Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/1/323830343a363263633a3a2f33322d3332203d3e20323639333139.roa
File:                     323830343a363263633a3a2f33322d3332203d3e20323639333139.roa (raw, json)
Hash identifier:          M24Yd5HPiU2C+diIqvOqTNOh7McRvUqMSjlrSKK0tfQ=
Subject key identifier:   33:30:63:E9:F7:9F:51:7C:81:1F:43:E3:9D:B5:62:6D:19:2D:FF:FD
Certificate issuer:       /CN=63BA71C49B8F75EE0609181073EF8E8CD5E99AD6
Certificate serial:       0E24E8938C7147DC4CEFB2CC7547CB4D4B08628C
Authority key identifier: 63:BA:71:C4:9B:8F:75:EE:06:09:18:10:73:EF:8E:8C:D5:E9:9A:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63BA71C49B8F75EE0609181073EF8E8CD5E99AD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/1/323830343a363263633a3a2f33322d3332203d3e20323639333139.roa
Signing time:             Sat 29 Mar 2025 00:55:56 +0000
ROA not before:           Sat 29 Mar 2025 00:50:56 +0000
ROA not after:            Sat 28 Mar 2026 00:55:56 +0000
asID:                     269319
IP address blocks:        2804:62cc::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/1/63BA71C49B8F75EE0609181073EF8E8CD5E99AD6.crl
                          rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/1/63BA71C49B8F75EE0609181073EF8E8CD5E99AD6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63BA71C49B8F75EE0609181073EF8E8CD5E99AD6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:24:e8:93:8c:71:47:dc:4c:ef:b2:cc:75:47:cb:4d:4b:08:62:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63BA71C49B8F75EE0609181073EF8E8CD5E99AD6
        Validity
            Not Before: Mar 29 00:50:56 2025 GMT
            Not After : Mar 28 00:55:56 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c4:95:6c:63:a9:09:4f:2c:3c:d1:8a:ad:92:
                    8a:ef:3c:74:ac:03:83:cf:e8:67:83:74:3c:77:19:
                    fc:89:7c:63:d1:a9:17:28:34:b5:ea:11:ac:79:99:
                    0e:a7:4f:9c:06:a9:d9:07:01:f2:a5:b6:f6:d3:2d:
                    01:20:6e:82:fa:de:e3:97:eb:9c:1e:2c:a3:68:b2:
                    80:01:32:eb:c7:8a:7a:43:76:1a:13:72:53:46:1f:
                    6d:4e:ea:18:ec:8d:79:7f:4d:30:15:ef:c6:1f:00:
                    b7:a6:69:a9:c2:14:3a:09:d3:c5:c5:90:a4:ad:ad:
                    a8:d4:bb:b6:92:e9:de:02:8a:97:35:46:28:07:97:
                    2e:e4:63:cc:b5:69:ba:bb:d7:1a:7a:b2:32:e0:4c:
                    93:92:65:23:a9:44:6d:87:6e:5a:23:ad:d6:bd:e9:
                    93:73:83:af:1e:5c:3e:d6:b6:90:4f:05:4b:cb:6c:
                    f1:46:9a:54:a8:af:f7:36:13:1b:dd:a1:ec:3b:34:
                    69:79:2e:45:e5:be:2d:4d:21:3e:f6:13:49:22:d5:
                    07:10:d5:f7:b9:c0:d8:e0:3f:d2:ca:f1:8d:ef:c7:
                    7c:2c:98:b7:d6:b3:76:11:72:27:d9:c0:11:35:17:
                    9d:c5:16:f4:b1:43:76:21:24:e0:a4:04:d0:bb:e3:
                    e9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:30:63:E9:F7:9F:51:7C:81:1F:43:E3:9D:B5:62:6D:19:2D:FF:FD
            X509v3 Authority Key Identifier:
                keyid:63:BA:71:C4:9B:8F:75:EE:06:09:18:10:73:EF:8E:8C:D5:E9:9A:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/1/63BA71C49B8F75EE0609181073EF8E8CD5E99AD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63BA71C49B8F75EE0609181073EF8E8CD5E99AD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/1/323830343a363263633a3a2f33322d3332203d3e20323639333139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:62cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:9d:81:82:c5:27:d0:91:47:94:26:3f:c0:30:76:9b:35:35:
         f4:56:8e:c2:8b:74:91:9f:30:23:27:c1:85:00:35:a5:ca:3a:
         73:36:6d:39:39:0e:22:67:e1:bc:b0:91:c3:5b:a3:16:ce:12:
         be:6d:50:43:7a:60:9e:10:6f:09:54:ee:bc:99:98:83:16:8a:
         b7:90:ea:2e:81:1c:2d:68:e7:f0:96:54:6a:03:1a:61:46:8e:
         c2:34:9b:a6:c2:de:f8:9c:0d:68:39:a7:c5:f3:b7:3f:4c:85:
         10:5f:ca:20:84:74:57:92:b8:91:77:4d:a4:74:c4:c9:89:14:
         ea:00:f1:f2:d3:ca:f8:33:f3:eb:e2:fd:e1:49:dc:2c:9c:0a:
         2a:4d:79:19:0d:dd:49:0e:30:cf:49:82:d5:93:80:2a:67:f5:
         05:0c:3c:53:48:80:2c:60:d4:5c:17:60:e6:b8:55:29:0c:56:
         fc:55:a3:30:83:24:bc:40:2d:5f:29:fb:5d:8b:52:4d:3d:93:
         76:15:07:d1:ac:f7:c3:7b:0c:18:8a:a5:0e:e2:b2:d5:49:31:
         3e:fd:be:c0:5c:f9:bf:40:b8:17:d3:79:73:24:7a:4e:21:98:
         7e:99:a2:ff:ec:b8:8e:dc:28:6c:b0:5b:25:8d:e7:67:77:e5:
         58:9f:93:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:15:22 2025 by rpki-client on console.sobornost.net