Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/323830343a353261633a3a2f33342d3334203d3e20323638353333.roa
File:                     323830343a353261633a3a2f33342d3334203d3e20323638353333.roa (raw, json)
Hash identifier:          q4zgkyKtFDn2O0A5TEaDzEsRkWK7zaVWPz1XfL9ig6Q=
Subject key identifier:   67:3C:8D:60:A8:F6:49:AE:2E:9B:D7:59:26:A4:8E:D9:DE:85:50:EB
Certificate issuer:       /CN=BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C
Certificate serial:       4FB85144EF969E92D21694821D2DBD2D5A5488C0
Authority key identifier: BB:15:8F:1F:98:3D:8F:21:CA:EB:93:C9:28:AC:6A:B5:2B:51:CB:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/323830343a353261633a3a2f33342d3334203d3e20323638353333.roa
Signing time:             Mon 14 Apr 2025 21:17:07 +0000
ROA not before:           Mon 14 Apr 2025 21:12:07 +0000
ROA not after:            Mon 13 Apr 2026 21:17:07 +0000
asID:                     268533
IP address blocks:        2804:52ac::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.crl
                          rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:b8:51:44:ef:96:9e:92:d2:16:94:82:1d:2d:bd:2d:5a:54:88:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C
        Validity
            Not Before: Apr 14 21:12:07 2025 GMT
            Not After : Apr 13 21:17:07 2026 GMT
        Subject: CN=673C8D60A8F649AE2E9BD75926A48ED9DE8550EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:64:9a:bb:e8:8d:01:92:39:cd:74:c3:6f:07:
                    71:94:d5:75:87:c3:37:2e:fd:2d:cf:da:f9:31:05:
                    0c:3b:36:89:48:3a:37:7a:80:06:e9:68:0b:26:05:
                    b8:6e:8b:86:08:7a:c6:5d:f3:17:6d:1d:b3:9b:f0:
                    b1:3d:eb:80:ad:30:12:50:c7:4c:29:69:f1:79:35:
                    3f:05:1e:e8:25:dc:c3:1c:73:48:8a:ae:b7:37:ef:
                    0c:e2:2a:d1:d5:a0:2f:e3:4e:86:65:70:5b:01:84:
                    b4:7f:20:bd:15:9d:9b:bd:c6:9f:a1:c5:7d:c8:e3:
                    53:46:1b:00:62:91:79:87:44:ac:34:8c:fb:d5:7b:
                    88:05:8c:9c:10:94:1d:df:60:e3:fa:34:91:da:58:
                    cf:f6:5f:21:86:c1:a4:92:48:39:d6:3f:69:4b:c8:
                    c1:d0:e2:be:20:ec:7a:ae:97:82:73:8a:2e:7d:07:
                    6a:02:51:a8:3c:dc:b9:73:99:53:8d:0b:77:1e:52:
                    37:6a:1a:b7:00:71:34:70:3a:ed:23:29:90:c1:18:
                    05:15:e3:d9:00:b3:84:c3:26:bd:5d:3d:14:d1:df:
                    75:3f:e7:03:57:7b:64:e0:d3:90:3e:eb:e2:50:bb:
                    61:0f:0a:97:43:a7:54:af:d4:1a:f7:b5:4b:81:68:
                    b7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:3C:8D:60:A8:F6:49:AE:2E:9B:D7:59:26:A4:8E:D9:DE:85:50:EB
            X509v3 Authority Key Identifier:
                keyid:BB:15:8F:1F:98:3D:8F:21:CA:EB:93:C9:28:AC:6A:B5:2B:51:CB:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/323830343a353261633a3a2f33342d3334203d3e20323638353333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:52ac::/34

    Signature Algorithm: sha256WithRSAEncryption
         9d:cc:45:93:28:e8:95:bc:ef:c2:14:ce:33:c5:21:96:a3:02:
         47:50:b8:a2:24:02:9a:a7:cd:d5:87:18:0b:bd:56:11:b8:df:
         37:43:44:93:23:71:9a:a5:57:96:3d:ba:c8:c3:bf:dc:5e:d4:
         e0:11:b0:8f:44:e6:9b:ed:30:fa:39:bc:3a:30:39:40:8e:56:
         bc:9b:3c:20:c7:c0:3b:34:e6:11:74:dc:8c:a3:d8:f9:b1:f7:
         42:cc:78:b8:36:11:37:45:ad:eb:63:66:3c:30:26:7e:9a:95:
         46:8a:8b:90:e9:f7:19:f3:8b:fe:fc:a4:44:8e:da:40:35:79:
         8a:43:2b:79:a7:9a:a5:33:58:7e:66:e4:cb:8e:70:25:db:bc:
         a0:c3:a7:0e:d2:53:fc:8c:ce:d9:5c:ca:5e:29:e3:0b:ab:74:
         67:a7:da:d3:f9:5f:8f:45:09:0a:dd:04:b9:6e:d3:84:12:a9:
         90:3d:15:f8:15:e8:1f:04:2d:95:ba:5a:9c:d3:f6:a4:00:22:
         d1:5b:23:fc:cb:d7:99:37:63:9c:0a:db:cf:c8:e6:c2:f3:67:
         63:6f:97:bf:65:5a:9d:99:ed:65:4a:7e:05:8c:7e:bd:98:1c:
         b5:7d:ab:74:c8:4f:de:36:61:60:52:cd:5c:5b:d1:b3:69:c7:
         b7:77:9b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:46 2025 by rpki-client on console.sobornost.net