Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/323830343a333037343a343030303a3a2f33342d3334203d3e20323634393532.roa
File:                     323830343a333037343a343030303a3a2f33342d3334203d3e20323634393532.roa (raw, json)
Hash identifier:          Nc/5Ap5wLvH/i1jN/95JCO6MEX3gOXwapslO/l2JaSw=
Subject key identifier:   8A:F6:57:BB:AE:D4:09:4E:81:A4:7C:D1:66:DF:F6:56:CA:CE:63:AD
Certificate issuer:       /CN=3E212DB1B302950E59672700155B176D07CFDAEA
Certificate serial:       0A8B8BAEBEDAB07FFD0EC41EDF9A19F828D7E3B2
Authority key identifier: 3E:21:2D:B1:B3:02:95:0E:59:67:27:00:15:5B:17:6D:07:CF:DA:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/323830343a333037343a343030303a3a2f33342d3334203d3e20323634393532.roa
Signing time:             Tue 01 Apr 2025 16:26:50 +0000
ROA not before:           Tue 01 Apr 2025 16:21:50 +0000
ROA not after:            Tue 31 Mar 2026 16:26:50 +0000
asID:                     264952
IP address blocks:        2804:3074:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.crl
                          rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 17:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:8b:8b:ae:be:da:b0:7f:fd:0e:c4:1e:df:9a:19:f8:28:d7:e3:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E212DB1B302950E59672700155B176D07CFDAEA
        Validity
            Not Before: Apr  1 16:21:50 2025 GMT
            Not After : Mar 31 16:26:50 2026 GMT
        Subject: CN=8AF657BBAED4094E81A47CD166DFF656CACE63AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b0:31:10:27:fe:c2:98:5a:c5:92:35:3e:38:
                    cb:80:9e:cc:da:ed:f8:82:48:02:73:2e:04:c2:1d:
                    5b:79:e5:6f:4b:68:2c:69:02:ec:4b:e7:65:49:fa:
                    4c:33:fa:c1:0c:b5:cc:98:51:b0:03:50:70:63:b7:
                    af:82:3f:f9:1d:bc:dd:54:07:73:d1:88:ba:9b:f4:
                    ad:9f:54:7e:2e:a9:4a:2a:6b:5f:96:12:f7:76:47:
                    99:b7:b6:42:55:6f:7a:ef:6e:eb:2c:69:ab:5b:b0:
                    19:94:47:1f:93:2b:93:d4:e2:91:f9:fa:36:63:02:
                    0f:66:b4:8b:bb:61:f0:18:0d:21:e0:4a:95:72:17:
                    d0:eb:37:e7:25:c7:e6:69:d6:89:79:13:50:91:0c:
                    d7:b9:19:29:e9:ef:09:4b:cb:be:75:57:de:d2:fc:
                    2b:29:52:96:a7:3f:cc:95:56:23:7a:03:44:b8:fc:
                    23:5e:66:59:d0:83:66:71:a3:9b:1e:94:97:54:01:
                    8f:bb:08:38:39:96:81:47:70:a2:4d:0c:81:d4:39:
                    39:ee:d7:d1:4a:26:5d:7a:c2:f5:d8:36:05:d0:42:
                    89:57:b8:c5:4b:3b:d1:2e:a4:51:46:9d:2f:1b:27:
                    4a:ac:ca:04:c7:5e:20:6e:c7:6c:b7:b9:ca:2a:d2:
                    89:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:F6:57:BB:AE:D4:09:4E:81:A4:7C:D1:66:DF:F6:56:CA:CE:63:AD
            X509v3 Authority Key Identifier:
                keyid:3E:21:2D:B1:B3:02:95:0E:59:67:27:00:15:5B:17:6D:07:CF:DA:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/323830343a333037343a343030303a3a2f33342d3334203d3e20323634393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3074:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         75:a7:76:4a:2e:37:4a:bc:5a:45:fc:e1:31:e1:5a:f7:f7:74:
         4f:07:3e:e2:69:20:e9:32:f6:b3:37:47:01:3b:1c:4f:40:24:
         e6:ab:d6:b1:25:f6:4d:dc:10:a9:fc:12:bd:a4:2c:71:9e:ef:
         cc:d6:83:8f:ac:c9:ea:18:fb:64:40:0e:a2:37:94:eb:69:c2:
         a3:c0:e1:27:81:09:a5:13:06:c3:e5:fa:2a:f3:52:2d:fe:48:
         a6:93:51:72:ad:f4:e9:d6:d3:cc:b3:47:b8:7a:3a:0c:31:0d:
         0a:e2:7d:1c:05:dc:f7:05:75:0f:ab:37:d5:a9:b2:72:91:7a:
         fc:75:c5:79:68:c2:78:e0:c4:ea:e6:47:ae:87:ae:15:d1:de:
         59:3e:70:de:be:ef:42:cb:b8:99:54:98:5c:22:e3:c5:22:71:
         1c:18:26:00:16:b8:ba:65:eb:63:11:f6:18:03:d2:61:82:90:
         92:68:c8:4a:4c:75:98:75:3a:c7:90:f7:85:9b:45:b2:e3:e2:
         8b:2a:9d:a1:95:aa:dd:b4:6c:67:2d:2d:a8:57:27:f9:a4:cf:
         8f:8e:99:c7:47:1b:6e:05:73:b9:29:f0:b5:8e:6b:69:06:f9:
         1e:1b:a3:d1:29:df:6b:55:cc:8d:71:b7:f7:72:68:95:10:12:
         e8:e4:4b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:50 2025 by rpki-client on console.sobornost.net