Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/323830343a376139343a313130303a3a2f34302d3434203d3e20323731333830.roa
File:                     323830343a376139343a313130303a3a2f34302d3434203d3e20323731333830.roa (raw, json)
Hash identifier:          rBqWL9GDoAH7uJzQePNCNA5HpILL2zXFE8eVpkzswxk=
Subject key identifier:   4F:01:05:0A:6E:53:9B:35:52:DD:7D:FA:FD:A4:24:41:D6:37:72:6F
Certificate issuer:       /CN=4AB61C2BEB228083B61C39B853C001DD574DE2FB
Certificate serial:       278980A5F64FC0BD3EBB1C0C415C7539DC0B2193
Authority key identifier: 4A:B6:1C:2B:EB:22:80:83:B6:1C:39:B8:53:C0:01:DD:57:4D:E2:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/323830343a376139343a313130303a3a2f34302d3434203d3e20323731333830.roa
Signing time:             Thu 06 Mar 2025 14:33:21 +0000
ROA not before:           Thu 06 Mar 2025 14:28:21 +0000
ROA not after:            Thu 05 Mar 2026 14:33:21 +0000
asID:                     271380
IP address blocks:        2804:7a94:1100::/40 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.crl
                          rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:89:80:a5:f6:4f:c0:bd:3e:bb:1c:0c:41:5c:75:39:dc:0b:21:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AB61C2BEB228083B61C39B853C001DD574DE2FB
        Validity
            Not Before: Mar  6 14:28:21 2025 GMT
            Not After : Mar  5 14:33:21 2026 GMT
        Subject: CN=4F01050A6E539B3552DD7DFAFDA42441D637726F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:90:05:45:ba:df:e5:c9:9b:c5:3b:b3:3c:e9:
                    fb:7a:59:23:fc:83:88:0e:9a:b9:35:8e:44:6f:3e:
                    d0:80:56:01:08:95:52:ec:83:9a:db:45:7c:63:ef:
                    5d:1d:d4:7f:e9:29:4c:74:d5:84:e7:85:64:19:c5:
                    23:f5:8e:90:6e:5e:d5:80:5b:a5:9f:07:31:50:e3:
                    14:b2:6f:2a:26:d1:02:66:b6:3a:74:97:38:e5:e7:
                    bb:13:f7:c5:67:32:ec:65:bc:55:33:da:c3:e1:18:
                    44:e9:c6:77:89:1e:80:16:cd:b5:65:c1:bb:98:2d:
                    77:6e:fe:fd:11:4c:2a:2f:9a:ee:35:c5:6c:c7:b2:
                    4b:c5:1f:8a:a4:70:77:47:67:36:9d:95:4e:b0:69:
                    59:73:28:79:c3:f3:c8:04:13:51:31:d8:17:54:34:
                    98:e1:75:ab:67:18:0f:a7:1b:4b:e3:a4:0b:39:ca:
                    80:9c:1d:3e:d3:c5:a8:47:1b:18:a1:61:55:9e:e3:
                    c1:62:9b:92:ae:2f:aa:f5:52:5d:9d:59:83:9d:08:
                    ce:9e:62:60:b7:68:05:c2:ea:4a:1b:68:71:40:67:
                    5a:dd:40:8d:c3:07:f6:97:1e:5e:a2:cd:79:ac:87:
                    61:48:1b:f2:26:3a:bb:51:79:ee:80:ad:c9:c6:33:
                    20:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:01:05:0A:6E:53:9B:35:52:DD:7D:FA:FD:A4:24:41:D6:37:72:6F
            X509v3 Authority Key Identifier:
                keyid:4A:B6:1C:2B:EB:22:80:83:B6:1C:39:B8:53:C0:01:DD:57:4D:E2:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/323830343a376139343a313130303a3a2f34302d3434203d3e20323731333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a94:1100::/40

    Signature Algorithm: sha256WithRSAEncryption
         40:0e:87:3f:47:a7:c3:aa:f9:32:1e:3c:52:a0:89:5b:64:af:
         92:00:d0:0d:87:23:eb:d3:b4:a3:29:d2:90:66:e8:98:7b:7d:
         37:68:8f:9a:3d:b5:4a:bd:1f:3e:31:e7:32:8e:a7:79:fe:53:
         d3:dc:6c:4c:9d:94:f1:67:ad:00:95:39:c8:48:87:b7:06:ab:
         13:c0:39:cb:20:9d:a3:5f:c1:3e:47:62:f6:99:eb:71:eb:4e:
         db:1b:10:84:24:3f:2f:b2:15:44:0a:23:db:ec:61:4e:02:40:
         64:9c:fc:10:00:c1:33:0f:20:b2:23:08:d7:d4:ba:31:50:07:
         61:1e:34:af:e9:2e:cd:f7:66:15:52:3c:47:be:44:89:55:2a:
         46:e8:76:28:d5:72:64:ee:7f:0f:c6:a8:4b:9e:29:7c:db:dd:
         d1:90:be:8c:60:10:fe:68:13:5c:a6:d8:44:9c:9f:3e:8b:c8:
         be:91:11:f3:e1:69:f6:f4:47:d5:54:54:5f:95:ea:2a:13:3d:
         e6:16:b3:a4:d4:51:72:47:cc:96:bb:0d:09:0a:82:23:0c:95:
         03:af:f0:57:23:a7:46:fb:fe:01:c7:1b:76:e4:6b:ff:9a:f4:
         03:39:cb:39:e7:ec:5b:f7:a8:f1:29:6b:96:57:48:98:b5:62:
         1b:2f:9b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:16 2025 by rpki-client on console.sobornost.net