Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/1/323830343a333634343a343030303a3a2f3336203d3e20323636333338.roa
File:                     323830343a333634343a343030303a3a2f3336203d3e20323636333338.roa (raw, json)
Hash identifier:          /JwZcTs2GXeI2Lo1Fd/BcXzsHNOT3OfT1kSDuYLPR9E=
Subject key identifier:   1D:D6:55:8D:EE:B7:A7:74:40:D8:CF:A8:AB:E0:B7:0B:31:10:5E:DA
Certificate issuer:       /CN=4EE0AA39E5673205B615B1337C24E86FBCD3C635
Certificate serial:       77F22CBC5B5A1CF37CF2D009C86911542F2770A4
Authority key identifier: 4E:E0:AA:39:E5:67:32:05:B6:15:B1:33:7C:24:E8:6F:BC:D3:C6:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EE0AA39E5673205B615B1337C24E86FBCD3C635.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/1/323830343a333634343a343030303a3a2f3336203d3e20323636333338.roa
Signing time:             Tue 22 Apr 2025 19:00:00 +0000
ROA not before:           Tue 22 Apr 2025 18:55:00 +0000
ROA not after:            Wed 22 Apr 2026 19:00:00 +0000
asID:                     266338
IP address blocks:        2804:3644:4000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/1/4EE0AA39E5673205B615B1337C24E86FBCD3C635.crl
                          rsync://rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/1/4EE0AA39E5673205B615B1337C24E86FBCD3C635.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EE0AA39E5673205B615B1337C24E86FBCD3C635.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:f2:2c:bc:5b:5a:1c:f3:7c:f2:d0:09:c8:69:11:54:2f:27:70:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EE0AA39E5673205B615B1337C24E86FBCD3C635
        Validity
            Not Before: Apr 22 18:55:00 2025 GMT
            Not After : Apr 22 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a2:31:ab:e2:f7:47:09:4e:67:aa:ae:af:dc:
                    41:96:c0:cb:be:2b:a5:71:3e:53:33:ef:e0:36:0f:
                    3c:9e:86:34:fe:29:ea:a8:07:ce:e4:e7:4d:92:da:
                    94:f6:6b:91:6b:25:9c:c5:a2:33:86:15:63:b5:a7:
                    28:5c:50:1a:72:23:49:80:52:33:b1:e3:1d:6e:55:
                    c0:84:1c:3c:eb:93:f5:82:40:85:95:c2:f6:57:86:
                    53:7a:b1:29:69:7a:82:ea:08:70:a4:41:be:0e:e4:
                    5d:c3:c3:cc:19:83:08:e1:12:ca:80:77:0b:fd:12:
                    47:d6:87:46:9b:58:a1:8f:78:80:bf:5b:6b:46:1d:
                    2d:13:15:ef:6a:83:66:58:5c:bf:b5:15:dd:db:13:
                    9a:46:b0:20:1d:a7:b5:8f:7f:55:5a:6b:30:a7:12:
                    9b:ee:1d:94:a4:31:30:fb:59:f5:c0:44:01:34:e6:
                    9c:80:28:d1:0c:66:0a:50:77:92:bf:fa:4c:6c:f1:
                    6f:7d:dc:a7:d0:cc:8c:92:2d:62:d0:81:2d:a0:10:
                    e7:8f:9d:e6:25:8a:00:42:26:e8:1c:d8:81:00:91:
                    05:2b:e1:2a:80:1c:96:a4:dc:37:62:95:93:09:5d:
                    95:46:79:95:51:77:84:3d:86:51:fa:ed:9b:f5:7e:
                    aa:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D6:55:8D:EE:B7:A7:74:40:D8:CF:A8:AB:E0:B7:0B:31:10:5E:DA
            X509v3 Authority Key Identifier:
                keyid:4E:E0:AA:39:E5:67:32:05:B6:15:B1:33:7C:24:E8:6F:BC:D3:C6:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/1/4EE0AA39E5673205B615B1337C24E86FBCD3C635.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EE0AA39E5673205B615B1337C24E86FBCD3C635.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/1/323830343a333634343a343030303a3a2f3336203d3e20323636333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3644:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         18:19:2a:02:3e:ee:9d:96:8c:cc:c9:9e:12:32:bb:39:6d:5c:
         20:29:fc:c3:fc:e2:2f:d9:40:23:39:74:4e:55:3f:7d:b6:12:
         57:13:5c:22:75:12:2b:4f:2a:cf:8e:fb:c5:fb:50:6d:39:09:
         18:a0:db:40:15:f2:4f:c5:d2:c6:23:4f:9b:66:97:18:5c:19:
         03:df:eb:9d:40:6b:fa:a1:1d:2f:aa:48:c0:69:2a:33:a6:d8:
         09:17:2d:5b:c6:be:75:6a:8d:83:b9:08:89:9f:d9:50:e3:41:
         c1:b1:a7:10:6d:ac:90:9b:84:91:ff:59:4f:ce:84:af:85:b1:
         27:2e:7a:f7:81:5e:04:20:b2:a7:c9:52:4b:00:1a:9c:ab:fd:
         47:86:ae:ca:47:ca:48:e7:5b:6f:e1:88:65:23:72:6b:a7:74:
         cd:b1:ce:27:87:d4:68:90:ba:3a:9c:80:54:87:03:3e:07:04:
         1a:76:cd:43:d6:71:bb:e4:9e:cd:ca:bf:8b:20:73:83:ed:1b:
         58:d5:2c:c4:e6:19:44:52:01:23:37:95:10:73:b0:02:4f:24:
         87:ad:40:73:f8:0d:7a:50:d1:43:1b:92:5a:01:24:bb:7b:8d:
         c2:ee:ec:e6:2e:83:1c:92:60:85:7b:83:31:68:8d:75:27:0e:
         ba:82:85:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:37 2025 by rpki-client on console.sobornost.net