Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/323830343a386166383a383030303a3a2f33342d3334203d3e20323733373034.roa
File:                     323830343a386166383a383030303a3a2f33342d3334203d3e20323733373034.roa (raw, json)
Hash identifier:          HYoFVQcqZGemQ3ppyPtnBcGaTkZRv9Y586oS+HeRgn0=
Subject key identifier:   C7:C6:52:89:76:64:F5:F5:89:2C:62:A6:5C:58:47:30:DF:8A:E2:21
Certificate issuer:       /CN=23A22E67C9FE9B589275D5C14902FF7C51DADBF6
Certificate serial:       79A64CB5A57A87F117D25C986FAFB96601236C1E
Authority key identifier: 23:A2:2E:67:C9:FE:9B:58:92:75:D5:C1:49:02:FF:7C:51:DA:DB:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/323830343a386166383a383030303a3a2f33342d3334203d3e20323733373034.roa
Signing time:             Fri 07 Mar 2025 21:34:42 +0000
ROA not before:           Fri 07 Mar 2025 21:29:42 +0000
ROA not after:            Fri 06 Mar 2026 21:34:42 +0000
asID:                     273704
IP address blocks:        2804:8af8:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.crl
                          rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 21:11:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:a6:4c:b5:a5:7a:87:f1:17:d2:5c:98:6f:af:b9:66:01:23:6c:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23A22E67C9FE9B589275D5C14902FF7C51DADBF6
        Validity
            Not Before: Mar  7 21:29:42 2025 GMT
            Not After : Mar  6 21:34:42 2026 GMT
        Subject: CN=C7C652897664F5F5892C62A65C584730DF8AE221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:b8:f6:8d:a3:f5:fa:d0:10:c6:c1:9b:42:79:
                    71:51:fd:7a:64:b3:51:7c:55:20:98:1b:c8:96:63:
                    ce:8f:2e:97:df:20:eb:75:f6:a9:c1:43:4d:f8:a8:
                    ec:d2:cb:b5:27:93:f8:7b:e6:47:48:7d:31:02:81:
                    66:83:7e:a4:fa:e0:eb:96:43:70:04:74:6e:dc:8f:
                    3e:dc:c2:b2:af:71:76:64:ef:8b:6a:5d:a4:61:6a:
                    23:88:54:42:4e:48:cb:51:39:f3:39:79:ee:60:a7:
                    31:76:3c:5d:8c:fc:74:34:e6:5e:90:50:e6:e5:a5:
                    27:ae:62:2d:2e:2c:eb:f8:f0:88:e7:92:30:ce:67:
                    34:d1:be:d3:61:71:59:2f:fa:1b:8d:84:47:c9:c7:
                    50:92:39:f9:d8:2c:fa:54:3c:40:52:c0:04:11:81:
                    d7:d5:73:f4:d9:6a:31:2a:b9:41:ac:cc:de:e9:25:
                    5d:46:b8:34:9d:d2:5b:f7:fe:a4:56:8a:fe:b1:d8:
                    91:00:70:63:13:8a:24:f0:b9:8d:47:cf:09:c5:80:
                    ce:2f:38:bb:79:ad:d0:be:a3:f2:55:36:f8:12:a7:
                    5c:55:c0:9c:d3:5f:6e:89:4e:2b:57:29:ff:a0:b8:
                    9a:14:86:6e:ec:f8:35:17:6c:47:43:e9:90:e7:c0:
                    b4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C6:52:89:76:64:F5:F5:89:2C:62:A6:5C:58:47:30:DF:8A:E2:21
            X509v3 Authority Key Identifier:
                keyid:23:A2:2E:67:C9:FE:9B:58:92:75:D5:C1:49:02:FF:7C:51:DA:DB:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/323830343a386166383a383030303a3a2f33342d3334203d3e20323733373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8af8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5f:03:d1:40:b0:7c:46:87:f3:72:a0:32:b5:6c:ee:68:c3:b3:
         69:51:80:e9:31:e8:f5:83:75:04:ac:7e:e5:13:7e:64:86:ad:
         bf:ae:04:2b:52:9e:ec:14:c5:26:81:c9:fa:ec:9a:ab:b4:31:
         e1:e7:b0:b6:4c:38:10:91:91:a4:ca:42:9d:d6:cb:a8:31:31:
         e2:d2:3a:23:04:7f:58:29:e1:d9:10:13:28:1c:d0:6a:7f:bc:
         0b:40:1e:13:dd:55:82:8b:28:ed:79:a1:43:0b:60:cb:d3:03:
         c3:07:41:17:1f:45:2b:6d:41:44:31:45:4f:94:4c:c7:f3:a4:
         89:15:9e:a6:70:97:9f:d3:27:f1:21:b5:c0:ea:24:9b:11:29:
         46:f5:ab:90:6c:bb:f0:90:65:e0:41:c9:23:01:d1:a9:08:b8:
         c1:1d:75:da:da:88:1f:1e:d7:ed:49:1c:7b:dd:27:a3:5f:fc:
         f7:8f:a3:06:3f:8d:22:cb:4a:71:4a:c2:a3:8c:db:cb:c6:07:
         90:a3:d3:43:20:ac:ff:44:c7:94:06:08:d6:b3:0f:ba:41:66:
         d0:06:2e:a4:99:e0:9f:9b:69:ec:e0:aa:3f:04:2e:fa:c3:9a:
         41:4f:13:3c:bf:cf:5c:8c:e9:c3:6b:1a:30:83:e4:86:b8:60:
         0c:f3:8c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:40 2025 by rpki-client on console.sobornost.net