Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/323830343a383461633a3a2f33322d3438203d3e203238323233.roa
File:                     323830343a383461633a3a2f33322d3438203d3e203238323233.roa (raw, json)
Hash identifier:          BhnQAmwsI7uDHJjD9euUEBzJYJcKICLs0xD6NoebHa0=
Subject key identifier:   53:C6:2A:24:76:93:E4:42:22:B9:ED:C4:95:E7:A3:55:B4:96:58:F8
Certificate issuer:       /CN=27E1FC1146B53B145E431E07B4ED589B8C84542B
Certificate serial:       2D1B599B30EAACFEC2C550708AA45D316CD81A44
Authority key identifier: 27:E1:FC:11:46:B5:3B:14:5E:43:1E:07:B4:ED:58:9B:8C:84:54:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27E1FC1146B53B145E431E07B4ED589B8C84542B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/323830343a383461633a3a2f33322d3438203d3e203238323233.roa
Signing time:             Fri 20 Dec 2024 12:59:07 +0000
ROA not before:           Fri 20 Dec 2024 12:54:07 +0000
ROA not after:            Fri 19 Dec 2025 12:59:07 +0000
asID:                     28223
IP address blocks:        2804:84ac::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/27E1FC1146B53B145E431E07B4ED589B8C84542B.crl
                          rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/27E1FC1146B53B145E431E07B4ED589B8C84542B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27E1FC1146B53B145E431E07B4ED589B8C84542B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 13:40:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:1b:59:9b:30:ea:ac:fe:c2:c5:50:70:8a:a4:5d:31:6c:d8:1a:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27E1FC1146B53B145E431E07B4ED589B8C84542B
        Validity
            Not Before: Dec 20 12:54:07 2024 GMT
            Not After : Dec 19 12:59:07 2025 GMT
        Subject: CN=53C62A247693E44222B9EDC495E7A355B49658F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a2:46:66:75:ce:98:a6:7b:f4:88:0c:eb:e6:
                    13:7f:51:f3:cd:3e:62:3a:c6:60:63:0b:dc:1c:38:
                    70:50:a9:b9:24:1e:b3:f6:9e:9e:ea:a2:a4:41:0a:
                    b8:73:0f:c9:e6:39:71:5c:ee:00:a8:41:74:11:cb:
                    20:bc:9c:a9:80:00:8b:c6:0e:49:8a:59:20:18:5d:
                    45:27:0b:e0:d8:63:c0:ec:57:d6:9c:2a:36:2f:8c:
                    a2:58:6f:25:0c:1e:eb:ba:e0:4e:bd:11:5a:5e:ed:
                    f8:68:b2:51:7e:93:56:98:a8:5f:15:72:ce:27:df:
                    f1:a4:58:54:12:45:e5:f0:61:85:53:ae:c1:d3:b9:
                    a9:a3:ad:45:c0:fc:30:f7:f5:e2:64:52:99:d9:36:
                    a7:1c:50:7f:4f:96:8d:7d:71:ea:16:2b:42:4a:63:
                    55:93:c9:5a:ca:86:ce:10:83:3e:bc:25:e6:50:a0:
                    03:33:30:1a:b4:74:17:e3:ea:b8:d6:06:a7:94:7a:
                    8a:1e:aa:ba:79:c4:ef:8d:cc:a2:cb:0d:3f:7b:07:
                    60:02:1e:5f:2b:a8:f0:25:aa:ed:d1:8b:b4:b2:4a:
                    63:b8:db:4f:08:3f:ed:66:87:91:d1:d3:d2:41:1b:
                    7b:a4:6d:be:dd:4c:2a:e4:0f:19:0d:38:f5:f1:3c:
                    73:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C6:2A:24:76:93:E4:42:22:B9:ED:C4:95:E7:A3:55:B4:96:58:F8
            X509v3 Authority Key Identifier:
                keyid:27:E1:FC:11:46:B5:3B:14:5E:43:1E:07:B4:ED:58:9B:8C:84:54:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/27E1FC1146B53B145E431E07B4ED589B8C84542B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27E1FC1146B53B145E431E07B4ED589B8C84542B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/323830343a383461633a3a2f33322d3438203d3e203238323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:84ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:ef:09:36:81:4e:fe:b3:0f:2e:15:77:16:ca:6f:28:1d:f5:
         b2:57:dd:d5:25:9d:e5:df:84:bf:ff:87:12:3a:1e:8c:2d:1b:
         43:e0:85:2d:f0:ca:0b:1b:05:8f:ac:d0:e1:f7:71:64:b9:75:
         07:44:53:ac:92:6c:19:aa:a8:7a:4f:ec:e6:0a:58:84:bf:fc:
         e9:0f:80:8e:00:d9:7f:76:e2:af:58:a5:46:70:e6:a7:22:81:
         55:65:c2:ea:9b:92:60:33:04:9e:ce:94:a5:96:49:b9:b3:35:
         5b:d5:33:59:bd:98:3f:16:c8:03:1f:f1:c0:ce:c3:62:79:2c:
         7d:1d:12:cb:fa:b5:9d:fe:8c:db:cc:19:02:36:5b:7d:bd:97:
         cb:c7:09:9a:c4:c3:c7:75:f9:2e:64:94:94:82:16:67:51:44:
         5e:9a:f9:3a:a3:72:1b:02:c5:2e:13:ce:ca:40:61:1b:92:68:
         7e:52:d1:3f:03:48:c5:0a:bf:96:d6:5c:6e:1e:c3:6d:12:b3:
         3b:f3:21:ad:ba:9e:fe:22:b6:73:87:05:23:fe:eb:56:40:a4:
         1b:88:a1:1b:40:44:d2:9b:e8:31:d3:60:63:4e:15:4c:27:4b:
         eb:9d:c4:94:31:ef:64:8a:b7:ae:ac:1c:b8:07:ca:4e:11:a7:
         60:3b:72:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:37:23 2025 by rpki-client on console.sobornost.net