Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/323830343a6531633a3a2f33342d3334203d3e203532353435.roa
File:                     323830343a6531633a3a2f33342d3334203d3e203532353435.roa (raw, json)
Hash identifier:          pa0Kt0eN8QWWUfpLfVEt3/Y+xEBjLjbkoQ8E632mdcY=
Subject key identifier:   3D:2F:9F:C9:A6:37:24:42:48:EB:AA:A1:A1:02:3E:7D:3F:1A:E5:2A
Certificate issuer:       /CN=3525DEC2C298F98A0A0CC888E805E01C39FD63D7
Certificate serial:       502E590E4C229FC537F6CA65579CB840A0534C33
Authority key identifier: 35:25:DE:C2:C2:98:F9:8A:0A:0C:C8:88:E8:05:E0:1C:39:FD:63:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/323830343a6531633a3a2f33342d3334203d3e203532353435.roa
Signing time:             Thu 06 Mar 2025 02:06:27 +0000
ROA not before:           Thu 06 Mar 2025 02:01:27 +0000
ROA not after:            Thu 05 Mar 2026 02:06:27 +0000
asID:                     52545
IP address blocks:        2804:e1c::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.crl
                          rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 20:21:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:2e:59:0e:4c:22:9f:c5:37:f6:ca:65:57:9c:b8:40:a0:53:4c:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3525DEC2C298F98A0A0CC888E805E01C39FD63D7
        Validity
            Not Before: Mar  6 02:01:27 2025 GMT
            Not After : Mar  5 02:06:27 2026 GMT
        Subject: CN=3D2F9FC9A637244248EBAAA1A1023E7D3F1AE52A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f3:30:b8:54:87:01:26:dc:e4:9f:9f:e3:b5:
                    bd:23:88:9d:62:1a:33:76:07:2a:17:bf:a2:d3:5b:
                    8c:49:14:46:9a:83:f5:21:8a:76:bc:01:9d:35:7c:
                    67:04:e1:ee:37:f4:87:d8:d4:84:6c:c4:f4:87:65:
                    51:07:57:ed:e4:61:9d:d4:48:61:47:dc:b7:7d:6b:
                    5e:18:0e:67:a6:d9:0a:23:93:38:b5:16:07:19:7f:
                    9f:81:7d:72:6e:25:a9:35:b2:52:82:dd:6e:fb:42:
                    db:3b:36:fd:fa:8d:cd:de:42:7d:d3:b2:52:43:d9:
                    05:6f:7f:2e:7d:cf:9e:37:ae:dd:33:4a:72:27:06:
                    73:c8:2a:a2:35:67:e1:e0:68:2f:0c:a1:31:ea:38:
                    76:ac:64:40:6d:f9:b5:33:cb:e1:95:b2:59:d9:12:
                    d3:e6:c4:0f:64:ae:f3:91:4f:b4:98:4d:91:1f:40:
                    bb:6b:27:f0:94:e8:2c:7c:51:62:3d:db:ca:13:96:
                    94:0e:e0:06:34:a2:10:c7:7d:0b:e4:64:16:93:34:
                    a9:7e:b6:00:b4:26:72:36:37:26:72:7a:d3:ee:83:
                    dd:79:48:4d:fe:43:a3:6a:a1:65:09:c2:54:df:53:
                    fb:f7:2f:d8:f7:a5:df:40:a8:99:c8:c0:97:50:72:
                    a4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:2F:9F:C9:A6:37:24:42:48:EB:AA:A1:A1:02:3E:7D:3F:1A:E5:2A
            X509v3 Authority Key Identifier:
                keyid:35:25:DE:C2:C2:98:F9:8A:0A:0C:C8:88:E8:05:E0:1C:39:FD:63:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/323830343a6531633a3a2f33342d3334203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e1c::/34

    Signature Algorithm: sha256WithRSAEncryption
         60:03:35:38:4c:5f:68:de:a1:77:5b:fe:d7:9b:2b:c6:97:d0:
         84:22:39:99:fd:20:39:80:16:d0:a7:75:38:af:32:76:52:7b:
         58:b4:f5:2d:cc:f5:61:fb:fa:80:cc:0b:fa:c9:46:6d:c5:5c:
         ea:43:76:37:22:00:30:ba:21:27:a6:70:8d:8f:73:ab:6e:97:
         eb:e0:e8:2f:ef:99:7d:47:2f:b4:24:3e:0b:5e:38:8f:66:42:
         79:0b:46:88:09:52:1b:eb:93:e9:ba:f2:68:f6:7c:ca:c6:e0:
         3e:3c:60:50:ca:6c:fd:58:12:8e:2a:a4:12:a4:9b:ab:ca:78:
         67:4a:4b:00:52:ab:25:93:a7:f7:0f:39:4f:48:de:ef:5b:46:
         4c:5b:cf:b5:94:30:08:84:b7:d4:9d:ce:67:57:63:04:b2:f1:
         bf:80:ff:83:2c:93:19:0c:ca:14:a0:5d:06:8c:6d:5e:e4:b9:
         67:4c:e0:87:6c:32:a6:58:5a:c6:2e:49:c4:99:e1:02:a5:3b:
         de:48:35:3c:8c:f0:26:a6:74:2c:f9:95:0f:20:8f:09:07:24:
         b9:6a:08:53:17:62:60:bd:99:84:bf:33:2b:e1:48:b3:93:ce:
         46:b5:97:ba:7f:f8:24:3e:6a:08:7e:de:b8:01:0f:b7:51:25:
         20:63:5f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:46 2025 by rpki-client on console.sobornost.net