Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2cjVmpjDJStVtzYBqnUS2R5QNAGUAsKFEYgFy6Mvan8x/0/323830343a383133303a383030303a3a2f33332d3333203d3e20323732343338.roa
File:                     323830343a383133303a383030303a3a2f33332d3333203d3e20323732343338.roa (raw, json)
Hash identifier:          GjrPaBZSWJsxgmv98yvCZEAV3ZazqCvva2oFfCm4aMY=
Subject key identifier:   1A:AA:6C:5C:F0:AD:13:33:CF:EC:7C:2A:3B:C9:F5:9D:37:29:F0:F6
Certificate issuer:       /CN=5445B268F95C5A86AE66A9F2C23E2E41A58C3D78
Certificate serial:       44CC89EE68267F2B527816A732CEB375DE67FD00
Authority key identifier: 54:45:B2:68:F9:5C:5A:86:AE:66:A9:F2:C2:3E:2E:41:A5:8C:3D:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5445B268F95C5A86AE66A9F2C23E2E41A58C3D78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2cjVmpjDJStVtzYBqnUS2R5QNAGUAsKFEYgFy6Mvan8x/0/323830343a383133303a383030303a3a2f33332d3333203d3e20323732343338.roa
Signing time:             Sat 26 Apr 2025 14:59:45 +0000
ROA not before:           Sat 26 Apr 2025 14:54:45 +0000
ROA not after:            Sat 25 Apr 2026 14:59:45 +0000
asID:                     272438
IP address blocks:        2804:8130:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2cjVmpjDJStVtzYBqnUS2R5QNAGUAsKFEYgFy6Mvan8x/0/5445B268F95C5A86AE66A9F2C23E2E41A58C3D78.crl
                          rsync://rpki-repo.registro.br/repo/2cjVmpjDJStVtzYBqnUS2R5QNAGUAsKFEYgFy6Mvan8x/0/5445B268F95C5A86AE66A9F2C23E2E41A58C3D78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5445B268F95C5A86AE66A9F2C23E2E41A58C3D78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:cc:89:ee:68:26:7f:2b:52:78:16:a7:32:ce:b3:75:de:67:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5445B268F95C5A86AE66A9F2C23E2E41A58C3D78
        Validity
            Not Before: Apr 26 14:54:45 2025 GMT
            Not After : Apr 25 14:59:45 2026 GMT
        Subject: CN=1AAA6C5CF0AD1333CFEC7C2A3BC9F59D3729F0F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4a:f9:8f:0d:9c:4c:ae:6e:52:c6:23:a2:64:
                    f0:55:37:a9:aa:b9:6c:03:72:7f:41:4e:ac:20:2d:
                    9c:06:60:d1:99:a7:5c:16:e3:bd:c7:6a:d2:b2:0d:
                    14:ef:4e:cd:fb:44:9c:87:c2:34:63:ff:c9:63:28:
                    e0:71:c2:49:e6:46:b0:9d:33:fd:c5:ac:d6:5e:15:
                    32:24:e5:71:7c:ae:ca:f7:b1:97:c1:a0:1c:ec:21:
                    1a:61:7c:5f:01:74:76:d6:4f:47:8e:52:47:d6:9a:
                    0e:8e:ad:42:5e:c9:7e:bc:68:35:7c:cb:67:ef:92:
                    1d:53:8c:b1:5e:4b:43:a1:56:74:1b:e3:3e:01:20:
                    e3:dd:39:19:05:4f:1a:26:35:24:f1:16:34:d9:22:
                    93:b0:96:47:1a:58:bf:ed:fe:6b:3c:42:b0:c8:c8:
                    4d:ed:99:e8:f5:e7:59:70:75:6e:ef:b8:f1:e1:05:
                    ff:8e:ee:ac:73:54:37:cb:a4:c0:26:a0:55:a6:c6:
                    aa:ba:a9:be:8e:4a:62:68:e1:22:a0:5b:4c:36:61:
                    6c:51:c2:23:47:b4:91:fd:8c:7a:17:ec:26:6b:cd:
                    15:cf:2f:12:94:35:a9:cd:a9:bd:36:fd:05:c0:ec:
                    f7:8f:8d:75:f1:64:73:dc:db:39:10:b0:7a:1e:0c:
                    f0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:AA:6C:5C:F0:AD:13:33:CF:EC:7C:2A:3B:C9:F5:9D:37:29:F0:F6
            X509v3 Authority Key Identifier:
                keyid:54:45:B2:68:F9:5C:5A:86:AE:66:A9:F2:C2:3E:2E:41:A5:8C:3D:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2cjVmpjDJStVtzYBqnUS2R5QNAGUAsKFEYgFy6Mvan8x/0/5445B268F95C5A86AE66A9F2C23E2E41A58C3D78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5445B268F95C5A86AE66A9F2C23E2E41A58C3D78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cjVmpjDJStVtzYBqnUS2R5QNAGUAsKFEYgFy6Mvan8x/0/323830343a383133303a383030303a3a2f33332d3333203d3e20323732343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8130:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         92:77:3e:7c:32:97:18:82:60:03:c2:55:cb:d6:c7:87:cf:3b:
         d5:95:ff:f7:7b:fd:f4:d3:c0:68:2f:f6:35:50:70:24:57:38:
         ad:9a:99:d2:b4:94:1a:79:9c:4b:0a:45:d6:75:19:ab:3c:a5:
         53:58:d3:59:90:91:15:d5:db:ac:30:70:5e:ad:e7:a6:2a:a9:
         2e:71:98:e9:a0:09:66:53:7e:a6:96:a3:5d:e5:05:ae:15:85:
         58:ef:e5:32:09:b1:ba:4f:87:1e:14:1d:ba:87:ec:46:23:e8:
         15:7b:96:e6:71:1d:13:4b:d7:1b:70:a4:22:56:2d:bf:7f:28:
         e5:d8:6c:57:9d:04:51:a5:eb:be:33:50:82:2f:58:32:2d:ca:
         05:30:6e:51:35:21:22:14:0e:62:db:69:6b:d4:f2:83:37:3b:
         72:eb:c0:5d:2c:43:8c:f0:ed:35:2b:f0:f0:7b:ff:25:31:18:
         7f:e8:36:9a:e7:d2:ae:44:b4:c1:de:ba:2b:2d:94:84:6b:b6:
         59:db:f2:1e:8f:5e:f7:0b:cf:3d:8c:b9:ad:35:a8:a8:07:c4:
         0e:c1:83:e9:c0:b7:37:22:3a:21:ba:ca:8f:d4:98:de:9b:9c:
         fb:3b:08:f7:d0:bf:3a:b4:56:f4:d9:71:bf:ad:b3:3d:16:5f:
         3a:35:7d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:26:45 2025 by rpki-client on console.sobornost.net