Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/323830343a353162303a3a2f33322d313238203d3e20323638343730.roa
File:                     323830343a353162303a3a2f33322d313238203d3e20323638343730.roa (raw, json)
Hash identifier:          0+yYrRYF3DnkZpf5I1MIj3HpO9zYE9gRE6VsrC5/q7A=
Subject key identifier:   00:24:4B:01:38:1B:71:2A:51:F3:92:E6:15:AB:98:3C:1D:81:72:18
Certificate issuer:       /CN=233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41
Certificate serial:       7CBB80AC0079E9046470BD94973A6627DC5ACE6A
Authority key identifier: 23:3C:0F:0B:57:1F:DA:1C:33:13:BF:8A:F7:D6:86:C7:4B:AF:CB:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/323830343a353162303a3a2f33322d313238203d3e20323638343730.roa
Signing time:             Thu 06 Mar 2025 02:58:21 +0000
ROA not before:           Thu 06 Mar 2025 02:53:21 +0000
ROA not after:            Thu 05 Mar 2026 02:58:21 +0000
asID:                     268470
IP address blocks:        2804:51b0::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.crl
                          rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:bb:80:ac:00:79:e9:04:64:70:bd:94:97:3a:66:27:dc:5a:ce:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41
        Validity
            Not Before: Mar  6 02:53:21 2025 GMT
            Not After : Mar  5 02:58:21 2026 GMT
        Subject: CN=00244B01381B712A51F392E615AB983C1D817218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9c:14:6b:23:f1:9b:d4:b4:86:e4:e7:14:75:
                    e4:52:8b:a2:f2:6f:1a:ad:31:fc:3c:72:a6:f6:bb:
                    81:81:e8:12:fc:b1:bf:65:14:1b:ee:19:66:c2:3b:
                    70:7c:e7:eb:f7:d9:e4:da:1d:b6:91:bc:a0:24:87:
                    fa:be:f0:2f:be:65:5f:cf:cd:dc:6b:0f:0e:6d:75:
                    f3:62:f1:74:a6:03:d5:db:d9:b3:88:06:1c:15:fe:
                    86:4e:c9:2e:3d:24:c1:8d:27:75:22:91:97:3d:1d:
                    56:b3:dd:3e:35:fc:ef:20:d1:fa:47:8c:ff:70:68:
                    b3:8b:b6:c1:e6:3b:0c:21:a1:92:ba:3b:4e:f6:f1:
                    27:de:6d:5d:13:87:ae:2a:02:4d:89:8c:51:58:bc:
                    1a:d2:98:c9:63:7b:76:9d:b1:84:38:38:db:79:f9:
                    5b:1c:dc:cf:ee:f9:0b:57:c4:81:cb:96:b4:3a:15:
                    a0:22:6b:a9:61:93:3e:47:69:26:41:0b:3d:49:1b:
                    a2:b6:c6:fc:d9:45:68:e4:57:8f:53:2c:11:e6:9b:
                    21:be:82:25:60:88:83:27:ec:55:0d:9e:62:49:95:
                    49:27:1c:ae:f1:73:52:91:3e:f3:61:42:9a:9f:3f:
                    47:fe:88:c5:94:df:f0:2d:2c:e5:a1:2c:e0:59:0e:
                    aa:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:24:4B:01:38:1B:71:2A:51:F3:92:E6:15:AB:98:3C:1D:81:72:18
            X509v3 Authority Key Identifier:
                keyid:23:3C:0F:0B:57:1F:DA:1C:33:13:BF:8A:F7:D6:86:C7:4B:AF:CB:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/323830343a353162303a3a2f33322d313238203d3e20323638343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:51b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:c9:74:8f:69:73:a6:26:99:49:a7:e4:0e:7e:c0:da:00:de:
         cc:b4:19:12:0c:4f:19:64:a2:73:d3:18:3d:5f:82:5e:7e:4d:
         fa:a9:da:0f:04:ab:93:ed:91:4a:64:49:4f:aa:3e:4e:25:b8:
         8f:37:4f:a1:f0:5e:23:34:40:f5:76:56:de:1a:8b:73:ab:4e:
         12:7a:df:eb:55:91:09:36:52:f5:5d:00:89:3e:e1:97:54:a0:
         45:d7:a4:9c:db:fe:f8:0c:51:3a:15:f3:2e:79:ed:81:b1:42:
         3e:44:f1:2f:e3:06:d7:1e:2c:b5:53:5c:31:02:34:1f:1e:ae:
         38:bc:fb:4a:eb:3b:da:db:ed:e2:fd:21:14:31:b8:22:f8:6c:
         10:27:e7:29:80:6b:0a:9d:17:f1:e7:b0:f3:1f:ed:01:22:73:
         ed:50:17:1f:d3:dd:9d:8b:1a:09:af:60:81:a5:ae:fc:cb:59:
         14:e0:88:76:cd:53:8f:3c:55:2b:b5:e5:6a:30:e9:b6:8c:a0:
         40:44:3b:f7:b1:ca:d0:82:fe:4c:12:03:d9:12:cd:c1:b4:67:
         b2:c2:38:36:14:ad:d3:8f:c0:41:ee:68:ac:f6:b1:e2:62:d7:
         64:a3:22:9a:90:29:57:3d:c5:bb:31:16:a7:b0:bf:d2:37:f8:
         88:11:d6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:35 2025 by rpki-client on console.sobornost.net