Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/323830343a343863633a3a2f33322d3332203d3e20323637313435.roa
File:                     323830343a343863633a3a2f33322d3332203d3e20323637313435.roa (raw, json)
Hash identifier:          HNupAxl8oMElAlMIADjTG2BvnPU5Tc59G7TgMyPX9Ao=
Subject key identifier:   EB:56:AF:FA:50:0F:67:E0:B9:40:3D:AE:D2:8D:32:40:A9:62:11:2D
Certificate issuer:       /CN=3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85
Certificate serial:       0CD82E98317F25803CC4838A63E4B35A840FBC11
Authority key identifier: 3D:5A:1B:2B:6D:E4:87:DB:B9:5C:EE:51:47:5E:26:56:F1:E9:BF:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/323830343a343863633a3a2f33322d3332203d3e20323637313435.roa
Signing time:             Thu 06 Mar 2025 03:03:25 +0000
ROA not before:           Thu 06 Mar 2025 02:58:25 +0000
ROA not after:            Thu 05 Mar 2026 03:03:25 +0000
asID:                     267145
IP address blocks:        2804:48cc::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.crl
                          rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:d8:2e:98:31:7f:25:80:3c:c4:83:8a:63:e4:b3:5a:84:0f:bc:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85
        Validity
            Not Before: Mar  6 02:58:25 2025 GMT
            Not After : Mar  5 03:03:25 2026 GMT
        Subject: CN=EB56AFFA500F67E0B9403DAED28D3240A962112D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:27:b5:ad:c9:95:95:7e:ff:03:83:58:19:b3:
                    66:5a:ab:8f:60:95:0e:09:ba:0a:b8:4a:b2:6d:c5:
                    68:c2:33:8b:09:05:6a:92:cc:f8:dc:f8:7f:1c:56:
                    3f:61:9f:48:fa:61:c7:55:ac:f3:c2:d4:5a:cc:76:
                    8c:c6:44:ab:35:61:3e:e3:d8:7d:6d:8c:3a:9b:93:
                    fe:9d:e2:13:21:c9:fd:a8:e2:76:80:28:b7:e5:ee:
                    5e:19:20:6b:19:3b:18:65:6c:16:70:b5:9d:cd:64:
                    1b:1f:0f:3f:64:97:89:96:cc:9a:31:78:75:27:83:
                    6b:8a:0f:56:bb:63:ee:d6:93:b4:7e:04:37:a0:ad:
                    f8:eb:b2:82:9c:44:22:60:c0:a1:e2:94:3f:ac:0e:
                    03:c8:3e:06:54:50:3b:7c:22:42:18:6e:e8:55:53:
                    3e:57:fa:60:8f:f2:01:e7:1a:6b:d1:e5:db:1c:03:
                    eb:73:df:09:d8:34:2d:58:88:b3:4c:72:44:ef:1e:
                    63:7c:6e:db:8d:b0:e1:45:0b:31:f1:61:46:c7:9b:
                    e6:4e:a0:e6:30:91:7b:a3:e5:a5:e6:49:00:de:f5:
                    a8:71:c2:1a:ed:68:c5:e9:3a:26:02:0c:49:9f:be:
                    df:e6:6c:53:27:0c:f2:b6:84:0f:ae:84:e4:7c:97:
                    37:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:56:AF:FA:50:0F:67:E0:B9:40:3D:AE:D2:8D:32:40:A9:62:11:2D
            X509v3 Authority Key Identifier:
                keyid:3D:5A:1B:2B:6D:E4:87:DB:B9:5C:EE:51:47:5E:26:56:F1:E9:BF:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/323830343a343863633a3a2f33322d3332203d3e20323637313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:48cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:8a:2b:c7:fb:b9:42:81:8c:e7:c9:5a:e0:92:ee:c3:16:cb:
         c7:d9:26:7d:9e:bd:39:0c:bf:7a:3f:50:d4:86:0d:72:11:bd:
         22:d9:f7:6d:31:f0:42:b9:81:64:b5:a9:be:6c:c0:4d:bb:d9:
         a7:f7:c7:61:7f:92:d1:68:57:db:3f:be:79:c3:04:1d:e0:4c:
         f9:fa:d7:d5:fc:da:aa:c9:52:65:37:6d:5a:aa:9a:4d:4f:d2:
         87:38:32:51:5b:fe:62:86:4f:91:8c:93:c8:45:fa:df:f4:0b:
         40:e1:7c:0c:16:2c:d8:49:71:b4:c3:c4:95:56:e2:06:f8:75:
         49:dc:a1:97:81:d8:d7:d9:c2:f6:8c:dc:20:b1:7c:6d:f5:a0:
         ff:35:c7:a0:a7:70:3d:9e:0f:01:97:94:3c:67:51:51:a7:0b:
         1a:71:e1:d6:7e:7b:33:6b:e6:ee:6d:65:51:ba:82:8b:e3:cd:
         96:96:f9:b9:cf:71:f1:7e:db:7e:38:8b:59:42:18:89:0f:ac:
         6f:85:b5:19:22:48:3d:15:70:0f:2a:e9:e7:fd:50:3b:19:3f:
         c0:b8:d2:67:e5:5b:59:69:72:94:92:b9:bf:7d:8a:50:33:bb:
         9c:17:bd:ca:b1:80:c8:31:e1:cc:f8:ee:69:d0:42:b0:25:9f:
         e8:89:41:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:40:43 2025 by rpki-client on console.sobornost.net