Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/0/323830343a323737343a3a2f33322d3438203d3e20323633393032.roa
File:                     323830343a323737343a3a2f33322d3438203d3e20323633393032.roa (raw, json)
Hash identifier:          HAmkmPkwVS3gW/jKEIl5peYtqMbM6FXhm/r2gvBF27Y=
Subject key identifier:   80:16:61:80:91:3D:DE:FE:FA:91:95:0F:6A:58:B0:39:9E:CC:1A:EA
Certificate issuer:       /CN=6C01E915198D0CB1928705B73EF78F8E17FEF297
Certificate serial:       5174E39902C2223837CC786690EA38C8D31A2290
Authority key identifier: 6C:01:E9:15:19:8D:0C:B1:92:87:05:B7:3E:F7:8F:8E:17:FE:F2:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C01E915198D0CB1928705B73EF78F8E17FEF297.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/0/323830343a323737343a3a2f33322d3438203d3e20323633393032.roa
Signing time:             Wed 18 Dec 2024 18:09:31 +0000
ROA not before:           Wed 18 Dec 2024 18:04:31 +0000
ROA not after:            Wed 17 Dec 2025 18:09:31 +0000
asID:                     263902
IP address blocks:        2804:2774::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/0/6C01E915198D0CB1928705B73EF78F8E17FEF297.crl
                          rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/0/6C01E915198D0CB1928705B73EF78F8E17FEF297.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C01E915198D0CB1928705B73EF78F8E17FEF297.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 22:37:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:74:e3:99:02:c2:22:38:37:cc:78:66:90:ea:38:c8:d3:1a:22:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C01E915198D0CB1928705B73EF78F8E17FEF297
        Validity
            Not Before: Dec 18 18:04:31 2024 GMT
            Not After : Dec 17 18:09:31 2025 GMT
        Subject: CN=80166180913DDEFEFA91950F6A58B0399ECC1AEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fc:12:18:7e:0d:31:b9:c5:7e:00:b6:85:df:
                    75:67:65:e5:78:91:15:c4:81:7a:95:1c:23:34:d8:
                    7b:83:79:5d:00:fd:81:2a:a5:2e:29:e5:52:03:96:
                    d6:ab:0e:b9:c6:fb:76:f2:02:fd:0a:25:60:59:7b:
                    99:83:83:54:9d:ab:af:b5:f3:d8:96:71:9f:29:27:
                    c4:3f:7f:9b:b4:dd:5c:19:f3:89:0d:d0:87:15:a5:
                    26:64:0b:7c:0a:26:65:4d:37:aa:62:ac:d4:c8:3a:
                    2e:f6:ac:3c:32:b5:76:b6:27:d4:b9:55:88:fc:a5:
                    e0:80:87:29:ba:0d:e2:ad:0e:62:90:26:50:19:59:
                    15:b3:93:30:74:e6:39:a1:e0:8c:cc:2b:81:fc:43:
                    62:1a:e8:6d:dc:25:d5:0c:31:e2:db:e5:31:8e:86:
                    cc:43:67:cb:61:2c:8c:46:0e:9b:38:14:0f:f1:bd:
                    6f:12:1a:1f:76:3b:d4:46:87:fc:dd:e2:fe:f6:f5:
                    5c:f1:2c:dc:c4:23:85:df:ac:4b:74:7b:ef:67:83:
                    0c:46:26:5c:1e:40:de:2d:86:d8:95:53:a1:0e:41:
                    af:96:19:63:5f:20:31:31:95:77:74:c9:00:c9:cb:
                    73:7f:ae:e8:4e:25:6d:c0:26:54:ab:f7:a3:05:43:
                    0e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:16:61:80:91:3D:DE:FE:FA:91:95:0F:6A:58:B0:39:9E:CC:1A:EA
            X509v3 Authority Key Identifier:
                keyid:6C:01:E9:15:19:8D:0C:B1:92:87:05:B7:3E:F7:8F:8E:17:FE:F2:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/0/6C01E915198D0CB1928705B73EF78F8E17FEF297.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C01E915198D0CB1928705B73EF78F8E17FEF297.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/0/323830343a323737343a3a2f33322d3438203d3e20323633393032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2774::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:3b:a7:67:7c:f6:e9:de:18:5a:e9:39:4d:ab:5f:94:65:8b:
         d6:c4:53:b8:99:6d:15:a7:9d:ca:25:32:74:2b:0c:57:29:96:
         91:c5:c6:80:93:ee:b4:81:c8:8c:fa:87:18:bf:08:9f:66:0d:
         2b:fe:c7:48:c4:22:97:e7:d6:4a:c0:94:c7:03:23:b6:17:4e:
         86:a7:fd:a2:1c:91:aa:6b:f5:35:89:a7:e9:92:1f:90:83:be:
         5e:1a:fd:9f:e8:a9:da:c5:b9:05:a8:4e:43:28:6c:7f:a7:3b:
         77:7b:23:0b:3a:f4:2d:4e:d8:37:00:1e:d5:c7:d3:ec:cb:eb:
         8a:b3:56:6d:28:fc:5e:79:f8:08:27:0d:fe:0b:a2:c7:2f:5f:
         ef:28:6b:1e:e0:0f:48:04:c4:78:86:24:1d:b7:6a:8e:2a:8e:
         5a:20:99:4a:a2:26:5b:c6:eb:10:bb:d9:62:6c:31:76:58:d6:
         76:71:3f:76:26:b8:28:29:bb:15:f9:2d:44:d5:d4:8e:c9:1c:
         24:0b:64:7d:96:60:fc:01:86:a4:27:da:16:df:a8:1c:0c:1d:
         00:93:ba:32:6b:16:1c:b7:e9:cb:f5:a6:ee:34:81:f5:0a:6e:
         d1:64:10:41:2e:6a:31:3a:07:5a:ff:7a:e8:3a:3a:fc:7f:d0:
         ab:bd:8c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:36 2025 by rpki-client on console.sobornost.net