Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7RHZhR3jv8TF9jD95qhzkr1RuWt42vZDr9jeEY5TdG/1/323830343a313861303a3a2f33322d3334203d3e203631393434.roa
File:                     323830343a313861303a3a2f33322d3334203d3e203631393434.roa (raw, json)
Hash identifier:          mJwBBRlvrr2aHDNereBD0fC2jOTJJTYTq7AJESyEIII=
Subject key identifier:   83:08:DF:AA:9B:38:6E:30:5F:BA:F8:D9:CE:AD:33:6B:C6:20:A8:92
Certificate issuer:       /CN=1798EFBE5D1BCAD0E943F8010C795C1294AC2647
Certificate serial:       3181B8E69945299BE7B9FB479FAE700106A31A4B
Authority key identifier: 17:98:EF:BE:5D:1B:CA:D0:E9:43:F8:01:0C:79:5C:12:94:AC:26:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1798EFBE5D1BCAD0E943F8010C795C1294AC2647.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7RHZhR3jv8TF9jD95qhzkr1RuWt42vZDr9jeEY5TdG/1/323830343a313861303a3a2f33322d3334203d3e203631393434.roa
Signing time:             Thu 06 Mar 2025 11:23:41 +0000
ROA not before:           Thu 06 Mar 2025 11:18:41 +0000
ROA not after:            Thu 05 Mar 2026 11:23:41 +0000
asID:                     61944
IP address blocks:        2804:18a0::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7N7RHZhR3jv8TF9jD95qhzkr1RuWt42vZDr9jeEY5TdG/1/1798EFBE5D1BCAD0E943F8010C795C1294AC2647.crl
                          rsync://rpki-repo.registro.br/repo/7N7RHZhR3jv8TF9jD95qhzkr1RuWt42vZDr9jeEY5TdG/1/1798EFBE5D1BCAD0E943F8010C795C1294AC2647.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1798EFBE5D1BCAD0E943F8010C795C1294AC2647.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 21:08:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:81:b8:e6:99:45:29:9b:e7:b9:fb:47:9f:ae:70:01:06:a3:1a:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1798EFBE5D1BCAD0E943F8010C795C1294AC2647
        Validity
            Not Before: Mar  6 11:18:41 2025 GMT
            Not After : Mar  5 11:23:41 2026 GMT
        Subject: CN=8308DFAA9B386E305FBAF8D9CEAD336BC620A892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5c:6a:08:4a:26:61:16:51:3a:5c:f1:9c:3a:
                    91:0e:99:2a:2f:f7:8c:c6:ba:3a:9a:41:a5:b5:4a:
                    09:9e:78:b5:43:de:f4:1d:88:4f:65:2a:fb:0b:8b:
                    23:c2:c2:b1:26:7f:9c:e8:69:9a:e5:25:6e:8e:36:
                    8e:c7:dc:7f:49:c1:24:7d:21:b8:71:ca:b7:13:e7:
                    ea:06:03:b6:fb:dc:9a:9e:a5:88:9a:3c:cf:9c:89:
                    54:33:c8:f5:e2:01:8c:ac:97:e3:07:06:8b:77:8a:
                    79:c1:68:cb:4d:5d:04:da:a7:c6:91:ba:81:5f:77:
                    e0:de:67:f1:6c:ea:6b:2e:30:1b:e4:4d:2a:96:64:
                    92:51:75:6f:43:e6:ee:34:3f:0a:ae:f7:13:b8:5e:
                    06:35:02:4b:83:8d:ee:77:7d:7f:da:c1:40:fc:ef:
                    c4:98:b6:9d:39:7e:54:7a:48:75:8d:d4:18:7d:4f:
                    ad:c8:12:01:54:db:97:15:41:41:39:62:77:08:4e:
                    e3:84:67:87:a3:eb:1a:68:ca:9a:97:db:90:82:ef:
                    36:c4:2c:f7:e0:ba:00:ab:30:b3:37:0e:c5:f7:65:
                    5f:03:e3:4a:b7:93:1d:4b:38:f2:77:9b:ab:93:0c:
                    bc:ff:e2:d1:6e:50:37:e6:68:35:f8:3e:ed:19:94:
                    dd:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:08:DF:AA:9B:38:6E:30:5F:BA:F8:D9:CE:AD:33:6B:C6:20:A8:92
            X509v3 Authority Key Identifier:
                keyid:17:98:EF:BE:5D:1B:CA:D0:E9:43:F8:01:0C:79:5C:12:94:AC:26:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7RHZhR3jv8TF9jD95qhzkr1RuWt42vZDr9jeEY5TdG/1/1798EFBE5D1BCAD0E943F8010C795C1294AC2647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1798EFBE5D1BCAD0E943F8010C795C1294AC2647.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7RHZhR3jv8TF9jD95qhzkr1RuWt42vZDr9jeEY5TdG/1/323830343a313861303a3a2f33322d3334203d3e203631393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:18a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:e6:16:57:b9:7c:e1:07:d9:d2:70:f8:62:eb:ff:db:22:fd:
         22:30:dc:47:f3:dd:ed:86:f2:0a:a5:50:d2:0c:2a:ce:9a:63:
         00:43:a9:4c:38:78:55:eb:0b:05:fc:8d:2c:78:6c:de:a5:d4:
         ca:81:c1:f7:b9:80:83:51:9f:98:17:bd:c2:0e:23:8c:26:13:
         39:f4:5f:fb:1d:45:09:bf:5a:23:ec:b6:62:a8:f4:a1:1d:89:
         8c:8a:b6:8a:43:e9:84:57:28:b6:09:b6:58:d3:93:e8:0b:52:
         05:f1:1f:e1:a8:0b:17:99:b3:0b:68:c3:87:84:96:8d:b7:ea:
         dc:66:15:c1:f5:6a:10:22:16:2a:6e:19:28:6d:65:a8:39:0b:
         da:fd:28:95:20:b2:3b:e3:5d:29:0c:33:d3:5c:f9:34:be:f5:
         48:6a:91:52:9e:6e:9c:9b:51:e3:65:ad:55:7f:c7:58:62:66:
         39:f9:a8:14:da:b7:86:da:69:19:c6:64:25:70:e2:d1:7b:c2:
         d7:1f:4d:19:d9:03:10:01:12:d6:eb:ca:15:7d:06:18:4f:95:
         7a:08:4b:d7:a7:2f:d3:3c:c3:77:3c:f7:00:a3:c2:52:68:05:
         15:2a:bc:e2:92:20:6d:91:d0:d5:0c:5d:38:dd:3a:51:49:84:
         a5:89:15:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:13:14 2025 by rpki-client on console.sobornost.net