Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/323830343a313863303a343030303a3a2f33342d3334203d3e203631393531.roa
File:                     323830343a313863303a343030303a3a2f33342d3334203d3e203631393531.roa (raw, json)
Hash identifier:          rXac4ABd9S5y6J0DKAZUxOoG33M/+n9AjeW49FPhukg=
Subject key identifier:   52:85:0C:CE:0F:AE:0D:B2:CB:B3:E8:D4:64:E2:93:25:49:A8:FD:1F
Certificate issuer:       /CN=D3986442AB630E9BA4980A2F9EF2013033EF9C17
Certificate serial:       1CC84EC0ECEC8351A1ED9AFB578B837FD6BB5CC6
Authority key identifier: D3:98:64:42:AB:63:0E:9B:A4:98:0A:2F:9E:F2:01:30:33:EF:9C:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/323830343a313863303a343030303a3a2f33342d3334203d3e203631393531.roa
Signing time:             Wed 05 Mar 2025 21:59:48 +0000
ROA not before:           Wed 05 Mar 2025 21:54:48 +0000
ROA not after:            Wed 04 Mar 2026 21:59:48 +0000
asID:                     61951
IP address blocks:        2804:18c0:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.crl
                          rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 13:37:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:c8:4e:c0:ec:ec:83:51:a1:ed:9a:fb:57:8b:83:7f:d6:bb:5c:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3986442AB630E9BA4980A2F9EF2013033EF9C17
        Validity
            Not Before: Mar  5 21:54:48 2025 GMT
            Not After : Mar  4 21:59:48 2026 GMT
        Subject: CN=52850CCE0FAE0DB2CBB3E8D464E2932549A8FD1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:39:c0:4f:b1:2c:20:50:20:8b:99:03:ff:a3:
                    a7:3e:00:c1:fa:9c:2c:26:62:7b:51:a9:f5:48:48:
                    98:11:76:ae:c3:57:93:aa:d8:11:3a:60:8e:f0:b1:
                    54:d7:42:c7:c8:02:55:1b:d2:a1:14:c7:35:fe:a5:
                    19:01:e6:f0:68:f5:9c:7b:7a:39:98:ad:2c:93:0c:
                    9f:12:84:29:57:bd:e5:81:56:5b:9c:1c:34:34:24:
                    e7:7d:21:2b:e2:e8:ac:01:e4:ba:8a:90:2a:cd:5e:
                    4e:a9:7e:ae:7f:fd:94:b1:aa:6f:fd:24:9f:0f:08:
                    a1:12:ab:78:ab:bc:20:27:5a:df:ff:d6:5a:30:ea:
                    6b:4e:04:34:3b:69:57:16:98:4d:35:03:e1:d2:b1:
                    ee:dc:ab:61:23:bf:a4:84:f1:40:7c:8e:c6:0f:b4:
                    6a:43:df:75:18:85:da:03:da:8f:5e:35:eb:01:82:
                    44:dc:fd:be:ed:f1:67:91:20:4c:13:82:e8:73:d7:
                    67:58:f1:f1:15:40:7b:9b:a2:f8:45:32:b1:ab:09:
                    53:7f:f8:be:f0:02:8f:bd:51:53:4e:8d:ab:16:b0:
                    15:7f:4f:fb:9e:d7:b5:78:32:1b:30:1f:7c:3b:fd:
                    d7:69:66:fa:88:0d:35:90:83:89:97:9f:18:28:df:
                    37:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:85:0C:CE:0F:AE:0D:B2:CB:B3:E8:D4:64:E2:93:25:49:A8:FD:1F
            X509v3 Authority Key Identifier:
                keyid:D3:98:64:42:AB:63:0E:9B:A4:98:0A:2F:9E:F2:01:30:33:EF:9C:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/323830343a313863303a343030303a3a2f33342d3334203d3e203631393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:18c0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         71:41:8c:b9:36:ed:38:ff:f2:0a:26:a7:0a:b4:19:7c:c4:bb:
         19:af:06:b1:91:c0:04:6c:02:1e:9c:9a:34:ed:f1:9c:00:56:
         9c:12:c8:87:b3:1f:e7:1c:6f:5e:1d:3f:14:b7:17:db:8b:3d:
         06:21:00:15:b7:2f:f0:1a:a2:bc:49:30:3e:5e:7a:dd:b1:af:
         6c:f5:32:8b:a8:72:f6:f7:2b:e6:1e:ff:44:e3:b1:45:0e:c5:
         55:cb:a1:9d:6b:38:8d:a3:18:78:54:5a:2c:5a:41:ad:64:2b:
         cd:f2:3e:cb:7e:d6:ab:ea:7b:a8:e8:cf:a2:09:d3:13:d7:ca:
         6d:e5:20:75:0e:1f:5c:67:1d:19:19:62:62:b2:0e:36:e6:47:
         60:25:ae:29:16:3e:94:dd:18:36:23:08:9c:f1:b9:e8:96:de:
         99:ea:5c:8b:b6:31:cf:66:93:f4:fd:ea:ce:3e:50:84:96:91:
         fa:01:8d:1b:17:e2:70:d5:91:29:d8:28:7e:5b:46:92:07:c5:
         5c:4e:8d:3c:3f:17:a9:9c:80:78:5a:d7:f3:5d:2a:44:c2:68:
         f5:d9:48:84:8f:4c:6b:08:96:64:f6:ab:d7:c1:5f:28:48:8e:
         d2:d7:82:95:06:bb:79:15:ed:cd:08:91:15:04:38:8d:4f:5e:
         24:5d:14:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:25 2025 by rpki-client on console.sobornost.net