Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/323830343a313863303a3a2f33322d3332203d3e203631393531.roa
File:                     323830343a313863303a3a2f33322d3332203d3e203631393531.roa (raw, json)
Hash identifier:          fqKM2W9QTFPawn7WEvz4wlQq7FzuUort9aVpJ1COXB4=
Subject key identifier:   E8:2E:9B:F8:CF:D4:87:BA:9D:B7:DE:34:37:8F:C5:4F:A4:05:36:7B
Certificate issuer:       /CN=D3986442AB630E9BA4980A2F9EF2013033EF9C17
Certificate serial:       631565241410C09ADD3399E4B059EE80B5827A47
Authority key identifier: D3:98:64:42:AB:63:0E:9B:A4:98:0A:2F:9E:F2:01:30:33:EF:9C:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/323830343a313863303a3a2f33322d3332203d3e203631393531.roa
Signing time:             Wed 05 Mar 2025 21:59:49 +0000
ROA not before:           Wed 05 Mar 2025 21:54:49 +0000
ROA not after:            Wed 04 Mar 2026 21:59:49 +0000
asID:                     61951
IP address blocks:        2804:18c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.crl
                          rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 13:37:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:15:65:24:14:10:c0:9a:dd:33:99:e4:b0:59:ee:80:b5:82:7a:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3986442AB630E9BA4980A2F9EF2013033EF9C17
        Validity
            Not Before: Mar  5 21:54:49 2025 GMT
            Not After : Mar  4 21:59:49 2026 GMT
        Subject: CN=E82E9BF8CFD487BA9DB7DE34378FC54FA405367B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:df:9a:b7:d2:3b:a4:89:27:7e:21:8c:1c:06:
                    ce:2e:2a:fc:a8:c3:86:a6:db:87:32:c1:d7:df:3a:
                    ad:bd:44:f9:7b:53:89:27:a9:60:5d:b8:61:1a:5e:
                    2f:68:84:06:3c:7a:1d:d8:81:34:f2:b8:9b:fc:6c:
                    a8:73:15:15:bd:f2:fd:b6:eb:f5:b6:0f:08:a8:0e:
                    a5:a0:37:f4:50:a3:02:bf:a1:96:3a:5b:1e:9a:5f:
                    9a:4f:76:c3:f4:f8:c3:fb:e0:a4:21:d4:25:ab:ca:
                    6d:98:32:d8:e0:3c:38:95:c4:ef:81:97:21:f7:33:
                    fa:d5:81:b7:98:78:33:a7:55:b7:6f:9d:e1:a8:49:
                    0e:e4:a3:08:8d:11:21:a8:32:05:e0:bc:fc:eb:be:
                    f6:f4:94:58:7a:30:23:02:3a:f3:f4:58:c1:91:ea:
                    f7:e2:0e:6b:97:09:53:38:85:69:3b:e9:01:0c:69:
                    3c:f3:3f:96:e2:cc:1e:5e:a5:5a:28:78:e1:a5:43:
                    64:9f:20:a2:40:fb:b7:4c:ed:c1:4f:c7:f1:f4:dd:
                    fb:1a:bf:f8:a3:61:4c:6c:ee:36:73:8f:56:5b:27:
                    fb:dc:3c:b3:2b:fb:9a:74:fc:a5:e8:93:5f:d2:95:
                    f3:a1:23:c8:88:f6:d5:9e:99:44:07:6a:53:89:03:
                    48:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:2E:9B:F8:CF:D4:87:BA:9D:B7:DE:34:37:8F:C5:4F:A4:05:36:7B
            X509v3 Authority Key Identifier:
                keyid:D3:98:64:42:AB:63:0E:9B:A4:98:0A:2F:9E:F2:01:30:33:EF:9C:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/323830343a313863303a3a2f33322d3332203d3e203631393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:18c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:dd:0b:c3:5c:95:4d:c3:9f:18:47:d7:d4:99:8e:a5:d8:2d:
         50:f1:6d:64:77:f9:28:32:3b:e5:91:a7:1e:b9:a0:08:e3:be:
         78:3d:60:e6:a7:31:d5:98:06:57:b6:7f:7e:6e:43:b8:9e:e8:
         74:14:7d:0f:0b:a2:d4:6e:81:50:0a:6c:51:3e:b6:9d:1a:93:
         49:58:b9:19:19:af:44:38:e0:5a:bf:98:80:47:f2:09:60:c9:
         5b:f0:e9:c4:89:d7:d1:bf:d2:37:35:e8:6c:0c:4a:7d:14:f2:
         ad:c8:a5:06:da:23:9f:74:a8:56:47:ce:37:b0:2b:00:9d:a1:
         db:3a:bb:7c:e6:b8:90:ea:94:88:26:1d:7d:8a:e7:09:91:be:
         f4:46:43:57:ca:17:98:51:a1:5c:d1:76:02:c5:c3:6c:3b:98:
         ba:52:64:8b:cc:02:fe:59:b8:a9:24:c3:ed:7e:c8:bd:43:f4:
         77:d2:90:fa:e6:aa:1b:31:9c:b1:01:8c:f6:41:8f:3b:e6:b1:
         1f:6c:9c:76:0e:f7:e2:04:4f:54:c4:a1:d8:73:81:e2:12:9e:
         18:36:99:c5:61:17:36:dc:63:cd:80:ff:3f:bc:36:69:5c:0e:
         6f:96:fb:f3:ee:ad:54:b0:1f:ac:f1:d7:89:9d:1c:2f:6a:2d:
         da:9a:ce:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:25 2025 by rpki-client on console.sobornost.net