Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/323830343a3136343a663830303a3a2f34302d3430203d3e20323632363633.roa
File:                     323830343a3136343a663830303a3a2f34302d3430203d3e20323632363633.roa (raw, json)
Hash identifier:          xdnGhXdqE59GRQn3MlNsiBSivyDSGQ4qVQ5OQf6zzqE=
Subject key identifier:   34:96:2E:80:E0:F2:5A:A5:08:D4:73:1A:4F:E5:8D:16:0C:AC:6E:9B
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       4509A5318C6E356D122477BC2B04A8F42C8389F1
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/323830343a3136343a663830303a3a2f34302d3430203d3e20323632363633.roa
Signing time:             Thu 06 Mar 2025 03:16:59 +0000
ROA not before:           Thu 06 Mar 2025 03:11:59 +0000
ROA not after:            Thu 05 Mar 2026 03:16:59 +0000
asID:                     262663
IP address blocks:        2804:164:f800::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 05:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:09:a5:31:8c:6e:35:6d:12:24:77:bc:2b:04:a8:f4:2c:83:89:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Mar  6 03:11:59 2025 GMT
            Not After : Mar  5 03:16:59 2026 GMT
        Subject: CN=34962E80E0F25AA508D4731A4FE58D160CAC6E9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:af:cc:43:8e:28:43:1f:80:6c:c2:d5:c4:e2:
                    49:a9:29:a6:64:24:64:b1:c6:76:ef:8a:f0:60:ac:
                    18:20:9f:27:f9:8c:5d:00:55:ed:bc:fe:56:46:79:
                    fd:47:76:55:70:72:cf:9a:27:94:47:38:5a:2b:6b:
                    7d:77:e3:44:c7:e9:29:eb:ea:21:3c:fd:67:ac:1d:
                    ee:5f:29:61:d9:81:02:90:15:d8:50:0b:37:50:44:
                    b5:f0:62:db:25:16:be:06:74:f1:1a:92:02:00:36:
                    ea:ca:26:60:73:56:70:c8:ab:85:50:bc:7e:ce:d4:
                    d6:32:77:ca:5c:19:82:19:98:1d:ee:bd:82:86:68:
                    7d:26:b6:00:89:cf:48:25:95:85:00:0d:d5:63:79:
                    87:8c:22:53:f6:ee:88:e4:10:e3:55:0a:a8:ec:1a:
                    ab:5f:8a:58:bc:48:42:6f:0d:6e:0a:93:41:98:8d:
                    71:20:d7:96:57:10:44:c0:3c:59:8f:8d:72:38:9c:
                    48:b3:bf:26:eb:54:0d:98:84:5c:76:80:79:46:5e:
                    de:d1:08:ec:2b:a8:a6:80:77:9d:79:67:9e:24:ff:
                    5d:e8:37:77:de:a3:a8:1d:72:46:5a:6e:1c:01:ee:
                    13:0a:ac:11:5b:b5:24:07:2a:c8:45:29:38:72:e0:
                    53:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:96:2E:80:E0:F2:5A:A5:08:D4:73:1A:4F:E5:8D:16:0C:AC:6E:9B
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/323830343a3136343a663830303a3a2f34302d3430203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:164:f800::/40

    Signature Algorithm: sha256WithRSAEncryption
         2b:96:a6:69:bb:03:1f:a4:d2:60:b0:72:cb:ab:71:f5:d0:5b:
         6d:30:c9:cc:ac:8e:ea:be:62:c0:a5:a2:91:8c:d1:8b:bc:25:
         86:d4:7c:cf:da:42:f7:bc:14:bc:a4:31:0e:71:64:c8:c4:13:
         bd:c3:67:0e:c7:57:65:86:75:2c:8c:c9:3f:e3:2f:fd:af:76:
         6e:76:02:65:af:2d:56:80:ab:e5:f7:25:76:8d:82:70:77:fc:
         6d:9f:90:bd:52:0d:9a:dd:3f:a0:fd:44:32:30:e5:05:fe:7e:
         6e:40:15:9b:42:32:08:1e:e9:6e:d3:0a:d3:ef:1d:76:c3:de:
         1a:73:c3:64:d4:ba:a3:07:ed:e4:cd:99:5c:40:88:83:1f:97:
         ab:62:c6:6e:95:56:bc:46:17:7e:ff:76:4e:ed:4b:06:01:4f:
         81:03:e0:c7:dc:77:53:22:3f:da:5f:ae:41:88:b9:9b:19:e5:
         63:45:3d:2a:b7:b8:a8:cd:66:37:fe:75:70:4a:8f:b6:60:bf:
         45:0c:62:c5:2a:2d:e9:79:10:ce:0b:f1:4e:1a:1d:3b:ca:99:
         9f:4d:9c:48:b1:c8:51:45:03:c9:3d:ac:31:35:c2:35:fa:db:
         f9:38:a1:20:fc:1c:41:b9:51:5f:e8:68:41:44:4f:e5:5e:68:
         63:80:2a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:16:49 2025 by rpki-client on console.sobornost.net