Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/323830343a313833343a623030303a3a2f33362d3336203d3e203631393233.roa
File:                     323830343a313833343a623030303a3a2f33362d3336203d3e203631393233.roa (raw, json)
Hash identifier:          8swatQTcblIXjgqyiVZxMPYx3uYK8PHQGRK4hsYL/3U=
Subject key identifier:   42:EF:A1:01:F3:CA:11:92:CC:11:81:E5:FC:E6:28:5A:20:15:1F:F9
Certificate issuer:       /CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
Certificate serial:       6978C0750568F2A239E5957676841C5490CDC118
Authority key identifier: 1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/323830343a313833343a623030303a3a2f33362d3336203d3e203631393233.roa
Signing time:             Tue 15 Apr 2025 19:09:08 +0000
ROA not before:           Tue 15 Apr 2025 19:04:08 +0000
ROA not after:            Tue 14 Apr 2026 19:09:08 +0000
asID:                     61923
IP address blocks:        2804:1834:b000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl
                          rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:78:c0:75:05:68:f2:a2:39:e5:95:76:76:84:1c:54:90:cd:c1:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
        Validity
            Not Before: Apr 15 19:04:08 2025 GMT
            Not After : Apr 14 19:09:08 2026 GMT
        Subject: CN=42EFA101F3CA1192CC1181E5FCE6285A20151FF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0c:e8:53:0f:65:ef:08:5e:11:ee:e9:e7:73:
                    a5:80:b6:0b:b6:a1:01:53:e1:29:55:83:e5:c8:b2:
                    e2:51:6f:8a:7c:7d:27:9c:84:9e:9a:60:e6:28:f3:
                    79:47:92:ec:6f:cc:88:94:4f:1e:bf:3c:c0:0a:76:
                    72:51:2a:6b:0f:01:b5:2f:56:f9:35:b7:53:47:2a:
                    52:99:e1:9a:36:75:a5:48:e3:9d:5a:78:fb:40:6b:
                    39:4d:88:8d:94:02:f3:27:bc:3c:19:9f:ae:2d:4e:
                    2e:17:21:90:45:54:3f:59:eb:c1:7a:68:5d:d6:32:
                    bc:2a:f1:8a:8a:d0:19:6b:f4:3d:4f:42:2c:8b:2f:
                    ca:1b:f0:2b:37:86:6f:07:09:20:72:f6:13:73:ae:
                    58:e3:09:ce:95:a0:86:92:00:a3:a1:2b:15:ca:56:
                    87:9b:e8:fe:bf:3a:dc:7d:9e:54:d6:81:15:ff:0a:
                    94:44:1f:3b:42:ce:0b:94:b2:da:dd:d3:c3:86:c1:
                    35:1d:0c:57:3c:05:71:f5:9d:e9:60:49:ab:48:e8:
                    ee:0c:88:0a:c9:3f:ea:ce:da:0b:6b:b2:36:63:e0:
                    3a:23:ba:94:10:51:1d:bd:93:e4:ce:ba:10:ab:f4:
                    46:67:97:19:45:98:b7:43:7c:b0:19:a8:c9:07:52:
                    26:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:EF:A1:01:F3:CA:11:92:CC:11:81:E5:FC:E6:28:5A:20:15:1F:F9
            X509v3 Authority Key Identifier:
                keyid:1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/323830343a313833343a623030303a3a2f33362d3336203d3e203631393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1834:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         69:7f:5c:f5:ab:d8:cb:05:ed:0a:b7:d7:4e:69:1a:43:74:e3:
         11:06:ac:ea:ba:16:72:50:91:a1:a4:ed:5d:fb:e1:b1:11:47:
         1b:25:0c:ac:28:8b:c7:7f:ac:61:01:78:21:83:0c:99:de:48:
         47:29:16:39:c5:5a:b9:d7:6d:c2:77:f5:1b:e1:99:81:95:13:
         27:7b:bf:c0:33:3b:97:3f:a4:38:2e:6a:fa:48:f1:52:77:50:
         9d:01:c9:af:50:54:da:e9:5f:6e:2e:b4:df:31:3e:d9:5a:09:
         9a:f3:18:06:f2:5a:b5:db:7f:01:0a:08:58:e3:bd:6f:56:f9:
         bf:65:f3:22:58:7d:52:7a:7d:02:8f:3c:19:a5:18:93:d2:72:
         21:92:1c:69:c9:a3:cd:8e:b2:7d:d0:98:b5:63:36:14:78:a6:
         e9:67:0a:00:0f:6d:d1:c5:66:c0:93:be:95:0c:ba:08:79:b7:
         d9:14:06:fa:17:c6:41:b5:cc:21:e3:14:c4:21:ba:e4:44:11:
         3f:74:ff:c6:9a:d0:f5:dd:df:19:62:c9:4b:6f:cf:1e:9a:dc:
         b0:04:02:44:5c:6a:81:de:95:2d:87:93:fa:3b:d9:80:9c:6e:
         39:ae:0b:5b:12:c4:ff:d4:40:45:e6:52:ea:0b:ff:a4:d7:0f:
         d6:e7:64:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:15 2025 by rpki-client on console.sobornost.net