Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/323830343a3335303a3a2f33322d313238203d3e203533323434.roa
File:                     323830343a3335303a3a2f33322d313238203d3e203533323434.roa (raw, json)
Hash identifier:          8ovl1TEqOzmmV1gx5eNwhIh4Vue6fwAh+yEFL9HgGBY=
Subject key identifier:   9B:45:34:BC:CE:0B:B6:F6:97:A1:2C:35:91:21:5C:AE:36:C0:64:36
Certificate issuer:       /CN=F5A757E49A3EE62BEE5F32163DBC154299BDFBA6
Certificate serial:       7BA5465A50127F257D3FFF7626C49FC93B1D9CB3
Authority key identifier: F5:A7:57:E4:9A:3E:E6:2B:EE:5F:32:16:3D:BC:15:42:99:BD:FB:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/323830343a3335303a3a2f33322d313238203d3e203533323434.roa
Signing time:             Thu 06 Mar 2025 01:31:13 +0000
ROA not before:           Thu 06 Mar 2025 01:26:13 +0000
ROA not after:            Thu 05 Mar 2026 01:31:13 +0000
asID:                     53244
IP address blocks:        2804:350::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.crl
                          rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 05:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:a5:46:5a:50:12:7f:25:7d:3f:ff:76:26:c4:9f:c9:3b:1d:9c:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5A757E49A3EE62BEE5F32163DBC154299BDFBA6
        Validity
            Not Before: Mar  6 01:26:13 2025 GMT
            Not After : Mar  5 01:31:13 2026 GMT
        Subject: CN=9B4534BCCE0BB6F697A12C3591215CAE36C06436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:55:00:b0:1b:8c:9b:91:a8:13:05:40:67:91:
                    43:21:db:4c:5a:b4:b1:dc:86:c6:b0:1f:bb:bc:84:
                    bd:6c:37:18:a9:42:9d:b4:3c:2c:ac:93:e2:34:f1:
                    9a:e3:09:90:67:58:fa:7e:d7:5d:3a:8a:7f:e6:e9:
                    ad:0b:3d:99:00:e0:68:f8:bf:4d:91:8b:56:6a:33:
                    8f:75:57:e1:ef:bc:6a:c0:04:ab:29:2c:c3:68:f8:
                    a5:b6:8d:76:0c:67:34:e4:63:f8:9a:3b:1d:75:d5:
                    ee:e5:0a:b0:7b:f1:ec:57:87:28:7c:23:ce:f4:32:
                    86:88:65:08:9f:56:c5:79:e8:fc:6f:76:16:dd:9a:
                    64:3f:f8:13:d0:be:c2:8f:94:b9:c4:01:a7:26:d8:
                    96:b8:e5:c0:61:fb:1a:76:63:d4:d0:df:33:39:72:
                    1e:53:34:90:f3:59:8b:61:13:34:a4:d3:d8:a0:ea:
                    e5:12:35:7a:24:31:9c:73:8c:62:63:16:a6:c8:09:
                    a8:61:45:02:ec:1e:07:3b:18:10:f5:32:b2:e0:3e:
                    c5:c9:1b:7e:a6:bd:2e:ec:67:44:01:1c:0c:f8:fa:
                    94:12:5d:20:79:09:70:22:93:f4:05:a9:e3:fe:56:
                    16:4e:c6:88:55:be:67:e7:bd:28:63:07:c4:cf:b7:
                    ef:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:45:34:BC:CE:0B:B6:F6:97:A1:2C:35:91:21:5C:AE:36:C0:64:36
            X509v3 Authority Key Identifier:
                keyid:F5:A7:57:E4:9A:3E:E6:2B:EE:5F:32:16:3D:BC:15:42:99:BD:FB:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/323830343a3335303a3a2f33322d313238203d3e203533323434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:350::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:60:ba:72:f2:b2:a9:59:cc:3c:de:99:1e:eb:0a:fe:74:b3:
         68:1e:a4:23:f6:07:af:df:bd:cf:68:0a:91:53:9b:ae:26:41:
         91:11:9e:bd:6b:18:1e:fc:65:ce:a9:7e:45:2f:8c:ef:81:e3:
         d7:89:1b:2a:7e:1d:12:62:9a:1c:31:57:a2:6e:af:2d:45:6f:
         e2:06:0c:4f:66:46:13:ea:a3:b6:76:1e:f5:bb:59:68:77:8f:
         bb:52:0e:90:73:77:5f:16:01:c4:27:4c:40:62:26:e8:c2:7a:
         91:0b:20:2b:d3:68:95:cb:92:21:8b:71:db:15:bd:dd:e7:ab:
         5a:37:fe:0c:f9:9c:c4:84:fc:e0:b2:80:d4:b6:10:f0:98:c1:
         8c:77:91:b1:e4:78:cb:46:58:9f:65:df:b8:b9:a7:60:68:f3:
         cc:a0:f5:34:38:e9:c6:a8:fb:92:1a:4c:31:80:c1:8e:c4:26:
         84:f6:a0:e1:f4:7f:d0:13:5b:71:8d:e8:d4:df:d0:a1:48:3e:
         3b:54:b3:a5:35:87:e4:0e:9f:c9:2f:3a:05:51:5b:80:23:1d:
         62:2d:1c:fe:c1:20:db:f4:14:2c:6e:17:eb:1e:b7:86:2f:e7:
         c7:8c:80:61:16:ad:16:a8:b5:44:0d:d6:69:19:35:0c:9b:2b:
         36:44:9b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:46:32 2025 by rpki-client on console.sobornost.net