Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/323830343a313263633a323830303a3a2f34382d3438203d3e20323633343939.roa
File:                     323830343a313263633a323830303a3a2f34382d3438203d3e20323633343939.roa (raw, json)
Hash identifier:          E9Fov4LRm+QbjL6Wh1C1f4V+hzzu8O7Au+3B9XIQmRM=
Subject key identifier:   47:5A:78:99:33:52:7C:72:07:0B:63:98:45:C7:93:AE:E3:11:FB:A4
Certificate issuer:       /CN=785724BA2C79C31B8A2DA54506CAE7886EA06BE7
Certificate serial:       3552B802349A19212F2EF9A168AA76C9A646D485
Authority key identifier: 78:57:24:BA:2C:79:C3:1B:8A:2D:A5:45:06:CA:E7:88:6E:A0:6B:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/323830343a313263633a323830303a3a2f34382d3438203d3e20323633343939.roa
Signing time:             Sat 01 Feb 2025 18:51:28 +0000
ROA not before:           Sat 01 Feb 2025 18:46:28 +0000
ROA not after:            Sat 31 Jan 2026 18:51:28 +0000
asID:                     263499
IP address blocks:        2804:12cc:2800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.crl
                          rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:52:b8:02:34:9a:19:21:2f:2e:f9:a1:68:aa:76:c9:a6:46:d4:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=785724BA2C79C31B8A2DA54506CAE7886EA06BE7
        Validity
            Not Before: Feb  1 18:46:28 2025 GMT
            Not After : Jan 31 18:51:28 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5c:ea:bb:99:08:bc:22:fe:52:06:70:71:94:
                    22:99:31:61:bb:f0:4b:d8:1b:6e:36:62:ef:a2:9f:
                    3b:31:a1:73:77:ba:a1:56:d1:f5:53:5b:69:f7:86:
                    81:34:60:ba:87:e3:b6:77:df:34:f4:11:2a:ab:20:
                    6c:08:12:e8:cb:20:ad:9f:1f:a5:4c:e4:70:4c:4e:
                    0e:75:44:51:c3:ca:d9:26:cf:1e:43:66:48:c3:42:
                    30:82:b3:aa:39:5a:03:5b:6b:69:38:90:dd:8a:72:
                    98:37:60:b7:40:51:28:74:a1:8c:9b:dc:15:99:8e:
                    11:df:d3:3b:e5:5d:dd:34:46:34:14:81:3c:5c:59:
                    8c:5b:fd:8a:ef:2e:65:b9:74:b4:43:09:4b:6d:67:
                    a0:1b:ae:c5:1b:6d:5f:7e:c2:04:83:ca:6e:fc:0c:
                    54:9e:55:4a:2a:f6:e5:dc:75:85:37:1f:6a:a1:36:
                    d3:b6:02:60:80:cb:2b:6b:b9:6d:de:bb:cc:b1:2d:
                    19:81:21:cb:af:20:f6:19:23:b4:8f:25:7b:97:22:
                    ab:f3:77:98:f7:1e:8b:ad:e6:10:d5:6a:9b:1d:96:
                    ea:59:8c:ca:0c:ef:be:d2:fa:fc:f2:c9:21:2f:bf:
                    b2:c4:6d:42:35:d3:64:7c:6d:12:68:1d:36:b4:25:
                    81:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:5A:78:99:33:52:7C:72:07:0B:63:98:45:C7:93:AE:E3:11:FB:A4
            X509v3 Authority Key Identifier:
                keyid:78:57:24:BA:2C:79:C3:1B:8A:2D:A5:45:06:CA:E7:88:6E:A0:6B:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/323830343a313263633a323830303a3a2f34382d3438203d3e20323633343939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:12cc:2800::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:6a:22:9a:08:ff:ee:90:5d:a6:8f:f7:aa:41:10:7a:ac:2c:
         1c:36:8c:a7:8f:ec:47:a7:d6:dc:e8:00:28:01:b3:37:b1:c1:
         09:9e:ac:fa:de:01:0c:0d:34:c4:2c:03:0a:30:49:ee:c1:53:
         0a:73:4e:9f:5d:aa:f4:cf:ee:3c:a7:8a:c2:a3:ec:ff:48:d7:
         8b:10:e6:9d:f4:e1:f9:38:3a:e7:dd:90:83:71:fd:49:b4:78:
         1c:bd:0e:71:f8:8e:1f:5e:9e:62:bc:09:29:7d:a7:75:fb:71:
         ac:43:60:68:b1:c5:22:83:2a:5e:16:cc:41:2f:c9:a8:34:33:
         41:5f:34:99:b9:9d:09:e7:6d:db:42:f6:7c:a6:74:08:c1:97:
         22:9e:27:47:f5:f1:b3:81:00:55:8a:15:0e:c2:68:53:4e:79:
         66:98:29:1c:59:ef:a3:a3:5e:15:ea:19:a5:59:f9:e2:2e:cb:
         c5:f1:36:d0:93:e5:f6:46:3e:89:ba:a3:25:6c:c9:26:0a:ee:
         c3:eb:23:de:bd:75:01:70:a2:7b:55:34:e6:e4:a7:1f:67:24:
         ba:a4:c6:92:78:32:fb:75:ff:bb:24:4f:8e:14:95:c7:3f:3b:
         b7:27:a3:74:c4:60:c6:26:61:bc:1d:f5:ed:99:65:2c:bb:27:
         ce:ba:b9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:40:43 2025 by rpki-client on console.sobornost.net