Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/323830343a313833343a633030303a3a2f33362d3336203d3e203631393233.roa
File:                     323830343a313833343a633030303a3a2f33362d3336203d3e203631393233.roa (raw, json)
Hash identifier:          WMuvXiyuUGNa+KD2p/5LZQ/hkOLNrxmIAsD4LhncmgA=
Subject key identifier:   31:6F:98:EA:6C:E3:A7:A0:DC:E3:A3:13:3C:61:7B:93:31:0E:08:69
Certificate issuer:       /CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
Certificate serial:       7095195966F60B03FBC7EBA2E55DF34F6EB37CAC
Authority key identifier: 1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/323830343a313833343a633030303a3a2f33362d3336203d3e203631393233.roa
Signing time:             Tue 15 Apr 2025 19:09:17 +0000
ROA not before:           Tue 15 Apr 2025 19:04:17 +0000
ROA not after:            Tue 14 Apr 2026 19:09:17 +0000
asID:                     61923
IP address blocks:        2804:1834:c000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl
                          rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:95:19:59:66:f6:0b:03:fb:c7:eb:a2:e5:5d:f3:4f:6e:b3:7c:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
        Validity
            Not Before: Apr 15 19:04:17 2025 GMT
            Not After : Apr 14 19:09:17 2026 GMT
        Subject: CN=316F98EA6CE3A7A0DCE3A3133C617B93310E0869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:dc:ec:3d:56:c6:e2:e1:f1:c3:4e:e9:af:26:
                    e7:a7:65:1a:de:51:e0:1b:46:db:29:48:35:6b:21:
                    19:40:d9:86:ce:6e:f0:90:64:b2:2d:a2:de:39:3f:
                    b3:91:66:2f:bf:df:51:b5:32:5d:5a:0e:86:0d:ff:
                    57:f5:89:1f:bd:98:12:4e:59:1f:ab:63:8d:76:e6:
                    12:4e:72:de:60:2e:60:01:45:3d:54:43:2f:3d:b8:
                    8c:31:9a:73:e5:5b:e3:5d:34:49:33:ff:50:e5:53:
                    33:aa:ed:b7:2d:61:09:84:e8:05:e1:9b:6e:18:6f:
                    e6:25:1e:c1:f5:30:f1:9e:26:37:bb:fc:c7:33:68:
                    ff:46:88:e9:6c:bb:5c:46:c2:20:52:3b:a3:57:f5:
                    ed:6c:ae:6e:e2:30:1c:0f:f4:80:57:b5:43:6a:e2:
                    83:59:e6:8c:5a:67:d8:69:47:14:7b:d9:07:a6:61:
                    a9:25:a8:0d:1d:40:e0:52:d7:c7:fc:09:1a:db:06:
                    06:d6:39:12:d2:62:2f:10:c7:63:9f:36:69:6b:15:
                    fe:42:8f:c0:e8:dd:69:44:62:21:da:fb:10:3e:5b:
                    87:85:b6:3b:5b:c4:cc:3a:8b:cf:d1:a6:66:51:f8:
                    c5:e2:33:9f:84:cc:6b:17:ce:fd:fd:0a:8a:61:67:
                    a3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:6F:98:EA:6C:E3:A7:A0:DC:E3:A3:13:3C:61:7B:93:31:0E:08:69
            X509v3 Authority Key Identifier:
                keyid:1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/323830343a313833343a633030303a3a2f33362d3336203d3e203631393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1834:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7f:38:69:ad:95:55:3a:da:b3:85:83:25:f8:46:d1:16:6c:54:
         3f:22:c3:15:56:dd:69:93:51:4c:81:99:58:98:b9:87:4d:d5:
         a4:31:47:c4:5c:e2:87:67:00:da:1d:12:29:56:3b:d8:99:15:
         c4:c6:cb:5e:dc:df:98:d9:dc:47:bd:0e:c9:ec:6b:80:9b:ce:
         e6:dd:eb:e1:46:fb:7b:3e:23:ae:1b:83:5f:23:1e:a2:0a:4f:
         29:77:1f:14:b9:87:ec:d5:f3:87:69:e4:48:96:bb:17:31:36:
         06:c0:50:ee:e6:a2:60:af:7c:34:12:15:ea:85:a3:e4:d8:52:
         69:23:5c:25:2e:22:99:75:a2:74:41:9d:47:c4:43:78:e0:39:
         95:d1:b2:74:fc:83:46:08:f5:03:70:0a:ae:e3:de:8b:ca:b7:
         d8:f4:5a:a5:cb:3a:7e:f8:4d:bc:83:76:06:f4:b8:8a:78:3f:
         f0:f0:f6:97:89:a6:54:70:a5:43:a3:c6:03:41:42:13:ec:3c:
         b6:96:b2:0d:c0:6e:b9:65:80:ba:8a:8c:3f:77:f0:68:b6:ef:
         6b:c0:c6:c0:35:47:b0:31:5d:6a:00:af:da:b7:b1:66:35:84:
         c2:58:61:df:ec:b3:f4:71:03:d3:fd:d1:44:42:0c:44:be:34:
         7f:02:13:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:15 2025 by rpki-client on console.sobornost.net