Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/323830343a34633a3a2f33322d3438203d3e2038303535.roa
File:                     323830343a34633a3a2f33322d3438203d3e2038303535.roa (raw, json)
Hash identifier:          Yzmb0h+Lv/Dj+wG+cnUogs+drvUe3mz+x+2/SmV2H5U=
Subject key identifier:   54:3B:88:0C:1B:80:C2:53:87:0D:F7:79:7B:BF:CE:2C:C1:33:1F:C5
Certificate issuer:       /CN=E3A05660BB6F81841BB49DE532F64F592B23928E
Certificate serial:       6169C057D1C2DA3D036848FA9C76138FBEEEC3D8
Authority key identifier: E3:A0:56:60:BB:6F:81:84:1B:B4:9D:E5:32:F6:4F:59:2B:23:92:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3A05660BB6F81841BB49DE532F64F592B23928E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/323830343a34633a3a2f33322d3438203d3e2038303535.roa
Signing time:             Fri 18 Apr 2025 14:30:50 +0000
ROA not before:           Fri 18 Apr 2025 14:25:50 +0000
ROA not after:            Fri 17 Apr 2026 14:30:50 +0000
asID:                     8055
IP address blocks:        2804:4c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/E3A05660BB6F81841BB49DE532F64F592B23928E.crl
                          rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/E3A05660BB6F81841BB49DE532F64F592B23928E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3A05660BB6F81841BB49DE532F64F592B23928E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:69:c0:57:d1:c2:da:3d:03:68:48:fa:9c:76:13:8f:be:ee:c3:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3A05660BB6F81841BB49DE532F64F592B23928E
        Validity
            Not Before: Apr 18 14:25:50 2025 GMT
            Not After : Apr 17 14:30:50 2026 GMT
        Subject: CN=543B880C1B80C253870DF7797BBFCE2CC1331FC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2a:c3:bc:cf:d8:ac:2f:de:bf:02:19:80:cb:
                    b1:6f:69:39:6c:e4:57:b7:c4:10:53:b2:b6:00:a4:
                    70:85:45:f5:57:51:8f:91:f1:61:c3:e5:1b:5c:dd:
                    47:59:16:f6:c7:0b:b0:6c:d5:66:45:ae:38:ee:f4:
                    d5:8d:df:fb:94:5d:89:f9:2c:e6:53:95:ce:08:f6:
                    9d:98:0e:5e:11:c5:84:82:82:c1:58:b6:25:5f:ff:
                    91:13:b5:ad:0c:12:b7:14:bd:d4:4e:34:50:37:e8:
                    ee:65:8f:a8:d1:4d:4d:a8:d0:12:22:6f:1b:4e:6b:
                    fc:f9:51:80:56:09:d8:44:e1:cf:ce:14:d9:27:d6:
                    ab:ef:d2:05:03:fa:a8:7c:2e:b3:b8:64:c3:56:5a:
                    43:e4:49:dc:4d:66:8a:17:58:d4:fd:24:0d:46:9b:
                    a4:dd:18:2e:ab:e3:ec:4b:6f:b8:2a:3c:c4:81:99:
                    17:d9:29:3a:55:2a:ce:34:61:6e:33:87:a2:88:08:
                    c3:61:bd:98:7e:6e:4d:9f:9b:27:21:18:af:c1:d5:
                    4c:de:75:4a:3a:56:8f:5e:98:aa:b4:a6:79:65:34:
                    93:59:0c:1f:68:db:2d:20:cb:d7:bb:d9:5e:90:56:
                    f6:b3:78:f7:cb:21:a1:b1:44:f8:3f:fa:d5:f8:c0:
                    e3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:3B:88:0C:1B:80:C2:53:87:0D:F7:79:7B:BF:CE:2C:C1:33:1F:C5
            X509v3 Authority Key Identifier:
                keyid:E3:A0:56:60:BB:6F:81:84:1B:B4:9D:E5:32:F6:4F:59:2B:23:92:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/E3A05660BB6F81841BB49DE532F64F592B23928E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3A05660BB6F81841BB49DE532F64F592B23928E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/323830343a34633a3a2f33322d3438203d3e2038303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:99:29:91:13:86:b2:87:33:a5:88:34:5f:cb:45:f3:b7:e6:
         8e:ad:cd:eb:ab:81:ca:95:a5:b8:31:77:ab:8f:07:19:0e:5d:
         d4:3e:0a:f4:ed:39:8d:4e:29:b4:e5:cc:16:2b:8e:73:83:59:
         e1:80:51:db:fb:42:fd:f6:8c:2a:a9:c4:bd:c9:43:25:85:7c:
         c2:9b:cd:60:17:0c:59:49:80:91:16:8e:e3:0e:6d:f9:f7:13:
         05:c5:27:37:91:f0:f6:68:38:c4:a1:e2:92:c7:68:ef:d2:6f:
         ba:12:fe:5c:46:d6:62:b9:cd:f9:2b:b9:8c:75:ff:26:b1:f3:
         32:32:a0:1b:f3:8f:8a:fb:24:86:39:ef:5f:f8:38:99:2f:fc:
         f4:45:20:47:5a:b4:6d:bf:20:57:c3:d2:f0:65:1d:d3:9e:4b:
         5a:10:fd:96:08:14:93:4c:b8:5a:e9:6e:0c:ab:3a:6a:54:31:
         88:54:80:d9:58:8a:89:1c:f1:35:f5:92:3a:aa:07:47:02:d9:
         1b:31:73:1f:08:6f:50:3e:79:bb:61:a0:4f:e2:e0:20:54:09:
         11:ec:a4:02:9a:18:1d:9a:f3:a7:f3:75:99:b4:fe:6e:7b:07:
         fd:32:84:88:7e:de:4c:33:bd:f0:21:3e:33:9e:84:fc:02:44:
         f6:b6:dd:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:40 2025 by rpki-client on console.sobornost.net