Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/323830343a313534343a323130303a3a2f34382d3438203d3e203238323532.roa
File:                     323830343a313534343a323130303a3a2f34382d3438203d3e203238323532.roa (raw, json)
Hash identifier:          6viQhf41QoSI2U9z1AkBfgq64HSMNWYlA7HMNakz2Uw=
Subject key identifier:   BD:4E:C1:B4:5E:C1:97:14:39:77:1D:03:20:A3:D8:32:41:C8:83:D3
Certificate issuer:       /CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
Certificate serial:       0A5BC6A2E25CC03F47B82161294B796A835F716B
Authority key identifier: 16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/323830343a313534343a323130303a3a2f34382d3438203d3e203238323532.roa
Signing time:             Wed 09 Apr 2025 18:47:31 +0000
ROA not before:           Wed 09 Apr 2025 18:42:31 +0000
ROA not after:            Wed 08 Apr 2026 18:47:31 +0000
asID:                     28252
IP address blocks:        2804:1544:2100::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl
                          rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 07 May 2025 20:34:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:5b:c6:a2:e2:5c:c0:3f:47:b8:21:61:29:4b:79:6a:83:5f:71:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
        Validity
            Not Before: Apr  9 18:42:31 2025 GMT
            Not After : Apr  8 18:47:31 2026 GMT
        Subject: CN=BD4EC1B45EC1971439771D0320A3D83241C883D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:85:a7:89:49:38:ec:46:96:2b:fd:c5:27:11:
                    12:b7:7d:05:d1:86:dd:05:25:f3:21:a1:e9:a4:af:
                    d8:46:4a:20:7e:58:3c:3d:be:3a:76:2a:11:be:9c:
                    10:82:db:47:bc:1e:59:30:14:4e:59:6b:ee:cd:43:
                    ba:d9:57:8e:d6:c7:b2:21:26:fc:c6:50:a1:e7:58:
                    73:23:81:4e:8c:61:0f:e8:a4:1f:c1:c4:e6:62:a6:
                    2c:01:50:cf:a4:33:07:ef:7b:4c:af:93:09:a6:21:
                    85:50:8e:c4:c4:f3:62:1e:31:20:70:b0:72:a0:77:
                    ca:a1:65:c7:65:89:5c:7e:11:54:38:b3:a6:ba:2e:
                    01:9b:60:54:17:01:65:b5:05:34:f7:67:6c:e5:b1:
                    16:c7:e5:66:74:8e:89:3f:6a:7c:97:f8:ae:92:87:
                    d4:20:2d:32:1f:af:8b:6c:7b:dd:f5:93:2f:07:45:
                    0b:f6:09:bd:11:09:80:6e:01:78:98:36:e9:7c:59:
                    75:7f:66:65:d1:5d:4a:f1:f2:1a:c7:2c:29:39:2b:
                    38:24:4d:46:de:55:ba:db:c8:59:5a:c5:ed:eb:2d:
                    b4:c9:cd:6f:4d:26:9b:48:ef:0d:77:eb:ea:c9:45:
                    b3:ee:4e:cf:18:a8:78:29:87:53:17:9b:1e:a3:8f:
                    a5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:4E:C1:B4:5E:C1:97:14:39:77:1D:03:20:A3:D8:32:41:C8:83:D3
            X509v3 Authority Key Identifier:
                keyid:16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/323830343a313534343a323130303a3a2f34382d3438203d3e203238323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1544:2100::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:98:c3:2e:66:a5:58:c4:d0:c0:9c:ee:2f:6b:74:ff:94:f5:
         1b:0f:51:35:f4:80:f7:41:3e:18:23:9b:31:f5:75:97:a6:3d:
         1d:5b:d0:1c:8e:b4:5a:c2:82:84:5d:2b:6d:98:41:59:a7:d4:
         03:05:51:78:fe:fc:9c:ba:71:20:48:5c:ac:86:29:e4:6b:0d:
         43:56:cc:4e:d6:a0:39:8c:08:14:c6:95:75:86:13:4e:71:4b:
         3c:48:55:a5:62:6b:8d:c5:cc:b3:98:62:34:87:0f:da:ab:cd:
         a1:85:0c:e1:9c:fd:93:92:90:a9:09:f7:d9:a0:b4:70:3d:8e:
         27:42:4f:6e:c9:b0:ec:c2:cc:df:ee:73:d6:f2:c7:80:c5:2d:
         68:5f:4a:8a:76:b3:df:66:0b:e9:6c:5b:d0:a9:36:07:73:da:
         dc:bd:2d:3c:bc:19:ca:9f:6d:70:6f:c7:8a:53:34:e6:dd:de:
         5b:2e:fd:8f:34:46:c9:62:67:34:3d:28:c5:50:27:d4:3c:f5:
         f2:08:2a:ef:62:66:0c:57:c0:7f:98:77:c9:c2:1b:2e:74:50:
         fd:c4:87:52:51:c2:2c:ca:27:82:4a:6a:b2:96:58:c6:1a:f4:
         ea:7d:f9:ac:71:09:31:72:6f:39:bf:03:75:a7:13:36:fc:fe:
         78:3d:2b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 22:40:44 2025 by rpki-client on console.sobornost.net