Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/323830343a353635383a3a2f33322d3332203d3e20323637393932.roa
File:                     323830343a353635383a3a2f33322d3332203d3e20323637393932.roa (raw, json)
Hash identifier:          S4sXKTp555Gbl4DnkVa9zLLDuTk/AFczmb0KCL+a9Rw=
Subject key identifier:   B8:91:B0:13:79:4F:28:E3:F0:D1:19:EF:28:04:ED:B8:C1:1C:BF:51
Certificate issuer:       /CN=F241E143F0F3AEFE61D034C829AC452A653FD855
Certificate serial:       78414ABB1865E95ED99851CDE1F41304BE1A6BC4
Authority key identifier: F2:41:E1:43:F0:F3:AE:FE:61:D0:34:C8:29:AC:45:2A:65:3F:D8:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F241E143F0F3AEFE61D034C829AC452A653FD855.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/323830343a353635383a3a2f33322d3332203d3e20323637393932.roa
Signing time:             Tue 15 Apr 2025 16:25:56 +0000
ROA not before:           Tue 15 Apr 2025 16:20:56 +0000
ROA not after:            Tue 14 Apr 2026 16:25:56 +0000
asID:                     267992
IP address blocks:        2804:5658::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/F241E143F0F3AEFE61D034C829AC452A653FD855.crl
                          rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/F241E143F0F3AEFE61D034C829AC452A653FD855.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F241E143F0F3AEFE61D034C829AC452A653FD855.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:41:4a:bb:18:65:e9:5e:d9:98:51:cd:e1:f4:13:04:be:1a:6b:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F241E143F0F3AEFE61D034C829AC452A653FD855
        Validity
            Not Before: Apr 15 16:20:56 2025 GMT
            Not After : Apr 14 16:25:56 2026 GMT
        Subject: CN=B891B013794F28E3F0D119EF2804EDB8C11CBF51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ab:6b:44:fa:4f:41:0b:6a:2e:44:cd:97:21:
                    2a:b9:00:ee:71:10:42:d4:34:79:f5:6e:db:63:17:
                    ea:fe:0f:67:43:67:20:48:31:4d:91:a3:2e:c6:61:
                    60:58:a1:c2:f6:d6:01:be:ae:e2:51:a3:93:d4:3a:
                    37:33:df:fd:a6:ac:f1:81:59:d6:a2:81:3e:91:36:
                    fb:72:88:90:a5:63:0b:80:a7:29:e0:ce:90:37:df:
                    69:19:47:e4:b5:62:b7:3e:29:bf:77:6d:82:f0:87:
                    a4:3b:c4:96:e9:e5:df:f4:76:f3:d3:65:c7:a1:9a:
                    e1:5c:eb:50:5d:50:b8:9b:7c:2c:16:5e:cb:cd:59:
                    d1:3a:03:a7:b1:9e:26:b0:a6:10:25:df:f6:d5:1d:
                    f3:6c:0e:4c:40:9b:84:c7:7b:14:51:b0:fe:09:26:
                    16:8f:f9:85:81:d1:8d:aa:77:11:33:b5:26:5b:9f:
                    d5:2f:43:6f:3b:d4:ca:a6:68:48:b7:f0:f7:f4:54:
                    e0:37:52:7e:e4:5d:20:ce:2d:49:33:00:77:b8:b3:
                    81:c2:2d:03:1b:6e:85:28:24:71:a0:13:cc:7a:f6:
                    49:3c:96:58:14:16:6c:6a:b1:36:5c:d2:55:78:bd:
                    0a:9e:09:32:c3:6a:93:46:98:67:5f:91:da:31:fb:
                    9a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:91:B0:13:79:4F:28:E3:F0:D1:19:EF:28:04:ED:B8:C1:1C:BF:51
            X509v3 Authority Key Identifier:
                keyid:F2:41:E1:43:F0:F3:AE:FE:61:D0:34:C8:29:AC:45:2A:65:3F:D8:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/F241E143F0F3AEFE61D034C829AC452A653FD855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F241E143F0F3AEFE61D034C829AC452A653FD855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/323830343a353635383a3a2f33322d3332203d3e20323637393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5658::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:a9:ba:fb:17:03:58:8d:ac:86:c6:cf:2d:81:0b:72:1f:f3:
         71:88:34:17:88:51:7c:28:0f:0f:a2:4c:dc:25:54:02:73:ac:
         33:eb:73:06:78:ef:32:c8:f4:c0:1e:bb:3b:b7:6a:fa:f2:54:
         ed:c3:ff:2f:09:cf:92:7b:ff:27:41:48:32:a9:1c:e2:fc:27:
         a5:de:a9:b7:f1:14:be:8f:37:46:bd:c0:b7:7e:b2:36:10:37:
         29:a8:07:ac:28:da:e4:eb:5c:d7:1e:9e:52:ba:1b:73:ad:90:
         a1:48:39:ca:f8:3d:dc:3f:10:fe:e1:9f:b7:f0:9d:e1:db:5e:
         58:dc:d3:cf:cd:b7:0a:1a:41:7d:d4:da:4a:6a:14:65:c8:9b:
         d8:ad:04:59:d7:91:98:ed:19:24:5b:4c:1c:8f:dc:55:e3:b5:
         c4:7a:12:95:1e:c7:15:82:cb:2c:9a:31:05:4d:e3:b9:cd:f0:
         a5:01:28:52:c2:19:69:d8:2c:af:08:20:ab:09:53:a2:8e:b8:
         ab:1b:f9:be:dc:5e:3f:9f:2b:c2:66:f7:a2:80:c2:e8:f0:38:
         d6:de:b0:c3:8e:af:5f:37:bf:fb:4f:7c:7b:87:89:9e:f3:23:
         d0:c6:82:22:3c:da:41:f8:df:82:bd:8d:cd:d1:ba:89:e2:e1:
         62:df:ba:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:41 2025 by rpki-client on console.sobornost.net