Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/323830343a313833343a3a2f33362d3336203d3e203631393233.roa
File:                     323830343a313833343a3a2f33362d3336203d3e203631393233.roa (raw, json)
Hash identifier:          MzCsTE1xsS+j4qFVPtHmmdzKC7w6zoBSD9lQqih1V6I=
Subject key identifier:   F7:17:FE:AC:D2:25:A3:C8:2D:98:D7:46:3A:5E:4A:45:CE:EE:B3:00
Certificate issuer:       /CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
Certificate serial:       4F59320231A0813B5355B6CA686A067ACAFBD8C0
Authority key identifier: 1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/323830343a313833343a3a2f33362d3336203d3e203631393233.roa
Signing time:             Tue 15 Apr 2025 19:07:22 +0000
ROA not before:           Tue 15 Apr 2025 19:02:22 +0000
ROA not after:            Tue 14 Apr 2026 19:07:22 +0000
asID:                     61923
IP address blocks:        2804:1834::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl
                          rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:59:32:02:31:a0:81:3b:53:55:b6:ca:68:6a:06:7a:ca:fb:d8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
        Validity
            Not Before: Apr 15 19:02:22 2025 GMT
            Not After : Apr 14 19:07:22 2026 GMT
        Subject: CN=F717FEACD225A3C82D98D7463A5E4A45CEEEB300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2a:3d:44:4d:47:92:93:ee:93:54:9d:91:a4:
                    9b:93:67:b7:38:6e:1b:ef:f8:8d:c8:8b:81:0c:48:
                    a2:7c:33:25:97:f0:ed:f0:f2:64:13:26:d3:e3:02:
                    aa:2b:fe:19:6e:93:90:15:49:d5:3d:42:4e:3f:ca:
                    a3:92:1c:f9:e8:be:25:4f:14:3d:c7:36:95:5a:9a:
                    a8:24:b4:5a:99:ae:2c:1c:b9:24:55:cc:43:21:97:
                    90:ce:31:9c:75:b4:48:8b:fe:a1:f6:9e:54:f5:d7:
                    bc:73:8d:55:d2:32:af:40:2f:c2:c6:73:69:10:60:
                    67:e4:78:fc:3f:65:8b:52:73:48:c7:04:b4:90:27:
                    67:42:bd:ed:ed:c6:50:46:13:09:ea:a3:71:b3:cf:
                    91:cb:47:83:d8:9d:14:a8:8c:90:cd:83:0c:b9:8a:
                    8b:c0:87:6b:1c:21:ee:d9:87:43:95:ee:59:55:04:
                    fe:b9:c1:16:4f:99:6f:e6:be:d5:d8:ad:63:c0:ae:
                    d9:10:0e:50:8c:a2:5d:e4:b8:00:ee:b9:be:d1:66:
                    22:72:fb:04:19:70:16:6a:e6:29:2e:f2:ff:d7:ab:
                    9f:25:15:de:e2:48:8a:11:55:e3:e9:f9:aa:dd:5e:
                    e2:9c:13:02:8c:15:26:95:54:2a:dc:1a:9f:d0:37:
                    45:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:17:FE:AC:D2:25:A3:C8:2D:98:D7:46:3A:5E:4A:45:CE:EE:B3:00
            X509v3 Authority Key Identifier:
                keyid:1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/323830343a313833343a3a2f33362d3336203d3e203631393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1834::/36

    Signature Algorithm: sha256WithRSAEncryption
         0d:9e:9d:a2:46:2b:e2:f2:a7:7c:1b:86:a9:4b:d0:49:cc:00:
         bb:29:c4:1e:ed:d3:1c:5d:1b:03:5e:4b:5e:b4:ee:7b:8b:c2:
         3c:df:3d:2c:6e:6d:e4:ee:07:33:01:6e:91:b3:1d:b5:5d:45:
         12:b5:8a:62:53:75:26:17:46:6e:34:4a:2a:29:31:ad:a8:94:
         4a:d2:55:39:65:07:26:c8:2e:a4:0d:29:19:46:3f:7c:30:61:
         93:e8:cd:f2:a4:e0:3c:7e:c6:d8:18:ef:6c:b9:e4:7c:73:2b:
         ed:57:2b:86:09:01:c6:7d:91:35:2a:68:7d:1d:1b:20:e0:67:
         87:72:b8:41:ed:f0:95:ed:63:e9:5e:ce:8c:cc:2a:a4:9b:76:
         2e:f8:f0:73:64:29:4b:57:52:46:88:d5:7a:32:cb:45:45:64:
         39:1b:a7:38:56:ad:70:69:13:08:5f:1d:5d:4e:77:44:16:cc:
         de:06:c4:0f:a6:c0:a1:a2:f8:df:8e:37:78:a7:a0:d1:53:3b:
         27:b0:8e:c3:69:cf:8e:a4:af:fc:bb:94:62:9d:36:c4:b9:67:
         44:8c:82:73:bc:32:d2:2e:3d:f0:a8:ca:35:a3:ea:b5:e0:86:
         25:29:2c:fa:ef:f8:79:bb:2f:3f:c7:87:80:96:0a:a6:e6:8a:
         c7:68:11:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:15 2025 by rpki-client on console.sobornost.net