Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/323830343a343666633a363630303a3a2f34302d3430203d3e20323637303234.roa
File:                     323830343a343666633a363630303a3a2f34302d3430203d3e20323637303234.roa (raw, json)
Hash identifier:          GNGQttzmJcudreL/5tnOmzIRIQeCdkDFJkbGS5ZFna0=
Subject key identifier:   27:FE:68:40:AA:F4:E3:48:46:CE:D6:42:F4:9A:89:BF:4A:52:BF:EC
Certificate issuer:       /CN=DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C
Certificate serial:       14A6D13481C23985C04C0636E19E81003C65179A
Authority key identifier: DC:0C:16:EA:3A:3B:82:65:01:D0:2A:C2:E6:2E:F9:A1:CD:97:12:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/323830343a343666633a363630303a3a2f34302d3430203d3e20323637303234.roa
Signing time:             Thu 20 Mar 2025 13:56:36 +0000
ROA not before:           Thu 20 Mar 2025 13:51:36 +0000
ROA not after:            Thu 19 Mar 2026 13:56:36 +0000
asID:                     267024
IP address blocks:        2804:46fc:6600::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.crl
                          rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 14:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:a6:d1:34:81:c2:39:85:c0:4c:06:36:e1:9e:81:00:3c:65:17:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C
        Validity
            Not Before: Mar 20 13:51:36 2025 GMT
            Not After : Mar 19 13:56:36 2026 GMT
        Subject: CN=27FE6840AAF4E34846CED642F49A89BF4A52BFEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:67:08:4b:5b:47:96:12:36:6d:f2:7f:a6:03:
                    50:c1:c6:df:75:e9:fc:39:dc:31:2b:4e:1d:d0:6c:
                    1d:9a:d7:dc:7a:c4:26:ac:68:9a:6a:2a:2b:fc:64:
                    5a:15:fd:be:65:a2:d5:5f:ed:7d:be:36:dd:79:fa:
                    5b:61:3a:49:b8:3f:f6:2d:10:1e:e0:8f:3d:63:64:
                    2f:5d:01:30:bd:b6:7b:15:19:ec:2d:ab:38:1a:0e:
                    c2:23:94:54:f2:71:80:16:83:66:b9:40:7d:76:81:
                    b3:32:af:7d:19:ef:70:19:ce:4f:fe:e5:90:64:fe:
                    b0:21:0b:2c:ca:1f:3c:cb:aa:6a:b4:6e:b2:12:dd:
                    44:35:0c:11:4f:cc:de:5b:6a:12:61:7c:a0:cb:14:
                    a7:7e:c7:2c:0e:83:d6:6c:23:25:e7:64:38:2a:48:
                    00:50:8a:2d:bf:63:96:b6:41:33:d4:71:1a:f7:71:
                    82:cd:41:94:5e:3d:37:fe:a5:f4:fa:c5:5a:d5:18:
                    13:a2:f3:74:10:1f:d2:66:98:bb:4d:bb:92:c2:14:
                    9e:51:71:17:04:26:72:2c:2d:be:78:ad:9f:1b:7d:
                    15:ca:c7:f0:01:a5:41:5c:cd:80:d4:67:24:48:bb:
                    23:91:f4:ef:2f:26:b5:9c:10:b4:6c:18:5b:44:60:
                    c0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:FE:68:40:AA:F4:E3:48:46:CE:D6:42:F4:9A:89:BF:4A:52:BF:EC
            X509v3 Authority Key Identifier:
                keyid:DC:0C:16:EA:3A:3B:82:65:01:D0:2A:C2:E6:2E:F9:A1:CD:97:12:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/323830343a343666633a363630303a3a2f34302d3430203d3e20323637303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:46fc:6600::/40

    Signature Algorithm: sha256WithRSAEncryption
         1b:9a:c1:90:87:1c:21:d8:ac:64:a8:ec:3a:f3:a8:3b:d0:fe:
         2e:36:9d:93:61:c2:21:18:f3:dd:89:66:5a:5e:26:92:10:cc:
         44:b4:57:c0:26:a6:3d:74:ea:92:51:fe:52:5d:45:52:e6:a2:
         af:5c:f4:88:7a:3e:f0:df:8c:81:32:42:0a:74:ee:94:1c:30:
         2b:3a:a4:60:33:7f:c3:ce:a3:16:ab:d2:26:4f:fd:81:58:90:
         b1:fe:f9:39:f3:fb:60:43:a7:d0:1c:73:45:2e:ad:64:f4:3f:
         8e:96:45:1b:b4:dc:69:5e:dd:a2:55:fd:5b:81:d3:bc:ed:1a:
         93:75:91:3e:cd:b1:f4:6b:40:1a:47:cf:e8:1d:7e:e9:2c:9c:
         33:df:a9:f4:bc:eb:58:de:c1:bd:a4:40:1d:59:ce:63:f8:68:
         3e:6f:7e:7d:7e:77:1c:59:0b:b7:27:5c:1e:d6:a7:6e:bf:d0:
         86:91:31:ea:f1:9b:e6:d6:3d:6e:f1:89:ca:fd:92:d1:4e:bd:
         69:61:05:5f:b2:16:ae:b3:d0:07:f7:48:81:dc:80:07:68:3d:
         70:a5:45:61:9f:68:bf:7f:77:a5:3f:6b:cb:1d:31:c2:95:6e:
         1a:c0:29:20:d9:e5:14:16:7b:28:8b:e0:29:3f:f0:dc:46:0c:
         57:dc:d3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:07 2025 by rpki-client on console.sobornost.net