Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/323830343a373638343a343030303a3a2f33342d3334203d3e20323731313137.roa
File:                     323830343a373638343a343030303a3a2f33342d3334203d3e20323731313137.roa (raw, json)
Hash identifier:          /Ro3u/UbLPH5+dAxUsNJZHXmAfPZmrmoqjBcUZ7O3fw=
Subject key identifier:   C7:F0:E6:89:AA:44:0E:9A:E7:15:3C:E9:A6:04:69:81:1F:8C:AF:61
Certificate issuer:       /CN=62D01A32125D7B1F626C38C25BC340B899793CFA
Certificate serial:       372FD42A9053534F65203F10021FE29B4FB751CA
Authority key identifier: 62:D0:1A:32:12:5D:7B:1F:62:6C:38:C2:5B:C3:40:B8:99:79:3C:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62D01A32125D7B1F626C38C25BC340B899793CFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/323830343a373638343a343030303a3a2f33342d3334203d3e20323731313137.roa
Signing time:             Thu 06 Mar 2025 21:39:20 +0000
ROA not before:           Thu 06 Mar 2025 21:34:20 +0000
ROA not after:            Thu 05 Mar 2026 21:39:20 +0000
asID:                     271117
IP address blocks:        2804:7684:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/62D01A32125D7B1F626C38C25BC340B899793CFA.crl
                          rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/62D01A32125D7B1F626C38C25BC340B899793CFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62D01A32125D7B1F626C38C25BC340B899793CFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 21:20:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:2f:d4:2a:90:53:53:4f:65:20:3f:10:02:1f:e2:9b:4f:b7:51:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62D01A32125D7B1F626C38C25BC340B899793CFA
        Validity
            Not Before: Mar  6 21:34:20 2025 GMT
            Not After : Mar  5 21:39:20 2026 GMT
        Subject: CN=C7F0E689AA440E9AE7153CE9A60469811F8CAF61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:07:ba:d0:0e:f9:b8:82:81:96:0e:95:2b:da:
                    4e:9f:10:bf:05:04:d6:00:3c:63:92:1a:cb:30:8c:
                    e1:a0:b6:c4:56:56:2d:dc:22:92:9d:2e:1b:d7:db:
                    33:2a:24:0f:8c:e9:03:26:e4:8a:e8:bd:28:4e:14:
                    65:64:9e:f8:09:42:b5:a4:b7:7b:8d:f7:88:3d:c1:
                    47:14:36:14:8a:56:45:b1:33:c0:6e:69:59:30:d0:
                    a6:61:33:ef:4f:96:fd:3a:71:86:1d:0b:65:81:6a:
                    0e:db:9b:f7:5d:9d:21:9d:6c:f7:24:2f:d1:1e:37:
                    b1:cd:26:9f:21:39:28:2f:7a:33:f6:f0:94:ac:48:
                    33:ad:98:26:03:b1:b0:e3:12:1f:aa:bf:67:09:6e:
                    b1:e6:9c:b4:5b:57:08:d5:28:e5:e1:a5:7d:8b:5a:
                    ca:4d:07:be:ed:ab:e9:05:9d:b6:89:6b:fb:2a:fd:
                    7c:e6:e5:3b:2b:89:fc:2d:46:43:12:f0:11:90:a5:
                    d3:55:f4:2e:3c:78:18:d0:f4:41:bc:54:23:d0:de:
                    29:ce:cf:d4:06:2c:73:cf:42:ae:26:8c:6c:42:01:
                    3e:7d:8e:83:06:73:5d:09:0d:f5:a0:8f:bc:85:ce:
                    32:aa:24:f0:bf:1c:a5:51:33:34:06:40:3a:c3:e4:
                    46:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F0:E6:89:AA:44:0E:9A:E7:15:3C:E9:A6:04:69:81:1F:8C:AF:61
            X509v3 Authority Key Identifier:
                keyid:62:D0:1A:32:12:5D:7B:1F:62:6C:38:C2:5B:C3:40:B8:99:79:3C:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/62D01A32125D7B1F626C38C25BC340B899793CFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62D01A32125D7B1F626C38C25BC340B899793CFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/323830343a373638343a343030303a3a2f33342d3334203d3e20323731313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7684:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         47:77:14:6b:86:5c:5d:8c:ac:a2:5b:cd:a3:2c:cb:ed:96:ee:
         f5:0a:e8:d4:90:0c:9c:b7:d6:8a:66:c7:c8:4e:e9:f9:70:ef:
         85:fa:5f:3e:a4:aa:9c:82:01:b3:23:61:34:02:c7:a1:31:5b:
         64:2d:b7:51:d7:d3:b9:d6:ae:10:b4:99:41:0b:ab:52:b1:fa:
         78:5b:5b:ff:a3:87:6d:b6:13:5b:7a:8e:c0:63:74:4b:ba:84:
         13:66:4f:41:15:a1:b0:9b:6d:e8:0b:66:e8:c2:a1:7d:f3:7d:
         8f:a7:74:5e:82:e2:3f:14:f3:f5:e9:39:93:31:6f:86:1a:63:
         64:1e:3e:93:2e:a3:94:5f:a2:cf:fa:00:67:da:13:6f:39:1e:
         1e:dc:59:a5:cb:2b:b7:07:1f:b0:64:1a:99:87:28:c4:a8:f3:
         6e:fc:f7:b5:64:7c:2f:b1:97:48:b1:f3:bc:4a:95:28:72:82:
         df:1a:44:96:8a:20:ca:15:8f:51:02:f3:8f:19:16:c6:65:4e:
         2c:4c:27:15:06:a6:27:05:b6:5b:a5:e3:55:37:28:9e:07:ac:
         7c:41:a1:b1:56:15:7c:91:f0:6e:5a:8a:ef:0b:9f:94:0e:ef:
         e7:5c:82:6b:58:66:b9:b3:d8:91:55:01:50:77:2b:7f:0b:69:
         e2:44:a9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:42 2025 by rpki-client on console.sobornost.net