Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a373030303a3a2f33362d3336203d3e203631363337.roa
File:                     323830343a316331383a373030303a3a2f33362d3336203d3e203631363337.roa (raw, json)
Hash identifier:          p2FPWYzx9V0e3J9eRmVhpkLtridokHJV1esZDbpaZiU=
Subject key identifier:   78:4A:95:8D:29:7D:BE:2F:13:38:98:0B:00:D1:8F:9A:3C:2F:08:DF
Certificate issuer:       /CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
Certificate serial:       7D9E557346CB1C3EB8A2B29B177E023860E3CC80
Authority key identifier: 31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a373030303a3a2f33362d3336203d3e203631363337.roa
Signing time:             Thu 06 Mar 2025 01:00:31 +0000
ROA not before:           Thu 06 Mar 2025 00:55:31 +0000
ROA not after:            Thu 05 Mar 2026 01:00:31 +0000
asID:                     61637
IP address blocks:        2804:1c18:7000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl
                          rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 17:43:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:9e:55:73:46:cb:1c:3e:b8:a2:b2:9b:17:7e:02:38:60:e3:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
        Validity
            Not Before: Mar  6 00:55:31 2025 GMT
            Not After : Mar  5 01:00:31 2026 GMT
        Subject: CN=784A958D297DBE2F1338980B00D18F9A3C2F08DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6d:fc:26:e2:8a:a3:b0:e4:9b:b0:bf:42:b1:
                    20:78:af:a9:e5:cf:29:35:85:5d:58:8f:d9:0d:5b:
                    c5:bb:8d:cb:eb:b8:a4:2a:4e:32:b6:6e:cc:31:72:
                    b8:2c:0d:b5:dd:bc:1f:7a:09:73:12:63:3f:34:b0:
                    2c:42:59:36:36:52:13:30:29:8e:97:74:05:e1:8f:
                    8b:30:45:bd:9b:dc:d3:2a:53:67:d0:27:f4:09:a0:
                    4d:3f:d2:70:d8:f4:12:29:36:43:43:d0:68:c2:64:
                    9e:e6:19:f6:4e:f6:5d:46:3b:28:ac:4b:8d:eb:19:
                    c6:79:33:7c:b2:f3:e4:ea:c2:ca:ec:9c:e3:c2:d1:
                    8a:13:05:08:70:f9:4e:e1:51:fd:5d:98:09:36:84:
                    c7:40:ab:5b:cd:ce:6e:87:70:85:67:86:d5:68:2f:
                    ca:60:5c:f1:8a:e2:f4:b2:77:d0:60:67:4a:b2:b8:
                    8b:1c:86:b3:bf:67:6a:af:5b:45:25:dd:3d:03:6f:
                    50:57:ad:15:ba:ce:54:e5:77:9a:4e:49:4c:39:05:
                    77:0d:5b:3a:16:aa:ae:a7:e1:bd:c5:5f:6f:20:8e:
                    a5:dd:f5:49:c3:91:21:44:8e:5e:63:7f:58:d8:19:
                    2e:c9:c7:51:c2:fc:7e:ee:66:01:9e:fb:8e:ac:2a:
                    0e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:4A:95:8D:29:7D:BE:2F:13:38:98:0B:00:D1:8F:9A:3C:2F:08:DF
            X509v3 Authority Key Identifier:
                keyid:31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a373030303a3a2f33362d3336203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c18:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         0b:64:d1:12:54:02:ad:a6:3d:90:5e:dd:ed:ae:9e:c8:da:29:
         26:d4:05:ee:f2:96:6b:3b:05:c5:18:0c:b8:be:bd:30:3a:23:
         ec:d8:c5:ac:aa:b7:05:db:97:c4:14:b4:33:ed:0e:66:f9:30:
         c5:12:ca:7d:35:82:8e:64:97:19:85:26:c0:51:c3:8b:80:3b:
         b6:48:d1:3e:95:61:60:06:71:b3:b0:d5:3a:ed:7c:07:3e:90:
         18:c0:63:10:ad:0e:25:0d:ee:c4:d4:e8:d9:79:2c:b3:ee:9b:
         61:8e:4f:17:4f:27:5f:c4:ed:04:bf:cf:0e:8d:c9:32:b2:5a:
         af:e3:d3:f6:a3:39:dd:97:cb:b7:30:c8:2b:03:59:2d:cd:a5:
         73:fa:9c:2a:02:63:c3:93:d3:6c:ac:f7:09:d1:ba:a3:8f:98:
         23:ff:ca:29:e6:44:b4:90:a1:f9:e8:90:02:fc:1b:e0:ec:e0:
         f3:5f:45:1f:26:b6:6f:bf:17:53:bc:19:e2:50:46:39:05:a1:
         43:a9:5b:f5:07:1a:cf:81:ac:eb:56:21:05:17:c6:89:d0:6e:
         dd:33:43:3b:b7:0e:c8:91:04:0c:81:85:35:3e:f8:5a:63:e0:
         e6:b3:80:5f:2c:e7:f5:d3:05:bf:c6:34:78:ad:38:ea:f6:7c:
         5b:69:04:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:41 2025 by rpki-client on console.sobornost.net