Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/323830343a6531633a633030303a3a2f33342d3334203d3e203532353435.roa
File:                     323830343a6531633a633030303a3a2f33342d3334203d3e203532353435.roa (raw, json)
Hash identifier:          g5WB0/bz8+x0QWPhnQ0HSTSOq2QsI8CfxoD7a5W+RRc=
Subject key identifier:   A0:58:47:84:4D:A6:87:DE:05:45:33:6E:5F:B0:2E:0B:5F:11:B6:01
Certificate issuer:       /CN=3525DEC2C298F98A0A0CC888E805E01C39FD63D7
Certificate serial:       3ABA95AF3F5C05C2B450A32EBBE2D1AA6A86ACA9
Authority key identifier: 35:25:DE:C2:C2:98:F9:8A:0A:0C:C8:88:E8:05:E0:1C:39:FD:63:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/323830343a6531633a633030303a3a2f33342d3334203d3e203532353435.roa
Signing time:             Thu 06 Mar 2025 02:06:27 +0000
ROA not before:           Thu 06 Mar 2025 02:01:27 +0000
ROA not after:            Thu 05 Mar 2026 02:06:27 +0000
asID:                     52545
IP address blocks:        2804:e1c:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.crl
                          rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 20:21:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:ba:95:af:3f:5c:05:c2:b4:50:a3:2e:bb:e2:d1:aa:6a:86:ac:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3525DEC2C298F98A0A0CC888E805E01C39FD63D7
        Validity
            Not Before: Mar  6 02:01:27 2025 GMT
            Not After : Mar  5 02:06:27 2026 GMT
        Subject: CN=A05847844DA687DE0545336E5FB02E0B5F11B601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:75:34:f9:f3:cd:b3:e8:19:6f:fd:39:67:18:
                    c8:3c:34:c4:4e:c7:a6:52:44:c1:4e:f4:1a:95:77:
                    7b:c9:7b:11:9e:4d:42:a6:d1:07:86:91:20:9e:a8:
                    38:e1:76:cf:65:0e:68:a3:fd:c3:11:48:d3:fc:7b:
                    df:7b:d0:d7:1f:40:53:21:f1:9a:6d:cf:fa:86:f9:
                    8e:a9:b5:87:7f:69:68:52:f8:70:c4:2c:0b:e0:6b:
                    63:a1:e7:a1:03:d1:0a:77:46:a4:4a:51:cf:01:4b:
                    77:fd:a7:5f:f0:11:e9:c8:4b:64:d3:96:36:e6:8b:
                    1d:af:1e:e1:4f:41:3f:b8:75:fd:25:03:86:05:2f:
                    70:4f:a1:4a:d8:37:2e:22:42:7b:bc:2d:57:21:8d:
                    a4:a0:02:ce:09:c2:ab:a4:fb:bb:2e:1a:91:99:1a:
                    6a:47:99:3b:99:4e:3a:26:69:92:5d:ab:69:c2:65:
                    c4:80:1c:dd:fd:e6:7b:9b:40:22:b5:fe:68:11:9d:
                    17:1e:eb:92:6c:e4:31:dd:e2:c3:7e:6b:2a:44:f7:
                    c9:4c:2c:ef:e5:0d:28:97:57:02:a9:b3:c2:e9:ad:
                    de:ac:5c:13:c0:bf:61:33:bb:f7:aa:54:4b:47:81:
                    a0:d2:d1:bc:6e:37:9f:05:0b:bb:cb:c3:53:7d:43:
                    02:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:58:47:84:4D:A6:87:DE:05:45:33:6E:5F:B0:2E:0B:5F:11:B6:01
            X509v3 Authority Key Identifier:
                keyid:35:25:DE:C2:C2:98:F9:8A:0A:0C:C8:88:E8:05:E0:1C:39:FD:63:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/323830343a6531633a633030303a3a2f33342d3334203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e1c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         29:87:26:eb:ed:42:59:74:fc:a7:6d:ce:30:37:29:cb:ff:3c:
         e3:31:bc:18:21:01:08:b2:23:1a:33:30:c7:5b:68:30:38:71:
         50:b9:9b:1c:bc:18:69:38:98:9f:52:55:7e:97:c6:c7:94:20:
         0f:d5:d1:4b:92:d5:40:99:5e:f8:55:9f:f5:63:d8:f4:c1:d4:
         c0:9d:ec:8f:42:ff:cb:aa:81:22:c2:2d:10:b0:74:58:5e:cc:
         46:7c:8e:ff:41:0e:76:be:bf:fc:0f:27:a9:3c:d2:21:fd:f1:
         a2:bb:83:3c:28:62:57:cd:d2:a5:d1:5f:ed:52:54:be:ad:f5:
         e8:44:7c:f4:1c:55:ad:bc:7d:b7:53:88:e2:4e:f8:11:ce:78:
         5e:20:f2:43:3b:98:c8:cd:1b:df:31:d2:ed:f0:f9:4f:82:73:
         f9:04:02:62:d2:ae:6b:ad:48:36:50:de:d1:ac:dd:1e:d8:db:
         2d:01:a1:81:e5:25:66:ae:35:cd:66:0a:27:ae:da:bf:ef:9a:
         e7:aa:a2:57:1b:43:bc:71:ef:52:6c:11:c0:be:72:1d:f2:9d:
         e8:3f:2a:34:45:12:3f:9c:d2:b8:52:38:8c:ab:06:0d:2a:db:
         ae:d9:81:30:e4:a9:f9:1a:62:fc:b4:92:a3:c8:ab:13:ca:0b:
         c4:a4:81:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:46 2025 by rpki-client on console.sobornost.net