Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/323830343a3833303a3a2f33322d3336203d3e203532383532.roa
File:                     323830343a3833303a3a2f33322d3336203d3e203532383532.roa (raw, json)
Hash identifier:          vq/3tDCm2OEcOZcNyM6+v/n+6ppGUA9V8sl8SrBtXhA=
Subject key identifier:   5D:C3:E4:27:A2:16:BC:1F:D9:4F:B0:33:5F:F3:B9:9C:18:F3:67:B2
Certificate issuer:       /CN=0D483B0825B3E88C6437693FB9EC26E45EAACF21
Certificate serial:       3252AD97FCB71424B8B3E3105C346497E4047EF4
Authority key identifier: 0D:48:3B:08:25:B3:E8:8C:64:37:69:3F:B9:EC:26:E4:5E:AA:CF:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/323830343a3833303a3a2f33322d3336203d3e203532383532.roa
Signing time:             Wed 05 Mar 2025 20:25:22 +0000
ROA not before:           Wed 05 Mar 2025 20:20:22 +0000
ROA not after:            Wed 04 Mar 2026 20:25:22 +0000
asID:                     52852
IP address blocks:        2804:830::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.crl
                          rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 19:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:52:ad:97:fc:b7:14:24:b8:b3:e3:10:5c:34:64:97:e4:04:7e:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D483B0825B3E88C6437693FB9EC26E45EAACF21
        Validity
            Not Before: Mar  5 20:20:22 2025 GMT
            Not After : Mar  4 20:25:22 2026 GMT
        Subject: CN=5DC3E427A216BC1FD94FB0335FF3B99C18F367B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d0:4a:d2:93:6b:2f:91:01:22:b6:8d:df:7d:
                    4c:8a:46:5a:8d:a7:ce:d9:6d:e5:3b:ee:b3:4a:77:
                    5a:53:9b:89:19:08:3c:c6:f8:06:c7:98:b2:30:07:
                    da:8d:99:f8:52:84:42:95:2c:17:13:8c:54:48:c9:
                    87:b7:25:76:de:d0:8f:91:21:ec:f9:33:d5:2e:7f:
                    52:40:44:0e:05:bd:b6:e0:49:b5:51:21:1a:f5:52:
                    08:88:97:05:1a:06:5c:5e:7b:26:7e:21:94:fc:77:
                    8e:21:52:22:02:d6:da:95:dc:04:70:dc:ec:dc:9b:
                    2c:90:fe:65:bf:e1:67:cf:e7:66:46:49:c1:6e:d9:
                    e6:90:65:6e:26:5a:ab:ad:42:fd:83:9c:0e:7e:13:
                    db:a1:d2:9f:af:ab:08:4f:29:6e:98:62:e3:6f:7d:
                    7e:4b:c2:33:39:e6:dc:81:0c:99:32:d0:8a:c7:8c:
                    20:c2:5c:4d:59:9c:fd:69:01:25:59:09:8b:5a:1b:
                    02:d2:4e:c3:79:05:36:e0:6c:00:15:3d:20:5a:5c:
                    38:3c:04:41:84:55:de:b3:de:7f:c2:bd:c7:ab:e3:
                    64:87:4d:8f:82:bb:85:f7:10:75:44:5b:83:f0:cb:
                    27:87:90:96:ec:28:e9:8d:84:9d:4e:25:e3:3d:10:
                    bc:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:C3:E4:27:A2:16:BC:1F:D9:4F:B0:33:5F:F3:B9:9C:18:F3:67:B2
            X509v3 Authority Key Identifier:
                keyid:0D:48:3B:08:25:B3:E8:8C:64:37:69:3F:B9:EC:26:E4:5E:AA:CF:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/323830343a3833303a3a2f33322d3336203d3e203532383532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:830::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:f5:be:9b:76:c2:37:d5:cd:45:ad:c4:bb:ab:fa:aa:fc:1b:
         88:85:df:d7:66:c8:2b:74:41:fc:5d:20:e3:65:50:dc:65:1b:
         80:39:c2:eb:60:3f:5b:f0:bf:fd:f4:23:50:e3:8d:9f:cc:8e:
         d5:94:9f:df:44:24:f8:8d:53:ff:67:d3:09:dc:5f:01:10:db:
         05:52:a2:0f:52:a0:58:d4:e7:48:2c:49:57:fc:a2:6e:35:64:
         17:e3:b5:30:2f:80:d2:f9:53:41:db:fb:8b:43:e9:58:10:0a:
         ae:d1:1e:31:d9:00:9c:80:50:2f:ce:52:55:97:ca:c1:09:d8:
         ce:8a:77:d7:c5:1f:99:8e:09:53:8a:1f:fe:ac:7c:74:47:71:
         da:25:4f:4a:9a:a1:42:5d:57:c4:6c:ab:56:f8:0f:e8:66:ec:
         0a:d6:87:a3:7e:ef:79:b0:0c:09:11:13:5c:2b:83:2a:a1:23:
         d3:aa:48:33:02:ce:24:5a:bc:69:d7:ec:0e:6e:bc:2f:ff:d8:
         36:57:cd:99:1b:71:94:47:d0:cf:d2:08:b8:3d:87:f9:49:57:
         ba:6c:38:99:4e:12:21:d8:64:2d:d0:13:2f:a8:05:93:74:3a:
         0b:47:50:60:89:2c:b3:90:a6:cd:ad:fe:de:2e:e5:7a:84:fd:
         0c:c6:b0:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:18:11 2025 by rpki-client on console.sobornost.net