Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/323830343a363435633a3a2f33322d3332203d3e20323639343233.roa
File:                     323830343a363435633a3a2f33322d3332203d3e20323639343233.roa (raw, json)
Hash identifier:          YZiGBGpWkogdVOXvOhriBvkbHKY6YRhwj9vWztg0xEg=
Subject key identifier:   B4:FB:32:9F:2B:CB:27:05:EA:8F:3F:D9:36:E0:A6:58:36:AD:F8:0F
Certificate issuer:       /CN=F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0
Certificate serial:       3ADB440B66F034DDCC295D259AF9A0266D2BA19A
Authority key identifier: F0:E2:45:D2:CA:D0:9D:3E:65:9F:55:20:93:C7:FF:CB:E1:D2:5D:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/323830343a363435633a3a2f33322d3332203d3e20323639343233.roa
Signing time:             Thu 03 Apr 2025 18:00:22 +0000
ROA not before:           Thu 03 Apr 2025 17:55:22 +0000
ROA not after:            Thu 02 Apr 2026 18:00:22 +0000
asID:                     269423
IP address blocks:        2804:645c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.crl
                          rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:db:44:0b:66:f0:34:dd:cc:29:5d:25:9a:f9:a0:26:6d:2b:a1:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0
        Validity
            Not Before: Apr  3 17:55:22 2025 GMT
            Not After : Apr  2 18:00:22 2026 GMT
        Subject: CN=B4FB329F2BCB2705EA8F3FD936E0A65836ADF80F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:88:04:cb:95:ec:13:16:c3:98:86:af:de:95:
                    74:69:24:17:15:f4:d0:3e:a1:1b:f9:58:c8:db:a1:
                    39:61:ab:94:dd:4f:53:59:7c:c5:40:a8:8f:65:bd:
                    3d:52:58:2a:00:1a:65:03:5e:4c:aa:0f:09:ff:56:
                    25:9a:e8:55:f4:1a:ac:92:01:eb:e5:d4:24:3d:60:
                    08:35:97:9d:ad:81:38:aa:c7:4c:cc:d0:2f:9d:4d:
                    cf:c3:e4:59:46:7b:47:7e:a4:fd:5f:c2:a5:d8:0b:
                    e5:e0:a9:bd:54:50:ad:2f:3f:ec:27:39:19:88:45:
                    d4:e3:57:4f:1e:7b:c2:5b:2a:33:9c:ab:1a:a4:a1:
                    b7:21:c7:90:50:21:b1:e1:b4:69:51:74:cf:47:06:
                    94:1a:98:50:3c:64:c7:23:19:65:80:e4:fa:a4:4d:
                    7a:57:0c:cb:3f:2a:b7:80:d1:18:99:c3:90:91:28:
                    77:4f:57:69:d5:57:e7:e2:d1:07:c3:6c:7e:7e:e0:
                    07:7f:f4:b7:71:e8:fd:49:8a:38:10:7e:a8:85:e7:
                    69:fc:ca:d1:ae:b1:15:d7:22:5b:75:05:31:d0:7f:
                    0c:cc:3d:95:32:19:45:c7:3c:fa:96:89:e5:be:ec:
                    91:b7:4a:0e:00:4d:50:34:d4:30:74:80:fd:09:f3:
                    62:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:FB:32:9F:2B:CB:27:05:EA:8F:3F:D9:36:E0:A6:58:36:AD:F8:0F
            X509v3 Authority Key Identifier:
                keyid:F0:E2:45:D2:CA:D0:9D:3E:65:9F:55:20:93:C7:FF:CB:E1:D2:5D:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/323830343a363435633a3a2f33322d3332203d3e20323639343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:645c::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:99:75:f2:b3:57:d3:99:64:44:03:04:13:f9:b8:7b:24:fe:
         a8:90:98:fb:4b:41:7b:d1:d9:ab:9f:f6:fa:4d:3e:b6:c1:e3:
         be:1d:d7:1e:ac:12:50:cc:f4:ab:62:56:a8:65:e8:41:5b:3e:
         4a:04:f6:6e:7a:9a:80:a2:af:d2:39:a0:c1:d0:38:fb:8d:4b:
         31:29:56:41:79:27:69:4e:0c:0d:5b:b2:51:7d:0c:ca:2d:cd:
         0f:5a:74:72:fe:20:66:bd:fe:34:e2:18:f6:07:98:c6:e5:e1:
         2b:a6:4b:eb:f9:45:17:3f:7b:ce:cd:3e:30:f3:e1:65:03:2a:
         54:01:a4:03:d8:73:65:84:46:da:cd:33:dd:ef:d7:83:cb:96:
         69:09:35:c6:0d:dc:95:60:f1:bc:96:5c:b7:01:74:be:7b:bb:
         1e:87:74:44:17:29:cb:79:c0:58:7c:7e:ae:a7:54:79:a7:1e:
         7e:8a:ad:ac:e5:1f:0a:7f:ad:ec:2c:d5:f5:04:06:e6:01:3b:
         f3:cf:ec:c6:45:f9:03:70:23:c9:fe:96:08:ff:2e:62:8a:01:
         62:ca:fa:97:06:c5:e8:cf:11:1b:0b:cb:f2:1b:f9:ea:e7:92:
         84:26:2d:11:d2:8f:26:75:f7:47:85:74:22:17:4f:0e:58:a4:
         8d:c7:33:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:48 2025 by rpki-client on console.sobornost.net