Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/323830343a343635343a633030303a3a2f33342d3334203d3e20323636393833.roa
File:                     323830343a343635343a633030303a3a2f33342d3334203d3e20323636393833.roa (raw, json)
Hash identifier:          xiGdKuj4Efsr7rLwjZDxKn71Hn+cIINOEFKUyJkiVD0=
Subject key identifier:   A7:26:3D:6B:D5:C6:D4:15:92:12:23:7E:A6:74:B5:B8:81:44:8F:48
Certificate issuer:       /CN=FC7B655C6372CB73D708B42D83FE2B62B3EEF17D
Certificate serial:       192156E21DA7C46380EEEE4ED45531E90799D693
Authority key identifier: FC:7B:65:5C:63:72:CB:73:D7:08:B4:2D:83:FE:2B:62:B3:EE:F1:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC7B655C6372CB73D708B42D83FE2B62B3EEF17D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/323830343a343635343a633030303a3a2f33342d3334203d3e20323636393833.roa
Signing time:             Thu 10 Apr 2025 12:10:33 +0000
ROA not before:           Thu 10 Apr 2025 12:05:33 +0000
ROA not after:            Thu 09 Apr 2026 12:10:33 +0000
asID:                     266983
IP address blocks:        2804:4654:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/FC7B655C6372CB73D708B42D83FE2B62B3EEF17D.crl
                          rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/FC7B655C6372CB73D708B42D83FE2B62B3EEF17D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC7B655C6372CB73D708B42D83FE2B62B3EEF17D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 20:22:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:21:56:e2:1d:a7:c4:63:80:ee:ee:4e:d4:55:31:e9:07:99:d6:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC7B655C6372CB73D708B42D83FE2B62B3EEF17D
        Validity
            Not Before: Apr 10 12:05:33 2025 GMT
            Not After : Apr  9 12:10:33 2026 GMT
        Subject: CN=A7263D6BD5C6D4159212237EA674B5B881448F48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:63:27:1e:3b:e1:65:39:2e:57:7d:df:8f:13:
                    bb:89:b8:93:ca:f7:8f:68:8e:95:89:97:68:dc:62:
                    48:d3:a5:03:37:b3:57:b3:d5:f9:56:9e:d4:b1:91:
                    4a:1c:cc:02:b7:2b:39:eb:e6:15:8d:64:d7:1d:9a:
                    63:55:1d:a7:65:00:95:1f:2d:c4:e4:77:ff:9d:14:
                    16:17:ab:05:98:05:37:ec:41:86:4f:ee:19:37:ef:
                    92:f5:60:fa:74:b4:77:d5:3a:69:7b:ac:ab:b0:fe:
                    f9:f4:63:b4:c1:63:b3:a1:c1:fe:5e:8b:32:3c:30:
                    98:f2:4a:17:67:85:a8:5d:c0:39:99:ba:ce:c2:95:
                    f6:39:89:8d:6a:7b:ed:1c:83:a7:76:ff:16:37:4a:
                    51:09:bc:5a:d0:f7:b8:b6:73:34:ba:05:9c:ac:06:
                    a2:41:11:6e:34:8d:dd:42:48:2a:28:ca:f1:88:d4:
                    ee:48:2d:a9:31:bf:e4:5a:0e:eb:72:1c:19:f6:ae:
                    bd:94:a9:aa:02:ff:75:f0:99:31:42:fc:8a:e3:9e:
                    fb:e2:78:23:cd:8d:b1:c2:b4:17:a3:56:53:20:f8:
                    b0:7e:01:4c:16:6a:a1:f3:6a:9b:3b:fa:45:3e:94:
                    e7:b3:2e:6d:ea:1b:93:60:6b:d8:4f:6b:9a:e1:59:
                    cb:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:26:3D:6B:D5:C6:D4:15:92:12:23:7E:A6:74:B5:B8:81:44:8F:48
            X509v3 Authority Key Identifier:
                keyid:FC:7B:65:5C:63:72:CB:73:D7:08:B4:2D:83:FE:2B:62:B3:EE:F1:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/FC7B655C6372CB73D708B42D83FE2B62B3EEF17D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC7B655C6372CB73D708B42D83FE2B62B3EEF17D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/323830343a343635343a633030303a3a2f33342d3334203d3e20323636393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4654:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         8f:8e:67:48:9f:5a:31:0b:e2:f4:c4:e0:f1:cc:ff:a3:fe:58:
         e2:a3:92:50:75:d1:f2:08:ac:b9:58:38:2e:85:36:69:f6:f9:
         f5:54:cc:96:a2:a9:92:5e:d6:cd:71:04:1b:ab:5f:47:34:39:
         d3:16:cf:7b:6d:2c:c4:8b:b0:b5:68:fc:3e:0f:cd:5b:55:32:
         c2:93:89:0f:40:32:16:a0:5b:c8:21:16:f5:d0:7d:a1:df:7e:
         da:9f:ac:04:6b:34:e5:1d:d9:da:ee:49:9a:75:ca:4d:b7:1e:
         89:07:6d:0b:41:25:56:ed:bb:53:8b:f6:1e:fd:c2:01:76:21:
         ef:46:c1:3d:27:ff:37:2b:e2:aa:ea:95:1a:64:07:ee:72:5d:
         fa:10:be:d8:fa:85:82:76:e3:98:75:25:56:84:6e:e1:69:9f:
         c2:4a:8b:53:03:7c:cd:0a:ce:bd:ca:ec:8f:cd:cf:38:dd:89:
         3b:72:84:77:92:c4:e3:dd:6c:52:79:64:41:61:4c:6c:d3:84:
         26:4d:9b:70:4c:ce:e3:dc:5a:9d:11:96:6e:ec:df:5c:0b:2b:
         68:50:bb:19:a2:1b:c5:cb:9b:54:99:6b:d4:98:f4:05:fd:b5:
         e6:30:81:64:ed:29:f9:cf:d9:10:7e:71:81:fd:ab:e9:ab:3e:
         ee:26:f5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:52 2025 by rpki-client on console.sobornost.net