Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/1/323830343a363363343a3a2f33322d3438203d3e20323639333832.roa
File:                     323830343a363363343a3a2f33322d3438203d3e20323639333832.roa (raw, json)
Hash identifier:          w5z1HthZl83Aa957U97ag5iKaSLAiUssy3Tahv7R50E=
Subject key identifier:   6C:20:A9:1D:A6:CC:3A:13:E8:48:B2:BF:11:62:FB:E0:35:86:AA:F1
Certificate issuer:       /CN=BEE9B156E0F587C9BA0739286F79A9FB85C80BC3
Certificate serial:       1F04C382A49094221E8FCE9F0BC56B59097E1615
Authority key identifier: BE:E9:B1:56:E0:F5:87:C9:BA:07:39:28:6F:79:A9:FB:85:C8:0B:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/1/323830343a363363343a3a2f33322d3438203d3e20323639333832.roa
Signing time:             Thu 06 Mar 2025 03:45:37 +0000
ROA not before:           Thu 06 Mar 2025 03:40:37 +0000
ROA not after:            Thu 05 Mar 2026 03:45:37 +0000
asID:                     269382
IP address blocks:        2804:63c4::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.crl
                          rsync://rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 10:13:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:04:c3:82:a4:90:94:22:1e:8f:ce:9f:0b:c5:6b:59:09:7e:16:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEE9B156E0F587C9BA0739286F79A9FB85C80BC3
        Validity
            Not Before: Mar  6 03:40:37 2025 GMT
            Not After : Mar  5 03:45:37 2026 GMT
        Subject: CN=6C20A91DA6CC3A13E848B2BF1162FBE03586AAF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e6:65:e1:0b:58:8c:5c:69:8e:cb:8c:68:07:
                    b6:46:f6:3d:60:80:68:ed:ea:5f:a4:63:9b:3d:c0:
                    7e:90:25:00:56:e9:2e:96:cc:69:ba:ca:a4:72:b8:
                    b1:db:56:6e:04:c9:75:7a:38:97:43:7a:7d:76:da:
                    23:1f:70:21:fe:54:7d:2c:cf:aa:46:76:87:a8:4b:
                    ad:c5:18:e6:32:34:f7:09:02:f3:36:61:82:9b:a4:
                    d8:ed:dd:59:04:ff:1d:1b:fd:6c:31:b7:75:00:02:
                    d9:34:47:f2:5d:e3:76:ac:d2:44:6e:c6:ce:21:ab:
                    d4:d8:5a:42:7c:d0:39:22:5d:86:2f:90:74:1b:23:
                    8c:d1:81:a9:1b:f4:f2:c4:dd:dd:ac:63:7b:38:6a:
                    ff:e3:0b:6a:21:d5:c6:2c:f3:48:d2:b3:67:f3:10:
                    ec:a7:ea:5b:06:e6:c3:f9:48:b2:33:62:e5:20:32:
                    d7:5a:44:1c:7e:e5:47:f1:fb:02:09:18:37:6b:9f:
                    0a:fe:2f:60:60:b6:f5:73:94:cc:48:ea:33:2a:53:
                    47:e8:73:b9:e8:c9:d7:75:9e:a0:86:54:22:ff:c7:
                    6f:b8:90:c4:12:0e:25:63:b6:52:f1:4d:4b:b6:fb:
                    b1:15:12:ce:3e:e8:f4:1a:38:09:f0:0b:5c:35:0f:
                    93:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:20:A9:1D:A6:CC:3A:13:E8:48:B2:BF:11:62:FB:E0:35:86:AA:F1
            X509v3 Authority Key Identifier:
                keyid:BE:E9:B1:56:E0:F5:87:C9:BA:07:39:28:6F:79:A9:FB:85:C8:0B:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/1/323830343a363363343a3a2f33322d3438203d3e20323639333832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:63c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         c9:cb:f7:d7:3d:e5:a5:e1:ef:b2:22:74:19:c0:68:ab:42:2e:
         f3:0c:f3:e0:f5:29:9a:04:2d:31:01:ca:ba:3a:9d:77:75:6c:
         ba:cd:aa:9d:92:d5:a7:00:ff:52:2a:85:ff:b0:fd:a8:4b:26:
         b8:92:c4:f3:17:86:bd:4f:00:03:a6:af:77:89:b8:c4:f1:ad:
         21:e0:82:f1:39:90:25:7b:31:7f:be:6a:d0:ff:44:72:76:4f:
         7a:14:71:4a:ee:24:88:c2:60:bc:92:15:81:d8:d4:6d:22:37:
         5d:cd:68:7f:5c:ac:40:54:8d:53:27:33:5e:e5:e8:f1:f7:42:
         85:0b:0a:66:91:5f:cf:c7:7d:9c:58:1e:f2:bd:7d:29:e3:12:
         ec:5b:ca:9b:91:69:6a:11:40:cd:67:b1:8b:df:7d:5d:80:0f:
         6c:b0:01:9f:b7:d7:1e:16:ae:56:df:c7:a7:7d:e1:f1:6c:13:
         8a:9b:aa:91:ef:fb:06:f8:33:fa:26:3e:f4:d4:b6:df:a3:0a:
         6b:5e:20:19:75:c1:38:a3:3c:63:e0:79:e2:56:5f:43:6f:9b:
         a8:6b:71:fa:3c:df:3b:84:17:00:1e:66:16:35:e9:bc:95:16:
         d3:88:46:ab:84:ba:68:ca:f9:64:6c:f0:df:13:42:4b:1f:66:
         d9:b5:72:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:37:11 2025 by rpki-client on console.sobornost.net