Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQ6gdeYaGqdpP6SY9ZHsKb5qc2rDm9ZZY7YLw3aemrgZ/0/323830343a363161633a3a2f33322d313238203d3e20323639323439.roa
File:                     323830343a363161633a3a2f33322d313238203d3e20323639323439.roa (raw, json)
Hash identifier:          WHibLTfnV8c6GNuaXvcXxHY6gCAPxjlE0nDe2V+Tchg=
Subject key identifier:   43:F1:1D:65:C2:CE:D6:EE:83:90:0F:F4:33:6C:B3:3C:DF:2F:B8:8A
Certificate issuer:       /CN=2557D5F7321503E8A12A274EBA57E5064A6659B8
Certificate serial:       7C98736E53704B9DE513EBCFA74276700D00E5EC
Authority key identifier: 25:57:D5:F7:32:15:03:E8:A1:2A:27:4E:BA:57:E5:06:4A:66:59:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2557D5F7321503E8A12A274EBA57E5064A6659B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQ6gdeYaGqdpP6SY9ZHsKb5qc2rDm9ZZY7YLw3aemrgZ/0/323830343a363161633a3a2f33322d313238203d3e20323639323439.roa
Signing time:             Thu 24 Apr 2025 03:15:29 +0000
ROA not before:           Thu 24 Apr 2025 03:10:29 +0000
ROA not after:            Thu 23 Apr 2026 03:15:29 +0000
asID:                     269249
IP address blocks:        2804:61ac::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQ6gdeYaGqdpP6SY9ZHsKb5qc2rDm9ZZY7YLw3aemrgZ/0/2557D5F7321503E8A12A274EBA57E5064A6659B8.crl
                          rsync://rpki-repo.registro.br/repo/CQ6gdeYaGqdpP6SY9ZHsKb5qc2rDm9ZZY7YLw3aemrgZ/0/2557D5F7321503E8A12A274EBA57E5064A6659B8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2557D5F7321503E8A12A274EBA57E5064A6659B8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 05:42:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:98:73:6e:53:70:4b:9d:e5:13:eb:cf:a7:42:76:70:0d:00:e5:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2557D5F7321503E8A12A274EBA57E5064A6659B8
        Validity
            Not Before: Apr 24 03:10:29 2025 GMT
            Not After : Apr 23 03:15:29 2026 GMT
        Subject: CN=43F11D65C2CED6EE83900FF4336CB33CDF2FB88A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f3:b4:e1:6f:94:49:10:15:80:04:0f:dd:69:
                    e5:31:ff:90:40:22:97:d9:4b:78:35:c5:01:88:2c:
                    33:5f:16:07:5a:d4:5e:7d:d3:63:c9:68:ee:db:0f:
                    99:27:a9:ad:54:5f:ae:a6:27:a4:64:49:f2:7e:5f:
                    90:1b:d8:d7:db:30:ce:5c:7d:3b:39:a1:59:5e:28:
                    32:ad:3d:6c:86:bb:69:1d:97:5d:9b:36:fc:ff:26:
                    88:e8:d2:f8:4a:a3:1e:ea:e5:95:cf:00:7c:86:7c:
                    51:8e:5a:79:46:66:2f:0a:4d:51:b6:a9:27:2f:93:
                    43:2e:b5:a1:28:ed:2e:1a:26:62:66:d1:1f:9c:b2:
                    8b:55:4d:97:82:50:08:bb:4f:25:3a:4c:10:c5:cf:
                    86:a0:a5:d3:c7:75:fd:89:29:ba:f0:55:4d:7e:d2:
                    ba:ca:cd:f4:f6:ca:58:dc:4e:78:71:28:ee:f5:93:
                    79:f5:d9:05:b1:8e:00:ed:12:85:68:df:5a:c8:36:
                    c7:13:71:86:f8:08:c7:e1:45:d0:71:bb:1f:8c:0a:
                    12:be:4a:90:4c:0c:d6:e0:55:42:6d:4a:f3:4e:90:
                    8b:21:c5:14:d4:e6:51:f3:64:1f:93:60:36:62:e3:
                    a0:2d:33:cd:73:0d:43:0f:fa:c7:4a:c7:04:23:b1:
                    85:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:F1:1D:65:C2:CE:D6:EE:83:90:0F:F4:33:6C:B3:3C:DF:2F:B8:8A
            X509v3 Authority Key Identifier:
                keyid:25:57:D5:F7:32:15:03:E8:A1:2A:27:4E:BA:57:E5:06:4A:66:59:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQ6gdeYaGqdpP6SY9ZHsKb5qc2rDm9ZZY7YLw3aemrgZ/0/2557D5F7321503E8A12A274EBA57E5064A6659B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2557D5F7321503E8A12A274EBA57E5064A6659B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQ6gdeYaGqdpP6SY9ZHsKb5qc2rDm9ZZY7YLw3aemrgZ/0/323830343a363161633a3a2f33322d313238203d3e20323639323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:61ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:4a:af:5f:cd:75:28:14:73:39:28:e5:87:79:f4:e8:c9:6e:
         9d:ff:a5:e0:1f:6a:06:a7:9c:b2:0d:0f:14:1b:b7:5e:ba:64:
         52:fe:a5:bb:b1:74:c0:9f:cd:2c:fa:08:14:e3:85:d5:a3:50:
         8e:c0:1c:e6:97:7b:70:f3:cc:b5:99:85:50:8e:91:86:82:1a:
         6e:06:8d:4e:c8:24:05:28:95:2e:6c:ae:4d:b5:0b:46:3e:36:
         80:4c:6e:a0:47:e6:fa:56:7e:95:69:e6:aa:5f:56:2a:e7:32:
         58:ba:b4:69:c3:ac:0e:04:32:d9:57:24:1f:c4:3d:2f:ab:0e:
         ba:a8:69:e3:0c:b1:f8:24:93:b0:a6:4d:54:70:4e:25:41:b8:
         e0:92:06:4a:cd:28:dd:28:a6:6b:7d:99:00:c5:40:cf:fd:8f:
         a6:d2:b6:a0:8e:c5:9f:f6:12:2a:1b:39:d2:36:84:c9:00:a2:
         72:a0:c2:6e:43:ba:6b:9a:27:31:a1:16:ab:a6:c6:99:90:fd:
         d2:62:72:6d:82:c7:0e:7e:f9:65:c6:66:4d:b3:89:13:b8:9a:
         6e:64:3a:32:a2:c4:13:16:0c:7e:48:d8:1c:de:6c:52:f9:66:
         90:88:4a:ea:7d:5f:0c:fd:ae:ff:7b:27:54:bd:e8:2b:b2:f9:
         d1:55:2d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:04 2025 by rpki-client on console.sobornost.net