Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8j7dWSq1VABVRj5PPPYq3zFSwTJD3AgqiAjQpjkf9Hxr/1/323830343a313866633a3a2f33322d3332203d3e203631373637.roa
File:                     323830343a313866633a3a2f33322d3332203d3e203631373637.roa (raw, json)
Hash identifier:          19VjNwa483ifmnR5YbDtgacDzPA98p6eCG29OYYsi/g=
Subject key identifier:   55:4D:53:20:4A:6E:EB:87:BD:02:8F:AD:43:26:BC:20:95:5A:03:A4
Certificate issuer:       /CN=2FFAD183601C6CAE4CD1E5BA12B019005FFC2EE4
Certificate serial:       047F7CAC6241B2D12F3CEABBA2A3FF70C6606618
Authority key identifier: 2F:FA:D1:83:60:1C:6C:AE:4C:D1:E5:BA:12:B0:19:00:5F:FC:2E:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FFAD183601C6CAE4CD1E5BA12B019005FFC2EE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8j7dWSq1VABVRj5PPPYq3zFSwTJD3AgqiAjQpjkf9Hxr/1/323830343a313866633a3a2f33322d3332203d3e203631373637.roa
Signing time:             Thu 06 Mar 2025 03:04:49 +0000
ROA not before:           Thu 06 Mar 2025 02:59:49 +0000
ROA not after:            Thu 05 Mar 2026 03:04:49 +0000
asID:                     61767
IP address blocks:        2804:18fc::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8j7dWSq1VABVRj5PPPYq3zFSwTJD3AgqiAjQpjkf9Hxr/1/2FFAD183601C6CAE4CD1E5BA12B019005FFC2EE4.crl
                          rsync://rpki-repo.registro.br/repo/8j7dWSq1VABVRj5PPPYq3zFSwTJD3AgqiAjQpjkf9Hxr/1/2FFAD183601C6CAE4CD1E5BA12B019005FFC2EE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FFAD183601C6CAE4CD1E5BA12B019005FFC2EE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 20:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:7f:7c:ac:62:41:b2:d1:2f:3c:ea:bb:a2:a3:ff:70:c6:60:66:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FFAD183601C6CAE4CD1E5BA12B019005FFC2EE4
        Validity
            Not Before: Mar  6 02:59:49 2025 GMT
            Not After : Mar  5 03:04:49 2026 GMT
        Subject: CN=554D53204A6EEB87BD028FAD4326BC20955A03A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:89:cf:5e:d1:e9:8b:22:f4:f7:17:6f:bf:18:
                    f8:d2:da:e3:82:33:ed:d4:dc:44:fe:f8:d2:fe:91:
                    a3:a5:97:9e:54:5c:6a:49:95:65:35:b4:21:ca:a7:
                    22:07:4e:e4:15:ea:e5:2f:53:3b:65:7a:6e:13:1f:
                    b5:8a:65:c7:fe:b0:45:22:4f:3f:0c:b2:1b:33:96:
                    3c:43:1f:98:45:0e:c0:0c:c7:c9:86:13:5e:3a:74:
                    ce:a2:cc:f6:59:6e:d6:0b:f8:20:81:2f:85:c8:6b:
                    a5:4d:92:91:87:58:18:ff:ba:92:36:d7:6e:70:6a:
                    85:65:23:6c:b9:0b:e3:f6:f7:5c:2d:5b:ab:6f:8b:
                    b0:44:0e:fc:6d:f6:76:55:3a:76:09:bf:87:2d:13:
                    c9:f0:97:d8:d5:6d:e9:c8:09:af:c5:7c:5c:7d:cf:
                    f3:83:8d:bf:7d:d7:b7:82:38:ff:8a:49:08:32:64:
                    eb:ed:df:71:9b:64:fe:84:10:38:c0:da:72:28:0e:
                    df:e2:9f:1e:9c:db:fa:1e:e4:cd:97:de:c7:37:c3:
                    78:e0:72:23:ab:88:34:e4:0d:13:9f:8a:7d:dc:80:
                    23:09:f4:94:e1:eb:4e:a1:10:49:79:7f:ca:ba:21:
                    c7:81:e6:38:92:18:98:4d:06:ed:ad:ea:e9:57:56:
                    dd:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:4D:53:20:4A:6E:EB:87:BD:02:8F:AD:43:26:BC:20:95:5A:03:A4
            X509v3 Authority Key Identifier:
                keyid:2F:FA:D1:83:60:1C:6C:AE:4C:D1:E5:BA:12:B0:19:00:5F:FC:2E:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8j7dWSq1VABVRj5PPPYq3zFSwTJD3AgqiAjQpjkf9Hxr/1/2FFAD183601C6CAE4CD1E5BA12B019005FFC2EE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FFAD183601C6CAE4CD1E5BA12B019005FFC2EE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8j7dWSq1VABVRj5PPPYq3zFSwTJD3AgqiAjQpjkf9Hxr/1/323830343a313866633a3a2f33322d3332203d3e203631373637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:18fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:e6:ba:b1:9b:8e:a4:fe:b8:08:e6:33:5f:d5:d4:39:69:29:
         49:c3:5c:cf:ec:31:60:b5:a0:00:af:fe:71:82:96:f1:07:0d:
         62:da:9a:44:53:f5:7e:3c:e6:75:28:63:aa:66:78:76:2e:72:
         87:c9:ea:8d:53:4e:70:d3:8b:41:14:be:c3:70:a9:13:57:f6:
         f4:b4:f5:0a:3e:34:53:45:8e:55:39:70:e8:b9:3b:ed:e8:96:
         e2:bc:02:97:7e:ed:46:27:86:84:99:2c:b6:be:ee:b6:89:27:
         ee:97:43:81:f5:e6:39:1c:68:a6:2e:1e:64:e6:01:74:24:12:
         31:4e:3d:4b:8f:70:ee:69:19:f1:a4:be:1b:f4:a7:d0:ad:28:
         06:0d:8f:f8:a6:fa:a7:b5:d7:b2:e1:0f:00:9e:05:3a:18:1c:
         49:f7:c1:64:03:2c:02:00:c0:11:ef:60:71:69:72:05:93:5b:
         08:9c:a2:65:1a:71:bc:39:59:63:8a:4c:99:06:03:32:fa:24:
         81:88:43:53:14:9a:d6:88:e8:38:21:69:2b:d4:cb:59:88:7b:
         55:85:cb:05:0b:64:45:26:e7:f3:62:e4:60:05:3c:25:54:ad:
         38:a1:30:c3:5e:30:a0:67:cf:7f:9a:44:55:e7:d5:7c:6b:22:
         e3:89:a5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:01:51 2025 by rpki-client on console.sobornost.net