Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/1/323830343a6132343a3a2f33322d3332203d3e20323633303235.roa
File:                     323830343a6132343a3a2f33322d3332203d3e20323633303235.roa (raw, json)
Hash identifier:          SMDS646DA4AH7IGcCg1SO0iUNmvAbOuIw5iLD16xNQU=
Subject key identifier:   94:DF:B4:A8:B2:59:06:04:BF:99:31:35:E2:28:EE:A1:33:A7:10:97
Certificate issuer:       /CN=EAB467368870DA703732D42A059330F5218787CD
Certificate serial:       454B5A3D9989D7B45DCEDC67BED391223BD2EA4D
Authority key identifier: EA:B4:67:36:88:70:DA:70:37:32:D4:2A:05:93:30:F5:21:87:87:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAB467368870DA703732D42A059330F5218787CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/1/323830343a6132343a3a2f33322d3332203d3e20323633303235.roa
Signing time:             Thu 06 Mar 2025 01:24:43 +0000
ROA not before:           Thu 06 Mar 2025 01:19:43 +0000
ROA not after:            Thu 05 Mar 2026 01:24:43 +0000
asID:                     263025
IP address blocks:        2804:a24::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/1/EAB467368870DA703732D42A059330F5218787CD.crl
                          rsync://rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/1/EAB467368870DA703732D42A059330F5218787CD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAB467368870DA703732D42A059330F5218787CD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:4b:5a:3d:99:89:d7:b4:5d:ce:dc:67:be:d3:91:22:3b:d2:ea:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAB467368870DA703732D42A059330F5218787CD
        Validity
            Not Before: Mar  6 01:19:43 2025 GMT
            Not After : Mar  5 01:24:43 2026 GMT
        Subject: CN=94DFB4A8B2590604BF993135E228EEA133A71097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d4:5f:61:78:c2:70:78:4d:9e:14:9e:d0:d8:
                    e5:10:ed:be:48:fe:fe:fe:50:8b:dc:3f:ed:c5:52:
                    c8:16:ea:2e:3a:77:31:82:de:0e:18:c1:01:95:c3:
                    e3:dc:54:e7:7a:73:af:79:d9:a7:ab:a6:cd:8f:a0:
                    df:2e:09:b4:37:cf:56:4c:db:e4:52:cc:d6:83:59:
                    f5:04:09:71:ed:87:f2:c3:8e:a9:e7:61:de:0b:c7:
                    37:bc:4b:46:fb:35:27:31:0f:f7:17:4c:92:75:fe:
                    73:cd:72:af:2f:db:17:1f:85:ba:40:9a:2e:df:12:
                    06:36:3e:c7:f7:da:b4:c5:45:a0:99:b8:fc:93:a4:
                    8b:62:02:b5:c9:42:34:d9:36:da:87:ed:1c:76:8a:
                    56:55:79:28:c0:01:65:84:32:de:7e:28:6a:be:72:
                    17:cc:86:2c:50:4b:e1:2a:1e:e0:a5:fa:c4:d6:02:
                    91:a1:01:fd:1d:73:d3:47:a2:bb:ae:3a:be:57:04:
                    2f:5c:b9:f1:b8:2c:d6:e3:4b:1d:3d:d3:8e:1a:7d:
                    52:1a:4e:86:fa:1f:84:3f:d4:78:9b:8f:6b:4d:f5:
                    ec:95:45:5d:36:31:44:ce:eb:42:c6:48:7e:41:15:
                    f6:c3:c5:1e:8a:67:e7:1d:c9:ca:53:81:bb:be:f3:
                    dc:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:DF:B4:A8:B2:59:06:04:BF:99:31:35:E2:28:EE:A1:33:A7:10:97
            X509v3 Authority Key Identifier:
                keyid:EA:B4:67:36:88:70:DA:70:37:32:D4:2A:05:93:30:F5:21:87:87:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/1/EAB467368870DA703732D42A059330F5218787CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAB467368870DA703732D42A059330F5218787CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/1/323830343a6132343a3a2f33322d3332203d3e20323633303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a24::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:a0:d3:59:45:a8:7e:10:c9:cc:02:96:87:d4:00:ad:3f:f2:
         30:a4:27:f4:00:c7:8a:7f:01:a2:5e:09:21:b4:2e:91:97:de:
         42:52:59:93:31:d0:62:e2:64:ce:96:16:5b:e1:3a:72:ac:ed:
         b2:e6:bd:9f:c5:6c:ce:6f:74:b5:f6:74:ea:c9:2e:36:2c:8f:
         ba:5c:79:48:d2:18:69:a4:57:bb:46:ed:42:35:2f:7b:d2:ca:
         2b:c3:eb:40:97:b9:fb:ed:7a:53:13:15:a3:17:c0:78:e1:51:
         1e:6a:a8:01:f4:53:a9:2a:54:0b:d9:24:4f:c7:51:e3:de:ea:
         d8:fc:09:71:61:c0:a5:8f:20:ae:d4:0f:d5:03:bf:be:1c:d1:
         7b:bb:7a:16:83:75:b8:b8:8c:ca:22:2b:83:df:5b:06:4b:3b:
         21:aa:36:03:b9:4d:18:c8:ff:0b:8e:ac:13:34:68:4b:a6:2b:
         76:62:bc:1f:4c:f0:5f:6a:c9:88:ad:19:b3:d5:94:97:f5:5e:
         e2:6b:0a:6f:8a:43:4e:ec:8a:68:80:d3:3f:ec:c8:39:8c:bd:
         0a:6c:85:1c:26:d4:3c:ed:7f:10:f6:90:44:f2:83:a2:11:24:
         82:18:24:a0:8f:2b:3f:9c:c2:97:ab:3f:b5:f2:09:ff:ec:dd:
         bc:65:08:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:32 2025 by rpki-client on console.sobornost.net