Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/323830343a333332343a343030303a3a2f33342d3334203d3e20323635333737.roa
File:                     323830343a333332343a343030303a3a2f33342d3334203d3e20323635333737.roa (raw, json)
Hash identifier:          V7OKMw6wLYmzkiFtxBiZo+WHOZp5aHtUcYKQVwN2aAk=
Subject key identifier:   97:04:4C:79:12:12:20:AF:41:A0:06:13:6D:21:C3:DB:4E:DD:29:F4
Certificate issuer:       /CN=A4C9B133126401D92DA5457C573EA0078BF42BA8
Certificate serial:       3CA7F17093120EE13E01B4F9355095E6746BFA13
Authority key identifier: A4:C9:B1:33:12:64:01:D9:2D:A5:45:7C:57:3E:A0:07:8B:F4:2B:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/323830343a333332343a343030303a3a2f33342d3334203d3e20323635333737.roa
Signing time:             Thu 06 Mar 2025 22:52:52 +0000
ROA not before:           Thu 06 Mar 2025 22:47:52 +0000
ROA not after:            Thu 05 Mar 2026 22:52:52 +0000
asID:                     265377
IP address blocks:        2804:3324:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.crl
                          rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 04:45:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:a7:f1:70:93:12:0e:e1:3e:01:b4:f9:35:50:95:e6:74:6b:fa:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4C9B133126401D92DA5457C573EA0078BF42BA8
        Validity
            Not Before: Mar  6 22:47:52 2025 GMT
            Not After : Mar  5 22:52:52 2026 GMT
        Subject: CN=97044C79121220AF41A006136D21C3DB4EDD29F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fc:4d:e4:5f:04:9b:7f:98:e5:84:fa:0f:e3:
                    1e:f4:8c:93:79:fb:7b:7b:0e:d6:11:31:2e:8d:5e:
                    31:3a:98:3a:0f:51:25:cf:f4:28:f6:87:f5:f3:81:
                    26:31:f0:dc:fd:14:d1:25:4c:d8:75:ff:66:9c:00:
                    20:b6:8b:b3:2c:bc:fb:81:40:31:97:3a:e9:81:6e:
                    43:aa:45:10:91:fe:b2:53:d5:2c:87:63:f5:62:55:
                    df:63:f7:43:33:5b:67:36:22:2a:ce:d2:ce:85:68:
                    5d:41:e0:c5:29:a0:c8:68:d7:bf:51:b1:57:e4:ff:
                    75:fc:4c:af:e0:da:8a:65:4e:e0:f3:aa:59:79:8a:
                    8a:da:fb:cd:5f:9e:16:a5:1b:60:81:f2:89:45:69:
                    b7:45:22:2f:b8:11:b3:5b:9d:61:11:f2:e5:69:cb:
                    f0:6b:4c:21:13:4d:cb:08:71:33:95:40:d1:6d:3d:
                    58:24:49:bf:2e:8e:ab:7f:c2:29:0c:22:91:16:f9:
                    4e:fb:fb:68:d6:12:6b:27:59:eb:a3:73:ce:a4:3f:
                    c1:e2:f0:61:cb:ce:77:92:16:70:14:d3:52:29:4a:
                    35:55:6c:09:43:01:9a:6b:e0:e5:a9:92:97:3d:ef:
                    8e:04:d2:01:36:22:b0:53:54:82:a4:e8:f5:80:e9:
                    ff:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:04:4C:79:12:12:20:AF:41:A0:06:13:6D:21:C3:DB:4E:DD:29:F4
            X509v3 Authority Key Identifier:
                keyid:A4:C9:B1:33:12:64:01:D9:2D:A5:45:7C:57:3E:A0:07:8B:F4:2B:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/323830343a333332343a343030303a3a2f33342d3334203d3e20323635333737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3324:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         bb:57:34:ad:20:a1:a8:eb:06:2d:90:47:50:e7:ba:67:fa:57:
         0b:86:55:fc:c0:da:46:47:f1:6c:5c:9d:f9:e0:fb:06:86:2c:
         b5:85:09:e7:ed:50:25:a4:2c:7d:cc:48:9d:ec:bf:3b:23:d6:
         90:01:8b:70:59:8a:50:85:83:ce:0e:52:da:70:f7:24:29:75:
         af:ac:c1:18:1c:7a:b7:d7:4e:c5:2a:87:fc:c0:19:83:6d:fb:
         97:38:70:96:ed:3b:7a:27:a6:d4:56:22:c0:0c:49:4c:4f:46:
         79:2a:ca:d5:00:24:93:82:9d:6e:fa:14:d4:d1:9b:b9:cb:c3:
         ab:6e:a7:56:94:10:3e:a9:5a:36:72:06:9a:a1:c3:ed:bb:a5:
         4d:e2:2d:7e:73:e1:47:69:14:41:0f:10:5f:5b:6b:b2:49:d0:
         6e:80:90:47:6c:d9:d2:f3:df:4a:e1:b8:39:20:97:ce:1f:b7:
         04:ba:b8:2f:f2:c3:05:a9:92:e9:63:55:b0:44:88:db:3b:a2:
         a8:c0:11:a2:30:c9:18:22:a0:94:26:10:69:49:88:79:38:bc:
         95:79:7c:30:02:d6:f8:81:50:22:b6:2a:1e:6f:ae:51:d0:1e:
         31:07:b9:17:f9:44:2c:74:82:b8:e5:b5:82:13:be:38:21:d6:
         4b:d1:36:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:20 2025 by rpki-client on console.sobornost.net