Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/323830343a6534633a383030303a3a2f33382d3338203d3e203533313733.roa
File:                     323830343a6534633a383030303a3a2f33382d3338203d3e203533313733.roa (raw, json)
Hash identifier:          e0MMWbXW6rY496hm1ADkRqodoH64IMJM1LPYzojgv4Y=
Subject key identifier:   BE:06:04:A8:F8:69:1E:63:D8:80:09:A0:00:11:AC:BD:33:A4:BB:6A
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       05E9556FBC8A76A6B0FF9B1F60651CD98538E5D6
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/323830343a6534633a383030303a3a2f33382d3338203d3e203533313733.roa
Signing time:             Thu 06 Mar 2025 02:41:59 +0000
ROA not before:           Thu 06 Mar 2025 02:36:59 +0000
ROA not after:            Thu 05 Mar 2026 02:41:59 +0000
asID:                     53173
IP address blocks:        2804:e4c:8000::/38 maxlen: 38

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 21:11:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:e9:55:6f:bc:8a:76:a6:b0:ff:9b:1f:60:65:1c:d9:85:38:e5:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:36:59 2025 GMT
            Not After : Mar  5 02:41:59 2026 GMT
        Subject: CN=BE0604A8F8691E63D88009A00011ACBD33A4BB6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:42:3a:22:ca:23:a9:89:b2:d2:08:82:7e:da:
                    94:ef:b9:b9:b6:7f:28:72:98:c2:1b:7c:e4:46:98:
                    a1:4e:09:24:e0:de:cf:2d:33:bc:ae:b5:6f:e0:47:
                    58:9a:c2:8f:76:bd:f5:56:78:c8:49:44:c5:5a:11:
                    50:ef:6b:96:68:81:fb:4b:b0:94:6e:ef:82:2d:5b:
                    67:67:d0:b1:3f:2b:4c:29:d9:7d:0e:03:db:4b:2b:
                    0c:f6:69:7b:1a:e8:30:d1:ff:6a:bf:93:2c:f1:52:
                    5e:55:85:1c:2d:3e:0d:da:83:ad:8d:38:1c:36:b8:
                    a9:de:ae:65:a3:12:6d:6c:62:7b:20:1f:3d:0a:8c:
                    fc:de:d0:18:63:96:05:58:e2:eb:65:a3:0d:91:7e:
                    97:8b:ec:c0:e3:0a:e6:9f:b6:18:29:00:65:46:56:
                    26:9a:2b:7a:11:02:63:0d:63:4d:a4:48:c8:e5:e2:
                    db:7d:be:9b:74:14:77:17:5d:7b:13:78:26:d9:9d:
                    69:ee:73:77:7b:58:4b:19:fa:ad:1f:86:74:1c:e2:
                    ce:96:8d:e6:b0:7c:0e:e1:bb:65:21:e8:4b:bd:05:
                    2d:03:0b:49:9f:84:0a:32:aa:03:38:6b:53:5e:67:
                    93:44:99:bf:0a:9d:b5:e7:33:31:53:1e:8d:39:12:
                    47:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:06:04:A8:F8:69:1E:63:D8:80:09:A0:00:11:AC:BD:33:A4:BB:6A
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/323830343a6534633a383030303a3a2f33382d3338203d3e203533313733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e4c:8000::/38

    Signature Algorithm: sha256WithRSAEncryption
         46:da:05:21:57:f5:97:9e:8b:4e:63:a2:20:10:69:73:33:c0:
         6f:f0:1c:4e:3e:d8:2a:4c:c2:8f:9d:85:ec:0d:28:a1:3e:2b:
         a8:35:34:c7:72:7c:1c:23:7a:85:75:38:9b:ee:5b:fe:52:0f:
         3a:52:c4:e5:47:b8:44:47:eb:79:d9:4e:89:96:ae:18:ce:6c:
         6e:3e:d7:b1:63:d8:81:95:21:07:f1:ad:ce:ef:f3:37:08:2e:
         38:eb:81:bd:db:27:52:7d:9d:0a:05:03:43:31:82:a5:d6:09:
         93:08:80:14:48:38:28:e9:b4:d7:b8:95:ff:41:ad:9c:5a:fc:
         09:6c:ba:b8:73:c8:5a:14:ab:34:6a:eb:92:28:35:d1:77:c4:
         4b:ee:b9:8e:fe:0d:7d:18:2e:3a:ed:d0:5e:d1:cb:1e:12:72:
         0d:a0:a9:c9:f1:2f:2a:8f:28:10:35:0e:14:98:16:b6:9c:b2:
         f0:0e:2c:a5:87:bd:42:b2:9e:08:99:2f:58:8f:ae:84:6f:46:
         41:88:3c:6e:d3:5b:a2:6c:f2:18:c4:47:65:fa:3d:96:6a:06:
         28:1b:de:bd:03:0c:88:7a:d2:7b:da:37:da:26:23:39:9c:68:
         2e:62:51:df:ed:a6:28:30:8b:68:78:56:6e:b7:d5:ce:3b:fd:
         1d:36:83:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:48:03 2025 by rpki-client on console.sobornost.net