Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/323830343a363434303a383030303a3a2f33332d3333203d3e20323639343136.roa
File:                     323830343a363434303a383030303a3a2f33332d3333203d3e20323639343136.roa (raw, json)
Hash identifier:          9OrqIBcl9BBF4I+KdG10rmbQ+0iJzlS6L7yglnBBudk=
Subject key identifier:   DE:5A:9A:52:D4:C7:CD:E7:45:33:73:0C:C1:7A:2F:B6:E1:E1:AF:17
Certificate issuer:       /CN=8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2
Certificate serial:       331667F986CA09E4048A4D04B8F8D1B1BE01530B
Authority key identifier: 8A:B2:A3:D9:66:16:CA:30:40:EC:FC:C3:0E:C8:98:EF:F6:8B:CD:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/323830343a363434303a383030303a3a2f33332d3333203d3e20323639343136.roa
Signing time:             Thu 24 Apr 2025 13:44:37 +0000
ROA not before:           Thu 24 Apr 2025 13:39:37 +0000
ROA not after:            Thu 23 Apr 2026 13:44:37 +0000
asID:                     269416
IP address blocks:        2804:6440:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.crl
                          rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:16:67:f9:86:ca:09:e4:04:8a:4d:04:b8:f8:d1:b1:be:01:53:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2
        Validity
            Not Before: Apr 24 13:39:37 2025 GMT
            Not After : Apr 23 13:44:37 2026 GMT
        Subject: CN=DE5A9A52D4C7CDE74533730CC17A2FB6E1E1AF17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4d:ee:52:28:24:93:94:64:69:91:33:9f:8f:
                    9e:b8:38:ec:cc:c7:1c:cd:6f:5c:46:c6:0c:77:4c:
                    32:a8:a3:b0:01:bc:58:f8:3f:b0:53:20:1e:d8:a1:
                    89:8f:6a:b8:2c:e2:52:62:8b:de:86:6e:7e:59:28:
                    7d:d8:63:50:dd:b1:5a:a1:18:c5:de:39:be:e7:ea:
                    92:50:ee:f6:11:f7:e5:df:84:4f:45:a9:44:7b:ee:
                    d5:49:3b:df:97:c3:90:1d:04:18:ac:65:90:69:06:
                    2e:fc:0d:87:81:96:f3:0c:fd:d8:2a:08:5d:d7:b8:
                    75:73:8d:bb:a1:b7:7e:6a:2b:af:81:54:df:29:37:
                    f5:be:e7:ed:5c:a8:cf:35:a7:e3:a7:85:e5:86:db:
                    23:a3:75:af:94:66:d2:64:5e:bd:48:a8:4f:6b:95:
                    c0:5b:a7:0f:65:4f:58:24:13:6f:4a:0b:7d:49:b4:
                    2f:03:b0:ae:77:15:1a:6a:fc:a5:9d:1a:2d:55:bb:
                    7f:d2:76:74:f7:1c:6b:78:fb:f8:80:09:24:a8:eb:
                    e3:23:99:09:69:60:be:52:88:6e:48:0f:bf:db:bb:
                    f2:60:6c:70:fc:97:0a:d2:b5:d7:b6:b1:6b:02:fd:
                    8a:72:ec:70:e7:40:01:bc:ff:ba:fa:d9:c8:01:39:
                    bd:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:5A:9A:52:D4:C7:CD:E7:45:33:73:0C:C1:7A:2F:B6:E1:E1:AF:17
            X509v3 Authority Key Identifier:
                keyid:8A:B2:A3:D9:66:16:CA:30:40:EC:FC:C3:0E:C8:98:EF:F6:8B:CD:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/323830343a363434303a383030303a3a2f33332d3333203d3e20323639343136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6440:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         a1:15:6f:e4:bd:b4:13:15:a7:82:5a:43:0b:b2:bf:9f:2d:de:
         a8:3b:9e:50:8d:1b:f9:e5:6c:0c:39:ec:b2:fa:77:72:a6:e0:
         46:88:0d:80:1f:1f:1f:88:47:70:f9:73:4a:7e:3e:dd:b2:ab:
         dc:a5:e2:f5:02:8a:70:ca:20:68:d2:65:21:1c:95:58:9f:3c:
         c7:b5:61:52:ec:ee:62:f7:e2:db:ac:61:74:1c:61:eb:6c:2c:
         b9:33:64:42:09:1c:3e:8d:59:03:ad:71:9b:50:14:75:d0:5e:
         ff:93:a9:3c:04:c0:9c:52:be:82:67:00:23:f8:4a:82:05:e7:
         84:ac:e2:34:cf:e2:c4:ee:0f:e3:63:1d:88:52:c5:08:65:ae:
         ad:60:43:51:b3:6e:a2:d5:16:a6:ca:f4:20:08:68:51:f0:d9:
         19:64:9a:86:d1:a9:d4:7c:87:84:82:13:3e:8a:b3:bd:a1:18:
         d4:af:8d:62:3c:e4:b0:c3:3b:17:39:be:69:db:2d:46:ea:08:
         c2:45:d8:bb:cf:83:fc:7c:f6:b9:54:52:6e:9f:57:fb:dc:61:
         c0:f5:6a:2a:5b:dc:8a:71:7f:07:82:e0:b3:84:8f:8c:44:41:
         77:87:a2:b2:84:52:e2:32:72:1c:a3:56:39:58:b8:4f:a3:72:
         12:0d:76:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:29 2025 by rpki-client on console.sobornost.net