Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/323830343a343863633a3a2f33322d3336203d3e20323637313435.roa
File:                     323830343a343863633a3a2f33322d3336203d3e20323637313435.roa (raw, json)
Hash identifier:          NSwKuhbVlfit/GeKv12qgi1Nx7DDA7JtYsEpX7CmB8w=
Subject key identifier:   ED:F0:48:6A:25:8D:C5:5F:51:24:C1:F4:AC:02:6D:39:49:7C:72:CA
Certificate issuer:       /CN=3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85
Certificate serial:       385AC69E270E8FA099701FE7303B110783982884
Authority key identifier: 3D:5A:1B:2B:6D:E4:87:DB:B9:5C:EE:51:47:5E:26:56:F1:E9:BF:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/323830343a343863633a3a2f33322d3336203d3e20323637313435.roa
Signing time:             Thu 06 Mar 2025 03:03:25 +0000
ROA not before:           Thu 06 Mar 2025 02:58:25 +0000
ROA not after:            Thu 05 Mar 2026 03:03:25 +0000
asID:                     267145
IP address blocks:        2804:48cc::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.crl
                          rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 01:22:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:5a:c6:9e:27:0e:8f:a0:99:70:1f:e7:30:3b:11:07:83:98:28:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85
        Validity
            Not Before: Mar  6 02:58:25 2025 GMT
            Not After : Mar  5 03:03:25 2026 GMT
        Subject: CN=EDF0486A258DC55F5124C1F4AC026D39497C72CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:14:99:f8:8c:1c:20:6f:55:e6:f6:23:a8:ee:
                    8b:13:29:f8:34:ab:e0:b2:43:0d:51:32:f2:79:df:
                    a8:57:b3:4b:13:96:cd:46:28:38:38:d5:8b:9e:07:
                    4a:4e:df:28:da:d9:ba:3d:47:2f:b5:a5:5e:c4:45:
                    88:c3:00:5e:d5:3a:21:bd:63:36:f7:33:4d:d7:3b:
                    39:a2:31:26:e5:7f:b3:ca:32:b6:62:22:81:77:a1:
                    a2:0e:7d:cf:a4:b0:65:76:33:6c:5b:93:79:65:d8:
                    cc:a3:cc:fe:d3:bf:14:d9:ea:6b:fd:22:23:62:4d:
                    0a:21:ed:bf:8e:8a:a8:a1:e6:b6:61:65:f5:42:ab:
                    23:eb:26:32:48:bb:c1:f1:13:ae:ff:dc:2f:bc:d6:
                    11:f9:de:67:34:df:74:df:b9:1c:97:91:48:8d:d1:
                    d4:a9:51:8c:06:ca:0e:1a:f0:61:6c:1e:36:57:9f:
                    5c:60:da:63:6b:de:64:aa:4c:a6:d9:c3:62:08:2f:
                    7c:b6:25:13:9a:6c:07:7a:d2:e4:df:1d:fe:b9:92:
                    bd:f1:fc:86:75:4a:05:cd:6c:38:fd:fb:5d:04:49:
                    fe:21:9f:5f:44:7c:79:18:c9:ac:25:a2:72:45:7f:
                    d3:8f:a3:06:df:94:55:c1:79:b8:2f:87:6c:e5:95:
                    f0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F0:48:6A:25:8D:C5:5F:51:24:C1:F4:AC:02:6D:39:49:7C:72:CA
            X509v3 Authority Key Identifier:
                keyid:3D:5A:1B:2B:6D:E4:87:DB:B9:5C:EE:51:47:5E:26:56:F1:E9:BF:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/323830343a343863633a3a2f33322d3336203d3e20323637313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:48cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         bf:c5:9a:54:cf:06:f0:39:e9:d6:00:43:54:9c:69:cd:ab:32:
         ef:55:43:b9:cc:48:c2:db:7f:6b:0a:78:47:f7:97:9f:59:6a:
         24:71:c3:9c:ac:0b:c8:53:ae:68:44:36:a9:c5:e6:4a:f8:a7:
         16:17:c4:95:30:33:da:d5:3a:73:a9:3b:f5:57:46:52:54:fd:
         ac:c6:a9:83:4f:86:af:a4:8a:1e:c9:47:a1:ec:47:29:84:d2:
         3c:10:83:03:ea:ff:f5:1b:5f:b9:4b:99:2b:28:69:9b:c5:ca:
         76:81:5c:54:7b:b1:76:06:ee:8a:90:83:84:ab:a2:2d:36:94:
         f4:db:ac:55:71:04:de:ea:c0:ac:8f:1c:9b:d8:41:38:fa:ac:
         b5:77:e7:b2:86:f3:52:7d:67:69:4a:80:a6:11:15:0d:ed:47:
         ad:38:85:64:84:08:50:22:b9:fd:5b:6b:e0:d6:cb:af:4a:15:
         a0:ad:6f:ce:aa:5a:ba:42:fc:3b:90:01:4c:e7:41:31:66:84:
         b4:53:94:c3:e7:97:9b:ab:2e:53:c1:09:94:94:ca:6b:fc:e5:
         0a:1d:11:3a:9e:af:cd:1e:c2:f3:91:11:20:25:4c:e5:44:1a:
         69:12:9c:96:59:d3:0e:c2:81:e7:19:2f:81:a2:56:fd:69:0b:
         e2:cf:be:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:15:13 2025 by rpki-client on console.sobornost.net