Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B2kSgNDzxeuVXWerC2LiuYQTdt3G3nGKvKXqJajjHc7y/0/323830343a333763343a3a2f33322d3438203d3e20323636343335.roa
File:                     323830343a333763343a3a2f33322d3438203d3e20323636343335.roa (raw, json)
Hash identifier:          cEDnLPXK11WWbsJ4/dfCkJe5XZdm5jJg02wNNdScwDw=
Subject key identifier:   07:FD:CD:4A:A8:93:E0:FF:41:A0:BF:B7:DB:B0:68:5F:E0:56:3F:67
Certificate issuer:       /CN=4930CFE9CF816668BB4D76B60E1D1E09201266DA
Certificate serial:       4F1593C280B770597F733881A2C1F0F7CFD42DF0
Authority key identifier: 49:30:CF:E9:CF:81:66:68:BB:4D:76:B6:0E:1D:1E:09:20:12:66:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4930CFE9CF816668BB4D76B60E1D1E09201266DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B2kSgNDzxeuVXWerC2LiuYQTdt3G3nGKvKXqJajjHc7y/0/323830343a333763343a3a2f33322d3438203d3e20323636343335.roa
Signing time:             Fri 28 Feb 2025 17:01:50 +0000
ROA not before:           Fri 28 Feb 2025 16:56:50 +0000
ROA not after:            Fri 27 Feb 2026 17:01:50 +0000
asID:                     266435
IP address blocks:        2804:37c4::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B2kSgNDzxeuVXWerC2LiuYQTdt3G3nGKvKXqJajjHc7y/0/4930CFE9CF816668BB4D76B60E1D1E09201266DA.crl
                          rsync://rpki-repo.registro.br/repo/B2kSgNDzxeuVXWerC2LiuYQTdt3G3nGKvKXqJajjHc7y/0/4930CFE9CF816668BB4D76B60E1D1E09201266DA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4930CFE9CF816668BB4D76B60E1D1E09201266DA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 20:19:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:15:93:c2:80:b7:70:59:7f:73:38:81:a2:c1:f0:f7:cf:d4:2d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4930CFE9CF816668BB4D76B60E1D1E09201266DA
        Validity
            Not Before: Feb 28 16:56:50 2025 GMT
            Not After : Feb 27 17:01:50 2026 GMT
        Subject: CN=07FDCD4AA893E0FF41A0BFB7DBB0685FE0563F67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:8d:8c:de:62:00:54:35:86:9d:bb:b3:1f:84:
                    db:3e:85:0f:e2:c7:b9:6c:b4:ab:17:3b:ff:9b:69:
                    8d:6c:7d:a4:66:78:12:6f:e9:9d:6a:df:aa:c6:b2:
                    f5:23:af:b5:45:8b:a8:fe:a4:6b:56:6f:3d:49:e9:
                    bb:dc:b2:28:01:2e:4f:ad:78:2d:10:21:61:63:b7:
                    6a:4a:dc:72:48:5d:fe:e3:52:4d:9d:03:1f:ab:57:
                    c5:09:5d:85:f2:13:2b:04:92:d9:56:82:99:46:87:
                    db:11:87:0c:44:6a:6c:fc:25:cd:5e:02:93:0d:12:
                    cb:b6:4f:45:e4:08:28:65:4a:80:58:5e:35:e0:af:
                    9c:9b:d8:af:8e:b6:ca:29:84:f6:76:42:3b:96:93:
                    dd:a0:18:9e:b7:4b:80:90:7d:a8:f6:d6:8e:7b:3e:
                    90:d5:35:4a:fb:42:06:70:18:a8:49:78:bf:75:a1:
                    23:6e:d1:99:8b:a1:57:a9:04:aa:89:82:ed:e0:1c:
                    84:48:9e:7d:1b:be:b3:57:ca:cb:fd:f4:3c:58:cb:
                    d2:6e:6e:d4:9c:d2:16:e7:71:20:ed:a2:8a:93:b5:
                    b3:83:fb:0a:9c:a0:a9:87:f7:4e:e6:af:4b:80:87:
                    40:04:45:0c:0f:f0:a6:00:73:88:51:52:25:32:7d:
                    19:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:FD:CD:4A:A8:93:E0:FF:41:A0:BF:B7:DB:B0:68:5F:E0:56:3F:67
            X509v3 Authority Key Identifier:
                keyid:49:30:CF:E9:CF:81:66:68:BB:4D:76:B6:0E:1D:1E:09:20:12:66:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B2kSgNDzxeuVXWerC2LiuYQTdt3G3nGKvKXqJajjHc7y/0/4930CFE9CF816668BB4D76B60E1D1E09201266DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4930CFE9CF816668BB4D76B60E1D1E09201266DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B2kSgNDzxeuVXWerC2LiuYQTdt3G3nGKvKXqJajjHc7y/0/323830343a333763343a3a2f33322d3438203d3e20323636343335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:fe:28:21:da:48:cb:31:db:67:a4:0c:14:99:56:78:7b:ad:
         c1:6d:6c:2a:b6:de:ce:36:8d:e7:8b:fc:9b:ad:ca:4f:4e:ba:
         02:31:e4:a6:c1:24:4a:c4:b6:32:cc:c2:46:02:6e:87:66:b3:
         a5:e9:45:39:24:87:2e:7e:77:9b:c5:72:68:21:50:fb:9d:9a:
         8d:6c:b5:32:26:fc:d6:3b:22:de:ea:de:76:62:8e:d5:5b:88:
         4c:2a:75:51:0e:16:2d:63:e9:7f:91:c0:ef:92:55:fa:8d:f4:
         a6:0d:f4:89:ab:06:78:26:38:af:7a:8d:7a:89:69:65:23:c3:
         54:a4:e6:54:16:67:5a:4d:47:e4:68:df:28:15:89:b1:4e:3d:
         59:19:5b:b6:94:27:f8:94:7b:5f:8d:0b:15:4c:97:fd:d8:c8:
         4e:9d:a7:9a:3d:46:47:2e:a6:1f:e3:ab:4d:6d:bd:18:6e:80:
         b3:78:ca:b1:4a:7d:11:5a:f1:dd:67:42:7b:88:0c:36:32:fc:
         f3:d8:5e:ae:86:e5:6e:0f:79:31:60:74:14:c1:9e:da:f1:b1:
         0a:5e:d1:d0:a2:2e:23:ea:d4:be:ac:9f:02:a0:3d:d5:e4:0a:
         c5:5e:24:0d:7a:11:92:56:af:48:dc:03:7f:51:84:9d:00:6c:
         bd:48:ce:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:39 2025 by rpki-client on console.sobornost.net