Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/1/323830343a3264303a3a2f33322d313238203d3e203533323330.roa
File:                     323830343a3264303a3a2f33322d313238203d3e203533323330.roa (raw, json)
Hash identifier:          MmXfa+Y4KAJLPTxK+yLaU8RXUFA2H2UfRH/3UGfX6zw=
Subject key identifier:   6E:D9:05:14:78:11:04:7D:4A:98:D6:9B:77:94:4F:57:5A:95:4E:4F
Certificate issuer:       /CN=98504EF12C8DFCB2080B1982C7232BD80D712E62
Certificate serial:       48B4E7C288B9DF169189EEB3818E9C4DFC278522
Authority key identifier: 98:50:4E:F1:2C:8D:FC:B2:08:0B:19:82:C7:23:2B:D8:0D:71:2E:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98504EF12C8DFCB2080B1982C7232BD80D712E62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/1/323830343a3264303a3a2f33322d313238203d3e203533323330.roa
Signing time:             Thu 06 Mar 2025 07:42:20 +0000
ROA not before:           Thu 06 Mar 2025 07:37:20 +0000
ROA not after:            Thu 05 Mar 2026 07:42:20 +0000
asID:                     53230
IP address blocks:        2804:2d0::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/1/98504EF12C8DFCB2080B1982C7232BD80D712E62.crl
                          rsync://rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/1/98504EF12C8DFCB2080B1982C7232BD80D712E62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98504EF12C8DFCB2080B1982C7232BD80D712E62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:b4:e7:c2:88:b9:df:16:91:89:ee:b3:81:8e:9c:4d:fc:27:85:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98504EF12C8DFCB2080B1982C7232BD80D712E62
        Validity
            Not Before: Mar  6 07:37:20 2025 GMT
            Not After : Mar  5 07:42:20 2026 GMT
        Subject: CN=6ED905147811047D4A98D69B77944F575A954E4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4f:da:5d:5b:7f:b9:35:07:ab:93:a7:0c:3d:
                    03:c1:54:d4:3b:87:4e:bb:bf:c1:0c:96:5c:32:22:
                    63:ee:f4:71:4c:aa:f0:45:33:8e:fc:b6:27:f9:e9:
                    4d:39:2d:46:19:5a:1a:4d:88:1e:9d:73:e7:00:fe:
                    fd:03:e3:76:55:62:f9:03:e7:2b:bc:94:56:d1:be:
                    a0:78:22:34:d7:aa:43:dd:5b:fc:13:06:d6:e5:f2:
                    62:b4:6f:c9:49:a1:7d:81:c5:24:43:ae:83:6e:c5:
                    c5:3d:62:95:cb:69:57:62:9f:62:54:1f:1c:b4:05:
                    41:7b:69:86:89:db:a5:1c:7e:60:b7:e8:4a:19:97:
                    ac:5f:7d:bc:ce:ec:70:15:84:f0:cd:3d:a8:36:4e:
                    32:6e:ef:64:28:2d:07:02:fd:e9:2a:bb:66:1e:cb:
                    fb:93:7c:8a:74:db:12:aa:a6:02:1f:8e:63:2f:b2:
                    25:82:c9:bf:d3:16:be:db:c8:06:f8:7c:d7:97:ed:
                    dc:37:c8:11:7b:72:9e:11:dd:c3:4f:30:a7:8d:b1:
                    21:97:8f:39:aa:3a:1a:e4:04:01:89:08:9f:6c:6a:
                    00:4b:bf:44:87:71:8d:70:44:24:88:32:a4:27:f1:
                    34:e5:0a:65:f9:25:88:61:ef:23:c5:de:c3:57:24:
                    a8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:D9:05:14:78:11:04:7D:4A:98:D6:9B:77:94:4F:57:5A:95:4E:4F
            X509v3 Authority Key Identifier:
                keyid:98:50:4E:F1:2C:8D:FC:B2:08:0B:19:82:C7:23:2B:D8:0D:71:2E:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/1/98504EF12C8DFCB2080B1982C7232BD80D712E62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98504EF12C8DFCB2080B1982C7232BD80D712E62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/1/323830343a3264303a3a2f33322d313238203d3e203533323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:a1:2f:7c:6b:66:f5:d2:03:09:b5:23:0c:ac:7c:56:75:9a:
         aa:2e:95:85:12:c9:b8:1d:0b:b4:b6:a6:72:0e:bc:08:fc:c2:
         12:0c:cd:63:39:71:1b:08:90:e6:b5:cc:7d:8e:6c:4a:fa:b6:
         dc:73:63:06:a2:f6:74:4f:fa:6e:3c:f4:06:ab:70:94:87:27:
         fd:fc:d7:21:7f:cb:7e:98:8b:2d:90:2f:fd:11:ec:08:3b:70:
         d0:f6:c8:42:1e:a9:8e:5c:2b:c8:6f:0e:bb:66:90:da:94:e2:
         95:cc:4a:0e:7b:54:b3:31:b9:6c:8f:06:a2:f5:71:6b:19:ea:
         45:9f:d9:d5:1f:56:9d:40:42:bd:97:9c:b6:1c:84:d8:a9:fd:
         db:ee:ef:1b:af:5e:52:2b:76:5b:0e:cf:70:3a:ec:39:56:bf:
         29:f5:2e:dc:1b:fe:f8:a2:fe:e0:fa:1b:64:b2:b5:e4:4b:c0:
         51:84:40:d7:6f:45:ae:82:c4:4e:56:f9:35:7c:0a:4b:f3:fe:
         93:40:da:15:6a:32:af:87:56:2c:fe:06:0c:d2:e3:ce:6f:74:
         f5:3c:80:aa:83:bc:0e:99:26:b2:43:4a:1e:bf:a6:bd:f1:fb:
         68:b6:9a:99:cc:d2:61:9c:ed:5e:7b:fc:15:d9:3a:ea:e1:7b:
         80:83:43:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:47 2025 by rpki-client on console.sobornost.net