Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/323830343a3837303a3a2f33322d3438203d3e203532383731.roa
File:                     323830343a3837303a3a2f33322d3438203d3e203532383731.roa (raw, json)
Hash identifier:          vkuFEBuriyY7Wc5M+tN3csW+2HbLE2+XEb6xWudBp34=
Subject key identifier:   F4:B5:AB:17:09:A2:C9:71:78:A9:D0:CF:A4:90:A2:3C:FC:DE:5D:4D
Certificate issuer:       /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial:       3CA2F4B4E9AEA24A2653D6870B35ED8345B9D047
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/323830343a3837303a3a2f33322d3438203d3e203532383731.roa
Signing time:             Wed 05 Mar 2025 23:40:25 +0000
ROA not before:           Wed 05 Mar 2025 23:35:25 +0000
ROA not after:            Wed 04 Mar 2026 23:40:25 +0000
asID:                     52871
IP address blocks:        2804:870::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
                          rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 12:48:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:a2:f4:b4:e9:ae:a2:4a:26:53:d6:87:0b:35:ed:83:45:b9:d0:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
        Validity
            Not Before: Mar  5 23:35:25 2025 GMT
            Not After : Mar  4 23:40:25 2026 GMT
        Subject: CN=F4B5AB1709A2C97178A9D0CFA490A23CFCDE5D4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7e:b9:cd:79:9c:c9:66:0c:f6:14:14:ee:8b:
                    f8:8a:c7:95:ba:f5:0c:24:74:eb:49:6e:4b:43:a6:
                    88:7d:ee:9e:58:d8:b3:e5:e2:1f:a7:6d:82:b1:62:
                    95:84:13:cd:ee:8d:56:d4:a1:8b:45:fb:44:56:a4:
                    b0:25:81:ba:c0:21:91:9f:1e:90:da:1c:59:4f:4a:
                    32:cc:58:58:62:e7:bd:40:7b:d3:09:68:38:d4:15:
                    99:83:18:fb:de:57:5a:2b:b6:3c:09:8a:82:ad:0f:
                    e1:73:b8:6b:20:ed:1f:57:c0:1c:72:3f:2a:5b:21:
                    fc:76:fa:ac:02:15:60:18:66:dc:35:87:7b:e9:35:
                    5d:c4:89:0e:d6:2e:52:83:8c:ce:0f:be:0e:0d:bd:
                    e8:06:7c:1c:35:4b:22:40:4a:1c:4a:51:0c:d2:15:
                    33:51:2c:de:11:61:bb:22:99:c1:f5:73:85:45:2f:
                    a9:4c:55:3f:02:26:62:61:f3:65:0e:7b:fe:ce:d9:
                    88:f6:fe:f0:3a:1e:dc:78:75:36:69:f9:a0:87:8b:
                    d8:37:d0:ca:0b:b3:34:85:d0:57:9b:d0:13:de:9b:
                    46:f7:6f:67:7e:76:4e:84:45:cd:81:4d:ef:88:e4:
                    20:48:5e:e2:d8:93:f0:f5:81:33:b6:da:05:91:3c:
                    e3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B5:AB:17:09:A2:C9:71:78:A9:D0:CF:A4:90:A2:3C:FC:DE:5D:4D
            X509v3 Authority Key Identifier:
                keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/323830343a3837303a3a2f33322d3438203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:870::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:c6:57:74:f7:5c:fc:e2:d3:e4:9a:82:ef:5f:5d:c8:94:1f:
         7d:1a:a5:59:90:6d:00:40:10:97:ce:1b:35:f6:82:67:8b:c1:
         bf:dc:64:81:9a:1e:95:c3:8b:d7:81:1f:a4:79:1e:5f:ea:e6:
         6c:f2:a6:9e:a9:3d:7a:57:0e:87:28:79:30:a8:8e:aa:d3:11:
         b6:5c:da:87:a8:a2:54:0a:0f:10:38:e6:8b:bb:6f:eb:d4:87:
         cb:0f:79:60:c3:d0:3b:c3:8f:8c:7e:56:91:20:07:03:62:ac:
         d0:00:d7:c2:cf:bc:56:18:dd:66:0e:6b:64:f1:43:d4:2c:84:
         b0:9c:ca:e3:f0:61:ea:02:36:a8:f9:0a:ce:0b:bd:45:8a:c5:
         08:e9:87:cc:92:21:c4:9e:6a:fb:e4:62:54:b0:d8:2c:12:8f:
         8c:eb:44:bd:88:6e:66:ec:9c:aa:36:5a:18:46:7e:d0:48:b9:
         9f:2a:d0:a3:1e:ec:d2:07:11:22:bb:69:49:e4:4f:0a:39:47:
         b5:6f:b9:68:bf:a2:0e:8a:d6:21:32:8b:be:1c:82:46:13:7e:
         e9:97:7a:e3:08:69:6c:a5:3f:a4:c1:02:2f:fa:a7:5e:ae:48:
         db:22:a4:6b:bd:b9:07:4c:fe:51:39:4d:1f:8c:35:f4:78:32:
         86:9e:2f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:05 2025 by rpki-client on console.sobornost.net