Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/323830343a333934303a3a2f33322d3332203d3e20323636303231.roa
File:                     323830343a333934303a3a2f33322d3332203d3e20323636303231.roa (raw, json)
Hash identifier:          Ag/ransFO8R7G9YNjJa25vxbAGiL7uj4ugdVQpnQ9Qs=
Subject key identifier:   CC:53:A7:83:3B:37:F2:BE:A3:9C:0E:24:C3:6A:7F:3D:D2:BF:D3:DB
Certificate issuer:       /CN=8D28C833C9086041A4C81A0E6035E7ABC92EC597
Certificate serial:       46C654190268FD6488D539A8BF46359136F0DA22
Authority key identifier: 8D:28:C8:33:C9:08:60:41:A4:C8:1A:0E:60:35:E7:AB:C9:2E:C5:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D28C833C9086041A4C81A0E6035E7ABC92EC597.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/323830343a333934303a3a2f33322d3332203d3e20323636303231.roa
Signing time:             Thu 17 Apr 2025 12:13:25 +0000
ROA not before:           Thu 17 Apr 2025 12:08:25 +0000
ROA not after:            Thu 16 Apr 2026 12:13:25 +0000
asID:                     266021
IP address blocks:        2804:3940::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/8D28C833C9086041A4C81A0E6035E7ABC92EC597.crl
                          rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/8D28C833C9086041A4C81A0E6035E7ABC92EC597.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D28C833C9086041A4C81A0E6035E7ABC92EC597.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 18:10:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:c6:54:19:02:68:fd:64:88:d5:39:a8:bf:46:35:91:36:f0:da:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D28C833C9086041A4C81A0E6035E7ABC92EC597
        Validity
            Not Before: Apr 17 12:08:25 2025 GMT
            Not After : Apr 16 12:13:25 2026 GMT
        Subject: CN=CC53A7833B37F2BEA39C0E24C36A7F3DD2BFD3DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:39:87:30:58:77:f0:ec:ef:2f:e6:39:d5:96:
                    13:04:78:1b:05:90:6d:5a:a3:84:ae:6f:9e:09:e2:
                    2d:4c:52:63:e7:a7:2c:60:ed:25:7f:40:57:36:79:
                    e0:0d:a2:c1:a9:45:96:cb:db:9b:13:6b:d4:46:04:
                    db:d5:09:fe:05:e0:8d:85:ac:fa:52:a1:bc:14:50:
                    15:29:9d:f4:33:14:69:3f:93:69:9c:c3:c9:3d:0d:
                    d1:0f:66:b2:87:25:a1:91:4c:34:c4:61:db:f6:80:
                    6e:e0:85:c6:9a:87:74:bc:b4:f3:a7:d8:a6:3d:54:
                    bb:e2:c4:a2:21:04:d0:6f:95:78:63:65:57:6d:ce:
                    36:d7:bc:e2:9a:d9:09:13:16:6f:e2:5a:d8:c4:9e:
                    01:42:8a:6a:3a:5f:3d:f6:20:7c:c0:e9:e7:57:cd:
                    1f:fb:a6:de:41:99:54:18:3a:7d:5f:64:a8:4b:53:
                    6f:7a:24:43:a1:4e:3a:2b:85:ef:ac:26:51:14:d6:
                    ab:6b:a6:7e:c4:28:51:b9:c0:71:07:9a:85:92:fc:
                    12:86:37:2e:db:6c:0e:f9:2e:29:78:b4:1d:a3:a2:
                    3b:6a:12:3c:83:f3:09:65:cb:b2:88:30:ec:0b:b4:
                    88:c9:f2:c5:c5:5f:3b:60:78:5b:cf:6a:67:5b:b9:
                    72:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:53:A7:83:3B:37:F2:BE:A3:9C:0E:24:C3:6A:7F:3D:D2:BF:D3:DB
            X509v3 Authority Key Identifier:
                keyid:8D:28:C8:33:C9:08:60:41:A4:C8:1A:0E:60:35:E7:AB:C9:2E:C5:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/8D28C833C9086041A4C81A0E6035E7ABC92EC597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D28C833C9086041A4C81A0E6035E7ABC92EC597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/323830343a333934303a3a2f33322d3332203d3e20323636303231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3940::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:a0:da:4f:17:6c:e9:b3:6c:a8:d6:c8:2a:00:30:6c:ad:90:
         ad:df:0c:fc:fe:17:06:66:ca:ba:06:cf:85:5f:7c:53:40:40:
         64:45:b0:9d:66:a6:b3:15:a9:9c:5b:6c:d7:39:88:29:b3:36:
         f7:f6:05:ce:f4:0f:ff:29:bd:c5:77:7b:40:9c:b9:d7:ad:c9:
         1f:6d:86:f9:72:68:6c:8c:84:c7:e5:8e:14:32:3f:c7:0c:d8:
         6f:4d:69:f4:7c:82:85:86:20:ec:39:05:7b:bd:d7:80:98:90:
         04:d5:bf:d9:26:bb:a3:e2:61:a5:e2:d8:9b:ca:35:b4:4e:36:
         55:91:89:d6:ce:8f:db:bf:27:ca:79:1b:a0:f6:cc:e8:ed:5b:
         4e:54:9b:ec:93:8e:d0:45:79:42:db:47:fb:07:67:e7:36:ff:
         d2:3c:f3:f3:1b:c0:c5:ed:ed:43:60:e1:ed:5d:69:e4:ef:bf:
         28:43:63:c8:c6:a3:33:b5:cc:39:60:83:a3:5a:0d:a4:31:d9:
         6c:ad:1f:d0:a9:2d:be:d1:bf:2f:de:d8:a2:80:cc:a0:7c:c0:
         6d:86:c2:c3:09:b8:b7:11:be:1d:45:ef:79:c9:42:93:03:7c:
         65:60:76:dc:d7:88:02:18:d2:88:f9:c2:d2:33:69:47:20:94:
         44:35:a2:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:24:42 2025 by rpki-client on console.sobornost.net