Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/323830343a343435303a3a2f33322d313238203d3e20323637363234.roa
File:                     323830343a343435303a3a2f33322d313238203d3e20323637363234.roa (raw, json)
Hash identifier:          yZ+CgEwHLw5R8lki1HXnaAKypPz5TAc5ErvqeQeQtAs=
Subject key identifier:   DA:59:5C:5C:92:7B:8F:99:37:FC:51:B7:A9:F1:93:21:4C:83:27:BB
Certificate issuer:       /CN=20ACEDD92F6EEA11280EF550E5DB1D3BD7CB9EF6
Certificate serial:       1EE5F1BC3F487AAFD3D634C03C2A733444B30514
Authority key identifier: 20:AC:ED:D9:2F:6E:EA:11:28:0E:F5:50:E5:DB:1D:3B:D7:CB:9E:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20ACEDD92F6EEA11280EF550E5DB1D3BD7CB9EF6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/323830343a343435303a3a2f33322d313238203d3e20323637363234.roa
Signing time:             Tue 08 Apr 2025 19:24:47 +0000
ROA not before:           Tue 08 Apr 2025 19:19:47 +0000
ROA not after:            Tue 07 Apr 2026 19:24:47 +0000
asID:                     267624
IP address blocks:        2804:4450::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/20ACEDD92F6EEA11280EF550E5DB1D3BD7CB9EF6.crl
                          rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/20ACEDD92F6EEA11280EF550E5DB1D3BD7CB9EF6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20ACEDD92F6EEA11280EF550E5DB1D3BD7CB9EF6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 17:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:e5:f1:bc:3f:48:7a:af:d3:d6:34:c0:3c:2a:73:34:44:b3:05:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20ACEDD92F6EEA11280EF550E5DB1D3BD7CB9EF6
        Validity
            Not Before: Apr  8 19:19:47 2025 GMT
            Not After : Apr  7 19:24:47 2026 GMT
        Subject: CN=DA595C5C927B8F9937FC51B7A9F193214C8327BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:94:f7:7a:07:c2:6e:4b:ca:4e:f9:a0:6a:f3:
                    64:f1:7a:68:5f:7f:4a:f8:dd:b2:3c:05:fa:c4:59:
                    f3:38:84:58:fe:1d:85:62:67:5c:0d:d7:06:9d:04:
                    de:6c:79:36:70:66:52:49:06:26:80:60:ed:b8:36:
                    e7:3c:ec:07:2e:3d:2e:b9:bf:fb:40:b5:fe:1f:f2:
                    5a:80:b7:a0:be:d4:c7:8d:02:3e:3b:7a:a7:0a:e8:
                    d0:d7:57:01:a8:76:8d:97:41:c4:70:a9:bc:67:10:
                    27:68:5b:eb:50:d0:a5:d2:88:d9:c4:fa:9f:9f:81:
                    ca:9c:ea:14:23:af:41:08:77:b3:d8:42:79:91:ed:
                    cc:74:46:7b:33:96:27:ea:be:ce:31:11:35:d0:1c:
                    dc:cd:07:e1:74:ee:e8:bc:d8:f3:76:c9:0d:17:be:
                    58:9d:fc:c5:86:ac:c2:04:8a:eb:a0:aa:fb:e5:b6:
                    13:e2:35:d5:3a:00:41:cb:80:76:73:da:7c:0d:75:
                    52:45:14:e1:25:c3:7c:1f:0b:f9:dd:b5:a6:2c:aa:
                    80:83:a7:ea:09:b4:c0:b2:7e:2d:ae:ca:b6:be:95:
                    a3:7a:c3:3e:ae:07:f5:3f:08:b3:2e:9a:6c:9d:13:
                    1e:a2:a6:b2:e2:fd:73:1b:83:d7:a7:6a:6b:26:04:
                    f3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:59:5C:5C:92:7B:8F:99:37:FC:51:B7:A9:F1:93:21:4C:83:27:BB
            X509v3 Authority Key Identifier:
                keyid:20:AC:ED:D9:2F:6E:EA:11:28:0E:F5:50:E5:DB:1D:3B:D7:CB:9E:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/20ACEDD92F6EEA11280EF550E5DB1D3BD7CB9EF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20ACEDD92F6EEA11280EF550E5DB1D3BD7CB9EF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/323830343a343435303a3a2f33322d313238203d3e20323637363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4450::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:1c:78:6a:36:dd:14:62:ed:23:99:bc:2d:98:c3:74:09:b2:
         23:cd:e2:ab:8f:4e:19:52:1a:78:46:22:b6:a0:0f:84:6b:32:
         3b:79:36:c3:67:ec:20:fd:03:41:f8:ab:be:46:11:da:cb:a9:
         80:73:5e:54:fb:6e:fc:46:9a:3a:55:e8:de:90:14:f7:3e:46:
         90:3f:75:48:7a:e3:56:34:82:15:7e:43:13:93:c2:b3:b6:63:
         b2:42:3c:d9:cd:28:fe:51:3a:12:6d:87:a3:5e:6f:bc:5e:93:
         8a:fd:e8:52:ee:9d:f5:24:24:7a:f0:70:dd:e2:27:49:b2:d7:
         85:b0:e6:d8:16:9a:cd:9d:34:f4:70:f4:50:5f:06:e3:62:d7:
         a3:7f:75:ae:54:62:2e:55:b5:a2:da:c4:2b:ce:8e:4e:36:79:
         70:92:95:3a:aa:f0:4f:74:a7:84:3f:37:62:8a:e0:93:1b:31:
         8e:b0:45:a8:64:f4:16:ca:3a:02:dc:de:25:71:09:56:b5:ee:
         38:23:64:93:c0:ad:98:b8:3b:54:12:8a:98:e6:97:62:ae:f7:
         5f:d0:b4:33:6a:97:18:77:8c:5d:39:a8:fa:db:23:88:52:da:
         86:c9:95:ac:5a:07:f0:75:17:2a:80:28:02:d8:07:0f:d6:c7:
         55:0c:d9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:23 2025 by rpki-client on console.sobornost.net