Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/323830343a363434303a3a2f33322d3332203d3e20323639343136.roa
File:                     323830343a363434303a3a2f33322d3332203d3e20323639343136.roa (raw, json)
Hash identifier:          0kyCuopAtNf7Aw3oMWm6J5opmOGLx/oPs5YJRmBvM6k=
Subject key identifier:   BB:94:3E:95:37:1C:CB:20:F4:32:6F:04:75:9C:35:AE:60:C1:C0:11
Certificate issuer:       /CN=8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2
Certificate serial:       0B0B8726C2CC158063E0D21D997B9F7DC60D7909
Authority key identifier: 8A:B2:A3:D9:66:16:CA:30:40:EC:FC:C3:0E:C8:98:EF:F6:8B:CD:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/323830343a363434303a3a2f33322d3332203d3e20323639343136.roa
Signing time:             Thu 24 Apr 2025 13:44:36 +0000
ROA not before:           Thu 24 Apr 2025 13:39:36 +0000
ROA not after:            Thu 23 Apr 2026 13:44:36 +0000
asID:                     269416
IP address blocks:        2804:6440::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.crl
                          rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:0b:87:26:c2:cc:15:80:63:e0:d2:1d:99:7b:9f:7d:c6:0d:79:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2
        Validity
            Not Before: Apr 24 13:39:36 2025 GMT
            Not After : Apr 23 13:44:36 2026 GMT
        Subject: CN=BB943E95371CCB20F4326F04759C35AE60C1C011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7c:ba:ce:8d:29:9c:25:65:4f:f3:f6:a6:c1:
                    fb:2f:c2:3f:78:28:b1:3c:82:74:19:7f:05:e1:f1:
                    2d:f3:9c:2b:ab:5c:fe:b4:5a:26:36:7d:a6:a9:3d:
                    b8:1c:dd:6c:63:04:7e:91:7b:38:47:18:17:23:05:
                    5a:d7:c1:4a:7e:8b:a3:a1:ce:5a:ba:2c:2b:df:32:
                    fc:ec:ff:b9:5f:b4:cc:a9:0e:b9:f7:2d:89:7d:b0:
                    03:dc:bd:08:03:da:f6:8b:f7:39:ac:23:3c:0a:b8:
                    42:9b:72:83:78:d2:78:89:ad:4a:23:6d:14:72:2e:
                    69:87:16:fd:34:16:04:e4:ba:9a:7d:ea:38:cc:5b:
                    f1:7c:42:38:6d:79:7f:0d:7e:20:27:6e:a3:87:27:
                    4b:a5:0f:31:a6:8c:05:cd:5d:00:54:3a:58:0c:d5:
                    73:da:b7:14:fb:60:45:69:10:3e:0d:d4:97:0f:61:
                    b2:10:e2:18:e8:c5:01:01:de:f0:65:72:8b:d9:61:
                    ec:cd:c4:b5:78:24:99:17:14:f7:b8:16:3a:7f:b5:
                    ef:ed:1a:66:f1:41:02:f6:af:6d:0c:21:8e:49:5b:
                    92:c5:54:16:2f:96:54:67:42:28:9f:d6:66:09:2f:
                    af:f6:e1:08:1a:7e:4f:64:a7:c2:c2:ad:f9:28:d7:
                    94:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:94:3E:95:37:1C:CB:20:F4:32:6F:04:75:9C:35:AE:60:C1:C0:11
            X509v3 Authority Key Identifier:
                keyid:8A:B2:A3:D9:66:16:CA:30:40:EC:FC:C3:0E:C8:98:EF:F6:8B:CD:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/323830343a363434303a3a2f33322d3332203d3e20323639343136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6440::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:84:9d:9e:3c:7d:b5:c5:db:50:92:c9:48:d3:c4:c6:7d:48:
         d5:2e:1a:c6:ed:bb:9e:fa:72:16:9f:48:cb:91:77:ac:81:de:
         e8:ed:1f:df:36:ce:7e:da:d3:c7:d3:98:c5:ed:73:91:bf:1d:
         03:53:fc:ab:37:7b:48:a9:6c:81:89:9b:1a:13:7e:47:85:7f:
         f8:dd:5d:a7:43:17:e0:76:ed:65:b7:df:b1:34:a2:8f:f9:dd:
         4e:65:3b:68:b1:86:0b:6a:fb:fb:1f:0a:53:19:02:b3:e4:44:
         27:40:f2:a4:a4:24:e2:aa:52:46:ba:b8:5a:8c:00:9b:ab:05:
         48:1e:1d:8c:34:0b:ec:e6:83:99:05:9b:08:dc:ab:1f:db:a7:
         b8:36:f5:7e:ee:25:90:7c:4b:54:43:82:27:45:31:81:6e:66:
         a6:bf:05:9c:ff:21:99:14:6c:db:15:28:03:5c:66:2b:31:d6:
         db:e3:bc:14:12:6a:39:78:cb:81:55:9c:34:dd:52:05:6a:d2:
         89:40:8c:72:8f:86:c4:c4:1f:19:63:e6:fc:24:97:e7:5c:9a:
         fc:54:f0:93:7b:94:74:d9:7e:9a:29:03:1d:8d:4d:5d:43:1c:
         38:89:c9:a1:17:24:80:60:55:70:4b:81:29:db:d5:67:e9:3b:
         02:64:9a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:29 2025 by rpki-client on console.sobornost.net