Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HMB57AGjN59A311ttLmEW5ScpaqYnK7rdRq3PVW3WqqY/0/323830343a353865383a3a2f33322d313238203d3e20323638313537.roa
File:                     323830343a353865383a3a2f33322d313238203d3e20323638313537.roa (raw, json)
Hash identifier:          OU8BysWn04Vw4x1gVBW2TcuCMT9H/BN4P7JbHYazGvs=
Subject key identifier:   04:3E:02:49:58:A3:3A:A5:9C:EA:41:CA:43:78:DC:2E:7D:3C:ED:66
Certificate issuer:       /CN=B78D12505DFB9EF85E934BA596A45C5630CC2195
Certificate serial:       659B3C014265C2BB2E629B2E92765AB6A26499CB
Authority key identifier: B7:8D:12:50:5D:FB:9E:F8:5E:93:4B:A5:96:A4:5C:56:30:CC:21:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B78D12505DFB9EF85E934BA596A45C5630CC2195.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HMB57AGjN59A311ttLmEW5ScpaqYnK7rdRq3PVW3WqqY/0/323830343a353865383a3a2f33322d313238203d3e20323638313537.roa
Signing time:             Fri 25 Apr 2025 17:01:10 +0000
ROA not before:           Fri 25 Apr 2025 16:56:10 +0000
ROA not after:            Fri 24 Apr 2026 17:01:10 +0000
asID:                     268157
IP address blocks:        2804:58e8::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HMB57AGjN59A311ttLmEW5ScpaqYnK7rdRq3PVW3WqqY/0/B78D12505DFB9EF85E934BA596A45C5630CC2195.crl
                          rsync://rpki-repo.registro.br/repo/HMB57AGjN59A311ttLmEW5ScpaqYnK7rdRq3PVW3WqqY/0/B78D12505DFB9EF85E934BA596A45C5630CC2195.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B78D12505DFB9EF85E934BA596A45C5630CC2195.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 13:40:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:9b:3c:01:42:65:c2:bb:2e:62:9b:2e:92:76:5a:b6:a2:64:99:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B78D12505DFB9EF85E934BA596A45C5630CC2195
        Validity
            Not Before: Apr 25 16:56:10 2025 GMT
            Not After : Apr 24 17:01:10 2026 GMT
        Subject: CN=043E024958A33AA59CEA41CA4378DC2E7D3CED66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2f:51:c9:55:ff:82:ad:31:87:3d:c9:b1:4d:
                    96:08:72:35:e6:16:4b:22:3f:83:78:6d:36:d9:33:
                    01:0e:a8:c7:ff:bb:51:4d:64:98:58:6e:53:0b:65:
                    4e:57:f3:9f:1b:2b:88:c9:c3:3d:e9:c1:23:de:5e:
                    65:8a:02:da:2d:97:1d:a3:1d:72:3e:71:db:84:94:
                    63:42:18:90:1a:cb:5e:46:36:46:ca:1c:c5:d7:d2:
                    e6:e4:10:67:6c:4b:9e:39:07:76:8c:8b:3c:7c:bd:
                    70:75:cf:c9:1a:d5:37:b8:bb:70:9c:9b:31:f6:2c:
                    a6:ff:20:85:9f:9c:80:76:eb:df:20:fc:02:3c:bf:
                    75:41:9e:3a:31:78:d2:fc:8b:7a:37:86:25:a3:af:
                    59:2a:1a:15:61:b7:7d:9a:03:af:d8:4d:18:0e:dd:
                    6d:61:01:f2:a1:dd:7c:8b:bc:e1:cc:bb:44:56:4f:
                    4c:8b:0a:ad:9d:c2:cf:60:17:a6:d7:16:9d:fc:04:
                    b0:dd:e2:5f:2a:71:0c:fb:ba:77:f7:65:d5:c3:52:
                    ec:58:d3:25:6e:07:24:52:b8:8f:f7:a7:0c:05:9f:
                    1d:26:1c:7f:aa:5f:d2:7b:ea:49:74:3d:95:f3:e8:
                    dc:62:3f:ef:45:1c:d0:14:c5:1d:da:76:04:8f:d8:
                    ff:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:3E:02:49:58:A3:3A:A5:9C:EA:41:CA:43:78:DC:2E:7D:3C:ED:66
            X509v3 Authority Key Identifier:
                keyid:B7:8D:12:50:5D:FB:9E:F8:5E:93:4B:A5:96:A4:5C:56:30:CC:21:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HMB57AGjN59A311ttLmEW5ScpaqYnK7rdRq3PVW3WqqY/0/B78D12505DFB9EF85E934BA596A45C5630CC2195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B78D12505DFB9EF85E934BA596A45C5630CC2195.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMB57AGjN59A311ttLmEW5ScpaqYnK7rdRq3PVW3WqqY/0/323830343a353865383a3a2f33322d313238203d3e20323638313537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:58e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:e3:27:9a:a9:7c:cc:87:38:93:8e:01:e7:0b:09:b9:94:02:
         13:ee:c4:00:54:95:1c:f7:f4:61:9c:c8:a7:55:84:17:84:c6:
         47:69:fd:52:b2:f2:1a:d5:fd:ef:d6:44:11:70:7f:c8:40:71:
         d0:5f:e5:bf:2a:a7:08:38:cd:8c:b9:ff:75:d1:94:10:f3:aa:
         97:7e:71:d1:cc:b8:b7:c1:7f:f9:e4:47:c2:e8:c5:0a:51:f0:
         40:92:7f:58:74:c1:41:c6:40:ea:ff:f3:96:ec:f0:20:a3:f7:
         b8:fc:58:d1:0a:87:77:b2:48:15:bd:77:9f:7d:79:40:df:50:
         d8:6c:ff:9c:ea:a8:4d:99:f3:9c:7b:45:70:6c:0b:e7:16:d7:
         33:b8:04:88:dd:16:c5:e4:f6:df:d0:b1:6e:a8:cd:3d:ee:cb:
         df:51:4b:86:af:6e:15:bb:21:c0:72:79:b1:a9:1b:f7:3d:af:
         95:04:c1:18:59:b3:d4:b2:f3:80:29:c9:a3:c7:eb:43:56:b0:
         57:3f:d1:27:3c:e4:30:12:c0:79:c5:7e:d7:64:07:24:b3:fd:
         3f:16:83:25:07:21:ca:c7:b2:75:44:10:7a:84:4f:15:f1:26:
         fb:1e:bf:70:95:7d:22:37:d3:73:e2:c4:5d:f2:85:c7:d5:4f:
         7c:a5:26:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:37:25 2025 by rpki-client on console.sobornost.net