Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/323830343a366433633a3a2f33322d313238203d3e20323730353139.roa
File:                     323830343a366433633a3a2f33322d313238203d3e20323730353139.roa (raw, json)
Hash identifier:          C+XWAZq5dLnWvj1kcDprPvKjOSkNxcZfUiERiPfE0hY=
Subject key identifier:   6F:7C:27:F5:7B:5E:AB:7D:73:C2:CB:DD:62:23:4A:94:D4:C7:CD:33
Certificate issuer:       /CN=33FC465BDB75F74010029718CB2EA6DB8FA9EF32
Certificate serial:       4A438FADB560167EA3D1B23919065C87260FBFF1
Authority key identifier: 33:FC:46:5B:DB:75:F7:40:10:02:97:18:CB:2E:A6:DB:8F:A9:EF:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33FC465BDB75F74010029718CB2EA6DB8FA9EF32.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/323830343a366433633a3a2f33322d313238203d3e20323730353139.roa
Signing time:             Tue 01 Apr 2025 13:50:46 +0000
ROA not before:           Tue 01 Apr 2025 13:45:46 +0000
ROA not after:            Tue 31 Mar 2026 13:50:46 +0000
asID:                     270519
IP address blocks:        2804:6d3c::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/33FC465BDB75F74010029718CB2EA6DB8FA9EF32.crl
                          rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/33FC465BDB75F74010029718CB2EA6DB8FA9EF32.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33FC465BDB75F74010029718CB2EA6DB8FA9EF32.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:43:8f:ad:b5:60:16:7e:a3:d1:b2:39:19:06:5c:87:26:0f:bf:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33FC465BDB75F74010029718CB2EA6DB8FA9EF32
        Validity
            Not Before: Apr  1 13:45:46 2025 GMT
            Not After : Mar 31 13:50:46 2026 GMT
        Subject: CN=6F7C27F57B5EAB7D73C2CBDD62234A94D4C7CD33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:87:be:16:2d:77:66:b3:d9:d1:ae:d4:ec:be:
                    91:00:c2:e2:7d:63:71:d3:61:0a:d6:a9:01:cd:e0:
                    60:dd:19:9c:60:2d:86:06:cc:0e:1b:f1:13:a4:ba:
                    ad:53:c6:37:5f:c5:79:13:a4:16:c2:8d:fb:21:c4:
                    19:1f:a8:64:f7:2a:89:7e:f9:ce:c5:96:f3:37:da:
                    c8:98:6d:2a:f2:50:94:29:e0:2f:e6:19:8c:a0:9e:
                    0b:5c:41:d7:bd:fc:5d:d6:99:66:03:5a:39:06:e5:
                    c5:63:54:f6:3f:eb:86:2c:d7:be:70:af:88:f8:c4:
                    76:19:24:ca:48:86:de:3e:e8:16:64:c9:3e:1c:77:
                    05:85:f6:8c:f3:53:3b:90:c0:97:c6:a5:e8:0b:b3:
                    9b:4c:1d:69:9c:e9:51:57:63:6d:b9:34:dc:25:29:
                    a7:32:fd:d7:9d:f2:f4:47:42:d8:66:70:c7:46:af:
                    0a:b5:bc:ab:eb:f0:8a:c2:77:52:54:9e:14:d9:59:
                    e2:0a:fa:75:11:57:3b:cc:b8:73:aa:b9:10:03:85:
                    96:82:9c:67:8f:14:97:dd:41:2c:a9:bc:61:35:a0:
                    80:05:00:51:ab:7f:90:a0:32:ae:f3:25:19:a3:90:
                    ee:1d:de:08:13:8e:45:ca:39:ec:1f:fd:12:21:99:
                    5b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:7C:27:F5:7B:5E:AB:7D:73:C2:CB:DD:62:23:4A:94:D4:C7:CD:33
            X509v3 Authority Key Identifier:
                keyid:33:FC:46:5B:DB:75:F7:40:10:02:97:18:CB:2E:A6:DB:8F:A9:EF:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/33FC465BDB75F74010029718CB2EA6DB8FA9EF32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33FC465BDB75F74010029718CB2EA6DB8FA9EF32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/323830343a366433633a3a2f33322d313238203d3e20323730353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6d3c::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:56:d6:00:f8:7f:95:b5:7a:e5:71:0e:7c:37:4e:f8:14:d1:
         04:05:65:7b:f3:2e:e3:8a:6c:60:c6:14:00:b0:82:d8:2c:53:
         21:e0:fc:8d:dd:18:43:ae:c2:86:ce:53:d8:77:b4:d3:bd:c3:
         6c:6d:1b:b2:dd:eb:be:57:5a:30:b0:13:3d:1e:bf:36:12:29:
         38:42:04:b0:ee:22:74:5f:40:df:57:df:cd:bc:62:ad:e9:75:
         6e:18:f6:2d:51:43:ab:da:a4:cb:72:4c:11:dc:07:30:92:c2:
         75:22:50:8c:dc:ad:5d:91:50:f1:ec:3d:33:c9:f2:32:d4:8d:
         35:87:0f:a4:f7:bc:73:0d:b1:a4:c8:d3:a3:14:da:97:fa:2d:
         5f:f0:22:9d:32:dd:5a:0e:76:8a:53:02:eb:27:40:af:63:96:
         f4:67:04:8f:e2:8e:3a:3d:fd:71:15:45:41:da:a3:12:98:e2:
         bd:ea:17:72:57:ee:a1:19:d0:a5:ad:91:89:48:28:e5:4f:13:
         36:f4:84:bc:37:89:81:18:f0:f9:18:c7:7a:80:9b:06:3b:e6:
         9e:bf:08:22:49:26:d9:3d:ac:6b:5a:8f:99:c0:03:56:f6:ce:
         b9:5e:5e:75:64:3b:e1:cc:f6:79:dc:56:d6:b1:22:7a:87:db:
         86:da:92:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:36 2025 by rpki-client on console.sobornost.net