Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/n9Aqhq4zXr8uvVzTx6stRjdsN8ukC1X5zVDNdeuJbae/0/323830343a373662303a3a2f33322d3438203d3e20323731313238.roa
File:                     323830343a373662303a3a2f33322d3438203d3e20323731313238.roa (raw, json)
Hash identifier:          yIb89OXxXL/lBFAcaqG7doslRxB3KCIuCLBC9DZa3Zg=
Subject key identifier:   CD:C6:33:C7:48:33:38:52:9E:4A:7C:86:9A:18:3B:44:30:B0:96:D1
Certificate issuer:       /CN=ACA793156BD391EB850D3B1E163EFC980ED58B1A
Certificate serial:       6BD8A5968A7476995D2B1BC5C2EE933FB2F89007
Authority key identifier: AC:A7:93:15:6B:D3:91:EB:85:0D:3B:1E:16:3E:FC:98:0E:D5:8B:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACA793156BD391EB850D3B1E163EFC980ED58B1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/n9Aqhq4zXr8uvVzTx6stRjdsN8ukC1X5zVDNdeuJbae/0/323830343a373662303a3a2f33322d3438203d3e20323731313238.roa
Signing time:             Tue 22 Apr 2025 19:33:04 +0000
ROA not before:           Tue 22 Apr 2025 19:28:04 +0000
ROA not after:            Tue 21 Apr 2026 19:33:04 +0000
asID:                     271128
IP address blocks:        2804:76b0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/n9Aqhq4zXr8uvVzTx6stRjdsN8ukC1X5zVDNdeuJbae/0/ACA793156BD391EB850D3B1E163EFC980ED58B1A.crl
                          rsync://rpki-repo.registro.br/repo/n9Aqhq4zXr8uvVzTx6stRjdsN8ukC1X5zVDNdeuJbae/0/ACA793156BD391EB850D3B1E163EFC980ED58B1A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACA793156BD391EB850D3B1E163EFC980ED58B1A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 19:36:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:d8:a5:96:8a:74:76:99:5d:2b:1b:c5:c2:ee:93:3f:b2:f8:90:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACA793156BD391EB850D3B1E163EFC980ED58B1A
        Validity
            Not Before: Apr 22 19:28:04 2025 GMT
            Not After : Apr 21 19:33:04 2026 GMT
        Subject: CN=CDC633C7483338529E4A7C869A183B4430B096D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ec:9d:d8:c7:f2:3d:60:44:4c:f5:6a:dd:3b:
                    8c:12:f1:e0:aa:4a:48:a6:a2:05:cc:33:ce:a5:fe:
                    f5:9a:f4:65:e2:9e:49:58:ea:81:8d:38:9e:bd:0f:
                    b0:fd:f7:c7:96:32:73:0a:19:25:66:ce:97:6e:cc:
                    ec:27:4d:bd:69:b9:38:58:95:5a:66:3b:67:55:92:
                    0e:a5:e4:8e:ef:27:9b:b6:34:2d:9f:ff:c9:33:70:
                    ed:b0:6b:c2:84:f0:f8:95:8f:5e:3c:15:86:02:25:
                    d6:56:07:33:ec:26:2b:a4:44:3d:7f:d4:56:f2:b8:
                    e8:40:5b:c5:aa:e8:15:7d:ac:3a:bc:d7:0e:71:2c:
                    00:53:d8:38:2d:a3:08:b5:31:7f:56:04:a7:db:b5:
                    cb:87:a8:d0:4c:51:1e:f3:f4:bb:93:8e:98:42:9d:
                    77:20:1d:fe:8f:a0:8f:8e:54:2e:fb:29:ba:bd:13:
                    1f:42:02:8d:eb:a5:7f:91:63:33:4a:99:9a:99:8a:
                    79:51:9c:39:12:95:52:4f:9d:7a:a9:1a:e5:07:e5:
                    73:81:87:66:20:40:6c:7e:a8:7b:93:3f:2a:78:cb:
                    ab:42:0b:69:ea:37:73:98:89:7d:46:69:84:f5:b8:
                    c3:3f:cf:02:3e:81:48:99:45:77:05:34:50:5a:1c:
                    5c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C6:33:C7:48:33:38:52:9E:4A:7C:86:9A:18:3B:44:30:B0:96:D1
            X509v3 Authority Key Identifier:
                keyid:AC:A7:93:15:6B:D3:91:EB:85:0D:3B:1E:16:3E:FC:98:0E:D5:8B:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/n9Aqhq4zXr8uvVzTx6stRjdsN8ukC1X5zVDNdeuJbae/0/ACA793156BD391EB850D3B1E163EFC980ED58B1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACA793156BD391EB850D3B1E163EFC980ED58B1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/n9Aqhq4zXr8uvVzTx6stRjdsN8ukC1X5zVDNdeuJbae/0/323830343a373662303a3a2f33322d3438203d3e20323731313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:76b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:9b:d5:2f:8a:cb:22:9a:63:8a:ff:b7:cc:e3:05:cc:20:ee:
         09:02:80:ee:f0:4a:46:89:d6:0f:76:26:21:5c:2f:c4:9d:83:
         86:0d:ed:d6:7f:e2:03:c1:78:7a:09:1b:0e:1c:6b:8b:0a:fa:
         a9:9f:6e:2e:a7:b7:b4:dc:ea:f5:08:ae:c4:d8:45:49:3e:c3:
         9c:15:cc:f6:38:cf:c3:02:db:c6:2b:cc:f3:72:db:ea:38:1d:
         71:fe:9a:45:4c:a2:f2:a6:f3:70:cc:db:ae:68:e8:d8:3e:db:
         98:a0:11:13:a2:0a:90:84:20:67:05:64:25:73:23:f6:0a:b2:
         6b:0b:5b:ed:67:45:e8:d7:8f:b8:4d:c3:74:0c:c8:9b:18:bc:
         84:20:8c:e6:86:68:6e:df:e0:9c:30:8d:53:bc:01:cf:54:f5:
         9d:6c:56:ec:f6:cd:60:b4:47:df:2a:1f:3e:e1:e3:87:5a:2b:
         f3:ac:8a:27:ea:82:90:73:bd:48:09:8c:e8:4a:0e:9a:16:75:
         a6:7c:45:60:74:41:e2:2f:30:31:e3:93:d8:5f:a8:64:be:48:
         56:09:f7:54:4d:a7:ee:dc:b3:ec:01:a1:dc:3d:8a:8b:0f:82:
         34:f8:ca:83:cf:53:cc:bb:c8:69:7f:21:37:4f:06:83:b6:69:
         7d:bc:43:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:51 2025 by rpki-client on console.sobornost.net