Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/323830343a363163303a383030303a3a2f33342d3334203d3e20323639323534.roa
File:                     323830343a363163303a383030303a3a2f33342d3334203d3e20323639323534.roa (raw, json)
Hash identifier:          P2pwoz3vHrFOLplR5fO4A3T+bD8ZY3tm5BaO9LOfd+M=
Subject key identifier:   96:87:8A:20:DF:B2:54:7C:02:3F:D3:FB:20:F2:61:83:31:7D:BB:58
Certificate issuer:       /CN=04CD905DA8053D1666B20B2E6866FAFDFAAD10FE
Certificate serial:       0FB00BBCB242FC38D28AB364E96413A9CF91D13B
Authority key identifier: 04:CD:90:5D:A8:05:3D:16:66:B2:0B:2E:68:66:FA:FD:FA:AD:10:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/323830343a363163303a383030303a3a2f33342d3334203d3e20323639323534.roa
Signing time:             Mon 10 Mar 2025 13:49:44 +0000
ROA not before:           Mon 10 Mar 2025 13:44:44 +0000
ROA not after:            Mon 09 Mar 2026 13:49:44 +0000
asID:                     269254
IP address blocks:        2804:61c0:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.crl
                          rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 13:37:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:b0:0b:bc:b2:42:fc:38:d2:8a:b3:64:e9:64:13:a9:cf:91:d1:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04CD905DA8053D1666B20B2E6866FAFDFAAD10FE
        Validity
            Not Before: Mar 10 13:44:44 2025 GMT
            Not After : Mar  9 13:49:44 2026 GMT
        Subject: CN=96878A20DFB2547C023FD3FB20F26183317DBB58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:63:4e:7f:a4:bc:37:f8:47:90:00:e6:1d:d6:
                    76:ae:68:65:eb:60:13:94:bc:b3:c1:e2:1d:d1:43:
                    76:54:e5:8f:0d:ee:bb:6c:6d:f8:36:9d:4f:38:24:
                    75:ba:6a:e2:29:9a:b5:42:d4:e9:0e:29:bc:b3:cb:
                    5b:7d:93:0b:c1:79:f3:1e:b0:2d:c5:34:12:ec:7f:
                    c7:60:66:53:da:0e:48:85:6c:89:0c:ca:e9:9e:3f:
                    ee:d7:9e:86:55:6a:ef:99:6a:f0:86:e1:8b:d1:d5:
                    7b:8d:a3:9b:61:99:f6:42:d5:1a:0f:bc:5c:08:d6:
                    c6:27:64:29:c0:e9:de:b7:a3:84:6b:b7:6d:cf:52:
                    d4:9c:0a:ce:81:d2:b4:ef:0e:44:3b:10:95:d7:ca:
                    94:36:74:c0:75:8a:35:2c:0a:dc:45:8f:e6:f2:08:
                    91:2c:e8:bf:68:35:6a:d3:3c:c0:62:da:3b:94:83:
                    47:5a:9b:27:bf:a8:23:8d:5e:3f:06:a2:b8:68:f6:
                    3c:25:51:4f:97:a9:94:4e:58:90:15:f3:ce:a0:e6:
                    c5:ee:dc:17:8e:cc:91:4f:e2:34:20:1a:d9:06:79:
                    8a:ec:b4:6d:27:ee:15:ae:66:31:11:18:8f:ec:47:
                    84:66:ab:6a:90:e0:d0:74:d5:31:c1:c2:dc:27:24:
                    4f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:87:8A:20:DF:B2:54:7C:02:3F:D3:FB:20:F2:61:83:31:7D:BB:58
            X509v3 Authority Key Identifier:
                keyid:04:CD:90:5D:A8:05:3D:16:66:B2:0B:2E:68:66:FA:FD:FA:AD:10:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/323830343a363163303a383030303a3a2f33342d3334203d3e20323639323534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:61c0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         32:09:b5:38:a6:5a:f2:cd:6f:d0:f3:d4:d5:d0:13:2b:27:43:
         29:0c:70:ae:d0:81:2c:93:71:8a:14:d3:d8:ff:e7:7d:bb:ba:
         41:bd:a7:f3:ca:7a:92:0b:60:c2:8e:62:06:80:e1:b2:66:8e:
         0f:45:f7:10:92:35:48:cd:62:42:70:23:4b:cf:4d:2e:5d:53:
         dd:1f:ff:fd:d9:4b:d3:b2:c1:a3:2a:3b:2d:43:90:c4:27:ea:
         58:83:6c:18:c3:88:1a:74:37:e4:04:a2:85:b5:ee:e0:e9:df:
         24:a3:12:a9:f4:87:68:44:e4:b2:ed:46:f6:7d:e7:a5:86:4e:
         a9:7c:ca:66:ec:99:17:42:0f:15:9c:a7:0e:e9:be:c0:2f:98:
         5a:ef:39:25:80:56:bb:9b:04:a3:0d:0c:e9:49:b4:4c:50:b8:
         f8:0d:29:26:14:03:b0:10:8c:c2:b8:d7:8e:0e:f7:d7:3e:60:
         1d:4b:dc:79:5a:b0:16:6a:6d:ed:2d:02:d2:b7:7a:2c:6c:36:
         ac:0c:12:35:e5:2d:2d:81:47:ac:7f:71:1f:87:52:20:d6:71:
         3d:58:fc:97:f7:0a:a8:07:b5:e5:ff:9d:04:3a:f8:9b:61:35:
         13:22:03:49:bf:4a:01:b4:87:8b:60:2e:7a:46:43:a5:ea:15:
         64:35:94:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:30 2025 by rpki-client on console.sobornost.net