Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/323830343a346130343a3a2f33322d3332203d3e203533313536.roa
File:                     323830343a346130343a3a2f33322d3332203d3e203533313536.roa (raw, json)
Hash identifier:          lB5aNAsLL6MpMJ3agpObACF0BSSieY3YRIfYXy8REyY=
Subject key identifier:   5D:E9:A0:93:80:C9:E1:1F:7B:E4:3B:EA:A0:68:40:66:19:D9:DC:D7
Certificate issuer:       /CN=BED400A73F58C91A8818D8830C03AD69A939B9B0
Certificate serial:       5F74574C5307FE1B71A88E69DB848B634D3F64C0
Authority key identifier: BE:D4:00:A7:3F:58:C9:1A:88:18:D8:83:0C:03:AD:69:A9:39:B9:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BED400A73F58C91A8818D8830C03AD69A939B9B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/323830343a346130343a3a2f33322d3332203d3e203533313536.roa
Signing time:             Thu 03 Apr 2025 22:33:29 +0000
ROA not before:           Thu 03 Apr 2025 22:28:29 +0000
ROA not after:            Thu 02 Apr 2026 22:33:29 +0000
asID:                     53156
IP address blocks:        2804:4a04::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/BED400A73F58C91A8818D8830C03AD69A939B9B0.crl
                          rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/BED400A73F58C91A8818D8830C03AD69A939B9B0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BED400A73F58C91A8818D8830C03AD69A939B9B0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:74:57:4c:53:07:fe:1b:71:a8:8e:69:db:84:8b:63:4d:3f:64:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BED400A73F58C91A8818D8830C03AD69A939B9B0
        Validity
            Not Before: Apr  3 22:28:29 2025 GMT
            Not After : Apr  2 22:33:29 2026 GMT
        Subject: CN=5DE9A09380C9E11F7BE43BEAA068406619D9DCD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:8f:46:cd:47:f3:78:fe:a0:0b:3c:68:9f:79:
                    8b:bc:3b:a8:f5:79:5d:a8:fd:6b:e5:ce:f3:ba:65:
                    b4:3b:05:43:d6:3e:7f:cd:8e:69:ec:90:da:ea:b4:
                    5a:86:3c:56:6f:a0:60:bb:50:83:63:2f:84:9f:b5:
                    c9:7f:66:64:81:fa:71:9c:14:d8:aa:f4:79:50:74:
                    08:64:62:e8:61:e6:14:19:0b:b6:f0:34:57:8a:f1:
                    53:04:51:9e:6b:84:f6:9c:6b:81:17:3d:56:f5:68:
                    1b:74:ce:a8:2c:04:10:5d:6c:4f:74:83:c7:c3:23:
                    fd:11:4e:40:3d:98:8f:b9:ce:6d:63:2e:19:b8:39:
                    89:68:ae:08:be:03:a8:11:2b:ec:74:af:5f:52:61:
                    81:e4:22:b8:ae:2d:eb:0c:fd:5f:bc:b4:02:cc:f5:
                    00:b8:09:9c:1f:db:be:6f:7d:c6:78:6c:99:58:f5:
                    6e:aa:f2:99:d3:1b:d2:0b:ba:1c:ba:86:58:93:c7:
                    6f:64:ac:d4:6e:39:32:5d:21:12:2e:ad:49:7e:2e:
                    dc:f4:73:e8:3e:57:a0:63:92:ac:09:67:11:5f:e9:
                    9b:7e:45:12:3f:a4:1b:2e:5b:08:3e:d0:ec:b7:a9:
                    ee:f7:43:35:36:6e:f1:cb:b7:17:58:c4:15:29:47:
                    06:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:E9:A0:93:80:C9:E1:1F:7B:E4:3B:EA:A0:68:40:66:19:D9:DC:D7
            X509v3 Authority Key Identifier:
                keyid:BE:D4:00:A7:3F:58:C9:1A:88:18:D8:83:0C:03:AD:69:A9:39:B9:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/BED400A73F58C91A8818D8830C03AD69A939B9B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BED400A73F58C91A8818D8830C03AD69A939B9B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/323830343a346130343a3a2f33322d3332203d3e203533313536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a04::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:05:a5:79:f0:da:66:88:19:16:e8:e6:b0:59:bd:6a:13:c7:
         31:da:9d:1b:ed:62:37:23:02:39:49:d5:e4:fb:7c:ee:04:4b:
         ed:ff:e0:b9:ac:25:0f:45:b5:11:d7:38:cb:51:ec:fd:c4:98:
         35:dc:16:b2:9a:6d:99:41:6f:12:12:12:16:fa:27:8e:e6:d5:
         f5:e5:f3:27:87:cd:45:49:c5:70:d9:d8:c6:fc:d9:dd:46:ff:
         8a:f5:e7:e7:dc:11:8b:46:fb:1a:99:73:c9:6b:53:1d:29:0e:
         96:aa:68:11:d9:3c:c0:b6:3d:89:d4:f5:9a:63:9c:9f:c4:e2:
         fd:9c:5a:ed:7a:16:60:a7:05:31:d7:8c:4d:45:94:d9:14:c3:
         ef:ce:94:2f:c4:d4:47:60:e4:a8:cf:61:ba:b4:f3:36:e3:31:
         61:b0:2d:6b:6b:cc:80:8f:df:bb:0b:1d:45:1e:d4:b5:24:fd:
         25:c0:63:f3:4e:80:7d:ae:3c:20:fd:05:14:e5:bc:7b:0d:ce:
         76:5c:7d:1c:43:f4:9b:6a:fe:90:7b:32:df:96:b6:35:6f:d6:
         29:c3:fe:70:24:4f:7d:e1:ac:dd:e2:89:05:67:78:0c:02:7d:
         3d:99:8a:b1:4f:bb:dc:66:9f:d6:21:65:a1:dd:81:d3:e2:17:
         a3:a9:ea:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:16 2025 by rpki-client on console.sobornost.net