Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9uLs22ASqpqZvBJL8xJRKQ4Rzwy4zjmpPdx9hZmqEPGE/1/323830343a336333303a3a2f33322d313238203d3e20323636313935.roa
File:                     323830343a336333303a3a2f33322d313238203d3e20323636313935.roa (raw, json)
Hash identifier:          olm/ccIpwi2oz1sjR7tPCHa9WGc1X6lJ5dlT6llhasE=
Subject key identifier:   1E:40:D6:8E:28:A2:D7:94:BA:78:2F:EB:43:3E:74:1F:6C:F6:D7:6E
Certificate issuer:       /CN=554F31049EE1172449D30E9D16346BBA2B90EA1B
Certificate serial:       6A4042CCFD16054ABCF356DFF8355F1072A3A81C
Authority key identifier: 55:4F:31:04:9E:E1:17:24:49:D3:0E:9D:16:34:6B:BA:2B:90:EA:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/554F31049EE1172449D30E9D16346BBA2B90EA1B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9uLs22ASqpqZvBJL8xJRKQ4Rzwy4zjmpPdx9hZmqEPGE/1/323830343a336333303a3a2f33322d313238203d3e20323636313935.roa
Signing time:             Thu 06 Mar 2025 04:07:08 +0000
ROA not before:           Thu 06 Mar 2025 04:02:08 +0000
ROA not after:            Thu 05 Mar 2026 04:07:08 +0000
asID:                     266195
IP address blocks:        2804:3c30::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9uLs22ASqpqZvBJL8xJRKQ4Rzwy4zjmpPdx9hZmqEPGE/1/554F31049EE1172449D30E9D16346BBA2B90EA1B.crl
                          rsync://rpki-repo.registro.br/repo/9uLs22ASqpqZvBJL8xJRKQ4Rzwy4zjmpPdx9hZmqEPGE/1/554F31049EE1172449D30E9D16346BBA2B90EA1B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/554F31049EE1172449D30E9D16346BBA2B90EA1B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 13:35:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:40:42:cc:fd:16:05:4a:bc:f3:56:df:f8:35:5f:10:72:a3:a8:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=554F31049EE1172449D30E9D16346BBA2B90EA1B
        Validity
            Not Before: Mar  6 04:02:08 2025 GMT
            Not After : Mar  5 04:07:08 2026 GMT
        Subject: CN=1E40D68E28A2D794BA782FEB433E741F6CF6D76E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:69:97:2d:81:10:f0:26:61:a7:63:5e:e5:41:
                    3f:5c:5f:4a:09:0c:af:f4:7f:4f:8f:90:ed:8d:9e:
                    06:c5:39:36:93:e9:3b:24:0b:37:a1:78:e9:0d:fc:
                    3a:eb:72:b7:f8:1a:e6:0f:60:12:d2:e8:82:84:16:
                    25:9b:9c:bd:70:d1:d2:61:d6:07:65:40:0e:d9:08:
                    e3:04:9e:75:e4:38:ba:3d:11:0a:b1:92:f7:11:4d:
                    8c:09:68:ce:1e:cb:1d:43:fe:d9:15:b5:09:88:82:
                    ff:df:65:ad:64:b1:e6:4d:c6:20:52:73:4d:ea:cc:
                    91:fb:ba:e4:14:22:70:d5:37:05:98:cd:f2:28:94:
                    7c:f8:7d:72:1f:c8:76:8d:15:44:7b:cf:b1:8a:e2:
                    22:87:fe:db:37:47:9e:d4:34:1f:fc:63:20:64:d2:
                    75:75:28:44:9a:83:dd:a7:83:9d:e1:4d:eb:e8:a1:
                    4f:12:8e:ec:4b:32:22:28:c8:a3:ed:b4:1d:4d:bf:
                    3c:a3:37:57:57:2b:89:34:d1:93:74:56:e4:41:d5:
                    e0:b5:cb:33:39:9b:2f:c8:d5:45:ec:92:f4:9c:05:
                    40:bf:9b:6b:17:47:09:34:13:46:f6:f6:a1:d6:37:
                    be:43:84:85:6e:c2:4d:7c:94:61:98:bf:a7:73:57:
                    a0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:40:D6:8E:28:A2:D7:94:BA:78:2F:EB:43:3E:74:1F:6C:F6:D7:6E
            X509v3 Authority Key Identifier:
                keyid:55:4F:31:04:9E:E1:17:24:49:D3:0E:9D:16:34:6B:BA:2B:90:EA:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9uLs22ASqpqZvBJL8xJRKQ4Rzwy4zjmpPdx9hZmqEPGE/1/554F31049EE1172449D30E9D16346BBA2B90EA1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/554F31049EE1172449D30E9D16346BBA2B90EA1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9uLs22ASqpqZvBJL8xJRKQ4Rzwy4zjmpPdx9hZmqEPGE/1/323830343a336333303a3a2f33322d313238203d3e20323636313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c30::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:3e:fe:16:8f:aa:7d:55:b6:8e:ff:90:76:50:8b:81:8e:96:
         be:1d:23:5d:31:a5:fe:77:a2:17:61:52:e0:21:89:2a:08:03:
         b3:66:b8:1d:c5:4c:da:66:3d:4c:ba:2b:7a:b8:ef:cc:95:56:
         e9:7c:91:d4:60:14:f0:fa:22:75:ce:d0:c7:f5:82:84:c0:b9:
         6b:62:1f:24:2e:f1:9d:91:9b:ea:63:2c:f2:a2:98:79:0c:bf:
         a1:a9:a1:3d:78:18:be:a7:9b:cb:ae:3f:2e:86:3d:2e:77:3d:
         ef:08:77:f4:45:79:56:74:be:6e:57:30:6b:57:94:4e:7e:e7:
         8e:3b:b9:6d:94:67:19:92:25:cc:fe:63:9a:ff:11:27:2a:ef:
         c9:51:69:9f:5f:14:af:bd:64:77:ac:04:c6:9d:aa:ba:b0:8b:
         68:32:6b:9a:3b:03:01:d9:cb:e0:12:ac:d8:1a:88:4d:37:83:
         fa:dc:66:ff:05:2f:ba:ef:32:20:85:fc:72:75:d4:5d:67:0a:
         a7:ba:4d:ce:36:7d:fa:5d:66:15:d0:09:1a:c5:a7:61:76:f4:
         a1:c5:51:29:47:f9:02:7f:eb:63:59:e1:5f:f8:3d:71:72:3f:
         1a:c4:85:5d:f3:91:5e:f3:be:3b:73:3d:3c:5c:a6:20:82:56:
         41:10:fd:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:19 2025 by rpki-client on console.sobornost.net