Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/323830343a363061303a343030303a3a2f33342d3438203d3e20323639313831.roa
File:                     323830343a363061303a343030303a3a2f33342d3438203d3e20323639313831.roa (raw, json)
Hash identifier:          IDneDWzTyr5SgSIAENGnHT6t+yatkXYogvFZdoAk/uI=
Subject key identifier:   88:A5:3A:EA:DF:F1:C7:40:8C:AD:FC:80:80:A4:E4:6C:1F:62:24:AA
Certificate issuer:       /CN=585B464DD14FF8DEED6908CBFA9AAE5AAA748C23
Certificate serial:       57904A3847DE7D76DA0B9C280136A1E37FA8852B
Authority key identifier: 58:5B:46:4D:D1:4F:F8:DE:ED:69:08:CB:FA:9A:AE:5A:AA:74:8C:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/323830343a363061303a343030303a3a2f33342d3438203d3e20323639313831.roa
Signing time:             Thu 06 Mar 2025 08:52:17 +0000
ROA not before:           Thu 06 Mar 2025 08:47:17 +0000
ROA not after:            Thu 05 Mar 2026 08:52:17 +0000
asID:                     269181
IP address blocks:        2804:60a0:4000::/34 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.crl
                          rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 16:27:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:90:4a:38:47:de:7d:76:da:0b:9c:28:01:36:a1:e3:7f:a8:85:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=585B464DD14FF8DEED6908CBFA9AAE5AAA748C23
        Validity
            Not Before: Mar  6 08:47:17 2025 GMT
            Not After : Mar  5 08:52:17 2026 GMT
        Subject: CN=88A53AEADFF1C7408CADFC8080A4E46C1F6224AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:44:b8:cd:ae:45:0a:8c:12:12:e6:f6:2c:94:
                    16:2f:f4:28:a5:4d:65:5e:f7:a7:fd:27:20:ab:b0:
                    a7:55:e2:5e:84:e4:2a:ec:cc:fe:1e:cb:14:7f:af:
                    17:71:33:1f:9c:94:57:f9:3f:6d:89:da:d3:94:94:
                    86:48:6d:32:ab:8d:93:55:ff:11:27:24:59:18:f7:
                    50:63:94:ec:8d:bc:ad:d2:22:e7:f3:91:37:f7:aa:
                    9b:00:4e:6b:49:1e:10:28:6d:8a:5c:b6:f8:13:f0:
                    4f:3c:7c:32:63:c6:dd:ff:e7:51:dd:f7:23:5c:18:
                    55:b6:c4:91:42:94:c4:27:62:d1:3d:aa:af:a4:bb:
                    4f:3b:da:f3:d9:9a:2c:c2:87:89:a7:68:ce:ef:76:
                    68:80:ec:dd:da:1b:99:eb:4d:23:e2:89:ab:40:97:
                    c0:87:31:7e:67:36:76:6c:70:a5:d8:58:32:d9:d7:
                    87:24:62:c3:d7:ce:88:c2:22:a9:33:68:bc:b2:07:
                    c7:8b:85:1d:ed:cd:b3:90:07:9d:e0:e2:1a:0b:2d:
                    b8:94:65:de:96:b7:f4:26:48:29:d4:04:78:71:b6:
                    49:93:3d:80:67:4d:0c:02:fd:ef:57:11:69:7b:f3:
                    2b:fa:11:93:67:fe:15:3c:31:b6:94:d0:44:43:30:
                    0b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A5:3A:EA:DF:F1:C7:40:8C:AD:FC:80:80:A4:E4:6C:1F:62:24:AA
            X509v3 Authority Key Identifier:
                keyid:58:5B:46:4D:D1:4F:F8:DE:ED:69:08:CB:FA:9A:AE:5A:AA:74:8C:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/323830343a363061303a343030303a3a2f33342d3438203d3e20323639313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60a0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a3:8a:d1:9a:53:13:72:a0:9a:9a:05:02:77:3b:59:5e:8c:28:
         9b:59:e0:ac:81:a9:20:9b:66:6c:44:f9:e5:d1:6c:b8:70:c9:
         83:77:4c:d7:d7:8c:52:02:89:bb:70:65:f2:c9:14:89:2b:fc:
         b5:91:0a:80:97:b4:5d:bb:6c:92:60:64:29:c7:ac:e9:cf:89:
         fb:8b:6f:5a:f9:dd:1d:a3:a4:1f:96:57:6c:dd:ed:08:02:f6:
         e3:cc:e2:b9:19:6f:53:53:e5:84:49:6e:5e:06:35:70:ef:2b:
         64:a0:df:5e:20:59:2f:f2:32:0b:24:f5:aa:fe:72:9e:ee:22:
         57:89:e2:8e:65:25:74:75:5d:88:cc:6c:e3:b9:64:0a:7e:ee:
         50:0b:9e:1c:7a:a4:c4:33:99:f3:68:06:2f:12:84:59:e6:33:
         80:28:34:25:ae:85:40:d4:fe:03:7d:6a:39:c2:33:f8:96:23:
         a6:6d:ea:36:f6:c8:3d:ae:66:6e:39:52:21:51:70:eb:38:da:
         4e:b2:f7:52:d0:42:82:ca:29:cf:e4:a0:08:74:72:a8:30:2f:
         96:9c:97:a1:32:3b:2d:c1:03:b8:de:e3:e6:94:b3:b6:2e:cc:
         dc:14:2e:6b:f1:91:c2:78:6c:e2:f7:33:c4:90:6a:a9:2d:23:
         81:27:05:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:31 2025 by rpki-client on console.sobornost.net