Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/323830343a313833343a313030303a3a2f33362d3336203d3e203631393233.roa
File:                     323830343a313833343a313030303a3a2f33362d3336203d3e203631393233.roa (raw, json)
Hash identifier:          BZ8/3F2ltB7rYMwqSiy3a5yvCBKwuQgeqm2IlRYD0B4=
Subject key identifier:   E9:EF:38:33:98:9B:E9:01:5C:4C:A6:1F:8D:2C:2B:80:80:6E:92:44
Certificate issuer:       /CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
Certificate serial:       1091E85C17B19436A3327A094AB910FBE5C5A36D
Authority key identifier: 1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/323830343a313833343a313030303a3a2f33362d3336203d3e203631393233.roa
Signing time:             Tue 15 Apr 2025 19:07:34 +0000
ROA not before:           Tue 15 Apr 2025 19:02:34 +0000
ROA not after:            Tue 14 Apr 2026 19:07:34 +0000
asID:                     61923
IP address blocks:        2804:1834:1000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl
                          rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:91:e8:5c:17:b1:94:36:a3:32:7a:09:4a:b9:10:fb:e5:c5:a3:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
        Validity
            Not Before: Apr 15 19:02:34 2025 GMT
            Not After : Apr 14 19:07:34 2026 GMT
        Subject: CN=E9EF3833989BE9015C4CA61F8D2C2B80806E9244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f8:69:68:2e:8f:04:3c:5c:ab:18:94:15:9d:
                    d1:d4:69:72:bc:d8:86:98:00:88:a0:52:b5:72:50:
                    99:4c:b7:d5:1a:71:5f:39:bb:1a:d1:2e:9f:85:6c:
                    eb:20:ea:41:a7:38:a9:1c:0a:5b:66:ce:04:4f:ca:
                    fb:de:47:d2:9f:95:19:6c:25:d6:dd:24:82:4f:46:
                    c2:f7:89:93:45:3a:3e:59:35:c2:ec:04:3b:42:1a:
                    74:de:d2:59:c0:05:ce:e1:74:bb:1c:85:4b:86:a8:
                    6d:a5:2e:41:29:f5:2a:16:b8:e3:c3:d4:06:3d:26:
                    93:34:46:1e:26:de:12:87:47:05:93:89:19:2e:51:
                    b4:b4:52:98:db:89:9e:19:1e:03:4b:72:bd:38:10:
                    70:6e:3f:6e:c9:f6:04:16:4d:0b:fc:57:05:9d:36:
                    5e:4c:86:3c:1d:36:85:a6:ca:ac:dd:2c:06:04:2a:
                    cf:66:b7:b5:7b:36:02:22:55:63:a8:7d:92:9d:23:
                    b7:73:2b:25:27:9f:9f:e6:24:ce:ba:68:19:4f:ec:
                    2a:5e:55:73:3b:dc:d9:bc:0f:33:37:06:9e:9f:78:
                    40:30:ae:9b:bc:b8:23:0c:52:ce:eb:87:c6:c5:3f:
                    5e:c5:07:76:2b:c3:9d:6a:ca:e0:7a:d5:b0:5d:12:
                    64:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:EF:38:33:98:9B:E9:01:5C:4C:A6:1F:8D:2C:2B:80:80:6E:92:44
            X509v3 Authority Key Identifier:
                keyid:1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/323830343a313833343a313030303a3a2f33362d3336203d3e203631393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1834:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         21:fc:4e:0e:05:c9:88:9c:29:d1:85:eb:1d:a4:b3:d2:32:f5:
