Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a343730303a3a2f34302d3430203d3e20323634333434.roa
File:                     323830343a323637343a343730303a3a2f34302d3430203d3e20323634333434.roa (raw, json)
Hash identifier:          NkAvvGttInF28NakjcEcr1UjoNvFXo4ZriSJuibmaO0=
Subject key identifier:   FA:44:D2:6B:EC:69:8C:5E:C3:86:0B:9E:48:37:88:67:B5:82:59:D2
Certificate issuer:       /CN=6F414F9210A10E5720E75030635478050D4C7C97
Certificate serial:       28CC09B2B8F40DCA6DAFF250C26647FBC98B0533
Authority key identifier: 6F:41:4F:92:10:A1:0E:57:20:E7:50:30:63:54:78:05:0D:4C:7C:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F414F9210A10E5720E75030635478050D4C7C97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a343730303a3a2f34302d3430203d3e20323634333434.roa
Signing time:             Wed 05 Mar 2025 20:56:23 +0000
ROA not before:           Wed 05 Mar 2025 20:51:23 +0000
ROA not after:            Wed 04 Mar 2026 20:56:23 +0000
asID:                     264344
IP address blocks:        2804:2674:4700::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/6F414F9210A10E5720E75030635478050D4C7C97.crl
                          rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/6F414F9210A10E5720E75030635478050D4C7C97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F414F9210A10E5720E75030635478050D4C7C97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 13:13:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:cc:09:b2:b8:f4:0d:ca:6d:af:f2:50:c2:66:47:fb:c9:8b:05:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F414F9210A10E5720E75030635478050D4C7C97
        Validity
            Not Before: Mar  5 20:51:23 2025 GMT
            Not After : Mar  4 20:56:23 2026 GMT
        Subject: CN=FA44D26BEC698C5EC3860B9E48378867B58259D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d0:a1:65:ba:03:5e:2e:1e:3f:bf:6c:b5:ab:
                    68:84:6a:6b:3e:6c:be:ea:21:b9:2a:f1:64:7a:ce:
                    48:f8:20:e9:a7:01:c4:fd:b1:f2:e6:0e:83:cc:49:
                    81:86:96:e8:05:01:84:13:28:3a:24:9f:b2:52:d2:
                    b8:18:1b:34:a4:d0:dc:4a:c0:3e:74:9c:b1:cd:f9:
                    a5:dd:4b:9a:13:3c:30:9d:59:32:38:c2:8e:16:bd:
                    df:2a:b1:c5:c0:82:16:cb:d6:dd:e9:b0:d3:fe:55:
                    57:46:61:dd:b6:37:f3:b6:7b:f6:7e:15:b5:17:99:
                    be:d7:38:90:07:d0:af:58:4c:d1:ae:f1:f8:97:6b:
                    2e:b9:28:29:9c:0c:e9:a4:de:ec:7c:32:69:87:41:
                    23:7d:d0:c7:d8:21:cb:08:76:e3:2b:8d:d1:05:11:
                    fa:71:4f:8b:df:51:db:c6:76:94:bb:79:eb:87:e0:
                    2a:ec:3b:ef:e5:17:d8:d4:91:7c:f6:74:50:68:0d:
                    82:61:25:20:a6:d6:9f:ad:2a:72:db:bb:95:22:30:
                    92:dd:b8:a8:a1:b7:fc:ad:c0:f8:db:54:c4:35:55:
                    0b:37:c0:cc:ea:d6:a2:50:63:cb:9c:dc:80:fc:39:
                    86:a7:e4:c4:45:2c:38:f3:bb:8d:63:6a:3a:97:cc:
                    23:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:44:D2:6B:EC:69:8C:5E:C3:86:0B:9E:48:37:88:67:B5:82:59:D2
            X509v3 Authority Key Identifier:
                keyid:6F:41:4F:92:10:A1:0E:57:20:E7:50:30:63:54:78:05:0D:4C:7C:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/6F414F9210A10E5720E75030635478050D4C7C97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F414F9210A10E5720E75030635478050D4C7C97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a343730303a3a2f34302d3430203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:4700::/40

    Signature Algorithm: sha256WithRSAEncryption
         17:a7:33:05:8d:8e:fa:ce:3c:6e:2e:59:52:89:bc:d0:aa:23:
         e2:57:74:d6:3d:d3:34:98:46:87:48:29:61:db:4d:56:74:f9:
         48:a9:43:62:6a:9c:b0:af:45:6b:81:c0:12:3b:91:00:0c:0e:
         91:98:ba:2a:70:34:9d:37:f2:9e:31:45:2f:b1:0d:06:39:bb:
         44:85:cd:00:58:3f:3a:fa:08:47:c7:b7:13:88:c9:7c:51:b6:
         a3:1e:b3:81:2e:4f:b7:b6:35:b0:2e:1c:5c:b1:22:b9:43:bb:
         0e:7a:53:e9:87:2b:a7:9d:8e:fc:4f:2a:d3:08:59:bc:0b:12:
         5c:0d:90:8e:db:a5:28:dd:ec:a1:00:bd:d3:ef:83:5e:27:2e:
         2d:5a:8e:57:9b:71:46:35:1e:b8:44:1a:a7:74:2b:2c:a7:ab:
         ec:91:1c:51:9f:55:a4:ad:28:cd:42:62:26:2e:da:86:53:b1:
         7e:75:99:d3:2f:54:c0:6c:c2:05:26:12:f3:62:04:cd:21:e6:
         15:54:4d:7d:fd:c2:5f:e5:1d:53:1c:bb:17:b1:b2:50:b3:05:
         a4:41:11:3c:90:6b:53:70:53:ec:0f:54:a0:e8:19:18:5e:89:
         2c:7b:6e:ea:ea:55:93:7b:a8:33:c1:de:69:74:c7:39:27:cf:
         1e:e5:96:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:04:58 2025 by rpki-client on console.sobornost.net