Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4VyCDiXHsP1jG9hAUKJkJE4jcxyZGJhXuj3svaPV2zue/0/323830343a356430303a3a2f33322d3438203d3e20323638393435.roa
File:                     323830343a356430303a3a2f33322d3438203d3e20323638393435.roa (raw, json)
Hash identifier:          /NSh8I/Rslc7iMVh1K0i0LpvmuhofwUNcvRYRGnVjho=
Subject key identifier:   F2:91:DD:D9:D5:5D:91:04:CB:09:6E:1B:8E:56:9A:FF:E6:5C:AF:1E
Certificate issuer:       /CN=2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6
Certificate serial:       1D9661E7B34AF0ED853746CC624AEDB0B70FE0AD
Authority key identifier: 2B:5F:84:F3:9C:A6:A2:84:55:DE:97:4F:2C:F6:14:7A:5E:1D:3C:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VyCDiXHsP1jG9hAUKJkJE4jcxyZGJhXuj3svaPV2zue/0/323830343a356430303a3a2f33322d3438203d3e20323638393435.roa
Signing time:             Fri 25 Apr 2025 18:10:49 +0000
ROA not before:           Fri 25 Apr 2025 18:05:49 +0000
ROA not after:            Fri 24 Apr 2026 18:10:49 +0000
asID:                     268945
IP address blocks:        2804:5d00::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4VyCDiXHsP1jG9hAUKJkJE4jcxyZGJhXuj3svaPV2zue/0/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.crl
                          rsync://rpki-repo.registro.br/repo/4VyCDiXHsP1jG9hAUKJkJE4jcxyZGJhXuj3svaPV2zue/0/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 19:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:96:61:e7:b3:4a:f0:ed:85:37:46:cc:62:4a:ed:b0:b7:0f:e0:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6
        Validity
            Not Before: Apr 25 18:05:49 2025 GMT
            Not After : Apr 24 18:10:49 2026 GMT
        Subject: CN=F291DDD9D55D9104CB096E1B8E569AFFE65CAF1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5e:7c:28:e1:5b:21:38:5e:79:d9:b4:b0:be:
                    fc:38:61:fe:92:e1:60:4b:91:8a:b9:fd:9a:3b:4c:
                    0f:4e:19:6b:7c:c6:90:12:75:81:c6:55:0c:1b:06:
                    17:27:48:b5:98:62:bc:0c:15:ea:c7:5f:94:d7:9b:
                    11:b9:57:83:3e:1a:af:92:85:f9:cc:7a:34:49:f2:
                    89:f4:2d:4f:3d:f1:a5:2d:da:0f:58:a5:38:f5:24:
                    c6:f3:5e:b0:b4:2b:88:2b:1e:35:ba:56:02:00:9e:
                    3e:b1:4f:b1:af:c7:c3:7a:c5:eb:6b:ad:99:de:b9:
                    c7:54:ca:82:82:87:2b:d2:df:70:c4:4a:35:63:8f:
                    07:67:38:d7:fd:8e:04:46:40:6a:e9:48:f4:46:4c:
                    c5:47:bf:e5:d0:9f:2c:60:aa:74:18:49:eb:ad:4b:
                    50:5c:d9:62:e8:c9:f5:c9:2e:25:2e:f1:a7:f1:ca:
                    f0:8e:dc:d2:e0:de:d0:47:f5:db:f5:ff:83:56:8d:
                    48:27:c1:60:84:a8:02:53:e5:82:00:5a:be:ce:f6:
                    e2:f6:97:a9:df:f5:9b:df:b0:8f:59:94:33:7d:9a:
                    f9:34:32:b2:7f:9f:ce:cc:88:ae:25:e1:94:29:6c:
                    3f:38:23:95:18:3e:7e:69:49:bc:85:65:40:59:94:
                    41:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:91:DD:D9:D5:5D:91:04:CB:09:6E:1B:8E:56:9A:FF:E6:5C:AF:1E
            X509v3 Authority Key Identifier:
                keyid:2B:5F:84:F3:9C:A6:A2:84:55:DE:97:4F:2C:F6:14:7A:5E:1D:3C:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VyCDiXHsP1jG9hAUKJkJE4jcxyZGJhXuj3svaPV2zue/0/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VyCDiXHsP1jG9hAUKJkJE4jcxyZGJhXuj3svaPV2zue/0/323830343a356430303a3a2f33322d3438203d3e20323638393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5d00::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:3d:e1:3b:98:3d:3e:ed:35:8b:b8:a4:59:03:ce:8d:89:c3:
         e8:62:76:95:4b:1b:64:0a:f9:22:de:fc:bf:b6:97:48:03:5c:
         9b:e7:4a:da:3d:20:44:08:35:ab:8c:cd:e3:80:9b:2d:3c:d7:
         79:10:16:b8:dd:32:b9:11:1a:2f:54:c8:4d:7a:4c:08:17:61:
         b2:22:8e:1d:c3:e6:81:b3:92:51:ed:bb:83:e5:9a:c6:ec:b2:
         f1:ca:59:b9:31:5d:b0:87:fe:4a:97:b3:76:c8:b9:dd:70:b6:
         4b:82:1a:d8:66:6e:82:9b:93:eb:22:fc:4a:3e:7f:29:a5:ef:
         0e:06:4b:43:7c:04:fd:98:81:1d:70:09:b3:77:3a:42:b6:fc:
         8e:13:17:3a:37:cf:b5:02:09:74:88:4b:55:e5:3b:ff:f8:55:
         e9:db:84:54:d6:2f:55:b4:3d:b2:54:96:ea:2d:4a:8a:36:bf:
         8c:21:15:c7:8f:6d:e3:9b:6a:87:0e:0f:6d:0a:e3:8a:54:7a:
         77:1c:71:dd:5b:84:63:23:c6:1a:1c:68:5c:21:03:ad:0b:b5:
         81:99:d8:e3:d0:b1:7c:2b:de:e9:65:93:6d:36:65:9a:ce:84:
         04:e1:bd:e2:a0:93:ec:e9:6b:d5:65:b9:ed:77:c8:78:bc:2e:
         d5:4f:8a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:34 2025 by rpki-client on console.sobornost.net