Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/1/323830343a3964343a3a2f33322d313238203d3e20323632393936.roa
File:                     323830343a3964343a3a2f33322d313238203d3e20323632393936.roa (raw, json)
Hash identifier:          tzrgGr/KPcXclXzmZkaYFGbc/XdqrbnWYA+YSUhH6Ew=
Subject key identifier:   67:28:83:10:C7:85:79:19:71:00:CC:97:B8:E5:58:63:8B:44:61:CD
Certificate issuer:       /CN=21619A6DD05DB15FE1B213C8C5C580B755346175
Certificate serial:       6B7EDA93F07A3BE9F3F0EEAA163FA0C2F242CED1
Authority key identifier: 21:61:9A:6D:D0:5D:B1:5F:E1:B2:13:C8:C5:C5:80:B7:55:34:61:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21619A6DD05DB15FE1B213C8C5C580B755346175.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/1/323830343a3964343a3a2f33322d313238203d3e20323632393936.roa
Signing time:             Thu 06 Mar 2025 16:48:20 +0000
ROA not before:           Thu 06 Mar 2025 16:43:20 +0000
ROA not after:            Thu 05 Mar 2026 16:48:20 +0000
asID:                     262996
IP address blocks:        2804:9d4::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/1/21619A6DD05DB15FE1B213C8C5C580B755346175.crl
                          rsync://rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/1/21619A6DD05DB15FE1B213C8C5C580B755346175.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21619A6DD05DB15FE1B213C8C5C580B755346175.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 17:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:7e:da:93:f0:7a:3b:e9:f3:f0:ee:aa:16:3f:a0:c2:f2:42:ce:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21619A6DD05DB15FE1B213C8C5C580B755346175
        Validity
            Not Before: Mar  6 16:43:20 2025 GMT
            Not After : Mar  5 16:48:20 2026 GMT
        Subject: CN=67288310C78579197100CC97B8E558638B4461CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:67:24:e2:45:b2:ef:0c:6f:a9:f0:51:5c:4e:
                    c7:75:3f:2a:d5:3e:a8:71:c2:05:06:e0:83:c6:15:
                    2e:35:bd:a7:d1:66:88:22:b8:9b:3e:74:72:c0:be:
                    4d:6c:4d:b6:de:07:48:c3:67:4a:9f:87:53:88:b3:
                    c6:01:f5:fa:cc:45:af:d0:cc:78:af:46:6a:20:24:
                    48:46:b6:16:4d:4d:f5:f1:c1:c9:07:63:3f:95:7d:
                    4f:c8:78:ec:28:47:f4:ce:af:ec:c4:87:e5:c8:d2:
                    03:31:b4:b3:40:67:cc:be:0a:02:eb:bc:ea:01:e0:
                    fc:e2:90:72:e7:69:39:6b:15:78:f9:10:88:d9:ce:
                    19:45:e4:46:81:5c:66:5a:e1:1c:f0:6e:63:20:48:
                    2b:e8:99:2e:07:78:e8:c2:51:0c:f7:24:32:ce:a2:
                    d3:1c:cb:16:48:41:b3:1d:1e:12:8e:01:d2:ac:d8:
                    81:47:87:38:5e:4a:6f:dc:8c:3f:a4:85:51:c8:d6:
                    92:ac:e1:17:4b:7b:b0:d1:54:22:1d:b9:6d:7c:f9:
                    a3:0e:49:07:a4:ed:75:09:c1:aa:49:d7:a7:ef:87:
                    6c:95:09:fc:22:f4:b3:05:8a:88:0a:90:8d:e4:15:
                    7b:34:6a:6c:8b:07:24:6b:cc:66:c9:ca:66:ad:b9:
                    1a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:28:83:10:C7:85:79:19:71:00:CC:97:B8:E5:58:63:8B:44:61:CD
            X509v3 Authority Key Identifier:
                keyid:21:61:9A:6D:D0:5D:B1:5F:E1:B2:13:C8:C5:C5:80:B7:55:34:61:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/1/21619A6DD05DB15FE1B213C8C5C580B755346175.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21619A6DD05DB15FE1B213C8C5C580B755346175.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/1/323830343a3964343a3a2f33322d313238203d3e20323632393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:7d:bb:c6:f5:06:8a:d4:be:0d:4b:61:c0:43:c9:a3:e4:08:
         46:e4:56:2c:e6:65:b4:b8:17:a6:46:a8:3a:bc:0c:55:7e:3a:
         ea:38:7c:8f:79:98:7d:54:fb:d4:6c:c8:7c:cc:8d:79:67:28:
         95:80:94:23:c0:84:08:b1:86:62:93:d4:06:c5:44:9c:e2:4f:
         1e:b0:de:d6:df:ff:75:b1:ec:8d:9f:56:9e:f1:79:75:e2:aa:
         5d:f3:c8:5b:c7:b5:53:5f:56:98:a7:a8:2c:08:0f:db:19:fb:
         99:85:42:76:fa:e9:84:86:08:71:37:d6:7f:80:41:20:be:3c:
         f9:e2:f6:09:d6:6a:85:63:95:e8:b1:3e:56:1f:37:ee:ac:3f:
         19:c3:78:3f:2c:cf:3e:db:78:7d:22:e6:d0:aa:f3:4f:92:2e:
         45:c0:4c:62:04:d0:ac:b7:e0:91:ce:32:42:1f:6d:e6:c2:13:
         fe:49:57:af:8d:aa:e1:ab:11:48:36:69:c4:ab:75:b7:9e:51:
         bf:db:b8:75:dd:5f:0d:36:24:fa:df:f1:19:d4:09:ed:7f:b0:
         d6:04:c9:27:59:a0:20:8b:02:a7:a2:3d:cd:89:1b:8f:73:b1:
         3d:b1:78:d7:07:54:57:c4:2c:b1:e2:4a:15:a3:e9:7a:27:7d:
         ec:18:17:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:30 2025 by rpki-client on console.sobornost.net