Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/323830343a386132383a3830303a3a2f33372d3337203d3e20323733363531.roa
File:                     323830343a386132383a3830303a3a2f33372d3337203d3e20323733363531.roa (raw, json)
Hash identifier:          CpKMTFTm0+k8kMatOenxg119Pd7FWl5hO+p8mQmQTZQ=
Subject key identifier:   7A:14:39:BB:A5:92:97:E6:D0:AD:A5:34:D5:E3:FA:4D:45:D9:75:89
Certificate issuer:       /CN=FD031BA6F0B6769270F067331FFFBCE55D6792E9
Certificate serial:       18465FF17C5DE99C250856E76C2B5003C88C890C
Authority key identifier: FD:03:1B:A6:F0:B6:76:92:70:F0:67:33:1F:FF:BC:E5:5D:67:92:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD031BA6F0B6769270F067331FFFBCE55D6792E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/323830343a386132383a3830303a3a2f33372d3337203d3e20323733363531.roa
Signing time:             Tue 01 Apr 2025 14:49:33 +0000
ROA not before:           Tue 01 Apr 2025 14:44:33 +0000
ROA not after:            Tue 31 Mar 2026 14:49:33 +0000
asID:                     273651
IP address blocks:        2804:8a28:800::/37 maxlen: 37

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/FD031BA6F0B6769270F067331FFFBCE55D6792E9.crl
                          rsync://rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/FD031BA6F0B6769270F067331FFFBCE55D6792E9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD031BA6F0B6769270F067331FFFBCE55D6792E9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 19:16:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:46:5f:f1:7c:5d:e9:9c:25:08:56:e7:6c:2b:50:03:c8:8c:89:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD031BA6F0B6769270F067331FFFBCE55D6792E9
        Validity
            Not Before: Apr  1 14:44:33 2025 GMT
            Not After : Mar 31 14:49:33 2026 GMT
        Subject: CN=7A1439BBA59297E6D0ADA534D5E3FA4D45D97589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:70:63:ff:80:33:d7:92:0a:2a:db:7b:1a:74:
                    94:ca:3b:15:4c:2d:e2:3b:70:07:ac:21:8c:c5:f7:
                    03:60:a7:26:8c:ba:05:6d:d5:94:e5:6b:46:52:0b:
                    2f:27:34:07:89:44:ef:53:7f:a2:2b:c7:9b:46:56:
                    db:9e:21:b1:02:ea:a4:0f:f2:3e:5e:e8:89:06:0b:
                    96:7c:8a:89:b6:54:c8:85:a3:df:51:5e:05:f5:ab:
                    b7:9c:e1:77:fc:51:6a:0d:27:95:04:43:20:6d:06:
                    15:be:1f:ec:6d:3c:ff:7a:98:2b:32:3e:e2:a5:6f:
                    dc:8b:22:ab:eb:9b:b5:b0:6e:ff:5c:1e:23:59:72:
                    51:e5:c9:3f:aa:a4:4f:51:70:50:98:2c:57:fe:e1:
                    ed:f6:a1:ba:58:d8:06:26:77:f2:55:ac:15:2e:26:
                    36:a7:c5:1b:ca:a9:ed:c0:b5:61:55:62:74:a5:99:
                    ea:c4:3a:1e:4e:ba:e3:04:e9:fb:30:76:a5:71:eb:
                    df:df:af:ac:87:66:fc:63:66:82:7c:49:fb:25:f8:
                    cc:aa:6d:e0:a6:3e:fe:a5:4a:73:14:78:99:d6:4a:
                    f0:18:5c:1a:4b:e0:59:05:67:dd:12:5e:8a:a3:71:
                    6d:7f:b9:33:da:6e:08:eb:66:db:0e:a8:3a:77:4b:
                    ea:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:14:39:BB:A5:92:97:E6:D0:AD:A5:34:D5:E3:FA:4D:45:D9:75:89
            X509v3 Authority Key Identifier:
                keyid:FD:03:1B:A6:F0:B6:76:92:70:F0:67:33:1F:FF:BC:E5:5D:67:92:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/FD031BA6F0B6769270F067331FFFBCE55D6792E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD031BA6F0B6769270F067331FFFBCE55D6792E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/323830343a386132383a3830303a3a2f33372d3337203d3e20323733363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a28:800::/37

    Signature Algorithm: sha256WithRSAEncryption
         ab:bc:9c:3a:52:83:1b:c0:50:03:c3:50:b6:22:0f:b2:41:03:
         0e:e9:15:14:a5:59:ee:bd:9f:ed:c0:f0:cf:46:2f:d6:22:4e:
         ef:41:6f:a6:93:71:23:22:59:75:c0:5b:1a:72:62:ef:5f:55:
         2f:6f:58:76:71:70:48:aa:10:a2:d0:b1:b1:4e:b2:36:97:d2:
         e8:4f:7d:17:40:89:1a:3a:02:78:2b:95:67:9c:43:af:e2:91:
         6b:1d:84:5e:02:a0:a5:dd:f9:31:0e:b6:ad:46:e6:94:5e:8e:
         d9:6e:1d:a7:08:73:76:f0:c4:3a:20:e4:6a:ff:8f:e6:d8:a3:
         99:02:f3:49:e8:0d:c7:2d:d3:a0:e5:9a:be:40:95:85:87:73:
         5f:3e:35:79:40:b9:c2:35:67:52:29:b4:ad:d9:23:20:f8:b3:
         eb:0a:8d:13:25:30:36:0b:c1:d6:46:a8:9c:ae:d8:1d:96:ad:
         90:87:4e:2f:bf:98:c0:dc:93:ca:c0:7e:9a:7c:3c:1d:db:db:
         6c:db:40:ed:9d:d5:f1:91:24:5d:9d:5b:a8:4e:dc:d2:bc:73:
         a3:88:8a:2c:1c:78:80:6b:d8:03:54:af:3d:95:e6:cd:82:4d:
         c5:c2:21:11:3f:60:90:49:04:a5:ca:44:74:7a:83:15:4c:f0:
         00:63:7b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:38 2025 by rpki-client on console.sobornost.net