Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/323830343a333835633a383032333a3a2f34382d3438203d3e20323632363837.roa
File:                     323830343a333835633a383032333a3a2f34382d3438203d3e20323632363837.roa (raw, json)
Hash identifier:          EJwwyRM7zne/jQ0MNpjmJMGlbq+yLUiKmVvpgOjA1tI=
Subject key identifier:   36:4B:B8:DA:EB:C1:B8:68:01:D2:16:F3:73:0C:14:AD:5E:75:4C:A0
Certificate issuer:       /CN=5FD5F562B3272E44A51282911986EA038C5D6919
Certificate serial:       0DEBA5A32281B8AD8548B82B87B4A2609E3D2479
Authority key identifier: 5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/323830343a333835633a383032333a3a2f34382d3438203d3e20323632363837.roa
Signing time:             Tue 22 Apr 2025 21:00:02 +0000
ROA not before:           Tue 22 Apr 2025 20:55:02 +0000
ROA not after:            Tue 21 Apr 2026 21:00:02 +0000
asID:                     262687
IP address blocks:        2804:385c:8023::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:eb:a5:a3:22:81:b8:ad:85:48:b8:2b:87:b4:a2:60:9e:3d:24:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FD5F562B3272E44A51282911986EA038C5D6919
        Validity
            Not Before: Apr 22 20:55:02 2025 GMT
            Not After : Apr 21 21:00:02 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5c:67:62:21:45:75:77:01:97:07:dd:4b:12:
                    3f:79:be:08:b0:9a:c6:68:d1:69:11:03:f0:b1:62:
                    08:de:91:5d:9d:27:d3:a7:82:18:c0:25:8c:a7:64:
                    37:f9:c4:fb:59:0a:ee:ec:e2:3f:e3:56:fd:a6:c5:
                    5a:3c:2a:bc:a6:40:8a:dd:c7:a8:09:f3:b8:5b:8a:
                    ff:e4:f6:d9:b1:e4:8d:d7:77:ff:17:40:cb:10:9c:
                    3f:65:f9:89:ea:6b:8c:5d:70:18:02:17:3f:c8:9f:
                    d2:0a:4e:1e:d8:68:02:cf:8f:87:bc:b8:13:be:f0:
                    ae:57:74:9a:09:c7:7c:fc:1d:7a:d3:f7:a9:a2:97:
                    d7:f7:7f:3b:f6:a1:1a:17:ff:5c:3f:50:16:6d:f7:
                    b7:ac:eb:35:6f:41:18:7a:4b:08:cd:8f:ba:ba:ac:
                    27:f0:ba:f1:3b:05:02:7e:a5:af:35:fd:e8:9b:28:
                    2c:bf:2f:8f:92:7c:8a:9f:91:f7:ed:b2:68:f0:4b:
                    f2:2f:97:46:ca:07:15:ae:34:e7:fd:2f:da:7e:47:
                    02:24:0c:6f:a9:cc:18:af:23:55:b9:6e:25:31:3f:
                    12:f4:fe:01:cf:bc:5b:08:20:35:08:00:cb:e8:77:
                    b1:35:39:f1:1a:db:c5:90:8f:c0:ca:ab:e7:a7:e6:
                    18:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:4B:B8:DA:EB:C1:B8:68:01:D2:16:F3:73:0C:14:AD:5E:75:4C:A0
            X509v3 Authority Key Identifier:
                keyid:5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/323830343a333835633a383032333a3a2f34382d3438203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:385c:8023::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:b6:db:35:61:2a:c2:e1:44:43:f0:6c:a6:22:e2:fa:56:6d:
         b1:00:58:eb:f7:c8:b0:cd:74:3c:c9:0f:d5:43:bd:f2:08:78:
         bc:fb:7c:a6:13:d7:ff:1a:a8:7a:7c:2f:3e:6f:2b:26:dd:c5:
         4e:20:21:88:49:a6:a3:1e:0d:6a:ef:d0:6f:81:b1:83:d7:c3:
         e2:63:1c:ba:ff:e2:d0:bc:bc:d4:1f:db:35:8a:72:23:99:fd:
         c0:8a:b8:11:45:60:37:02:fd:33:5e:23:f3:ac:2b:d6:97:56:
         6d:e9:bf:bb:36:fd:b9:04:77:ab:5f:28:88:96:ed:c6:63:4a:
         64:70:24:f7:6f:9a:d0:ae:b5:c6:ad:23:ed:87:56:5a:7f:8b:
         bc:b5:30:75:ee:4a:90:16:f8:65:c0:8d:0b:92:de:35:7b:a5:
         13:05:fc:4c:96:ef:f6:b9:ce:27:08:b7:b2:95:05:0a:74:67:
         a4:8b:be:ff:b3:03:b4:14:3a:dd:31:a9:b5:07:36:ec:16:93:
         b0:d9:e8:09:47:73:cc:e7:b4:14:cb:f9:9c:34:9b:7f:e6:3b:
         6f:ed:c2:c6:99:65:23:1a:0f:5e:47:e4:d6:f4:c4:34:54:ac:
         62:c8:fb:63:ee:ac:7c:07:91:71:8d:d1:be:38:fd:1d:35:bc:
         71:e6:a7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:26 2025 by rpki-client on console.sobornost.net