Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a383030303a3a2f33342d3334203d3e20323634333434.roa
File:                     323830343a323637343a383030303a3a2f33342d3334203d3e20323634333434.roa (raw, json)
Hash identifier:          PlAhCu+iw7Vt+h8aarSnHi7HsUfA4XXtWfm3kJHQp6E=
Subject key identifier:   A1:95:99:5B:E9:37:FB:5B:72:8C:95:10:E6:01:1D:F5:E2:E8:03:72
Certificate issuer:       /CN=6F414F9210A10E5720E75030635478050D4C7C97
Certificate serial:       2683E5D7410EDCF988B1D0BE71BEE800923D43D6
Authority key identifier: 6F:41:4F:92:10:A1:0E:57:20:E7:50:30:63:54:78:05:0D:4C:7C:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F414F9210A10E5720E75030635478050D4C7C97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a383030303a3a2f33342d3334203d3e20323634333434.roa
Signing time:             Wed 05 Mar 2025 20:56:24 +0000
ROA not before:           Wed 05 Mar 2025 20:51:24 +0000
ROA not after:            Wed 04 Mar 2026 20:56:24 +0000
asID:                     264344
IP address blocks:        2804:2674:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/6F414F9210A10E5720E75030635478050D4C7C97.crl
                          rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/6F414F9210A10E5720E75030635478050D4C7C97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F414F9210A10E5720E75030635478050D4C7C97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 01:51:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:83:e5:d7:41:0e:dc:f9:88:b1:d0:be:71:be:e8:00:92:3d:43:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F414F9210A10E5720E75030635478050D4C7C97
        Validity
            Not Before: Mar  5 20:51:24 2025 GMT
            Not After : Mar  4 20:56:24 2026 GMT
        Subject: CN=A195995BE937FB5B728C9510E6011DF5E2E80372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4f:4d:7d:10:91:8c:b5:15:f8:22:d6:5c:29:
                    c8:e4:10:a2:25:79:89:dd:2c:32:b9:4b:b2:1f:36:
                    86:e9:eb:59:c7:6d:08:9b:7e:2b:28:43:ba:93:43:
                    69:65:a4:91:4c:ae:1a:70:01:61:cc:a8:c8:db:4d:
                    51:be:b0:88:81:82:75:31:25:8a:82:b5:de:8b:0c:
                    ee:4c:fd:1b:17:7f:6f:97:f2:b9:ae:7a:b5:05:13:
                    89:32:2e:8a:18:6f:59:ff:91:57:2d:d2:a3:6f:63:
                    d5:24:38:76:5d:4a:66:41:8d:43:72:90:90:b6:8b:
                    9f:bf:5d:25:d2:8d:b7:7d:3e:27:e1:ea:96:e6:5e:
                    19:10:e5:46:e9:3a:31:80:65:0c:e4:8a:5a:67:06:
                    52:fa:eb:d6:28:da:31:b8:55:fd:38:b2:a0:e2:5b:
                    27:17:1c:28:f2:e6:01:73:db:44:26:1f:e1:8e:28:
                    ef:a1:42:af:81:15:1f:1f:aa:3c:1c:73:3c:f0:ae:
                    78:8e:24:d8:81:d8:fa:23:40:a0:f4:42:99:07:10:
                    fb:8c:f9:95:37:49:e8:05:46:a7:ea:7c:a7:26:7b:
                    bd:78:a4:d9:7c:58:c1:81:68:d9:01:1a:e7:af:b4:
                    4d:c6:e6:98:53:88:ed:f1:54:d3:51:70:85:e8:88:
                    2a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:95:99:5B:E9:37:FB:5B:72:8C:95:10:E6:01:1D:F5:E2:E8:03:72
            X509v3 Authority Key Identifier:
                keyid:6F:41:4F:92:10:A1:0E:57:20:E7:50:30:63:54:78:05:0D:4C:7C:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/6F414F9210A10E5720E75030635478050D4C7C97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F414F9210A10E5720E75030635478050D4C7C97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a383030303a3a2f33342d3334203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         01:fc:a4:89:fe:d8:a5:72:75:49:6c:9e:7f:f4:52:6e:9c:8b:
         f7:c6:a4:18:b5:0a:ec:60:c8:7e:13:a4:58:c5:02:f7:ed:57:
         71:b3:44:9d:53:96:98:9f:15:9d:7d:7e:51:4f:ed:83:ee:88:
         df:27:1a:f6:da:bd:74:71:5e:1d:e9:f0:eb:5a:3c:23:a3:63:
         f2:8f:05:c9:57:76:0c:6f:b3:17:b1:5b:8e:b7:4f:aa:1b:da:
         89:5a:a6:59:18:44:7c:7a:d0:83:f6:31:bc:32:34:74:b8:9a:
         56:0c:2a:37:ec:8f:b3:48:bc:cb:68:f8:54:86:bf:bb:96:63:
         9a:84:33:61:f9:25:0a:f4:8a:c2:1a:fd:d3:93:9b:96:19:04:
         b4:4f:04:dc:b0:fd:82:b0:db:a6:2b:5f:10:ad:03:51:60:ab:
         a4:af:00:19:c1:94:a0:ed:a7:fc:44:d8:1c:2b:16:ef:9d:12:
         65:8f:25:da:75:68:77:0a:7d:9c:38:5f:c0:55:88:66:11:de:
         f5:34:f0:06:f4:95:8b:76:80:73:e7:66:cb:5f:b4:ca:d7:0d:
         a1:ec:3b:e7:5b:24:80:f4:2f:fa:ca:ef:2e:0b:90:4f:63:f5:
         55:5d:ae:c2:22:db:37:84:f1:1c:50:57:3f:1b:6b:59:b5:2b:
         73:42:ae:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:02 2025 by rpki-client on console.sobornost.net