Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3266303a3a2f34352d3435203d3e20323732373130.roa
File:                     323830343a383737343a3266303a3a2f34352d3435203d3e20323732373130.roa (raw, json)
Hash identifier:          IyDMB6+vUoeYQiIdk3c2tSoanT4RDtcFENs2qxrjhNA=
Subject key identifier:   1F:E8:48:18:42:2F:77:6F:F8:58:9F:39:8C:C5:BD:C4:DE:78:B6:70
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       227BB60B8947A5D276B499C7102CE2B817495BF2
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3266303a3a2f34352d3435203d3e20323732373130.roa
Signing time:             Fri 30 Aug 2024 14:26:35 +0000
ROA not before:           Fri 30 Aug 2024 14:21:35 +0000
ROA not after:            Fri 29 Aug 2025 14:26:35 +0000
asID:                     272710
IP address blocks:        2804:8774:2f0::/45 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 07:36:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:7b:b6:0b:89:47:a5:d2:76:b4:99:c7:10:2c:e2:b8:17:49:5b:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug 30 14:21:35 2024 GMT
            Not After : Aug 29 14:26:35 2025 GMT
        Subject: CN=1FE84818422F776FF8589F398CC5BDC4DE78B670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b4:42:25:7b:b0:7c:97:f5:bc:13:ab:6b:d9:
                    c3:8b:92:73:a2:a1:de:4d:9f:21:41:14:b3:9a:14:
                    ab:da:3b:f8:0b:4e:30:27:ad:83:56:e9:0c:16:a1:
                    a0:3f:d8:19:f1:4b:b5:0b:d7:ab:f7:ce:9f:bf:c8:
                    4b:8d:4d:42:a6:e7:24:6d:01:b0:3a:e1:af:59:70:
                    a6:9e:85:9f:f8:80:be:10:36:f1:7c:b2:85:e3:63:
                    e3:4f:87:ca:ae:4f:ab:87:34:cd:fb:e6:e4:d6:61:
                    64:94:eb:38:09:0a:a4:d3:d1:ad:73:e5:cc:f6:4c:
                    ef:9c:78:43:8e:c4:c0:7a:ca:f4:32:3f:d1:4c:30:
                    7d:76:fe:f5:c0:1e:d4:47:fe:11:9e:67:27:fb:77:
                    af:a6:92:fd:87:82:d4:71:be:d0:72:ee:aa:91:7d:
                    7d:a8:b4:91:2c:c1:9f:34:ba:41:18:d3:17:64:03:
                    63:00:c2:78:3b:34:6f:9a:9a:26:eb:86:a1:6d:09:
                    dd:6f:b8:76:8c:ce:45:a2:4f:43:0a:a6:27:6e:f9:
                    b3:cb:65:bf:18:32:79:5f:92:dd:55:df:be:ba:91:
                    01:66:ea:31:d5:29:b0:93:14:86:09:a1:3f:86:30:
                    83:c7:34:3f:41:b5:73:02:5c:0f:5b:88:30:37:96:
                    6b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E8:48:18:42:2F:77:6F:F8:58:9F:39:8C:C5:BD:C4:DE:78:B6:70
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3266303a3a2f34352d3435203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8774:2f0::/45

    Signature Algorithm: sha256WithRSAEncryption
         37:45:2e:5d:89:12:e5:ea:36:f9:66:4c:10:e3:f3:27:8c:05:
         56:c9:b1:2d:bd:24:ad:3c:fa:dc:e5:78:ae:b7:b3:30:69:be:
         5e:f9:7d:43:a5:2c:3a:70:6a:92:53:b5:6d:55:0b:c8:2a:19:
         86:25:f0:b8:41:84:53:cf:72:e7:87:6d:f7:08:94:85:78:84:
         b7:c1:d1:85:b8:c3:69:27:6b:e4:44:60:2c:45:24:8e:d0:f7:
         61:f6:7c:e2:31:5d:cf:b3:55:43:8c:5c:d7:d4:0d:7d:13:4a:
         b3:8d:ae:ac:ec:66:cd:04:a4:a3:d8:e3:a2:a7:01:73:86:6b:
         3b:34:a9:85:eb:45:6c:3f:ca:4d:9a:34:5c:fc:92:51:1b:e0:
         85:d2:4e:92:86:d0:b6:f1:85:9b:ae:61:ec:a9:d7:ea:6b:32:
         86:af:cf:07:e6:6b:88:30:d8:cb:24:d2:64:e7:4c:81:6f:97:
         09:17:22:5d:9a:30:f6:17:30:36:f1:bd:8c:e6:a9:ad:1e:ff:
         aa:b5:85:e6:73:5c:14:3a:3f:9b:a7:9e:db:56:02:44:18:be:
         43:f5:b3:e0:a5:d1:04:07:b1:56:ea:77:de:d4:eb:d7:bd:23:
         5c:71:10:85:d8:98:50:d4:c4:ea:c2:c8:7b:1f:b2:d5:49:06:
         cf:76:cf:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:37:10 2025 by rpki-client on console.sobornost.net