Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/323830343a3835343a613a3a2f34382d3438203d3e203238333638.roa
File:                     323830343a3835343a613a3a2f34382d3438203d3e203238333638.roa (raw, json)
Hash identifier:          LT5Hnzj3grAiLh+PSaLC58pFWNiLXLzRKCO0Hymeuk0=
Subject key identifier:   9F:97:4A:55:3A:EC:BA:D3:A9:60:3E:59:DC:8A:83:47:67:55:52:99
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       7616B6A4D128384AD3CEE03D4DDC6191C335650F
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/323830343a3835343a613a3a2f34382d3438203d3e203238333638.roa
Signing time:             Thu 06 Mar 2025 02:41:55 +0000
ROA not before:           Thu 06 Mar 2025 02:36:55 +0000
ROA not after:            Thu 05 Mar 2026 02:41:55 +0000
asID:                     28368
IP address blocks:        2804:854:a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:16:b6:a4:d1:28:38:4a:d3:ce:e0:3d:4d:dc:61:91:c3:35:65:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:36:55 2025 GMT
            Not After : Mar  5 02:41:55 2026 GMT
        Subject: CN=9F974A553AECBAD3A9603E59DC8A834767555299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:24:f7:4d:5b:8a:6c:40:3c:2c:e6:31:33:5d:
                    d1:f6:f8:32:d6:51:9b:c5:5e:4e:07:ab:9e:d0:f8:
                    29:29:d7:aa:a7:69:30:11:f9:ff:61:69:d3:fd:b2:
                    91:fc:13:ae:9f:2d:55:08:0a:7e:16:84:95:78:be:
                    0d:58:ac:4c:c1:2a:38:25:45:28:e7:79:0e:69:fc:
                    29:1b:12:91:3c:db:a0:81:80:41:40:3e:5f:25:0f:
                    68:e2:64:07:2c:75:51:8b:a4:20:c3:82:9b:5a:de:
                    3c:c6:20:54:c9:c7:9e:16:b3:4b:68:64:11:3d:d6:
                    69:9b:a2:b2:00:12:cb:85:41:56:35:ff:24:aa:0f:
                    8f:ff:bc:67:49:21:18:f9:0c:ac:14:47:b5:13:e4:
                    39:6a:ef:da:79:ee:28:1f:28:8b:cc:fe:de:ac:c9:
                    0d:98:fd:c2:5a:bb:4f:27:36:e4:3a:07:5c:1f:d4:
                    d6:85:59:ae:9e:2b:0f:63:a6:fb:66:03:8c:73:e7:
                    19:79:9c:b1:4e:55:7c:74:83:ae:13:a4:29:a4:52:
                    9a:c4:1d:dd:74:e1:61:f3:8f:b0:05:b1:03:b1:5c:
                    ba:f4:e2:de:cb:74:2e:7c:82:9b:cc:65:85:54:82:
                    b3:c2:bd:72:cc:77:07:57:ec:8e:f5:1b:37:82:78:
                    07:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:97:4A:55:3A:EC:BA:D3:A9:60:3E:59:DC:8A:83:47:67:55:52:99
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/323830343a3835343a613a3a2f34382d3438203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:854:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:c5:15:8e:19:0e:28:c5:4a:bd:97:cc:aa:d7:a0:f6:35:41:
         3e:33:5f:58:5e:fa:41:a1:a9:53:4a:2d:a0:66:90:21:ec:f5:
         4d:c9:64:22:19:42:fb:1f:a8:81:82:99:36:0d:1f:31:8c:79:
         52:38:63:13:ba:5d:b6:47:0c:b4:63:c3:5a:79:a5:c6:d3:d0:
         66:46:9a:03:70:41:c0:68:36:f9:ec:47:9f:fd:d6:7f:78:52:
         34:a0:5a:e1:e8:fc:41:74:02:1a:57:41:eb:cc:a8:45:50:94:
         c8:cf:92:60:1b:90:6a:83:8b:4b:79:60:84:23:c6:b8:48:4e:
         7d:30:32:54:e2:bc:d5:55:00:10:c8:ce:0c:60:21:1e:3d:9e:
         40:ef:8c:16:c4:eb:9e:6c:6f:76:9a:09:37:10:02:fb:bd:4b:
         ac:33:6b:2c:7e:4a:17:6a:6f:25:2f:5e:d7:fd:8d:28:e1:88:
         1e:ea:a3:c6:a6:df:3c:6e:74:64:14:43:51:0e:41:25:53:84:
         fe:49:39:11:89:ad:ff:58:3c:2f:39:78:68:86:37:0e:42:27:
         29:0f:a2:07:18:87:73:ed:2f:17:eb:a2:0c:a8:ee:1b:82:e1:
         a7:a8:7e:bf:17:3a:0c:1a:15:18:45:e8:f5:b2:f0:6a:d8:38:
         73:f0:26:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:25 2025 by rpki-client on console.sobornost.net