Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/2/323830343a333364633a3a2f33322d3438203d3e20323635343231.roa
File:                     323830343a333364633a3a2f33322d3438203d3e20323635343231.roa (raw, json)
Hash identifier:          Mw7HvlDrp63aWO1ARIfPFNHv5rafM0coG3YOIzN9QdA=
Subject key identifier:   85:60:19:F6:74:D5:67:F9:4E:28:0A:CB:78:06:4A:A9:CF:D7:29:15
Certificate issuer:       /CN=D903348767481BAEFE2C4B534D22308FC61456DE
Certificate serial:       228ABA5B543E9B3B6C86D58E7D263C2659518AA8
Authority key identifier: D9:03:34:87:67:48:1B:AE:FE:2C:4B:53:4D:22:30:8F:C6:14:56:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D903348767481BAEFE2C4B534D22308FC61456DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/2/323830343a333364633a3a2f33322d3438203d3e20323635343231.roa
Signing time:             Thu 06 Mar 2025 18:52:23 +0000
ROA not before:           Thu 06 Mar 2025 18:47:23 +0000
ROA not after:            Thu 05 Mar 2026 18:52:23 +0000
asID:                     265421
IP address blocks:        2804:33dc::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/2/D903348767481BAEFE2C4B534D22308FC61456DE.crl
                          rsync://rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/2/D903348767481BAEFE2C4B534D22308FC61456DE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D903348767481BAEFE2C4B534D22308FC61456DE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 14:35:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:8a:ba:5b:54:3e:9b:3b:6c:86:d5:8e:7d:26:3c:26:59:51:8a:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D903348767481BAEFE2C4B534D22308FC61456DE
        Validity
            Not Before: Mar  6 18:47:23 2025 GMT
            Not After : Mar  5 18:52:23 2026 GMT
        Subject: CN=856019F674D567F94E280ACB78064AA9CFD72915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:38:6d:a4:f7:98:78:af:2f:c8:3a:a2:31:26:
                    ff:c0:cd:05:2d:2c:fb:96:1f:81:6c:82:a8:82:ab:
                    bc:c8:d5:ec:3c:49:46:1b:c9:02:06:ed:8b:bd:7c:
                    be:b8:ef:37:ae:c4:f9:4d:43:c8:b8:ad:1b:44:39:
                    7b:01:4d:11:ac:50:63:9f:82:96:42:69:6e:1d:c7:
                    94:d0:69:84:7d:41:48:b5:0a:50:f1:61:5b:e2:6d:
                    e5:13:bc:b1:3d:d0:62:8c:d4:17:1c:b7:d4:1b:8f:
                    8b:3c:9c:87:d8:58:2a:91:c0:51:7c:2a:85:13:db:
                    d3:9c:94:9c:c2:7e:f7:22:f0:df:00:a2:3f:3c:80:
                    63:81:5f:26:e5:78:13:6d:be:80:99:e9:aa:cb:57:
                    51:b3:97:25:7c:dd:d7:ab:58:dd:91:3b:e3:14:74:
                    53:90:e5:90:00:1d:1e:4a:9c:20:02:73:25:de:6f:
                    63:b4:d8:85:ee:76:eb:eb:bb:ad:aa:80:2d:36:de:
                    e6:71:fb:d1:86:35:77:a9:5b:b9:8f:e3:9a:dc:d6:
                    47:be:be:19:c9:61:c4:c2:aa:39:39:5c:33:fc:cb:
                    fb:b3:cf:9f:17:16:29:f9:0f:ad:e7:08:f1:94:94:
                    17:6d:49:6e:c0:21:ee:b5:3b:cb:66:bc:67:c3:2d:
                    af:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:60:19:F6:74:D5:67:F9:4E:28:0A:CB:78:06:4A:A9:CF:D7:29:15
            X509v3 Authority Key Identifier:
                keyid:D9:03:34:87:67:48:1B:AE:FE:2C:4B:53:4D:22:30:8F:C6:14:56:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/2/D903348767481BAEFE2C4B534D22308FC61456DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D903348767481BAEFE2C4B534D22308FC61456DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/2/323830343a333364633a3a2f33322d3438203d3e20323635343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:d6:72:df:a5:59:3d:cf:8f:60:17:36:6d:fb:64:12:3e:8e:
         04:97:10:d6:02:2d:04:8d:f9:aa:00:cc:39:1b:39:11:8a:4f:
         e3:9a:a6:b5:37:1f:0b:f1:32:3c:3b:06:d7:7e:71:32:19:2b:
         8d:fe:53:ff:2b:db:01:c8:6d:d9:d5:ef:9f:84:50:b6:76:08:
         79:4d:38:2c:0a:a6:6c:6a:b2:f1:bf:4b:2d:61:cd:f0:ec:27:
         70:41:e4:24:c0:01:69:ed:83:e3:f8:80:60:17:4c:f6:ea:3c:
         ad:81:f8:a2:64:64:02:95:6e:e5:7e:9b:5e:a3:7d:e8:24:75:
         fd:18:c5:ed:d3:c2:67:9f:df:b1:a9:49:c1:20:b6:bb:d5:c2:
         5d:64:db:68:57:37:0e:13:3a:20:54:da:5e:01:38:e1:53:a1:
         b5:a3:84:a7:50:dc:33:97:54:b2:93:f2:9e:cf:cb:a4:23:fd:
         a8:87:61:0d:76:4f:05:c5:e0:1e:d4:68:3d:54:d4:18:af:d9:
         6a:d6:aa:b0:de:de:2c:c3:29:4c:da:9a:b4:09:7e:8c:46:bf:
         a5:85:13:9d:7e:b8:8c:fc:28:82:3a:d1:3e:b4:db:6e:d6:d4:
         b9:99:b5:58:f9:5f:66:c6:64:d3:a2:f2:0b:69:b1:a5:41:fa:
         9a:0d:f8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:30 2025 by rpki-client on console.sobornost.net