         30:9b:d4:d1:48:d4:b9:39:82:35:7f:e7:ed:e7:ab:8d:3e:76:
         da:87:13:08:f1:d4:a8:a7:c0:5a:2e:f0:65:13:12:13:fa:4f:
         aa:71:3d:4c:7e:12:e0:8f:9d:24:f4:c1:d5:b6:62:d0:b2:be:
         c7:fe:c2:05:62:9b:fb:40:11:2b:3a:21:63:2e:e4:0e:fd:da:
         64:f1:b9:3a:10:be:5f:46:1b:23:3f:58:fa:43:27:e7:89:bc:
         43:30:a7:4a:37:9e:00:2b:47:a1:91:38:d6:46:ea:7e:57:4d:
         bf:2d:70:5f:8f:7b:09:5d:f3:6f:01:8b:0a:5a:50:58:12:c6:
         e0:3a:c3:3b:95:8f:f7:c7:4d:51:67:b6:ed:f4:07:ca:38:9b:
         b5:70:34:58:74:83:13:7b:b7:3f:75:56:05:b0:6a:75:8e:a5:
         0f:39:c7:3c:cc:70:bf:32:cb:0b:c4:36:2f:7f:e9:95:da:f3:
         20:c5:dd:6a:d5:b5:5e:8e:66:6b:ca:05:7d:f9:3a:47:c4:08:
         3b:02:bf:a1:e9:38:e7:1b:55:cb:7e:ef:3d:4f:20:75:71:6b:
         4b:db:28:c8:41:45:ae:b8:65:96:a9:60:a1:ff:8c:94:cd:11:
         02:fa:80:df
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUEJHoXBexlDajMnoJSrkQ++XFo20wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY1RjgzMUU5ODgzQUVGOEI3NkRBMTk0QTFFNUMxREYw
NzE3RDNFMTAeFw0yNTA0MTUxOTAyMzRaFw0yNjA0MTQxOTA3MzRaMDMxMTAvBgNV
BAMTKEU5RUYzODMzOTg5QkU5MDE1QzRDQTYxRjhEMkMyQjgwODA2RTkyNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT+GloLo8EPFyrGJQVndHUaXK8
2IaYAIigUrVyUJlMt9UacV85uxrRLp+FbOsg6kGnOKkcCltmzgRPyvveR9KflRls
JdbdJIJPRsL3iZNFOj5ZNcLsBDtCGnTe0lnABc7hdLschUuGqG2lLkEp9SoWuOPD
1AY9JpM0Rh4m3hKHRwWTiRkuUbS0UpjbiZ4ZHgNLcr04EHBuP27J9gQWTQv8VwWd
Nl5MhjwdNoWmyqzdLAYEKs9mt7V7NgIiVWOofZKdI7dzKyUnn5/mJM66aBlP7Cpe
VXM73Nm8DzM3Bp6feEAwrpu8uCMMUs7rh8bFP17FB3Yrw51qyuB61bBdEmR7AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU6e84M5ib6QFcTKYfjSwrgIBukkQwHwYDVR0j
BBgwFoAUH1+DHpiDrvi3baGUoeXB3wcX0+EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTdZeEF2aXNEU2FCaVlkdllnekRGVEF0eDNkc1JianFaVjdRYkxYNnVt
cDEvMC8xRjVGODMxRTk4ODNBRUY4Qjc2REExOTRBMUU1QzFERjA3MTdEM0UxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFGNUY4MzFFOTg4M0FFRjhC
NzZEQTE5NEExRTVDMURGMDcxN0QzRTEuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU3WXhBdmlzRFNhQmlZZHZZZ3pERlRBdHgzZHNSYmpxWlY3UWJMWDZ1bXAxLzAv
MzIzODMwMzQzYTMxMzgzMzM0M2EzMTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDM2MzEzOTMyMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQoBBg0EDANBgkqhkiG9w0BAQsFAAOC
AQEAIfxODgXJiJwp0YXrHaSz0jL1MJvU0UjUuTmCNX/n7eerjT522ocTCPHUqKfA
Wi7wZRMSE/pPqnE9TH4S4I+dJPTB1bZi0LK+x/7CBWKb+0ARKzohYy7kDv3aZPG5
OhC+X0YbIz9Y+kMn54m8QzCnSjeeACtHoZE41kbqfldNvy1wX497CV3zbwGLClpQ
WBLG4DrDO5WP98dNUWe27fQHyjibtXA0WHSDE3u3P3VWBbBqdY6lDznHPMxwvzLL
C8Q2L3/pldrzIMXdatW1Xo5ma8oFffk6R8QIOwK/oek45xtVy37vPU8gdXFrS9so
yEFFrrhllqlgof+MlM0RAvqA3w==
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:15 2025 by rpki-client on console.sobornost.net