Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/323830343a363434303a3a2f33332d3333203d3e20323639343136.roa
File:                     323830343a363434303a3a2f33332d3333203d3e20323639343136.roa (raw, json)
Hash identifier:          Vc2dC3Eac9xHJwzGjtQogGHcQ5usKXZl+5LU+wgqRSo=
Subject key identifier:   DF:CE:83:58:2D:0A:E9:6F:3D:CF:7B:7C:4B:1A:64:2F:8C:8B:BD:02
Certificate issuer:       /CN=8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2
Certificate serial:       5B869651C68F88F083C55C47B485F52DB1E0CD5F
Authority key identifier: 8A:B2:A3:D9:66:16:CA:30:40:EC:FC:C3:0E:C8:98:EF:F6:8B:CD:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/323830343a363434303a3a2f33332d3333203d3e20323639343136.roa
Signing time:             Thu 24 Apr 2025 13:44:36 +0000
ROA not before:           Thu 24 Apr 2025 13:39:36 +0000
ROA not after:            Thu 23 Apr 2026 13:44:36 +0000
asID:                     269416
IP address blocks:        2804:6440::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.crl
                          rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:86:96:51:c6:8f:88:f0:83:c5:5c:47:b4:85:f5:2d:b1:e0:cd:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2
        Validity
            Not Before: Apr 24 13:39:36 2025 GMT
            Not After : Apr 23 13:44:36 2026 GMT
        Subject: CN=DFCE83582D0AE96F3DCF7B7C4B1A642F8C8BBD02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:2c:2d:43:ca:cf:3f:04:d9:f8:e3:f4:2b:ed:
                    99:77:6b:b7:78:96:55:d0:c8:2e:b2:90:f4:1f:0a:
                    fd:3a:a0:4c:54:e9:f8:ab:46:39:23:58:85:52:ff:
                    f8:86:99:a2:6a:0e:0b:56:6c:5f:c2:9e:69:c7:3f:
                    68:b0:d1:1e:b1:2c:05:3d:dc:c5:dd:ce:64:71:4f:
                    4d:ca:5e:b7:6e:3f:7d:53:a7:d9:6a:ca:2d:64:82:
                    33:9d:4b:bc:d5:99:71:ba:ca:4a:04:be:67:c9:07:
                    ba:6b:82:09:2c:57:51:38:aa:ae:07:6f:ea:b6:c1:
                    87:9c:28:f2:18:96:45:56:f2:8a:dc:ed:3a:d5:f4:
                    96:bb:2b:99:19:df:bd:fd:03:5b:96:dd:48:18:63:
                    79:90:61:db:54:05:02:f6:39:69:29:cf:d2:1e:7e:
                    4c:6d:7c:40:dd:ee:e1:ed:ab:40:53:c1:7a:d2:37:
                    51:61:cb:27:e0:66:71:c2:37:d9:2f:ad:4c:13:bf:
                    99:9e:aa:96:d9:4a:55:d1:51:f0:17:b3:b3:48:0a:
                    9e:1c:60:e3:dc:77:78:62:3c:af:3e:1f:db:d5:4f:
                    a5:d8:ef:07:35:82:dd:64:63:e2:81:07:e0:68:25:
                    27:85:06:77:3c:60:95:00:8c:65:f2:df:1c:a8:d5:
                    66:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:CE:83:58:2D:0A:E9:6F:3D:CF:7B:7C:4B:1A:64:2F:8C:8B:BD:02
            X509v3 Authority Key Identifier:
                keyid:8A:B2:A3:D9:66:16:CA:30:40:EC:FC:C3:0E:C8:98:EF:F6:8B:CD:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/323830343a363434303a3a2f33332d3333203d3e20323639343136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6440::/33

    Signature Algorithm: sha256WithRSAEncryption
         03:98:1d:ff:5b:68:29:3d:07:1a:da:ff:8e:e6:2d:81:a8:c1:
         42:7c:3a:82:4b:72:c3:ce:69:8f:e2:f3:4a:52:15:95:01:d4:
         69:38:f7:9a:e8:a3:d3:c1:6e:82:10:ab:f6:1d:d0:44:f2:fd:
         80:96:77:56:96:b6:9e:8d:8e:c7:32:07:53:b9:1d:de:c2:e8:
         99:72:7e:4f:8a:ef:4f:9f:87:cf:1b:82:92:cc:0a:03:33:46:
         aa:55:b8:a8:b1:93:4f:af:08:24:70:9f:55:99:18:49:37:fe:
         7f:fe:cf:39:bf:9c:4a:a9:45:3a:dc:ba:0c:ab:ce:7b:6e:4c:
         a4:58:57:31:31:28:65:fa:52:b1:c2:11:fe:bd:f9:b8:5e:ed:
         82:85:cd:b6:b1:c4:1b:66:81:99:68:12:01:9f:62:e5:f2:97:
         7d:52:b5:8f:c1:e8:21:9c:ae:73:d8:9b:a2:fd:8e:0a:16:9a:
         4c:2b:6c:b2:9d:75:6b:44:ce:5c:7f:86:e2:01:11:3c:59:e3:
         5a:26:e2:3a:4b:c5:45:66:3a:55:4a:3b:b1:02:b0:39:70:8b:
         c2:8f:cc:88:fe:f3:71:fd:62:86:81:48:c0:11:37:92:bf:38:
         53:14:53:39:a7:fb:ef:d1:ff:55:b6:d4:d3:cc:8c:5f:8a:87:
         af:30:b1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:29 2025 by rpki-client on console.sobornost.net