Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/323830343a313833343a393030303a3a2f33362d3336203d3e203631393233.roa
File:                     323830343a313833343a393030303a3a2f33362d3336203d3e203631393233.roa (raw, json)
Hash identifier:          SKQISun3IUAvkXxy0K1RFGKLWUWeNqvRSOziqBO5hC0=
Subject key identifier:   D0:11:ED:06:14:92:5B:DC:6F:94:9F:1C:65:05:23:E6:CD:70:33:E9
Certificate issuer:       /CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
Certificate serial:       7F96C79FA21C97976B29A7A7845DCB9865BD2E16
Authority key identifier: 1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/323830343a313833343a393030303a3a2f33362d3336203d3e203631393233.roa
Signing time:             Tue 15 Apr 2025 19:08:50 +0000
ROA not before:           Tue 15 Apr 2025 19:03:50 +0000
ROA not after:            Tue 14 Apr 2026 19:08:50 +0000
asID:                     61923
IP address blocks:        2804:1834:9000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl
                          rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:96:c7:9f:a2:1c:97:97:6b:29:a7:a7:84:5d:cb:98:65:bd:2e:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
        Validity
            Not Before: Apr 15 19:03:50 2025 GMT
            Not After : Apr 14 19:08:50 2026 GMT
        Subject: CN=D011ED0614925BDC6F949F1C650523E6CD7033E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c4:a1:52:2f:44:77:d8:5e:48:b5:d7:92:a5:
                    44:23:1d:20:d9:ba:60:d8:48:39:06:88:e1:48:76:
                    cf:aa:ba:d2:88:e2:74:0e:54:8d:01:d3:e7:a0:06:
                    f5:98:23:2e:7f:b3:4c:30:12:97:da:0f:ec:6a:97:
                    60:92:b0:b9:bc:d1:3c:2d:67:1f:5e:0c:6b:29:41:
                    87:23:c3:1b:e9:d4:ba:00:eb:e3:5b:5d:23:0b:75:
                    ce:f0:72:4d:9a:10:98:c0:16:c9:05:cf:cc:1d:2a:
                    68:92:7e:33:6f:b2:90:47:19:74:33:97:00:d0:80:
                    d1:f2:50:f3:b9:c3:18:24:63:2b:0f:96:3d:d4:66:
                    44:56:e7:95:90:0d:4c:50:86:17:53:9e:d0:6c:98:
                    16:e4:08:3a:26:d3:3a:c3:86:62:cb:e7:e2:d1:49:
                    c3:a2:58:dc:bb:24:57:ce:3a:c4:2c:83:5e:34:2d:
                    36:47:78:0f:62:eb:9b:26:cf:56:8e:cf:ce:49:8b:
                    38:35:e0:40:0a:ad:76:f1:42:bd:ef:1e:17:69:54:
                    f6:d0:b1:4a:60:22:44:0d:a7:6e:08:98:d5:7b:45:
                    a1:e7:32:5d:93:4f:44:ff:07:9d:41:b1:44:0c:cb:
                    40:fc:73:30:74:02:0f:0a:ea:0c:de:cd:69:62:91:
                    5f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:11:ED:06:14:92:5B:DC:6F:94:9F:1C:65:05:23:E6:CD:70:33:E9
            X509v3 Authority Key Identifier:
                keyid:1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/323830343a313833343a393030303a3a2f33362d3336203d3e203631393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1834:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         85:7d:0d:e2:b1:85:f6:e7:ea:fd:b0:ab:5d:8f:f5:98:1b:d5:
         1e:c9:67:99:c0:cd:38:58:c0:10:69:21:fb:9e:49:0d:e2:b3:
         a6:9c:33:fc:79:3b:7d:69:3a:60:45:0a:e8:c2:e9:77:21:88:
         68:60:b2:a0:ad:93:0b:2f:d6:59:4e:86:93:76:d6:00:35:81:
         91:79:80:2d:3c:61:a8:c2:17:36:56:b0:4b:ea:eb:b8:21:a4:
         81:ea:09:dc:3f:55:de:2e:8f:6e:c3:d4:aa:43:f5:a0:12:f1:
         66:ef:72:ac:9e:4c:5e:61:cc:ab:fb:01:48:45:3e:c1:20:fe:
         ff:41:7f:3d:46:25:13:a3:c7:85:6d:48:a7:06:4c:86:6f:a0:
         22:ee:81:a5:02:59:f7:74:a6:e2:9f:10:06:4a:11:c4:a3:3a:
         9a:ff:f4:1e:80:bc:89:30:69:dd:a8:f2:46:6d:17:56:f8:de:
         56:75:47:c3:0f:8e:1c:92:70:fb:ab:69:9d:d0:23:89:de:fb:
         e9:4a:0d:c2:1d:6f:06:67:65:b1:47:8c:a4:59:09:71:b4:8a:
         e6:5a:d3:de:c7:2f:6d:8a:d0:2a:8b:a3:df:d1:8e:e6:c0:34:
         d4:82:29:6e:13:e8:d8:58:f6:d9:19:38:87:6f:0c:5b:ee:9e:
         23:12:92:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:15 2025 by rpki-client on console.sobornost.net