Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/323830343a356632343a3a2f33322d3332203d3e20323639303739.roa
File:                     323830343a356632343a3a2f33322d3332203d3e20323639303739.roa (raw, json)
Hash identifier:          EZAq029zsCtQXRzu/J/8xnnemD6RLViOIikO8FPSvqE=
Subject key identifier:   49:50:FD:5B:21:4F:70:B9:EF:EF:3A:AF:02:A0:68:D6:8F:1E:2A:93
Certificate issuer:       /CN=433BC56DE61BF5759F79705E437131F09597AF13
Certificate serial:       4DFFAC6411FAD96F3A6AC1A45ABCCB37203D5539
Authority key identifier: 43:3B:C5:6D:E6:1B:F5:75:9F:79:70:5E:43:71:31:F0:95:97:AF:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BC56DE61BF5759F79705E437131F09597AF13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/323830343a356632343a3a2f33322d3332203d3e20323639303739.roa
Signing time:             Mon 31 Mar 2025 17:43:17 +0000
ROA not before:           Mon 31 Mar 2025 17:38:17 +0000
ROA not after:            Mon 30 Mar 2026 17:43:17 +0000
asID:                     269079
IP address blocks:        2804:5f24::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.crl
                          rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BC56DE61BF5759F79705E437131F09597AF13.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 03:09:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:ff:ac:64:11:fa:d9:6f:3a:6a:c1:a4:5a:bc:cb:37:20:3d:55:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=433BC56DE61BF5759F79705E437131F09597AF13
        Validity
            Not Before: Mar 31 17:38:17 2025 GMT
            Not After : Mar 30 17:43:17 2026 GMT
        Subject: CN=4950FD5B214F70B9EFEF3AAF02A068D68F1E2A93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:9a:ab:67:03:93:e7:66:f0:39:9b:ba:67:1b:
                    1d:ba:02:cd:1b:a0:76:4a:b2:2c:cb:05:f2:55:24:
                    5d:33:17:c9:1b:7b:b2:b9:63:33:e6:ab:e4:60:df:
                    d8:58:32:56:72:c7:62:e3:9b:2d:b9:24:ea:7f:8f:
                    de:e1:36:bd:8c:b6:86:28:25:8d:bc:ab:8c:f8:f6:
                    2e:98:29:05:1f:d3:15:01:2d:48:a2:3e:54:3c:0a:
                    48:9e:c7:f5:f1:c7:41:ac:4c:2e:f9:be:06:be:ea:
                    17:e8:85:ed:dd:7a:54:ad:fb:37:2c:cf:b8:36:8c:
                    9f:4f:55:9b:8a:d3:fa:fd:77:32:5c:d5:f2:86:3d:
                    46:1a:84:22:d0:d6:90:6e:3a:f9:21:5d:79:2c:70:
                    1e:88:4e:07:7e:49:56:8e:06:8c:e6:14:e1:2e:f9:
                    d1:c6:63:d9:b9:6c:88:5f:1e:0a:b4:3d:01:28:e3:
                    05:6b:d2:ea:55:df:77:d0:d4:60:fa:43:42:05:08:
                    af:30:ec:c2:76:9a:dc:c6:78:f0:60:65:03:c5:80:
                    8f:aa:ab:5c:89:01:37:eb:63:db:45:7c:14:cf:15:
                    f2:49:44:ee:4d:c5:46:91:f2:3f:2f:87:83:ad:25:
                    4c:a6:2c:61:da:ed:19:74:58:3f:24:40:ed:56:3b:
                    22:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:50:FD:5B:21:4F:70:B9:EF:EF:3A:AF:02:A0:68:D6:8F:1E:2A:93
            X509v3 Authority Key Identifier:
                keyid:43:3B:C5:6D:E6:1B:F5:75:9F:79:70:5E:43:71:31:F0:95:97:AF:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BC56DE61BF5759F79705E437131F09597AF13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/323830343a356632343a3a2f33322d3332203d3e20323639303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f24::/32

    Signature Algorithm: sha256WithRSAEncryption
         be:9b:a3:54:3f:98:c2:b7:4e:91:54:23:f1:05:3d:ac:a6:a4:
         76:51:52:e5:fb:42:a1:fd:ff:ac:4b:b9:70:5b:bf:33:83:78:
         42:1d:45:c5:1b:f2:23:5a:4f:8b:fc:c1:46:6c:47:c2:0a:a9:
         78:93:f0:72:af:5b:1d:72:e4:92:05:59:b2:3d:0b:23:e5:d5:
         d6:cc:f9:43:17:3c:d4:b1:5b:a8:c6:b2:11:38:4f:e0:77:5f:
         c7:1e:84:00:81:ac:4a:d9:72:b6:8d:c7:29:3d:95:cb:2c:2e:
         f2:28:b9:c9:41:4f:01:c8:0b:bb:c4:68:3b:74:3a:04:d4:c7:
         9f:06:c5:bc:4b:87:07:38:82:4a:56:87:94:a3:7b:23:e9:51:
         d1:93:bd:82:f2:c7:d8:31:a8:7e:2d:98:75:9d:c4:ff:5d:8c:
         56:7b:8e:35:20:92:cc:09:c0:d6:23:eb:ba:7c:9c:da:da:24:
         c8:2b:93:51:24:21:da:8b:8c:57:4b:56:be:a5:1f:34:82:b8:
         8c:3c:16:a2:58:5c:94:4e:c3:25:85:0e:2e:19:f2:18:98:48:
         47:e3:c6:29:ac:e8:c7:93:b6:af:8b:9c:1f:a9:b7:8e:53:c2:
         bf:4a:02:ca:9a:51:d7:7c:29:4d:f1:02:8f:21:a4:3e:da:f1:
         63:b8:37:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:15:22 2025 by rpki-client on console.sobornost.net