Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eg7dooy9YiJP7LP4cpbEBBmEib2bMPy89b7NEFXQb3iW/1/323830343a366432383a3a2f33322d3438203d3e20323730353136.roa
File:                     323830343a366432383a3a2f33322d3438203d3e20323730353136.roa (raw, json)
Hash identifier:          5dKon7zQZzy5/IUfddbRI7nLc2GkXjieFmtJOzsQRpc=
Subject key identifier:   5A:C7:F2:F6:57:FA:F6:5A:B4:E1:CF:4C:A4:F1:70:28:9B:74:7B:F7
Certificate issuer:       /CN=3513BAD3D0AE887B5F5628D07194889FEAE9E274
Certificate serial:       51CAD039AB04FAEAC617214BB364270EABA658B0
Authority key identifier: 35:13:BA:D3:D0:AE:88:7B:5F:56:28:D0:71:94:88:9F:EA:E9:E2:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3513BAD3D0AE887B5F5628D07194889FEAE9E274.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eg7dooy9YiJP7LP4cpbEBBmEib2bMPy89b7NEFXQb3iW/1/323830343a366432383a3a2f33322d3438203d3e20323730353136.roa
Signing time:             Thu 06 Mar 2025 00:05:59 +0000
ROA not before:           Thu 06 Mar 2025 00:00:59 +0000
ROA not after:            Thu 05 Mar 2026 00:05:59 +0000
asID:                     270516
IP address blocks:        2804:6d28::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eg7dooy9YiJP7LP4cpbEBBmEib2bMPy89b7NEFXQb3iW/1/3513BAD3D0AE887B5F5628D07194889FEAE9E274.crl
                          rsync://rpki-repo.registro.br/repo/Eg7dooy9YiJP7LP4cpbEBBmEib2bMPy89b7NEFXQb3iW/1/3513BAD3D0AE887B5F5628D07194889FEAE9E274.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3513BAD3D0AE887B5F5628D07194889FEAE9E274.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 05:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:ca:d0:39:ab:04:fa:ea:c6:17:21:4b:b3:64:27:0e:ab:a6:58:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3513BAD3D0AE887B5F5628D07194889FEAE9E274
        Validity
            Not Before: Mar  6 00:00:59 2025 GMT
            Not After : Mar  5 00:05:59 2026 GMT
        Subject: CN=5AC7F2F657FAF65AB4E1CF4CA4F170289B747BF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:30:39:51:b5:60:d4:49:f8:c5:ba:f5:1e:07:
                    cf:43:88:e9:08:38:e3:4e:92:90:42:63:13:b4:cf:
                    7e:ff:c1:58:fd:0a:e7:16:87:08:a2:2f:bf:cd:82:
                    bf:6e:41:7b:e6:1b:1a:45:c1:90:71:36:b3:dc:21:
                    f0:50:0b:c3:5c:01:73:3e:56:75:55:56:5a:1b:6a:
                    85:4c:9c:1f:0a:8a:72:44:7b:06:0e:55:5f:34:4d:
                    71:77:d4:32:fa:4d:db:f5:d8:90:65:8b:08:a4:8b:
                    53:b1:57:da:90:e9:15:f1:ea:8e:93:34:b5:b2:11:
                    76:d6:1e:88:be:89:c0:89:d5:d1:68:ab:1a:01:e9:
                    b1:2d:00:8f:58:ad:5d:d6:23:6e:a4:2f:ab:f0:10:
                    d4:88:36:bb:c0:c8:9e:d2:14:94:49:6a:a9:68:0e:
                    b9:34:6d:09:25:4a:ea:68:af:cc:df:6c:64:e2:41:
                    b1:9c:f5:66:94:04:75:3b:e4:f3:ed:ca:98:c5:f1:
                    d1:45:53:f6:ca:04:c7:9a:73:98:ee:de:a3:d0:7b:
                    2f:ca:12:51:d7:0b:19:03:dc:f7:bc:14:e8:4e:12:
                    01:64:9a:e2:42:7d:8c:14:90:ca:52:51:27:b5:88:
                    ff:31:bf:7d:f4:76:71:1e:8f:4f:66:de:d3:2f:32:
                    2d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:C7:F2:F6:57:FA:F6:5A:B4:E1:CF:4C:A4:F1:70:28:9B:74:7B:F7
            X509v3 Authority Key Identifier:
                keyid:35:13:BA:D3:D0:AE:88:7B:5F:56:28:D0:71:94:88:9F:EA:E9:E2:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eg7dooy9YiJP7LP4cpbEBBmEib2bMPy89b7NEFXQb3iW/1/3513BAD3D0AE887B5F5628D07194889FEAE9E274.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3513BAD3D0AE887B5F5628D07194889FEAE9E274.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eg7dooy9YiJP7LP4cpbEBBmEib2bMPy89b7NEFXQb3iW/1/323830343a366432383a3a2f33322d3438203d3e20323730353136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6d28::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:33:de:ff:bc:6d:e6:2a:8c:a0:6b:c0:07:06:13:ad:f0:84:
         84:99:41:84:72:15:9e:1a:9a:4e:87:f6:ba:c9:ad:ae:95:b5:
         4a:ee:80:2a:fe:15:59:49:f1:4b:a4:62:91:92:ed:ed:1d:2f:
         3b:f0:4d:39:a7:fc:43:9e:f3:65:62:08:43:2c:12:62:bb:0c:
         67:2a:7b:60:bd:7c:bc:69:e7:7f:11:64:ba:40:31:92:d8:54:
         a5:0d:89:cc:3a:bc:0e:97:2d:5c:34:22:bc:d0:e7:8a:cb:76:
         83:85:5e:91:4e:d1:a5:0b:7d:de:59:3e:0a:f5:f2:5f:ee:8c:
         44:43:8c:01:6a:01:f2:6b:b1:3c:1b:57:22:9f:2a:2d:e3:86:
         4f:94:83:4a:89:51:64:a6:65:ab:f1:10:32:8f:ba:f6:60:41:
         e2:6e:0e:ba:d6:a3:1c:fc:ad:bb:fb:8d:7f:c3:af:97:6b:1e:
         40:a6:a5:59:5d:e5:52:a5:33:5d:cd:8d:38:58:b3:b7:ac:c9:
         92:4b:d4:4f:4b:18:32:7b:7c:dd:04:19:30:be:ca:0e:25:5e:
         c2:e7:d7:d4:35:ab:41:d4:d5:94:a0:aa:19:2f:b5:64:3c:c9:
         73:5e:b1:55:d1:71:b2:2f:d9:d8:20:37:94:ee:d6:91:75:d5:
         e1:7b:05:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:15:18 2025 by rpki-client on console.sobornost.net