Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/1/323830343a376434343a3a2f33322d3332203d3e20323731353530.roa
File:                     323830343a376434343a3a2f33322d3332203d3e20323731353530.roa (raw, json)
Hash identifier:          KIld/kT9tgHDo89MhxiBKVSIE4ouxoWvDMZBccT4bAs=
Subject key identifier:   A3:DE:7B:A7:32:EB:B1:17:C3:C9:DC:87:F9:CD:8D:42:1B:7C:7D:C4
Certificate issuer:       /CN=5D88506E9E4CEFFA0495A2DC722396EE08FC529D
Certificate serial:       25874962F79B7F407211CB8308D9759699F98FFE
Authority key identifier: 5D:88:50:6E:9E:4C:EF:FA:04:95:A2:DC:72:23:96:EE:08:FC:52:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D88506E9E4CEFFA0495A2DC722396EE08FC529D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/1/323830343a376434343a3a2f33322d3332203d3e20323731353530.roa
Signing time:             Wed 05 Mar 2025 19:00:04 +0000
ROA not before:           Wed 05 Mar 2025 18:55:04 +0000
ROA not after:            Wed 04 Mar 2026 19:00:04 +0000
asID:                     271550
IP address blocks:        2804:7d44::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/1/5D88506E9E4CEFFA0495A2DC722396EE08FC529D.crl
                          rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/1/5D88506E9E4CEFFA0495A2DC722396EE08FC529D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D88506E9E4CEFFA0495A2DC722396EE08FC529D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 19:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:87:49:62:f7:9b:7f:40:72:11:cb:83:08:d9:75:96:99:f9:8f:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D88506E9E4CEFFA0495A2DC722396EE08FC529D
        Validity
            Not Before: Mar  5 18:55:04 2025 GMT
            Not After : Mar  4 19:00:04 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:27:a8:50:a2:f2:98:60:aa:33:3a:51:8c:e7:
                    69:3e:1f:57:d8:aa:b9:1d:d9:6f:81:1d:98:05:bc:
                    34:e1:74:51:ee:64:f2:cf:23:81:58:18:47:f4:e8:
                    70:cc:11:44:08:ea:93:47:39:96:60:7e:6f:97:8e:
                    83:38:eb:aa:20:9c:91:b0:70:f1:85:9c:f1:fd:f3:
                    6a:58:21:42:0d:d9:bf:26:07:65:d2:58:c0:ed:fa:
                    bb:5b:6a:f2:63:fe:29:85:11:3c:70:22:9e:26:ec:
                    84:45:f0:ae:56:50:dd:9f:18:63:5f:91:42:ee:4e:
                    47:83:89:ec:6c:5b:36:23:22:a0:dc:50:20:51:6a:
                    b1:26:ca:bb:0f:19:9b:9f:59:8e:69:ad:f0:0b:b5:
                    77:9e:c2:e7:80:ea:1f:28:f0:23:6b:98:94:3b:94:
                    ac:9c:8b:65:a8:ff:40:f9:54:0d:37:9b:f4:88:44:
                    c5:53:e4:c3:41:31:fb:5f:cd:96:84:9d:28:50:0b:
                    20:b1:fd:34:ee:14:d4:b1:a2:25:35:e7:9d:6e:7a:
                    52:93:2b:57:b5:0c:d1:47:cc:f1:de:07:10:85:89:
                    6d:e3:6c:46:7a:e6:22:59:4b:0a:d5:25:eb:fa:b5:
                    25:8d:ea:f5:03:fd:ee:20:01:ac:c7:dd:ed:fc:12:
                    9a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:DE:7B:A7:32:EB:B1:17:C3:C9:DC:87:F9:CD:8D:42:1B:7C:7D:C4
            X509v3 Authority Key Identifier:
                keyid:5D:88:50:6E:9E:4C:EF:FA:04:95:A2:DC:72:23:96:EE:08:FC:52:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/1/5D88506E9E4CEFFA0495A2DC722396EE08FC529D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D88506E9E4CEFFA0495A2DC722396EE08FC529D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/1/323830343a376434343a3a2f33322d3332203d3e20323731353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d44::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:ed:ee:41:75:99:bf:ff:4b:ed:9f:0d:1d:eb:b8:c9:7d:dd:
         93:79:6e:4d:1b:78:a7:90:6b:91:a8:bd:f0:15:18:6f:15:f6:
         f8:ee:1f:8f:2f:21:0a:82:c8:3e:90:da:b3:fe:cd:b5:34:83:
         00:9d:8f:6b:6d:61:c3:b5:74:6a:b9:49:a0:ec:19:f6:65:3d:
         cc:00:2b:05:10:99:08:04:dc:8a:57:61:e6:f2:42:e3:0f:12:
         77:a9:2e:d3:68:78:c5:8c:c1:3f:5c:65:36:8e:01:b6:93:5b:
         ad:d8:09:7f:58:4a:5b:e5:6a:d7:50:59:c4:aa:45:b4:ba:0c:
         9d:1e:2a:d5:51:07:84:bf:f9:d2:f7:4d:a4:4c:01:02:c4:d2:
         0a:cb:60:82:fd:c1:aa:97:d4:09:e0:32:e8:53:40:09:b5:79:
         f9:d3:5f:48:13:a3:4e:b7:78:35:90:f6:65:85:88:6a:b8:d8:
         85:8d:fa:dc:09:90:28:f2:53:09:61:c3:8b:11:6d:bf:dc:42:
         eb:e7:c1:32:f6:43:50:84:15:de:c2:23:1c:65:5f:32:c3:44:
         2c:98:ec:dc:84:e9:e5:9d:57:9d:a4:49:14:a0:12:85:6a:a0:
         90:76:e6:42:4c:47:79:9f:43:92:ac:dd:0c:ec:72:93:cc:87:
         e1:67:49:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:44 2025 by rpki-client on console.sobornost.net