Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/323830343a363838343a33303a3a2f34342d3434203d3e20323639363938.roa
File:                     323830343a363838343a33303a3a2f34342d3434203d3e20323639363938.roa (raw, json)
Hash identifier:          K1dP7ftXpuFZydue+YSpBP8lpuEw7F3hZQo24A2h2eg=
Subject key identifier:   3B:47:3E:D8:37:15:BA:85:FF:3D:CA:3A:AE:A3:64:74:67:D8:68:87
Certificate issuer:       /CN=F221C31BD2AD9D051303E1E7DE991DC00987A722
Certificate serial:       23D1D0C99CD1B37E04ACFE39D27C720D515A30DA
Authority key identifier: F2:21:C3:1B:D2:AD:9D:05:13:03:E1:E7:DE:99:1D:C0:09:87:A7:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/323830343a363838343a33303a3a2f34342d3434203d3e20323639363938.roa
Signing time:             Thu 06 Mar 2025 05:11:53 +0000
ROA not before:           Thu 06 Mar 2025 05:06:53 +0000
ROA not after:            Thu 05 Mar 2026 05:11:53 +0000
asID:                     269698
IP address blocks:        2804:6884:30::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.crl
                          rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:d1:d0:c9:9c:d1:b3:7e:04:ac:fe:39:d2:7c:72:0d:51:5a:30:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F221C31BD2AD9D051303E1E7DE991DC00987A722
        Validity
            Not Before: Mar  6 05:06:53 2025 GMT
            Not After : Mar  5 05:11:53 2026 GMT
        Subject: CN=3B473ED83715BA85FF3DCA3AAEA3647467D86887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:df:80:c4:7f:bf:b8:75:59:9d:78:d9:51:11:
                    69:5e:a7:ec:d2:d4:02:78:61:3f:0b:1e:7c:d7:c2:
                    20:c0:59:30:71:bb:e7:92:61:2a:44:4d:03:cf:2c:
                    c5:df:ad:74:d4:f2:32:18:d5:32:40:b7:db:b4:33:
                    c8:39:58:0b:96:6c:62:07:cf:a0:c1:3d:19:53:af:
                    4d:e0:0f:21:d9:e6:23:43:18:39:e9:0d:a2:24:f8:
                    23:6b:0b:63:25:b4:e3:b4:e5:6b:90:f9:3d:e2:7f:
                    27:05:e1:8f:20:e8:55:77:83:2a:95:c6:6f:7c:3d:
                    a1:cb:ff:93:f6:0a:65:ab:5c:8a:a2:74:68:6d:ed:
                    84:77:10:b0:8a:79:33:6f:c8:f8:9b:61:f3:bc:e0:
                    ae:24:85:0d:5f:8a:34:b8:cd:59:ad:a3:f2:aa:9a:
                    f3:7b:64:6f:1f:7a:bb:36:23:40:44:b8:f7:b7:d8:
                    d0:f6:6e:e0:df:d0:14:11:b5:d4:28:b9:7a:e9:da:
                    3f:d6:ee:a8:cd:cd:66:e1:5d:a8:c7:df:19:62:f0:
                    89:c9:58:b9:cf:c3:ad:e0:2b:64:7d:8f:7f:4a:28:
                    e5:2b:73:7a:a9:ab:6f:9d:62:97:09:cf:31:b6:e5:
                    38:06:f2:e0:74:24:ae:48:b8:d0:be:91:2e:56:f9:
                    eb:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:47:3E:D8:37:15:BA:85:FF:3D:CA:3A:AE:A3:64:74:67:D8:68:87
            X509v3 Authority Key Identifier:
                keyid:F2:21:C3:1B:D2:AD:9D:05:13:03:E1:E7:DE:99:1D:C0:09:87:A7:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/323830343a363838343a33303a3a2f34342d3434203d3e20323639363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6884:30::/44

    Signature Algorithm: sha256WithRSAEncryption
         60:61:64:a0:50:3f:e1:8c:3a:10:9a:d1:94:ac:16:9e:8a:d7:
         ad:5c:27:c8:c2:ff:d0:f0:3d:55:20:c9:9b:99:69:60:cc:09:
         33:ad:39:dc:7f:31:0f:de:8e:73:19:d8:76:57:ef:0c:1c:f0:
         1f:37:99:86:1d:aa:4f:a2:ab:58:80:61:32:d5:b5:a4:41:eb:
         e1:3d:6a:1b:f1:41:e8:80:7b:44:2e:03:b7:b7:5c:df:d0:97:
         9d:9c:87:ea:b9:fa:1c:30:6a:2a:62:96:e5:03:08:4a:06:38:
         01:9d:32:96:a4:9c:02:69:34:32:6b:2a:d6:df:40:07:99:88:
         73:0e:bb:88:e4:eb:96:b3:8a:e8:bf:cb:65:97:15:28:35:27:
         fb:1d:5f:f7:05:0c:72:a8:9e:b7:6e:5d:c1:73:ed:bd:03:31:
         f5:19:a6:bc:32:9a:4b:36:fb:00:b0:ac:fc:91:34:74:01:2c:
         97:b3:90:43:ed:2b:ae:e5:79:4d:e3:b2:dc:7f:48:dd:9d:81:
         76:e5:45:a5:24:05:ae:7c:b2:29:66:87:73:32:83:97:53:8f:
         af:96:7d:6a:53:5d:34:d3:08:6a:63:9e:77:74:7c:16:9e:e4:
         98:a3:13:c9:33:2e:45:42:f2:7e:26:6d:e3:5b:33:96:08:bf:
         16:22:e2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:48 2025 by rpki-client on console.sobornost.net