Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/323830343a313833343a3a2f33322d3332203d3e203631393233.roa
File:                     323830343a313833343a3a2f33322d3332203d3e203631393233.roa (raw, json)
Hash identifier:          8+c0kqv/OmKN3ZLHTMSAjv/FiKOTj5aoANaww/P9sz4=
Subject key identifier:   E9:C7:55:72:52:CD:FB:87:CD:8A:7F:DA:05:6B:90:8F:0D:97:D1:D5
Certificate issuer:       /CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
Certificate serial:       634A11DDBC809CAFFFD9E716797CCB48BF593A73
Authority key identifier: 1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/323830343a313833343a3a2f33322d3332203d3e203631393233.roa
Signing time:             Mon 24 Mar 2025 15:20:47 +0000
ROA not before:           Mon 24 Mar 2025 15:15:47 +0000
ROA not after:            Mon 23 Mar 2026 15:20:47 +0000
asID:                     61923
IP address blocks:        2804:1834::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl
                          rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:4a:11:dd:bc:80:9c:af:ff:d9:e7:16:79:7c:cb:48:bf:59:3a:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
        Validity
            Not Before: Mar 24 15:15:47 2025 GMT
            Not After : Mar 23 15:20:47 2026 GMT
        Subject: CN=E9C7557252CDFB87CD8A7FDA056B908F0D97D1D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:77:3f:fd:14:91:c8:d9:0c:c1:0e:b8:09:e4:
                    cc:b3:03:c7:f3:f1:aa:16:aa:80:d1:43:b3:cb:25:
                    8d:bd:29:0e:b5:9e:eb:28:5e:d9:d3:5d:77:98:f7:
                    a7:c6:59:1b:cb:b1:af:ec:75:f9:4b:bb:c5:27:69:
                    5a:6a:94:ff:f1:e7:71:ce:a5:cf:6c:cc:48:a9:0f:
                    27:33:2e:1a:12:d6:3d:d9:1c:03:7f:22:b5:73:18:
                    d3:ec:1f:d7:ab:5f:df:ce:ba:61:71:54:e3:72:ca:
                    d0:d9:4c:e8:61:f9:e5:2b:72:b2:cd:e3:d0:17:98:
                    6c:28:52:d6:65:d5:46:30:75:5f:6e:36:17:5e:7a:
                    90:01:26:86:67:9f:56:58:d8:2b:58:2d:63:1c:e5:
                    0d:c2:86:fa:4f:8b:61:a7:ba:99:88:82:ff:11:98:
                    21:a9:a0:ce:75:dd:fb:7b:ce:2d:ba:b1:39:97:2c:
                    47:64:8f:3e:5e:64:fb:e3:89:8c:a2:43:6c:b7:44:
                    e8:6a:a1:15:e7:b2:46:ec:72:a6:5f:6e:92:d9:88:
                    2f:97:e5:d5:2c:2d:de:c3:c4:61:a1:b5:a9:97:ea:
                    3a:c7:ad:2c:89:08:d3:db:a4:4e:83:86:7e:8e:15:
                    de:4a:2f:5e:32:95:4e:94:f4:f9:50:bc:3b:a4:d8:
                    2d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:C7:55:72:52:CD:FB:87:CD:8A:7F:DA:05:6B:90:8F:0D:97:D1:D5
            X509v3 Authority Key Identifier:
                keyid:1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/323830343a313833343a3a2f33322d3332203d3e203631393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1834::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:a4:87:bf:07:df:a0:9e:2e:80:cf:0d:da:6e:5f:0e:91:17:
