Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/323830343a313833343a363030303a3a2f33362d3336203d3e203631393233.roa
File:                     323830343a313833343a363030303a3a2f33362d3336203d3e203631393233.roa (raw, json)
Hash identifier:          XI3Y6GDpgVpXJ7DrbIH5m+s3KTVs49fK/tHQifFbZVQ=
Subject key identifier:   3A:1C:65:73:B0:6C:6B:3C:0B:34:5D:35:5A:27:9E:D8:47:52:E4:8F
Certificate issuer:       /CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
Certificate serial:       7F110E653ECC6348293DB65001B30A6D128734AB
Authority key identifier: 1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/323830343a313833343a363030303a3a2f33362d3336203d3e203631393233.roa
Signing time:             Tue 15 Apr 2025 19:08:22 +0000
ROA not before:           Tue 15 Apr 2025 19:03:22 +0000
ROA not after:            Tue 14 Apr 2026 19:08:22 +0000
asID:                     61923
IP address blocks:        2804:1834:6000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl
                          rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:11:0e:65:3e:cc:63:48:29:3d:b6:50:01:b3:0a:6d:12:87:34:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
        Validity
            Not Before: Apr 15 19:03:22 2025 GMT
            Not After : Apr 14 19:08:22 2026 GMT
        Subject: CN=3A1C6573B06C6B3C0B345D355A279ED84752E48F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b3:96:c6:08:40:c8:57:28:54:b7:e9:26:f2:
                    a7:46:bb:16:09:a1:71:49:3e:dc:8c:3a:e7:f0:25:
                    95:8b:11:fa:f6:c3:c9:80:03:85:bd:dc:07:b4:fb:
                    47:47:c8:af:01:5f:98:07:f4:6f:e0:0e:1d:e5:24:
                    70:ab:8e:b0:55:af:57:3d:7a:11:f5:04:bd:51:e9:
                    9d:dd:05:bf:8a:09:4e:da:de:6c:f5:11:20:5d:af:
                    f0:b1:a6:df:de:e1:2a:91:28:a1:23:80:62:7a:f5:
                    9c:10:21:5e:29:e1:7c:ae:34:a1:ac:a7:5c:8e:33:
                    f5:8f:57:71:4e:ae:61:4d:1e:a1:e4:26:3f:fd:5b:
                    81:94:44:2e:69:0c:14:3f:e5:cf:6c:32:90:af:41:
                    02:01:b0:79:af:d4:36:25:c5:05:68:9c:c5:c4:c6:
                    25:bb:21:de:1b:6a:a5:2d:11:ba:aa:7b:f6:3c:6a:
                    bb:91:c7:6c:37:c4:26:b6:07:11:0c:7b:53:a1:49:
                    5e:cc:d3:67:d0:a1:7e:d1:1f:83:cc:bf:9b:88:e9:
                    91:d7:50:ca:9e:b3:45:a8:de:22:66:3e:ce:fa:10:
                    3f:22:42:cb:cf:d1:79:2d:85:d9:c3:b3:6d:00:b8:
                    8f:0d:02:cb:90:81:8d:24:3b:9b:8c:5f:a3:f6:2f:
                    23:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:1C:65:73:B0:6C:6B:3C:0B:34:5D:35:5A:27:9E:D8:47:52:E4:8F
            X509v3 Authority Key Identifier:
                keyid:1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/323830343a313833343a363030303a3a2f33362d3336203d3e203631393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1834:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         94:5d:05:5f:ef:7f:b3:57:8d:b1:1e:60:96:53:b2:c6:2c:2b:
         9d:aa:f1:f9:12:8e:0e:2b:4d:f9:a2:f4:9b:10:dd:81:8f:6b:
         09:e1:8f:9d:be:1e:59:bf:70:f8:88:95:37:c6:08:6d:d2:b1:
         46:85:8e:59:a4:77:3f:f5:32:fd:5f:a8:20:f1:48:05:75:2f:
         81:c9:27:0a:c8:2f:c7:e7:06:76:e9:fe:95:f9:37:0a:78:11:
         7a:e4:58:58:fc:8b:2a:25:50:56:48:84:b6:31:5e:5d:9e:4e:
         b6:ec:6f:6e:cd:6b:00:ec:ad:0b:cf:26:f7:f1:17:60:11:f1:
         71:bf:22:03:d7:df:85:49:4b:08:03:d2:44:bf:ca:1c:d9:ff:
         a6:7b:79:f6:2d:45:54:01:63:21:07:be:fa:74:8a:23:80:40:
         42:f8:7d:66:67:b6:00:eb:99:f3:15:1e:10:56:4e:24:46:3c:
         4a:7b:66:a8:f6:5d:10:d9:be:df:16:33:69:4a:f9:93:f6:9c:
         d5:d8:6f:ba:7a:28:0c:f8:d7:9b:8e:d4:02:3a:03:c4:02:36:
         e2:2b:ed:01:31:ff:6d:95:4c:43:1c:69:68:93:e6:03:5b:7f:
         3a:6a:d9:43:9c:5d:9b:68:b2:73:35:de:06:97:e5:4c:a1:ca:
         97:2a:21:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:15 2025 by rpki-client on console.sobornost.net