Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5N8ABw29qTBm55JUg93JsL6T1aq9RLDKhwBMwyykndAN/1/323830343a316533383a3a2f33322d313238203d3e20323634343135.roa
File:                     323830343a316533383a3a2f33322d313238203d3e20323634343135.roa (raw, json)
Hash identifier:          VH7zbjsycxS+jTmfrvjalIx8gnicFaOCl8HT6lHTzWQ=
Subject key identifier:   54:20:32:F9:E3:C2:4C:71:36:A2:0C:F9:82:69:F7:AB:D6:48:DF:18
Certificate issuer:       /CN=21F56257920CE88D55FEE0E1D369CE905FA2782B
Certificate serial:       701EF288D38D381124760E4A185846F76A0D1B51
Authority key identifier: 21:F5:62:57:92:0C:E8:8D:55:FE:E0:E1:D3:69:CE:90:5F:A2:78:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F56257920CE88D55FEE0E1D369CE905FA2782B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5N8ABw29qTBm55JUg93JsL6T1aq9RLDKhwBMwyykndAN/1/323830343a316533383a3a2f33322d313238203d3e20323634343135.roa
Signing time:             Thu 06 Mar 2025 05:48:20 +0000
ROA not before:           Thu 06 Mar 2025 05:43:20 +0000
ROA not after:            Thu 05 Mar 2026 05:48:20 +0000
asID:                     264415
IP address blocks:        2804:1e38::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5N8ABw29qTBm55JUg93JsL6T1aq9RLDKhwBMwyykndAN/1/21F56257920CE88D55FEE0E1D369CE905FA2782B.crl
                          rsync://rpki-repo.registro.br/repo/5N8ABw29qTBm55JUg93JsL6T1aq9RLDKhwBMwyykndAN/1/21F56257920CE88D55FEE0E1D369CE905FA2782B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F56257920CE88D55FEE0E1D369CE905FA2782B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 10:18:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:1e:f2:88:d3:8d:38:11:24:76:0e:4a:18:58:46:f7:6a:0d:1b:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21F56257920CE88D55FEE0E1D369CE905FA2782B
        Validity
            Not Before: Mar  6 05:43:20 2025 GMT
            Not After : Mar  5 05:48:20 2026 GMT
        Subject: CN=542032F9E3C24C7136A20CF98269F7ABD648DF18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:43:3a:71:d6:90:a5:f3:2c:fd:b1:ee:27:8e:
                    91:8e:16:7a:cd:37:ae:f0:f7:22:df:56:3b:5b:c8:
                    8a:a0:3f:e0:05:02:74:2f:79:70:34:61:36:4f:7c:
                    52:91:0a:f9:5f:78:b3:99:5f:60:35:e4:70:48:46:
                    0f:9e:ce:6f:fb:64:58:6f:b9:5c:b3:c5:36:15:4f:
                    c3:98:73:04:11:a3:ca:98:5e:79:b9:9c:af:d5:bc:
                    77:84:6a:b0:a1:b1:53:1c:df:77:42:7c:16:5b:66:
                    9a:dd:5e:02:db:6e:4b:91:ae:ba:5e:f3:4b:37:7a:
                    11:5a:79:d0:f6:30:97:54:8f:3c:d5:63:25:74:b6:
                    b4:32:a9:f1:0b:88:52:c6:6f:a2:5a:10:e6:27:ce:
                    49:93:33:8d:9b:d8:78:26:ef:51:1b:c4:72:62:8b:
                    92:af:6c:7e:45:2a:c3:22:95:47:5d:a7:0a:6d:1e:
                    b9:a2:5a:fe:26:55:fd:51:76:1f:9a:41:ad:5c:87:
                    49:57:fb:9e:55:c1:4d:c6:9b:63:d1:ba:1a:a7:18:
                    ae:71:a4:cf:c9:b2:f8:c1:e4:96:fd:82:6d:a7:83:
                    1f:f6:8c:ef:67:a3:7c:8f:70:83:41:c2:ab:fd:cd:
                    d2:6d:4c:e4:a6:ad:80:f3:99:69:21:62:76:f2:2f:
                    6a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:20:32:F9:E3:C2:4C:71:36:A2:0C:F9:82:69:F7:AB:D6:48:DF:18
            X509v3 Authority Key Identifier:
                keyid:21:F5:62:57:92:0C:E8:8D:55:FE:E0:E1:D3:69:CE:90:5F:A2:78:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5N8ABw29qTBm55JUg93JsL6T1aq9RLDKhwBMwyykndAN/1/21F56257920CE88D55FEE0E1D369CE905FA2782B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F56257920CE88D55FEE0E1D369CE905FA2782B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5N8ABw29qTBm55JUg93JsL6T1aq9RLDKhwBMwyykndAN/1/323830343a316533383a3a2f33322d313238203d3e20323634343135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e38::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:87:da:c4:9d:94:ba:ae:86:f4:63:c7:ed:1d:7c:ba:37:88:
         cb:c3:25:aa:b4:02:6c:67:6d:5e:3e:c0:00:1f:66:22:52:bf:
         29:ae:f0:6f:86:c8:2c:8d:af:4a:b7:3b:c3:e8:6c:69:a9:c5:
         54:9c:21:ae:89:db:27:a6:72:da:a6:37:8d:e1:96:62:cd:86:
         5c:c3:cc:8b:43:30:2d:d3:64:17:33:3b:db:fa:cc:06:aa:d0:
         81:8e:ce:fd:45:fb:4f:02:7d:c3:72:4b:7f:47:2e:53:0c:a5:
         69:8b:a1:ad:ab:26:05:c9:e8:09:3c:79:ff:eb:7a:75:0d:89:
         b0:7f:cd:ea:87:22:86:0d:96:d5:86:d8:cd:e1:17:cb:fd:2e:
         e6:cd:65:f6:98:7e:5e:f4:18:c4:71:20:af:88:40:09:d3:a7:
         dd:c3:9b:46:9d:f9:8f:c9:a5:00:4d:a9:0e:b9:a3:12:e9:ae:
         e0:49:fe:05:1a:8b:47:ee:16:92:41:2b:3b:f6:58:56:a5:84:
         63:cc:75:21:83:8a:73:21:cc:9e:f8:11:23:8b:55:df:89:39:
         ce:70:b5:13:8a:51:bf:c9:a2:00:46:3a:a7:4f:ea:3c:7d:8a:
         d7:5b:c7:3e:f4:b9:5d:2f:3f:02:d0:c0:ef:eb:a9:db:e1:b2:
         60:18:c2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:04:55 2025 by rpki-client on console.sobornost.net