Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5e8a8jFdmR8yv9qo6asT7BJbEek4jwo3wbbTEACthmW/1/323830343a326664303a3a2f33332d3333203d3e20323634393133.roa
File:                     323830343a326664303a3a2f33332d3333203d3e20323634393133.roa (raw, json)
Hash identifier:          OR9WB7Qt+ittjWAnBsU0KMniHuez8Mge9PJ8x5bKmwc=
Subject key identifier:   54:6C:B7:97:BB:04:6A:DE:3B:0D:FC:67:48:0D:9D:22:A0:BF:F0:6B
Certificate issuer:       /CN=6FD7780130A5D3BF04E958422A80B35362959A11
Certificate serial:       654505DF8433E87AF07DE775B350EA3C7A3899C1
Authority key identifier: 6F:D7:78:01:30:A5:D3:BF:04:E9:58:42:2A:80:B3:53:62:95:9A:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FD7780130A5D3BF04E958422A80B35362959A11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5e8a8jFdmR8yv9qo6asT7BJbEek4jwo3wbbTEACthmW/1/323830343a326664303a3a2f33332d3333203d3e20323634393133.roa
Signing time:             Thu 06 Mar 2025 04:54:19 +0000
ROA not before:           Thu 06 Mar 2025 04:49:19 +0000
ROA not after:            Thu 05 Mar 2026 04:54:19 +0000
asID:                     264913
IP address blocks:        2804:2fd0::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J5e8a8jFdmR8yv9qo6asT7BJbEek4jwo3wbbTEACthmW/1/6FD7780130A5D3BF04E958422A80B35362959A11.crl
                          rsync://rpki-repo.registro.br/repo/J5e8a8jFdmR8yv9qo6asT7BJbEek4jwo3wbbTEACthmW/1/6FD7780130A5D3BF04E958422A80B35362959A11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FD7780130A5D3BF04E958422A80B35362959A11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 11:54:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:45:05:df:84:33:e8:7a:f0:7d:e7:75:b3:50:ea:3c:7a:38:99:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FD7780130A5D3BF04E958422A80B35362959A11
        Validity
            Not Before: Mar  6 04:49:19 2025 GMT
            Not After : Mar  5 04:54:19 2026 GMT
        Subject: CN=546CB797BB046ADE3B0DFC67480D9D22A0BFF06B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ca:e6:66:03:50:58:e6:3f:81:d0:4f:14:77:
                    7f:84:13:da:8c:70:67:68:da:6b:b1:52:76:42:e1:
                    ed:f9:ed:c0:87:11:aa:c6:8c:82:2c:30:7a:3a:f3:
                    53:59:f2:9d:78:08:2d:af:35:df:5c:97:30:ed:9c:
                    aa:a9:ae:11:a8:05:c6:7f:a3:8e:f5:a2:17:4e:2c:
                    f4:6f:6d:d9:71:a7:6d:e7:3f:9c:62:a2:43:5b:25:
                    8c:39:57:0d:2c:09:39:68:84:0c:75:37:45:08:3f:
                    09:de:44:60:ca:04:cb:ee:76:3b:63:d2:66:68:b4:
                    0a:8a:5b:16:b3:c7:ad:1d:16:7d:a1:bb:df:ea:3e:
                    b2:c6:ff:aa:f9:d7:19:9e:61:7a:f5:37:99:81:99:
                    57:29:8b:e7:cd:ff:3e:bf:16:d6:56:7e:2b:67:80:
                    c1:08:28:0c:19:a0:68:48:67:ef:29:68:94:7d:b5:
                    f9:36:13:e1:98:60:6e:d8:f4:87:04:e6:fb:b0:b4:
                    04:e4:f6:3a:78:4d:e6:39:ae:a8:de:aa:7f:7a:52:
                    cc:77:74:90:5d:80:25:7f:f3:38:93:f7:02:38:a4:
                    09:e0:b1:8e:1b:30:2d:3c:93:f5:ab:98:c2:a1:60:
                    15:b8:bc:c4:2d:d6:ea:b7:44:95:a0:68:37:d2:15:
                    54:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:6C:B7:97:BB:04:6A:DE:3B:0D:FC:67:48:0D:9D:22:A0:BF:F0:6B
            X509v3 Authority Key Identifier:
                keyid:6F:D7:78:01:30:A5:D3:BF:04:E9:58:42:2A:80:B3:53:62:95:9A:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5e8a8jFdmR8yv9qo6asT7BJbEek4jwo3wbbTEACthmW/1/6FD7780130A5D3BF04E958422A80B35362959A11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FD7780130A5D3BF04E958422A80B35362959A11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5e8a8jFdmR8yv9qo6asT7BJbEek4jwo3wbbTEACthmW/1/323830343a326664303a3a2f33332d3333203d3e20323634393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2fd0::/33

    Signature Algorithm: sha256WithRSAEncryption
         19:7e:4f:6d:96:77:e9:36:71:82:62:87:d6:33:34:f2:40:b5:
         45:95:c1:7c:45:a9:8d:7a:3f:9a:e3:5f:0d:83:9f:e7:bd:10:
         52:99:ad:24:34:5c:29:3e:86:b5:20:36:91:45:71:ca:c3:04:
         bf:16:9c:bb:57:cb:97:00:2a:dd:8b:d5:0d:0a:48:f7:c0:1f:
         86:66:2c:55:37:6e:23:9c:4f:a8:c8:8a:bb:30:19:f3:46:01:
         aa:f8:72:3c:18:40:04:c6:e3:2f:0c:24:77:a8:55:e6:dd:7a:
         dd:a9:9e:1f:cf:88:a9:0e:f7:e1:6a:1a:6c:18:eb:33:38:b2:
         5b:ea:e9:bc:1f:38:dd:7c:25:f2:39:53:3a:db:8c:2e:bd:bd:
         88:f2:16:67:ec:93:6c:2a:a6:f3:46:2c:a6:1a:d4:e2:fa:6b:
         46:05:54:d7:2f:8f:04:1d:61:14:05:97:20:d5:bf:93:4b:c4:
         c4:af:24:c3:80:46:21:ac:19:cd:a4:77:2c:27:13:c3:cb:8b:
         20:ed:be:4e:92:f4:c1:f0:d6:bf:b1:9d:29:b0:76:90:ec:3b:
         08:0d:4d:44:44:51:48:62:ef:48:df:ed:80:44:24:1e:46:6f:
         b6:d9:9e:be:5d:5b:b0:a2:14:9d:38:44:82:69:b8:8e:79:6f:
         9c:7d:c9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:05:05 2025 by rpki-client on console.sobornost.net