Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/323830343a363532633a3a2f33342d3334203d3e20323639343733.roa
File:                     323830343a363532633a3a2f33342d3334203d3e20323639343733.roa (raw, json)
Hash identifier:          X5MXmZvX84QOjHDMm5hGtXTanpvg6jMd48H1sof9q60=
Subject key identifier:   E7:E8:30:26:FB:9C:A1:58:3C:F8:78:CC:D7:EA:A4:DC:4A:A5:71:BE
Certificate issuer:       /CN=BAA91B8729924B4E8155B81952688BEC004DD0B7
Certificate serial:       207FCFB4BCA71D779DD91294B9191EAD9D7DE7AD
Authority key identifier: BA:A9:1B:87:29:92:4B:4E:81:55:B8:19:52:68:8B:EC:00:4D:D0:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/323830343a363532633a3a2f33342d3334203d3e20323639343733.roa
Signing time:             Mon 14 Apr 2025 21:17:29 +0000
ROA not before:           Mon 14 Apr 2025 21:12:29 +0000
ROA not after:            Mon 13 Apr 2026 21:17:29 +0000
asID:                     269473
IP address blocks:        2804:652c::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.crl
                          rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 17:32:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:7f:cf:b4:bc:a7:1d:77:9d:d9:12:94:b9:19:1e:ad:9d:7d:e7:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAA91B8729924B4E8155B81952688BEC004DD0B7
        Validity
            Not Before: Apr 14 21:12:29 2025 GMT
            Not After : Apr 13 21:17:29 2026 GMT
        Subject: CN=E7E83026FB9CA1583CF878CCD7EAA4DC4AA571BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cc:ba:4b:2b:b9:35:d0:b1:62:d9:97:ab:ce:
                    74:73:26:8b:b9:23:29:66:a2:3c:e9:da:ee:a3:bc:
                    63:22:62:61:d1:a6:33:28:19:5b:7f:ee:1d:20:40:
                    7c:73:cc:84:a1:00:14:41:9f:2f:18:12:be:78:cf:
                    71:a7:0b:73:d8:af:bf:96:80:8d:73:79:10:54:6d:
                    8f:18:84:54:cd:e7:c4:a5:8a:92:dd:3b:30:12:aa:
                    ea:85:db:44:f3:a5:5c:a3:c8:d4:f4:96:83:43:0c:
                    57:57:dc:10:42:20:2b:58:5a:27:66:42:ce:b3:91:
                    40:74:27:d9:9d:68:c2:d6:e3:66:44:25:91:ac:d9:
                    5c:2c:c3:3d:fc:2d:7d:40:82:af:1c:58:24:db:5a:
                    86:5e:47:ce:16:82:ec:dc:84:19:c7:c7:58:3b:9b:
                    9c:72:08:45:11:75:f6:04:11:23:43:93:3b:3f:82:
                    06:05:2e:8a:93:69:b2:19:cc:11:4f:b6:a7:42:ff:
                    ba:39:22:8b:28:27:4b:55:d5:ac:2c:60:b3:25:d5:
                    69:aa:ca:6c:a5:0e:51:c9:ca:3b:27:51:c4:fc:1e:
                    a4:e3:56:7e:be:f0:ed:3d:31:29:3f:a4:c9:d7:1c:
                    bf:9f:8a:60:0b:3a:1e:91:80:dd:5c:e4:8d:39:b9:
                    e1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E8:30:26:FB:9C:A1:58:3C:F8:78:CC:D7:EA:A4:DC:4A:A5:71:BE
            X509v3 Authority Key Identifier:
                keyid:BA:A9:1B:87:29:92:4B:4E:81:55:B8:19:52:68:8B:EC:00:4D:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/323830343a363532633a3a2f33342d3334203d3e20323639343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:652c::/34

    Signature Algorithm: sha256WithRSAEncryption
         4a:b6:98:42:d0:aa:c7:98:db:87:c8:48:8a:f3:c1:f4:a8:a4:
         e5:44:9c:79:a4:e7:f1:dc:ae:1f:ae:b5:9d:36:7f:ff:7e:a6:
         a9:45:0f:db:b6:59:b6:85:42:f1:cf:ef:8e:dc:36:20:1b:9e:
         1d:05:8c:b4:f0:b9:7f:d2:3b:bb:7e:6f:70:0a:55:cd:81:f1:
         13:61:4f:55:0f:0b:1c:09:50:64:ab:e2:49:c6:2b:7f:42:5f:
         1c:e5:30:78:f7:f3:a9:a0:7f:96:2d:c0:e6:79:cd:63:5c:d5:
         a0:b0:83:1f:63:a7:ba:14:a1:b0:2f:f1:fd:19:b7:0b:97:6e:
         93:c4:4a:4b:94:fd:c1:58:45:fa:55:8a:4c:de:40:5d:bf:17:
         0c:d3:60:39:c7:7d:4f:7b:6c:8a:96:0b:ed:d2:4d:aa:b4:0d:
         83:8e:39:5d:33:10:a2:86:07:19:1b:f0:58:6d:eb:ec:5a:7e:
         02:27:95:d0:a2:c7:a9:b9:48:93:b3:4c:ef:48:ba:7f:3b:7b:
         4d:9e:40:8e:be:3c:38:6c:5e:b5:01:ae:1b:2b:fb:55:cf:c7:
         9f:23:44:7d:f7:5e:8d:4b:81:b8:ce:8c:c9:9b:4b:25:e3:3c:
         ec:f8:38:e8:91:9d:e6:4e:a0:33:39:10:bf:93:63:ac:4a:4e:
         77:2c:e3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:12:19 2025 by rpki-client on console.sobornost.net