Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/1/323830343a323662303a3a2f33322d3336203d3e20323633383439.roa
File:                     323830343a323662303a3a2f33322d3336203d3e20323633383439.roa (raw, json)
Hash identifier:          HUsmBkomiI0DMXcyvCDmYvbto/jE9yHQd1Ob/wZpmp4=
Subject key identifier:   7E:E3:CA:45:9A:40:C6:2C:7F:1F:BC:4A:53:73:96:3C:00:71:AB:CB
Certificate issuer:       /CN=701CA9DD24FE6BBE9CFFCE3F0ADBC664A121571A
Certificate serial:       4FE91C877758D4E4DDE23DC06048053E10711E07
Authority key identifier: 70:1C:A9:DD:24:FE:6B:BE:9C:FF:CE:3F:0A:DB:C6:64:A1:21:57:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701CA9DD24FE6BBE9CFFCE3F0ADBC664A121571A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/1/323830343a323662303a3a2f33322d3336203d3e20323633383439.roa
Signing time:             Wed 05 Mar 2025 19:00:07 +0000
ROA not before:           Wed 05 Mar 2025 18:55:07 +0000
ROA not after:            Wed 04 Mar 2026 19:00:07 +0000
asID:                     263849
IP address blocks:        2804:26b0::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/1/701CA9DD24FE6BBE9CFFCE3F0ADBC664A121571A.crl
                          rsync://rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/1/701CA9DD24FE6BBE9CFFCE3F0ADBC664A121571A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701CA9DD24FE6BBE9CFFCE3F0ADBC664A121571A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 11:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:e9:1c:87:77:58:d4:e4:dd:e2:3d:c0:60:48:05:3e:10:71:1e:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=701CA9DD24FE6BBE9CFFCE3F0ADBC664A121571A
        Validity
            Not Before: Mar  5 18:55:07 2025 GMT
            Not After : Mar  4 19:00:07 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3c:49:ac:69:d4:bb:03:5d:8f:f7:1c:af:af:
                    5e:0d:9f:b4:d6:f9:73:83:de:0b:ef:f5:d7:ad:79:
                    3c:e7:cd:e3:99:5c:76:a5:b8:a9:aa:74:55:b4:16:
                    80:ef:c6:75:9b:91:47:b1:0a:ae:55:3e:c0:4b:04:
                    57:03:ef:f0:82:25:2c:0c:b0:9c:f2:1a:ef:3b:b3:
                    90:29:0c:7a:2a:86:60:2f:38:c9:83:b2:68:df:cc:
                    7d:d9:c8:f0:d3:0c:1a:e5:21:67:9f:78:2b:64:31:
                    66:99:04:8e:ff:2a:ec:61:49:53:98:6f:fb:7a:6b:
                    0d:d4:47:3c:74:43:57:07:9a:e0:b5:9e:f8:26:c0:
                    c9:af:35:6d:c9:fe:79:a9:58:ad:78:fd:5f:1f:cb:
                    8a:2e:04:d2:27:08:1f:4f:44:5d:cd:ef:49:87:8d:
                    af:ed:b1:ab:27:66:fe:fb:4f:b1:81:63:72:9d:04:
                    50:78:00:45:cb:9a:f7:dc:c3:d5:9f:40:ff:ba:86:
                    53:c6:f1:0d:49:c7:e9:8b:25:29:e7:94:8b:5d:33:
                    cb:6f:08:97:9b:51:eb:76:2f:c7:7e:17:c1:02:8c:
                    30:5a:34:78:84:c7:b4:01:67:d9:9f:40:e6:76:45:
                    9f:a2:66:b9:d6:63:00:3d:75:4e:67:aa:4a:53:e5:
                    63:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:E3:CA:45:9A:40:C6:2C:7F:1F:BC:4A:53:73:96:3C:00:71:AB:CB
            X509v3 Authority Key Identifier:
                keyid:70:1C:A9:DD:24:FE:6B:BE:9C:FF:CE:3F:0A:DB:C6:64:A1:21:57:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/1/701CA9DD24FE6BBE9CFFCE3F0ADBC664A121571A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701CA9DD24FE6BBE9CFFCE3F0ADBC664A121571A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/1/323830343a323662303a3a2f33322d3336203d3e20323633383439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:26b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:44:e3:fc:c7:e9:9e:bf:ac:9e:c9:40:4a:87:e5:4a:e1:c7:
         cb:96:87:55:1f:be:02:d8:d6:72:a7:11:b0:9d:06:10:a1:e6:
         be:e4:6e:bb:74:57:70:fb:a1:11:f2:75:e1:a0:a7:f2:53:12:
         de:a2:6b:13:7d:67:34:47:8c:6f:a6:0e:59:80:d6:86:f7:8f:
         36:00:dc:b7:03:8c:74:72:fb:53:4c:e9:0a:32:e0:87:23:ca:
         3a:79:72:f3:41:14:6e:15:26:42:c2:d1:e3:44:01:97:32:12:
         e3:9b:c9:1a:01:d1:d6:5f:f6:bf:1d:87:3d:bf:f1:f7:27:67:
         19:df:13:cc:d2:58:37:42:89:d2:8e:12:f4:c9:ed:a6:f9:02:
         eb:0c:8c:5a:05:ca:9a:77:25:2c:25:3d:3b:3f:31:e9:40:e0:
         82:50:9e:30:bd:83:75:27:0f:3c:dd:bc:36:41:3f:78:1f:81:
         49:06:b8:47:55:49:8f:ff:a7:ec:8e:24:c8:f2:c2:24:7d:6d:
         92:e8:0a:bd:6b:f2:24:33:77:76:7b:d1:0f:8e:02:6c:ad:39:
         a0:ad:51:c5:42:7d:dd:96:0f:6f:dc:57:c2:58:80:2a:86:66:
         ce:a2:03:15:ba:c9:fb:97:aa:8f:39:29:3e:9a:37:7c:96:4d:
         9a:50:48:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:50:45 2025 by rpki-client on console.sobornost.net