Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/1/323830313a38613a3a2f33322d3333203d3e203533313837.roa
File:                     323830313a38613a3a2f33322d3333203d3e203533313837.roa (raw, json)
Hash identifier:          QR7pAMu28VJ+jYdhlrWpxW3rvdK11BHcFTjEev+Zt0A=
Subject key identifier:   9A:6C:73:D5:B7:7A:D3:53:92:E6:80:0D:D3:36:35:17:0B:34:AB:4D
Certificate issuer:       /CN=F0ADD6FFCDFB09210157372271C0B492767D7001
Certificate serial:       29FBCD5B50AAA4433598A72C5F4A4B7358590827
Authority key identifier: F0:AD:D6:FF:CD:FB:09:21:01:57:37:22:71:C0:B4:92:76:7D:70:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0ADD6FFCDFB09210157372271C0B492767D7001.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/1/323830313a38613a3a2f33322d3333203d3e203533313837.roa
Signing time:             Thu 06 Mar 2025 19:26:26 +0000
ROA not before:           Thu 06 Mar 2025 19:21:26 +0000
ROA not after:            Thu 05 Mar 2026 19:26:26 +0000
asID:                     53187
IP address blocks:        2801:8a::/32 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/1/F0ADD6FFCDFB09210157372271C0B492767D7001.crl
                          rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/1/F0ADD6FFCDFB09210157372271C0B492767D7001.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0ADD6FFCDFB09210157372271C0B492767D7001.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 12:50:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:fb:cd:5b:50:aa:a4:43:35:98:a7:2c:5f:4a:4b:73:58:59:08:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0ADD6FFCDFB09210157372271C0B492767D7001
        Validity
            Not Before: Mar  6 19:21:26 2025 GMT
            Not After : Mar  5 19:26:26 2026 GMT
        Subject: CN=9A6C73D5B77AD35392E6800DD33635170B34AB4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:91:1a:66:ff:5b:dd:5b:5f:67:66:44:09:7c:
                    1a:f0:90:13:6c:48:1f:ec:70:d7:9b:cd:65:58:cf:
                    05:38:19:b9:23:b1:41:e9:11:75:0f:5f:9c:b2:67:
                    4c:f8:aa:1e:f1:82:5f:29:7b:fd:35:5f:7f:fc:c4:
                    5d:f7:e9:13:8e:d9:34:5e:7d:62:e3:ba:b1:4e:5d:
                    41:e1:e2:f1:c0:38:ef:51:b3:c1:01:94:58:29:71:
                    e7:a8:78:df:08:75:10:de:fc:ae:2e:d2:04:58:a6:
                    e8:3c:57:7a:79:08:77:a3:80:b3:bb:f1:72:2f:f5:
                    06:9b:46:cc:91:42:5c:f1:26:ef:05:4a:ad:b9:4f:
                    2a:0d:b7:d9:70:a3:4e:24:2d:d4:4a:d8:00:1f:e6:
                    db:fb:79:5b:e3:15:f8:a6:e1:b1:7f:3c:33:14:88:
                    7f:d5:b3:c2:3d:68:af:2e:bc:1d:bf:c4:37:62:de:
                    8d:f8:2c:82:39:35:d6:a2:33:1e:e4:22:2d:ae:c0:
                    df:83:56:8d:76:50:b1:c0:9f:e0:33:c9:78:df:15:
                    b1:5d:02:95:7f:09:85:e0:07:af:71:ff:2c:51:d2:
                    ce:10:ef:a8:20:41:a6:f8:56:ab:d6:55:04:85:f7:
                    c6:41:21:7a:ab:28:04:ba:65:ac:20:5e:9d:80:aa:
                    7e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:6C:73:D5:B7:7A:D3:53:92:E6:80:0D:D3:36:35:17:0B:34:AB:4D
            X509v3 Authority Key Identifier:
                keyid:F0:AD:D6:FF:CD:FB:09:21:01:57:37:22:71:C0:B4:92:76:7D:70:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/1/F0ADD6FFCDFB09210157372271C0B492767D7001.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0ADD6FFCDFB09210157372271C0B492767D7001.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/1/323830313a38613a3a2f33322d3333203d3e203533313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:8a::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:39:d1:b2:9c:3e:c3:f7:c3:f8:c5:0f:df:97:42:79:e3:73:
         24:19:b6:4e:e0:28:94:e5:58:6b:7f:34:db:2e:f1:f9:7c:15:
         de:12:cf:c9:9e:14:0d:36:6d:60:f0:ed:6f:b8:4b:68:22:ad:
         47:e7:fa:1c:f6:4c:cb:4a:bb:d1:b6:1e:db:12:4d:0c:66:e7:
         5a:10:67:41:27:b3:30:4f:8a:fc:11:a2:81:19:b1:49:31:84:
         7f:f9:97:c9:bd:a7:02:d9:90:3e:5d:4c:f9:45:d3:6a:14:1c:
         a6:1d:04:ed:93:a8:ad:4d:d9:f0:10:06:02:71:f7:d9:60:2f:
         5a:60:d7:fd:ae:60:5f:ec:d8:1f:ad:20:66:bd:b8:dd:1c:1e:
         e4:96:19:be:b0:c4:60:b3:17:2b:2e:01:3c:47:56:bf:9d:11:
         63:7c:42:ef:00:f8:f3:c0:07:8b:6e:cb:98:d3:e8:81:59:0e:
         58:ca:f1:52:c3:bd:76:c8:7e:ed:08:d6:41:8e:06:7b:02:c6:
         10:5f:81:d4:f5:f1:db:05:84:77:2d:a2:d5:b6:ea:0e:63:ee:
         16:73:ab:a8:10:df:ca:fc:48:1c:bb:43:12:ab:79:27:48:1f:
         84:9c:37:66:8e:a2:b9:cb:41:b7:cb:26:fe:69:8f:19:aa:1f:
         a4:d6:ac:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:04:58 2025 by rpki-client on console.sobornost.net