Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5j2sxcqboioC1nVdd14d6Q887bPycniW9bve1RDwo8UG/1/323830343a366664343a3a2f33322d3438203d3e20323730363837.roa
File:                     323830343a366664343a3a2f33322d3438203d3e20323730363837.roa (raw, json)
Hash identifier:          7ec9gXYxkjsOSyA0nFUU+kPyWkYK/1oyhur+laIhytA=
Subject key identifier:   C5:E1:EE:57:14:25:C6:98:54:96:F7:C3:98:6E:3C:52:1D:67:3F:4E
Certificate issuer:       /CN=F5BCA176884EEB5ECB0A2A512AAB32CA462590C9
Certificate serial:       4EF223039B991EBE52040574AE91002FBD803E44
Authority key identifier: F5:BC:A1:76:88:4E:EB:5E:CB:0A:2A:51:2A:AB:32:CA:46:25:90:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5BCA176884EEB5ECB0A2A512AAB32CA462590C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5j2sxcqboioC1nVdd14d6Q887bPycniW9bve1RDwo8UG/1/323830343a366664343a3a2f33322d3438203d3e20323730363837.roa
Signing time:             Thu 06 Mar 2025 11:40:30 +0000
ROA not before:           Thu 06 Mar 2025 11:35:30 +0000
ROA not after:            Thu 05 Mar 2026 11:40:30 +0000
asID:                     270687
IP address blocks:        2804:6fd4::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5j2sxcqboioC1nVdd14d6Q887bPycniW9bve1RDwo8UG/1/F5BCA176884EEB5ECB0A2A512AAB32CA462590C9.crl
                          rsync://rpki-repo.registro.br/repo/5j2sxcqboioC1nVdd14d6Q887bPycniW9bve1RDwo8UG/1/F5BCA176884EEB5ECB0A2A512AAB32CA462590C9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5BCA176884EEB5ECB0A2A512AAB32CA462590C9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 18:10:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:f2:23:03:9b:99:1e:be:52:04:05:74:ae:91:00:2f:bd:80:3e:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5BCA176884EEB5ECB0A2A512AAB32CA462590C9
        Validity
            Not Before: Mar  6 11:35:30 2025 GMT
            Not After : Mar  5 11:40:30 2026 GMT
        Subject: CN=C5E1EE571425C6985496F7C3986E3C521D673F4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bf:0d:69:e8:1b:9d:90:95:61:ac:77:c0:6a:
                    80:55:44:eb:e8:54:da:05:f0:0c:56:84:21:c4:e6:
                    1f:fa:42:5e:7e:13:26:0b:4d:5c:8b:c4:e7:d9:36:
                    3c:e4:9e:e0:30:b6:a2:78:be:65:4f:7e:6b:88:0b:
                    2b:43:09:ec:db:6d:6d:6a:b6:7c:86:f6:91:0e:71:
                    3d:ed:bc:5e:7d:26:bc:bb:2b:ed:d9:ad:c0:b5:bd:
                    79:01:72:16:a6:97:3a:df:43:a4:c2:7d:20:f5:aa:
                    e6:2c:dc:27:0c:ee:57:7a:a5:86:9e:7a:c4:1b:20:
                    69:e0:09:7a:0f:d6:9a:ad:1e:4b:6d:ac:ed:20:82:
                    25:23:84:7d:0c:e1:dd:75:e1:d4:fc:58:ea:f5:84:
                    33:3a:e1:bd:e7:c3:1f:d2:af:ff:5e:9d:0a:44:b6:
                    3f:f0:21:65:30:b0:7a:88:59:88:e5:16:64:06:0f:
                    b6:0a:90:c6:95:fd:35:cf:11:ee:a8:88:24:30:68:
                    cb:ae:ad:5e:62:84:5c:49:97:6c:11:a2:cc:e9:e7:
                    3e:88:6e:1f:01:06:5a:cf:00:df:22:ce:bf:4c:e5:
                    33:ee:50:85:7d:04:63:45:15:75:e9:6e:5d:6b:97:
                    d6:e0:62:dc:21:0d:82:3a:1e:b5:3d:97:3a:2a:28:
                    47:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E1:EE:57:14:25:C6:98:54:96:F7:C3:98:6E:3C:52:1D:67:3F:4E
            X509v3 Authority Key Identifier:
                keyid:F5:BC:A1:76:88:4E:EB:5E:CB:0A:2A:51:2A:AB:32:CA:46:25:90:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5j2sxcqboioC1nVdd14d6Q887bPycniW9bve1RDwo8UG/1/F5BCA176884EEB5ECB0A2A512AAB32CA462590C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5BCA176884EEB5ECB0A2A512AAB32CA462590C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5j2sxcqboioC1nVdd14d6Q887bPycniW9bve1RDwo8UG/1/323830343a366664343a3a2f33322d3438203d3e20323730363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6fd4::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:de:23:d2:49:42:3f:de:b5:94:a8:0c:c9:b1:2c:c7:f0:62:
         63:3c:4d:d3:d4:e2:ba:bb:37:5a:f9:89:ea:ca:b7:35:95:e5:
         d2:53:be:30:76:4e:9e:f4:9a:c0:99:61:1c:47:a2:1e:4d:a9:
         fa:df:c5:e5:c2:23:83:19:b5:62:1b:1f:9e:82:d4:78:88:f2:
         52:a6:86:38:dc:17:76:b9:b8:fc:13:a1:00:f5:6c:61:e2:d4:
         4e:93:b1:c2:9a:0e:c2:f8:c0:8c:b2:11:33:a8:67:32:12:67:
         8d:02:08:c4:a5:14:4e:1d:21:d0:71:2b:d1:23:ee:43:69:a8:
         d6:d8:c9:c7:57:d9:20:d4:9c:52:f2:04:58:06:62:ce:77:44:
         f2:35:94:15:be:f1:de:13:39:c5:e3:3d:eb:61:7e:04:9b:9b:
         79:bb:87:b7:49:08:8b:a4:74:68:d5:92:b6:c1:13:58:e1:a4:
         da:f2:57:2f:d1:60:dc:7f:94:1a:8a:de:b0:e9:b2:a2:29:5c:
         3c:d3:33:1b:de:ec:10:31:42:3e:59:43:de:75:46:97:c5:a1:
         35:53:45:45:19:cf:0c:e6:1a:d8:33:7c:f8:ed:a1:3a:59:cc:
         d4:47:76:d5:43:dd:1a:d3:37:18:ee:63:f2:27:36:37:4d:c7:
         50:a3:6f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:24:39 2025 by rpki-client on console.sobornost.net