Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/323830343a313833343a333030303a3a2f33362d3336203d3e203631393233.roa
File:                     323830343a313833343a333030303a3a2f33362d3336203d3e203631393233.roa (raw, json)
Hash identifier:          VR78rSkwdkoXiYqy7olbib7XhMTy2fBdYCKFDMIYS8M=
Subject key identifier:   B0:80:C7:FE:A3:44:F1:AD:E6:75:1C:EA:27:FB:1A:2F:AB:69:C3:F8
Certificate issuer:       /CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
Certificate serial:       36EE6F1CFAFC0BFD67910542BAAECA092EBE6C64
Authority key identifier: 1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/323830343a313833343a333030303a3a2f33362d3336203d3e203631393233.roa
Signing time:             Tue 15 Apr 2025 19:07:51 +0000
ROA not before:           Tue 15 Apr 2025 19:02:51 +0000
ROA not after:            Tue 14 Apr 2026 19:07:51 +0000
asID:                     61923
IP address blocks:        2804:1834:3000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl
                          rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:ee:6f:1c:fa:fc:0b:fd:67:91:05:42:ba:ae:ca:09:2e:be:6c:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
        Validity
            Not Before: Apr 15 19:02:51 2025 GMT
            Not After : Apr 14 19:07:51 2026 GMT
        Subject: CN=B080C7FEA344F1ADE6751CEA27FB1A2FAB69C3F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d5:aa:b8:90:3f:18:1e:d3:88:3c:71:46:f1:
                    eb:16:22:bb:ea:e4:f2:86:b8:e0:5d:40:73:34:b5:
                    f4:6e:ed:bb:7b:a5:31:45:21:f8:a5:89:cd:9a:85:
                    e3:7c:5e:11:be:54:ce:fb:8b:9b:ee:b7:fe:40:ff:
                    bf:a1:59:96:1d:31:42:a2:ff:8a:84:38:97:1d:74:
                    e2:a6:87:07:bc:5a:fc:ee:5c:93:04:12:7f:6d:c8:
                    ab:98:e0:59:a0:a3:3e:4b:48:a4:a3:b1:e4:a1:46:
                    18:51:6f:82:f4:fe:d7:f6:8c:60:9e:71:d8:11:8e:
                    4c:33:6a:d6:9f:78:9f:23:ed:90:3a:38:d9:97:07:
                    eb:89:db:f2:39:0c:b4:cc:b8:a1:6c:9f:26:8f:34:
                    ad:1f:60:18:4b:27:76:66:0e:bb:5a:4a:44:40:24:
                    3e:00:bb:f0:18:09:44:0b:02:06:28:e6:63:22:8c:
                    ce:76:6c:00:0b:85:25:5b:88:5e:50:25:a4:f5:04:
                    dc:56:06:58:b4:15:2f:52:d1:9d:02:19:24:61:fc:
                    3a:69:dd:6b:4e:d2:05:a1:d5:1c:97:80:93:b7:33:
                    14:1e:23:30:99:4e:1e:66:bd:26:b1:0a:56:01:20:
                    49:6b:60:bb:de:2f:34:47:bc:5a:49:9e:ab:6b:cd:
                    29:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:80:C7:FE:A3:44:F1:AD:E6:75:1C:EA:27:FB:1A:2F:AB:69:C3:F8
            X509v3 Authority Key Identifier:
                keyid:1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/323830343a313833343a333030303a3a2f33362d3336203d3e203631393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1834:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         ae:ac:34:3d:de:9f:76:fd:85:ea:7a:76:00:b7:a8:0b:1f:83:
         b7:13:81:72:25:26:e8:a7:e6:8f:33:63:f8:ea:38:1d:8b:ff:
         10:00:8c:38:f3:c5:45:22:d0:14:ef:f5:52:3a:86:95:30:c6:
         71:de:ef:c9:75:60:a6:f9:dc:82:ca:2b:20:90:1d:e2:53:a1:
         55:c6:82:78:fb:f1:7f:97:69:e0:59:18:66:58:98:6c:cd:93:
         40:da:d7:2f:31:e0:72:20:00:c9:f8:ea:d9:29:59:41:ea:2e:
         d4:aa:3f:80:82:29:63:01:51:2e:72:89:b1:cd:c6:e0:b9:e5:
         f6:fc:59:39:73:53:df:43:b6:21:40:e8:55:40:f5:b6:e2:00:
         bd:e9:04:3b:87:9a:33:8f:a9:e4:5a:f8:00:05:e2:aa:4b:2b:
         d2:58:aa:65:50:11:2a:e7:24:30:05:9a:3f:20:9a:3f:85:d7:
         b3:04:38:4a:6d:12:49:01:e3:d2:49:21:99:a8:0f:00:63:2b:
         65:8a:6b:c9:f5:c0:db:72:06:e9:ac:b3:60:ab:8a:f6:61:58:
         ab:b0:e4:57:c3:4a:c7:2c:4d:e9:bb:2a:b2:56:42:bb:42:91:
         90:4d:df:b3:a3:f7:99:9e:e8:d3:d7:b8:2f:d6:57:9d:65:67:
         53:d3:10:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:15 2025 by rpki-client on console.sobornost.net