a0:bf:0c:01:ab:a3:9d:82:84:8f:87:a8:e4:
                    98:3b:9f:46:02:00:0f:4b:d7:08:d2:b2:1d:77:14:
                    29:8e:49:c3:c3:53:60:e5:0e:26:8a:52:f7:2f:31:
                    9b:76:46:45:cd:7e:01:c0:e8:e9:9a:41:ef:0a:36:
                    8d:65:2c:5e:d1:99:b7:82:bb:6e:10:8f:5d:4e:31:
                    72:58:ad:0d:23:e3:43:9f:e0:94:5c:0a:12:03:bb:
                    2e:ef:6d:77:b3:8c:3c:11:77:34:20:81:ab:f4:3c:
                    e0:ef:e4:91:57:1a:47:52:c8:4a:b1:a9:03:39:76:
                    fb:ba:f2:0d:3a:09:51:a4:f1:04:c2:bd:f3:c0:a0:
                    35:3a:06:a7:7d:4c:a0:1f:e8:bc:5d:7d:80:bf:f0:
                    86:13:da:d3:50:42:f9:01:15:88:e5:0a:a2:f7:03:
                    44:da:b2:5e:2d:06:5b:e3:bf:f0:9f:13:af:f3:05:
                    10:61:d3:b9:a5:e9:55:f6:32:0f:8e:63:a6:a4:c8:
                    e5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:59:73:CE:FF:16:94:8C:E4:9B:FB:A0:EE:B3:30:73:72:FE:B2:55
            X509v3 Authority Key Identifier:
                keyid:AD:59:5D:20:45:11:E7:BF:95:00:B2:95:B9:BA:70:9F:BE:CD:3F:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6xYiBUTjvvupUkk8pBCiJ8R2VWtzTLYu9JyQMbrCh4NM/0/AD595D204511E7BF9500B295B9BA709FBECD3FA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD595D204511E7BF9500B295B9BA709FBECD3FA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xYiBUTjvvupUkk8pBCiJ8R2VWtzTLYu9JyQMbrCh4NM/0/323830343a393231343a3a2f33322d3438203d3e20323734363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9214::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:7a:c1:21:fe:e0:b3:cc:18:59:28:72:b8:05:f1:00:b4:0f:
         cd:3f:d5:30:26:96:a2:41:56:35:69:0f:55:c7:04:d6:d3:91:
         18:be:10:33:21:1f:2f:6e:cd:c7:c2:c7:0b:ef:2e:df:1b:ea:
         0a:9c:77:2c:89:15:e1:46:f2:54:bd:ad:28:ea:31:03:f8:25:
         b3:03:03:c3:0a:23:55:60:52:6f:5c:05:58:82:e7:f9:6d:7d:
         0a:8e:30:2c:62:98:8c:07:95:9a:99:45:f7:f3:ec:e8:c1:eb:
         55:48:dc:e5:1b:49:1b:3f:e1:b6:32:98:8d:2f:c4:00:b6:db:
         16:67:44:88:95:ad:05:d6:b8:50:e7:3a:b7:19:d2:25:1f:55:
         cd:e4:26:6a:24:0a:9d:6e:cc:7b:cb:d2:b3:de:ec:26:89:67:
         a3:1c:29:43:95:55:4e:1e:14:73:4e:77:9f:c4:1f:a6:f7:6f:
         0b:e0:a4:92:49:94:6b:ac:59:75:62:39:a2:74:e3:98:c5:6a:
         a4:76:ac:fd:35:a9:65:da:0b:18:a1:de:58:3b:b9:19:3a:cd:
         d6:7b:2d:1c:c4:b2:28:23:c7:24:cc:66:c8:d0:0b:83:21:fc:
         30:54:2d:b4:03:cf:a8:5d:02:4b:d8:b1:97:5b:07:68:ad:4a:
         87:41:79:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:04:56 2025 by rpki-client on console.sobornost.net