Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/323830343a363163303a3a2f33322d3332203d3e20323639323534.roa
File:                     323830343a363163303a3a2f33322d3332203d3e20323639323534.roa (raw, json)
Hash identifier:          kAUu8DfiUq2xkAi7fwbzX4nFaZIOpep1eKtCykYISfA=
Subject key identifier:   23:0C:C0:81:BC:B6:53:A5:A5:62:89:27:B4:9C:EE:86:65:9F:CB:94
Certificate issuer:       /CN=04CD905DA8053D1666B20B2E6866FAFDFAAD10FE
Certificate serial:       3BC590338C5CFA49AC84EEDC413FA503CEBB8A22
Authority key identifier: 04:CD:90:5D:A8:05:3D:16:66:B2:0B:2E:68:66:FA:FD:FA:AD:10:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/323830343a363163303a3a2f33322d3332203d3e20323639323534.roa
Signing time:             Mon 10 Mar 2025 13:49:45 +0000
ROA not before:           Mon 10 Mar 2025 13:44:45 +0000
ROA not after:            Mon 09 Mar 2026 13:49:45 +0000
asID:                     269254
IP address blocks:        2804:61c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.crl
                          rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 13:37:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:c5:90:33:8c:5c:fa:49:ac:84:ee:dc:41:3f:a5:03:ce:bb:8a:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04CD905DA8053D1666B20B2E6866FAFDFAAD10FE
        Validity
            Not Before: Mar 10 13:44:45 2025 GMT
            Not After : Mar  9 13:49:45 2026 GMT
        Subject: CN=230CC081BCB653A5A5628927B49CEE86659FCB94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9e:55:33:1b:6c:d1:91:b3:24:4c:b7:eb:d6:
                    b2:8f:9a:9d:9c:07:b9:81:be:e6:7a:01:8d:df:ac:
                    6f:79:84:6b:7b:83:1b:09:59:68:95:20:0f:89:e4:
                    65:c8:a9:2b:e7:42:0c:53:e2:0f:a5:8b:60:f7:05:
                    70:c6:1e:60:d3:dd:49:4c:a0:73:87:dc:aa:d3:6b:
                    22:ee:fc:a5:ab:a2:88:ad:b8:30:f1:14:ab:41:76:
                    9a:88:ae:3b:e5:ee:3a:48:db:ac:70:63:57:f2:69:
                    b3:41:35:97:c8:da:ce:1b:a3:3b:83:26:33:80:2f:
                    15:a2:c3:a9:9a:7a:d9:24:63:8f:aa:62:a6:3c:a2:
                    83:c9:29:17:9c:67:13:18:27:e7:5f:b5:26:a3:ba:
                    f0:d1:fd:19:5b:f3:21:1f:10:df:67:6d:2a:d0:d0:
                    05:89:e4:eb:b0:2b:9b:89:63:dc:07:37:07:83:d0:
                    59:db:25:6a:5d:97:3e:cf:08:63:b2:9e:27:75:42:
                    e2:b3:75:81:18:b7:b6:74:4c:8f:d4:7e:ac:43:55:
                    eb:4f:60:31:b3:91:b6:e9:d5:01:62:c2:40:03:b2:
                    59:51:a5:c9:f5:69:2f:7e:73:22:c7:6f:48:94:92:
                    7b:a3:40:e6:73:2c:3d:20:f5:e1:c4:2c:40:57:97:
                    9d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:0C:C0:81:BC:B6:53:A5:A5:62:89:27:B4:9C:EE:86:65:9F:CB:94
            X509v3 Authority Key Identifier:
                keyid:04:CD:90:5D:A8:05:3D:16:66:B2:0B:2E:68:66:FA:FD:FA:AD:10:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/323830343a363163303a3a2f33322d3332203d3e20323639323534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:61c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:a1:a1:f5:67:3b:b2:06:da:e2:63:00:90:84:45:fa:6e:9f:
         6c:ae:fb:57:9d:37:2b:32:40:6c:04:c6:cb:51:ad:c6:e0:51:
         cf:7a:3e:fc:af:fe:86:d9:1e:b3:40:f0:5a:cd:37:84:dd:65:
         92:05:ec:b9:ec:f5:34:20:df:ca:58:f1:8b:75:9e:03:36:ab:
         6d:93:37:05:a3:60:c6:57:f4:e5:69:09:84:46:2c:50:a4:ee:
         0c:10:f7:58:d1:16:b5:48:0d:60:be:30:4e:c0:d5:d4:c5:9f:
         43:ac:d3:89:18:b2:eb:50:e2:1c:a9:d5:6f:3c:90:c1:24:93:
         5c:ff:67:45:00:44:cb:f8:ca:3e:58:09:e2:a5:96:e8:3c:85:
         6f:3a:e4:87:b2:97:94:a3:56:47:97:3f:be:13:7f:d9:f5:c0:
         ab:a6:38:71:4a:65:19:1a:ba:ca:e3:21:54:b3:f9:4d:9a:9c:
         b0:60:a9:f3:6a:2f:54:bb:cb:3d:00:50:03:6d:8a:11:36:97:
         eb:d4:d6:b2:63:94:90:a6:83:6d:fd:24:01:71:35:a5:3f:76:
         87:a0:c3:c7:cc:4a:2f:c2:10:8c:87:71:93:5e:03:4e:9c:da:
         19:33:ef:f5:7e:e2:3d:ac:4d:6b:46:0c:b8:f3:db:10:99:af:
         1f:1b:3a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:30 2025 by rpki-client on console.sobornost.net