Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/323830343a373634633a3a2f33322d3434203d3e20323731313032.roa
File:                     323830343a373634633a3a2f33322d3434203d3e20323731313032.roa (raw, json)
Hash identifier:          Tr9ik3hFeEvou4zxSH1O9nSMYqDMrtgeM4l/R+KciWA=
Subject key identifier:   13:68:C2:CF:56:39:F2:60:54:CB:0A:4C:64:1F:7E:12:DC:F0:22:FC
Certificate issuer:       /CN=44059D01E655171AE6C2729E21ABB83F4CB956CF
Certificate serial:       4D8CA4AF318B46989D7A2A8F4F8043BEAF0EE376
Authority key identifier: 44:05:9D:01:E6:55:17:1A:E6:C2:72:9E:21:AB:B8:3F:4C:B9:56:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44059D01E655171AE6C2729E21ABB83F4CB956CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/323830343a373634633a3a2f33322d3434203d3e20323731313032.roa
Signing time:             Tue 01 Apr 2025 16:32:55 +0000
ROA not before:           Tue 01 Apr 2025 16:27:55 +0000
ROA not after:            Tue 31 Mar 2026 16:32:55 +0000
asID:                     271102
IP address blocks:        2804:764c::/32 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/44059D01E655171AE6C2729E21ABB83F4CB956CF.crl
                          rsync://rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/44059D01E655171AE6C2729E21ABB83F4CB956CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44059D01E655171AE6C2729E21ABB83F4CB956CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 21:15:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:8c:a4:af:31:8b:46:98:9d:7a:2a:8f:4f:80:43:be:af:0e:e3:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44059D01E655171AE6C2729E21ABB83F4CB956CF
        Validity
            Not Before: Apr  1 16:27:55 2025 GMT
            Not After : Mar 31 16:32:55 2026 GMT
        Subject: CN=1368C2CF5639F26054CB0A4C641F7E12DCF022FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7c:93:c8:80:58:fc:97:ff:b4:2c:f9:4f:68:
                    e2:89:9e:26:3f:ae:ea:6c:4e:be:d4:aa:a9:20:fb:
                    65:a1:c4:aa:e2:27:44:84:63:34:ae:fb:56:c7:7e:
                    5c:86:1f:bc:94:56:d3:39:a0:7f:ee:31:a1:3e:d6:
                    6b:b2:85:fb:8d:ae:27:a0:37:27:55:bd:c1:44:4b:
                    ea:08:47:27:35:f2:fd:e6:54:cc:43:a1:24:f3:f0:
                    0e:2a:96:ab:a2:92:06:78:c2:b2:70:2c:32:0c:76:
                    4b:bc:53:41:61:e4:dd:a8:bb:43:68:9c:31:14:f9:
                    25:04:56:41:c4:88:22:19:37:ad:c7:87:1e:6c:ea:
                    ec:8b:2d:84:c5:93:21:8b:d0:be:0b:ed:ed:ef:55:
                    1c:00:a9:35:3c:da:2e:04:e8:cd:49:f3:05:73:a7:
                    fb:d2:25:a4:05:13:62:a2:7b:97:71:b4:f3:d0:c4:
                    c4:03:55:6f:3a:43:88:df:1b:4f:6d:a8:6f:6e:30:
                    f6:fe:5e:71:e5:3f:bb:b5:67:31:82:e4:cc:5d:f2:
                    2a:00:51:ec:a2:02:4f:c7:f3:96:d4:63:67:28:8e:
                    34:47:5a:ee:fd:62:f9:80:77:06:d4:11:93:ac:6b:
                    06:75:5c:86:3b:1a:0b:a8:f3:78:74:f1:97:8b:67:
                    cd:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:68:C2:CF:56:39:F2:60:54:CB:0A:4C:64:1F:7E:12:DC:F0:22:FC
            X509v3 Authority Key Identifier:
                keyid:44:05:9D:01:E6:55:17:1A:E6:C2:72:9E:21:AB:B8:3F:4C:B9:56:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/44059D01E655171AE6C2729E21ABB83F4CB956CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44059D01E655171AE6C2729E21ABB83F4CB956CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/323830343a373634633a3a2f33322d3434203d3e20323731313032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:764c::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:86:ac:b9:8b:30:6b:1a:47:6c:a2:02:8e:67:bf:d1:a3:a7:
         59:fc:de:9a:84:d6:73:1f:45:2c:92:c6:0f:96:e9:db:b0:49:
         2e:3b:31:85:21:84:09:ac:d3:f0:4f:fa:78:e0:77:22:b0:12:
         0b:c1:2b:cc:bd:a4:15:d0:65:9b:f7:20:d0:4e:e0:d4:5b:f6:
         77:44:f2:cd:6e:41:26:c9:d5:e0:ad:92:03:42:0e:33:c0:3d:
         82:6c:d1:85:2f:93:b5:aa:4d:59:a4:00:10:cf:3b:0a:c4:54:
         2c:79:8d:b4:a8:21:be:20:d9:c3:5e:15:62:52:95:43:82:b5:
         bb:1a:78:91:f0:1d:dd:ec:7e:0b:ea:3f:26:a6:61:2e:dc:5e:
         c9:34:e3:2a:e3:fe:2a:56:37:1e:eb:92:b8:1e:95:c2:f6:e8:
         32:64:0b:ff:f9:1a:55:b0:45:d2:5c:db:57:e6:5d:3e:64:9d:
         ac:d5:2d:f5:bd:5a:57:f7:12:57:58:91:fa:bb:0c:c1:e9:94:
         3b:72:1e:ef:98:35:ea:c6:22:59:39:a7:60:02:27:10:66:88:
         bd:43:34:5d:45:a6:1a:36:54:d3:2a:2e:25:32:03:e4:f4:8d:
         17:dc:be:2a:4f:83:1e:a4:9a:ad:e3:84:70:95:af:cf:60:d1:
         44:96:c5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:36 2025 by rpki-client on console.sobornost.net