Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/323830343a386132383a323030303a3a2f33362d3336203d3e20323733363531.roa
File:                     323830343a386132383a323030303a3a2f33362d3336203d3e20323733363531.roa (raw, json)
Hash identifier:          qcvfXZ3J5I/XKPg7fR2HJPDYTl1f26DjsatHRFb5nJY=
Subject key identifier:   AE:1D:89:B7:58:E1:53:F1:B2:6B:98:79:7F:EE:C8:BC:46:16:C4:F5
Certificate issuer:       /CN=FD031BA6F0B6769270F067331FFFBCE55D6792E9
Certificate serial:       1055D3F000D0557778D6F313B1A36F02178DE53D
Authority key identifier: FD:03:1B:A6:F0:B6:76:92:70:F0:67:33:1F:FF:BC:E5:5D:67:92:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD031BA6F0B6769270F067331FFFBCE55D6792E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/323830343a386132383a323030303a3a2f33362d3336203d3e20323733363531.roa
Signing time:             Tue 01 Apr 2025 13:14:44 +0000
ROA not before:           Tue 01 Apr 2025 13:09:44 +0000
ROA not after:            Tue 31 Mar 2026 13:14:44 +0000
asID:                     273651
IP address blocks:        2804:8a28:2000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/FD031BA6F0B6769270F067331FFFBCE55D6792E9.crl
                          rsync://rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/FD031BA6F0B6769270F067331FFFBCE55D6792E9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD031BA6F0B6769270F067331FFFBCE55D6792E9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 19:16:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:55:d3:f0:00:d0:55:77:78:d6:f3:13:b1:a3:6f:02:17:8d:e5:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD031BA6F0B6769270F067331FFFBCE55D6792E9
        Validity
            Not Before: Apr  1 13:09:44 2025 GMT
            Not After : Mar 31 13:14:44 2026 GMT
        Subject: CN=AE1D89B758E153F1B26B98797FEEC8BC4616C4F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:25:58:c4:5b:4c:81:0b:ef:40:47:00:95:b2:
                    ae:0e:e4:16:d9:1a:e3:1f:b0:af:fc:2c:8b:42:84:
                    cd:3b:28:b3:76:b6:40:6b:06:aa:71:61:94:bb:9d:
                    26:0d:12:e5:18:0c:e9:de:da:34:c1:33:cd:ce:2e:
                    fc:10:4a:1f:1f:9a:de:d3:e7:22:24:e5:2b:eb:14:
                    25:6f:b5:49:1f:e4:4f:5e:60:99:b2:95:a9:62:15:
                    3e:18:29:ab:27:b2:ca:77:aa:d3:56:cf:4b:ff:5c:
                    72:96:03:12:c3:18:c0:c8:75:22:e5:95:f9:5a:22:
                    9f:ce:3f:dd:53:07:06:1a:18:80:49:84:ba:8c:df:
                    14:db:ef:bb:52:c4:b1:6d:ee:f3:c6:46:ba:99:ae:
                    c6:94:72:1e:4f:6c:db:90:db:f6:2f:87:9a:4d:0d:
                    e1:6d:5a:ff:9f:bd:ae:94:a0:cd:d2:4b:9c:00:d4:
                    82:a2:5b:a5:26:b8:7d:69:6d:a6:1c:77:cc:e8:f2:
                    52:e8:82:39:79:6c:62:13:79:11:41:7c:44:3f:36:
                    71:60:ca:c7:1a:bf:6b:f0:7a:35:82:8a:44:d3:66:
                    72:45:b4:c9:a5:c2:1d:6f:da:05:74:d2:fb:0a:0d:
                    fd:43:83:83:0b:e1:02:5c:94:8f:b9:02:01:23:36:
                    4b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:1D:89:B7:58:E1:53:F1:B2:6B:98:79:7F:EE:C8:BC:46:16:C4:F5
            X509v3 Authority Key Identifier:
                keyid:FD:03:1B:A6:F0:B6:76:92:70:F0:67:33:1F:FF:BC:E5:5D:67:92:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/FD031BA6F0B6769270F067331FFFBCE55D6792E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD031BA6F0B6769270F067331FFFBCE55D6792E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/323830343a386132383a323030303a3a2f33362d3336203d3e20323733363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a28:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         57:a1:74:a3:76:39:f6:9b:7b:18:49:57:09:04:fb:a9:23:86:
         9e:f2:41:28:47:98:27:35:4b:94:5b:71:1d:e1:e1:76:01:a3:
         5d:b2:5b:60:4b:cb:df:9f:af:d5:1d:6b:b6:27:a1:41:7e:e5:
         11:9c:6c:7f:cd:16:c3:10:80:b8:3d:e6:0d:2d:58:ea:bc:a5:
         9f:89:a0:0d:05:a9:25:b4:ae:0d:2c:57:7f:3f:b5:b5:ff:eb:
         2b:79:1d:f8:bc:0c:43:ca:4f:e9:41:fd:6f:81:55:25:bf:46:
         6c:e7:22:72:86:0b:fa:2f:b1:0d:a1:08:09:a3:e2:4c:d1:dd:
         4f:ae:7b:43:b5:32:00:63:fc:08:ac:91:18:ff:df:82:d5:78:
         1c:8b:66:84:cf:13:01:f9:cd:33:08:e4:31:82:a8:02:02:87:
         0d:d0:7b:0f:a9:f2:2a:fe:07:83:38:31:f6:41:06:06:fd:82:
         86:6f:19:ee:2e:61:23:d0:38:5e:7a:d2:3a:8e:b4:ed:5a:f6:
         65:77:3a:55:4e:32:ca:5d:f1:1b:c1:67:4e:c6:95:2a:4a:6a:
         3c:23:bb:b8:14:9b:81:88:21:3c:fd:c6:bc:ae:0a:83:0d:9a:
         ed:a9:fd:f9:ad:70:01:44:c5:9c:fb:6d:6f:33:13:8d:e3:b6:
         66:92:bb:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:38 2025 by rpki-client on console.sobornost.net