Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/323830343a386166383a343030303a3a2f33342d3334203d3e20323733373034.roa
File:                     323830343a386166383a343030303a3a2f33342d3334203d3e20323733373034.roa (raw, json)
Hash identifier:          sTMl5oOR+PB27IkCFATLub4H/wVGJc4jQBSRkZbaLIo=
Subject key identifier:   C2:D8:76:19:1C:37:39:F5:BE:12:46:F3:CD:42:54:95:B3:53:DA:66
Certificate issuer:       /CN=23A22E67C9FE9B589275D5C14902FF7C51DADBF6
Certificate serial:       4249B32B8219EC9B2FC1FEF07D60EA2C5ED9198F
Authority key identifier: 23:A2:2E:67:C9:FE:9B:58:92:75:D5:C1:49:02:FF:7C:51:DA:DB:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/323830343a386166383a343030303a3a2f33342d3334203d3e20323733373034.roa
Signing time:             Fri 07 Mar 2025 21:34:29 +0000
ROA not before:           Fri 07 Mar 2025 21:29:29 +0000
ROA not after:            Fri 06 Mar 2026 21:34:29 +0000
asID:                     273704
IP address blocks:        2804:8af8:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.crl
                          rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 21:11:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:49:b3:2b:82:19:ec:9b:2f:c1:fe:f0:7d:60:ea:2c:5e:d9:19:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23A22E67C9FE9B589275D5C14902FF7C51DADBF6
        Validity
            Not Before: Mar  7 21:29:29 2025 GMT
            Not After : Mar  6 21:34:29 2026 GMT
        Subject: CN=C2D876191C3739F5BE1246F3CD425495B353DA66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:17:fb:f3:38:11:45:af:06:9b:b3:3c:2d:7a:
                    d9:45:69:3c:cc:3e:8a:4b:c5:1f:d6:11:12:b4:9c:
                    f9:eb:e5:84:3c:c1:7c:ba:07:82:9d:a8:0b:ed:17:
                    ef:f2:97:90:10:c2:09:e5:2b:96:08:4f:d0:a1:bb:
                    90:2e:cf:b0:78:6a:ef:ce:ac:2a:2b:50:5a:54:29:
                    f0:7c:3c:0f:15:d0:25:3a:8b:63:e3:53:b8:d3:a4:
                    58:32:b3:c8:c0:61:c4:0d:a6:79:de:7b:0d:7b:76:
                    54:a4:43:9f:b2:64:23:81:8a:de:91:18:68:48:74:
                    1c:90:1f:68:54:9c:5a:6c:8a:58:70:f4:7e:ae:5d:
                    08:3f:68:57:f7:81:ea:d9:01:de:e3:3d:04:89:fe:
                    3e:eb:d9:e7:86:6d:b8:5a:43:45:46:bc:d7:8a:a0:
                    bf:30:44:dc:4e:8e:25:d9:d4:36:ca:55:b8:0a:b5:
                    9c:36:6c:e6:9f:3b:43:f3:67:50:42:b8:22:38:74:
                    5e:13:58:a7:16:00:ef:29:8d:50:79:a6:f4:7e:39:
                    24:59:66:e1:ae:53:e4:df:a7:f0:db:d2:da:8c:3f:
                    84:84:f5:36:ce:31:4a:78:00:59:9a:d3:db:04:fb:
                    db:08:56:f1:5a:3d:ec:42:ab:43:ca:4b:ab:b6:de:
                    a0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:D8:76:19:1C:37:39:F5:BE:12:46:F3:CD:42:54:95:B3:53:DA:66
            X509v3 Authority Key Identifier:
                keyid:23:A2:2E:67:C9:FE:9B:58:92:75:D5:C1:49:02:FF:7C:51:DA:DB:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/323830343a386166383a343030303a3a2f33342d3334203d3e20323733373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8af8:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         02:af:53:84:65:49:8e:15:bf:49:b2:c7:90:4e:73:30:a3:a3:
         c6:09:b9:ad:71:de:4c:9c:57:7f:33:fa:08:ef:bf:22:a2:47:
         fc:27:7d:8f:b2:9f:81:b0:e1:f3:98:89:6a:35:19:1b:42:99:
         72:68:ff:aa:8e:8b:11:94:c4:cf:cf:ef:0f:e3:88:2a:3a:ac:
         4a:02:78:ca:c5:c2:5d:10:75:0a:18:72:94:21:12:20:d6:fa:
         0a:32:cc:cf:68:c0:e9:c9:c7:bd:ca:f0:29:c4:f6:07:ac:2f:
         2a:0d:5e:bb:f2:fc:67:cb:c0:8a:88:e2:95:b8:52:65:33:bd:
         34:f2:0e:2b:68:41:a1:4b:dd:68:f0:e4:2d:b3:65:76:28:45:
         96:7c:13:27:9a:95:18:fe:84:a7:da:37:a6:97:66:b8:89:0a:
         ab:0f:15:ec:00:d5:15:4c:71:ad:ff:11:1c:07:76:e9:54:a1:
         ad:0a:53:23:ec:85:27:15:db:0a:cb:07:63:21:41:fc:56:c5:
         48:c4:67:13:58:58:d2:74:bf:0e:9e:3f:4a:7a:6d:d2:71:40:
         2e:ac:78:e1:a3:04:82:47:7b:42:8d:97:a2:70:93:27:ae:4d:
         3c:43:7d:ba:fa:73:93:c5:34:f2:ef:f9:7b:29:95:fc:11:48:
         5f:f9:de:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:40 2025 by rpki-client on console.sobornost.net