Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a323030303a3a2f33362d3336203d3e203631363337.roa
File:                     323830343a316331383a323030303a3a2f33362d3336203d3e203631363337.roa (raw, json)
Hash identifier:          O1Yujmm6ahErcksTOxJ2rm2sE7Qvq9zK46HQITE8FII=
Subject key identifier:   D4:9E:9A:09:8E:54:B4:31:24:43:36:4E:91:D3:AF:59:5D:54:E3:36
Certificate issuer:       /CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
Certificate serial:       72E27F4D59C984576541DA490354476629C72363
Authority key identifier: 31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a323030303a3a2f33362d3336203d3e203631363337.roa
Signing time:             Thu 06 Mar 2025 01:00:28 +0000
ROA not before:           Thu 06 Mar 2025 00:55:28 +0000
ROA not after:            Thu 05 Mar 2026 01:00:28 +0000
asID:                     61637
IP address blocks:        2804:1c18:2000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl
                          rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 17:43:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:e2:7f:4d:59:c9:84:57:65:41:da:49:03:54:47:66:29:c7:23:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
        Validity
            Not Before: Mar  6 00:55:28 2025 GMT
            Not After : Mar  5 01:00:28 2026 GMT
        Subject: CN=D49E9A098E54B4312443364E91D3AF595D54E336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ed:77:3e:8e:ad:08:f8:06:8e:d9:6d:26:71:
                    3c:15:2a:ee:74:a9:ec:ce:62:52:bd:4c:44:be:74:
                    aa:02:46:64:bf:bb:30:37:3e:97:d5:b0:60:f3:09:
                    e2:b4:f6:69:75:f6:ef:47:95:af:cc:37:c6:9a:32:
                    48:49:77:48:c8:4a:ab:a7:44:05:a3:34:fa:be:2f:
                    22:c1:56:10:d8:d1:23:23:57:ce:43:1c:98:be:16:
                    eb:2e:c6:c8:16:eb:2d:2a:b7:7c:d1:bd:d4:8f:1a:
                    04:bc:3f:f6:ea:17:c7:91:8b:dc:1b:74:83:62:8c:
                    aa:15:c1:1a:f9:ab:90:01:00:b2:52:3c:ef:86:97:
                    2b:1f:23:fb:dc:a7:d2:86:4c:71:fa:9e:52:b8:90:
                    07:24:f8:94:30:fd:a0:4a:87:b9:d4:ec:8b:85:1c:
                    74:52:e4:b7:22:6d:f6:30:70:2c:58:98:f7:2e:4e:
                    e4:1e:f6:38:e3:8c:0e:1c:8f:c7:3d:8c:9c:41:c9:
                    1d:4d:e7:7c:6e:ff:39:a8:a2:b0:c6:d2:2c:05:9e:
                    67:cf:c6:65:79:d1:a7:f0:01:9a:44:e5:c0:55:12:
                    e0:a9:d4:16:ff:61:90:0f:d4:be:2f:0f:08:9c:3f:
                    51:22:84:3c:ac:9d:3c:ca:7b:84:0d:d3:eb:48:63:
                    5f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:9E:9A:09:8E:54:B4:31:24:43:36:4E:91:D3:AF:59:5D:54:E3:36
            X509v3 Authority Key Identifier:
                keyid:31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a323030303a3a2f33362d3336203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c18:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         bf:e2:65:3c:e7:23:49:b7:de:89:8d:fa:41:00:a7:29:59:45:
         4e:bd:21:54:f2:0b:8d:b4:62:ed:fd:ba:18:5e:d1:31:fe:79:
         b9:4a:3e:37:c3:06:4a:1e:5c:c1:a5:73:4d:55:a7:5e:99:78:
         d1:4f:ab:1b:3d:f5:05:64:41:72:06:4f:63:84:75:e2:70:cb:
         71:0e:55:eb:42:de:cd:6a:44:33:67:ba:fb:d3:83:77:03:30:
         05:dc:b2:d9:22:13:5c:bd:ca:3f:98:36:f2:b0:f2:47:b2:55:
         da:a5:7f:d9:7c:01:a5:5e:bb:fe:42:ac:5f:ec:cb:e0:ca:ac:
         3f:ee:1c:e5:59:df:97:ef:f1:bb:19:0b:bc:9b:5b:f2:be:b4:
         ed:a0:d3:54:fb:9e:7f:fe:bb:a8:d7:f6:f4:ec:8e:fe:06:6d:
         bc:08:33:8a:f5:17:80:ca:55:c9:a7:14:13:41:ee:1a:02:17:
         47:e1:81:9a:f2:5e:17:2a:91:53:da:07:d9:9a:c3:83:5d:7e:
         24:d7:1d:29:2d:d5:2b:36:90:bd:0c:c0:c3:bf:f2:6d:8a:8c:
         28:58:8d:3a:72:5f:65:df:53:93:75:49:63:82:74:27:87:62:
         15:63:5a:ba:de:76:cd:0d:26:8a:53:f6:1d:b3:b7:61:9e:fd:
         2c:e1:0b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:41 2025 by rpki-client on console.sobornost.net