Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/323830343a313833343a383030303a3a2f33362d3336203d3e203631393233.roa
File:                     323830343a313833343a383030303a3a2f33362d3336203d3e203631393233.roa (raw, json)
Hash identifier:          JHn83dnrXDpjM5s+iXj3sqkPAomIC3IxJhyNtcSuAGg=
Subject key identifier:   E5:D6:0C:FC:E3:B2:4C:A1:62:4E:5A:71:C1:33:8F:8B:AD:D1:E8:8E
Certificate issuer:       /CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
Certificate serial:       7FD79F77310AAEA460036E738DDD22467F91B888
Authority key identifier: 1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/323830343a313833343a383030303a3a2f33362d3336203d3e203631393233.roa
Signing time:             Tue 15 Apr 2025 19:08:41 +0000
ROA not before:           Tue 15 Apr 2025 19:03:41 +0000
ROA not after:            Tue 14 Apr 2026 19:08:41 +0000
asID:                     61923
IP address blocks:        2804:1834:8000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl
                          rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:d7:9f:77:31:0a:ae:a4:60:03:6e:73:8d:dd:22:46:7f:91:b8:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
        Validity
            Not Before: Apr 15 19:03:41 2025 GMT
            Not After : Apr 14 19:08:41 2026 GMT
        Subject: CN=E5D60CFCE3B24CA1624E5A71C1338F8BADD1E88E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7f:aa:60:4c:33:a5:cd:87:8b:70:93:6a:9d:
                    43:82:ff:3e:cd:ab:f4:6d:f9:5d:bf:c8:04:cd:ee:
                    61:dc:86:6b:44:5c:21:d8:aa:25:72:fc:71:e6:4e:
                    fc:9f:7d:72:0b:1c:71:1f:16:f3:57:33:58:2b:72:
                    02:1c:0f:cf:c3:ba:58:76:bc:fc:ca:bf:11:a7:ba:
                    df:b7:82:6f:d0:90:ac:93:5b:2a:c5:d6:08:e0:49:
                    db:bd:54:69:c7:ab:da:d1:5b:39:27:b2:18:b7:f0:
                    c6:2b:c3:7a:13:a2:b6:25:fe:de:ea:36:f3:d4:f1:
                    73:76:9d:ad:3c:3a:7c:47:4e:76:a6:fe:9d:cf:89:
                    80:4e:13:c2:b9:91:44:8c:ed:25:3a:7e:e8:46:1d:
                    36:c9:a8:78:26:94:b0:db:4c:4a:1c:fb:6e:9a:4b:
                    ca:b0:67:01:1d:25:8d:05:04:4b:eb:ac:fc:22:98:
                    07:50:36:d7:94:06:80:58:78:9b:12:e7:b9:51:a5:
                    17:28:c7:c9:38:4e:09:e4:2e:d5:7a:4e:c3:07:48:
                    c6:d1:af:e1:ef:f7:37:10:d0:0d:6d:cf:75:b9:f5:
                    a4:d8:aa:3a:5e:d7:ce:39:85:ce:06:ec:93:09:fc:
                    a9:61:f4:26:e5:0a:ed:7b:72:88:22:92:5d:8e:8e:
                    e9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D6:0C:FC:E3:B2:4C:A1:62:4E:5A:71:C1:33:8F:8B:AD:D1:E8:8E
            X509v3 Authority Key Identifier:
                keyid:1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/323830343a313833343a383030303a3a2f33362d3336203d3e203631393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1834:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         aa:29:b4:55:e8:e2:a9:f0:61:8d:f6:f5:1d:3f:d3:c0:06:27:
         fd:e7:1a:10:66:16:6e:bd:50:1f:0a:0a:53:42:c8:27:67:72:
         28:aa:4c:c1:cd:89:cc:7c:f6:e3:c4:17:fb:20:8d:d6:ea:31:
         78:51:60:ce:1e:9a:e6:97:df:63:fe:ec:a4:56:a5:d2:df:5d:
         62:67:23:87:c9:a1:ee:db:de:a5:cf:c9:c5:cf:36:c3:ab:78:
         cb:ed:b1:71:fe:47:90:cc:b7:8c:c9:be:75:bc:72:98:08:da:
         f1:db:22:d5:86:84:3c:e2:df:db:3c:dc:72:50:1e:0d:40:e6:
         ac:1f:64:aa:c9:65:c5:ca:23:3a:c5:47:b8:96:a5:61:b4:bd:
         11:63:9a:28:c7:2d:96:75:a9:cb:83:2a:f4:92:cd:52:1b:6a:
         10:e3:f4:57:79:5d:07:e5:8b:f9:25:39:a2:03:f3:0b:9b:47:
         08:54:26:f2:52:69:57:62:6d:c1:41:c4:0e:c4:d7:f6:2f:1a:
         05:e5:c7:65:aa:ea:f6:61:67:a3:9f:f5:fa:f3:c9:74:65:5e:
         c7:4a:9c:87:43:14:70:03:e5:5e:27:46:f3:e8:28:3b:fa:7d:
         8e:6c:15:f3:17:2c:cf:e0:c3:a2:f9:02:b3:d5:dc:4d:fe:31:
         20:fc:aa:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:15 2025 by rpki-client on console.sobornost.net