Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/1/323830343a323032303a3a2f33322d3438203d3e20323634343730.roa
File:                     323830343a323032303a3a2f33322d3438203d3e20323634343730.roa (raw, json)
Hash identifier:          OMMS11OeUiHpd1pIS6OUby2WvxhXAqQgv78+NqvvvsQ=
Subject key identifier:   3B:EF:69:77:F8:96:A3:55:FD:29:73:1B:EE:83:27:21:AF:C9:5C:6F
Certificate issuer:       /CN=6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4
Certificate serial:       3644E4DBE79EA550EE078F06C901AEF90797AAEC
Authority key identifier: 6F:F2:A4:03:3B:E3:4E:02:3E:9C:C8:CA:78:CA:78:5B:05:DE:7D:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/1/323830343a323032303a3a2f33322d3438203d3e20323634343730.roa
Signing time:             Wed 23 Apr 2025 21:05:50 +0000
ROA not before:           Wed 23 Apr 2025 21:00:50 +0000
ROA not after:            Wed 22 Apr 2026 21:05:50 +0000
asID:                     264470
IP address blocks:        2804:2020::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/1/6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4.crl
                          rsync://rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/1/6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 09:56:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:44:e4:db:e7:9e:a5:50:ee:07:8f:06:c9:01:ae:f9:07:97:aa:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4
        Validity
            Not Before: Apr 23 21:00:50 2025 GMT
            Not After : Apr 22 21:05:50 2026 GMT
        Subject: CN=3BEF6977F896A355FD29731BEE832721AFC95C6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:92:e0:36:8a:37:8e:6b:c8:98:f3:46:23:b4:
                    6d:39:fa:a1:b7:60:b6:f5:89:b8:ba:b1:68:a3:51:
                    b0:c7:72:63:87:d4:78:74:28:f6:d5:c0:2c:de:05:
                    b0:c2:58:5d:31:cc:cd:fc:7e:5f:4c:7d:a6:96:eb:
                    8c:9f:c0:c9:a9:be:8d:2e:26:3e:b7:ef:80:1b:53:
                    be:37:11:3b:21:f4:8e:22:9a:6e:21:75:c6:71:cc:
                    6f:1a:1b:26:bf:f7:71:8e:89:e9:6a:5e:5b:93:5d:
                    e5:95:55:76:e2:85:16:de:5b:ae:25:40:66:de:8e:
                    c8:02:d1:7f:48:76:7e:ec:83:d4:d5:94:76:eb:a8:
                    12:98:b1:ae:d1:18:24:04:81:95:d5:62:29:b8:8a:
                    c7:37:4e:96:74:07:97:ca:a6:d0:3a:5f:69:17:ac:
                    11:01:23:b1:ac:97:56:0a:d2:2c:f6:b7:e7:55:cb:
                    84:1e:17:1a:7e:ad:ef:68:4b:08:36:3d:0e:98:6c:
                    97:63:ca:e9:a4:4d:2e:7e:f9:33:e0:f0:ed:e7:15:
                    5c:80:a9:95:09:c3:1e:f3:5e:2b:ac:d8:f4:3e:07:
                    22:a6:05:3d:ac:26:fd:fa:7a:7c:65:e3:52:de:3b:
                    27:d6:bf:84:cf:fc:21:bc:d0:34:20:20:b6:92:18:
                    87:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:EF:69:77:F8:96:A3:55:FD:29:73:1B:EE:83:27:21:AF:C9:5C:6F
            X509v3 Authority Key Identifier:
                keyid:6F:F2:A4:03:3B:E3:4E:02:3E:9C:C8:CA:78:CA:78:5B:05:DE:7D:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/1/6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/1/323830343a323032303a3a2f33322d3438203d3e20323634343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2020::/32

    Signature Algorithm: sha256WithRSAEncryption
         b9:7b:76:45:82:f1:69:37:6d:84:e2:1f:ee:05:4b:8e:fd:64:
         a1:bd:ce:f9:80:23:3e:df:bb:82:b5:53:40:23:80:af:3e:7b:
         05:a5:e9:e8:54:b7:65:b1:5b:51:e6:44:a4:f3:51:70:26:40:
         cc:9d:bf:67:54:84:06:eb:e0:80:07:ae:62:6b:fe:ec:5d:a3:
         a4:4a:b8:aa:ee:df:56:1f:68:bb:3f:da:83:5d:d8:57:cb:f5:
         ec:e2:12:e9:e9:11:0d:ad:d1:1e:3a:24:b9:cf:41:6a:01:21:
         6b:10:ec:42:c4:5b:4a:1e:ad:d0:c5:bd:61:cc:99:ea:93:60:
         4f:48:ca:65:9b:c8:f4:e1:37:4e:5e:dc:1b:1f:a4:58:74:ba:
         de:ab:de:7f:7e:2c:b7:89:90:69:4a:f3:40:ea:89:b4:6c:e7:
         d1:ad:33:55:fd:0a:6d:f4:c0:a8:c2:65:87:54:36:2f:be:56:
         f9:18:9c:e8:23:60:86:88:3a:90:f4:17:45:8e:67:bf:e7:b3:
         30:63:c3:99:40:6e:9b:ef:bd:b7:6a:c5:c5:d6:3a:32:d9:31:
         52:28:3e:06:ee:5d:96:73:ee:0c:1a:e9:e7:37:05:de:8c:ad:
         6d:1c:73:c5:24:85:2d:54:af:6e:e6:e6:a7:7d:3e:30:8a:1e:
         89:bd:1b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:28 2025 by rpki-client on console.sobornost.net