         66:ae:58:fb:1b:41:e8:7b:88:59:79:98:6c:98:a8:f8:58:81:
         b1:0b:63:8f:05:a7:d5:79:5b:c1:ee:52:c3:49:8a:73:4b:62:
         e8:39:9f:97:f0:5e:e8:73:a6:c2:ff:0f:62:29:6b:ca:71:82:
         62:d8:1a:3c:6a:ca:86:1a:d3:fc:cd:22:2a:89:70:3b:87:9e:
         14:d1:bd:f1:38:1f:f0:7a:d6:c6:84:3c:5b:20:fb:24:6f:03:
         97:57:d4:4a:85:47:f0:86:16:4d:9f:2d:e2:ee:42:95:13:ae:
         cd:43:dd:6f:98:92:fd:f6:a5:e6:2c:0e:96:83:e1:38:d7:9c:
         f6:9d:70:5e:9b:e5:96:a0:e9:41:f2:35:47:bd:ec:03:2d:2d:
         23:61:fb:c8:b6:4a:52:0f:38:df:44:e5:ee:b3:95:16:85:f2:
         91:03:df:2f:45:4d:2e:68:0f:d4:55:56:a8:0e:a5:ba:c6:e8:
         52:f5:4c:b6:5b:4d:f2:1d:db:f8:b5:1c:36:40:88:44:e3:a5:
         f7:07:8e:ea:93:ff:a1:1c:56:c5:fa:ff:dc:84:e9:12:a6:15:
         d1:cf:2c:cb:62:f2:98:ea:39:12:06:53:e0:db:25:f6:e5:dd:
         5a:82:2a:99
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUY0oR3byAnK//2ecWeXzLSL9ZOnMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY1RjgzMUU5ODgzQUVGOEI3NkRBMTk0QTFFNUMxREYw
NzE3RDNFMTAeFw0yNTAzMjQxNTE1NDdaFw0yNjAzMjMxNTIwNDdaMDMxMTAvBgNV
BAMTKEU5Qzc1NTcyNTJDREZCODdDRDhBN0ZEQTA1NkI5MDhGMEQ5N0QxRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRdz/9FJHI2QzBDrgJ5MyzA8fz
8aoWqoDRQ7PLJY29KQ61nusoXtnTXXeY96fGWRvLsa/sdflLu8UnaVpqlP/x53HO
pc9szEipDyczLhoS1j3ZHAN/IrVzGNPsH9erX9/OumFxVONyytDZTOhh+eUrcrLN
49AXmGwoUtZl1UYwdV9uNhdeepABJoZnn1ZY2CtYLWMc5Q3ChvpPi2GnupmIgv8R
mCGpoM513ft7zi26sTmXLEdkjz5eZPvjiYyiQ2y3ROhqoRXnskbscqZfbpLZiC+X
5dUsLd7DxGGhtamX6jrHrSyJCNPbpE6Dhn6OFd5KL14ylU6U9PlQvDuk2C1HAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU6cdVclLN+4fNin/aBWuQjw2X0dUwHwYDVR0j
BBgwFoAUH1+DHpiDrvi3baGUoeXB3wcX0+EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTdZeEF2aXNEU2FCaVlkdllnekRGVEF0eDNkc1JianFaVjdRYkxYNnVt
cDEvMC8xRjVGODMxRTk4ODNBRUY4Qjc2REExOTRBMUU1QzFERjA3MTdEM0UxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFGNUY4MzFFOTg4M0FFRjhC
NzZEQTE5NEExRTVDMURGMDcxN0QzRTEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU3WXhBdmlzRFNhQmlZZHZZZ3pERlRBdHgzZHNSYmpxWlY3UWJMWDZ1bXAxLzAv
MzIzODMwMzQzYTMxMzgzMzM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzYzMTM5
MzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEGDQwDQYJKoZIhvcNAQELBQADggEBAGekh78H36Ce
LoDPDdpuXw6RF2auWPsbQeh7iFl5mGyYqPhYgbELY48Fp9V5W8HuUsNJinNLYug5
n5fwXuhzpsL/D2Ipa8pxgmLYGjxqyoYa0/zNIiqJcDuHnhTRvfE4H/B61saEPFsg
+yRvA5dX1EqFR/CGFk2fLeLuQpUTrs1D3W+Ykv32peYsDpaD4TjXnPadcF6b5Zag
6UHyNUe97AMtLSNh+8i2SlIPON9E5e6zlRaF8pED3y9FTS5oD9RVVqgOpbrG6FL1
TLZbTfId2/i1HDZAiETjpfcHjuqT/6EcVsX6/9yE6RKmFdHPLMti8pjqORIGU+Db
Jfbl3VqCKpk=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:15 2025 by rpki-client on console.sobornost.net