Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HabmY9bBBucx4XSrvZMKMH3Z1iWNWoquqibYBbnqamM6/1/323830343a6136343a383030303a3a2f34302d3430203d3e203532383933.roa
File:                     323830343a6136343a383030303a3a2f34302d3430203d3e203532383933.roa (raw, json)
Hash identifier:          3DEbnNtA0VTgm7sp333R+4GG+gkx6GxnHtshBHokszg=
Subject key identifier:   D3:61:E1:45:A5:29:51:74:33:B8:FB:39:67:43:8C:47:E8:70:0C:79
Certificate issuer:       /CN=EB8194E305061AD55048DBA774FC26D3BF2E65E3
Certificate serial:       5AE1216D073E0A19A6F5EAE8DB8BD230522CFB88
Authority key identifier: EB:81:94:E3:05:06:1A:D5:50:48:DB:A7:74:FC:26:D3:BF:2E:65:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB8194E305061AD55048DBA774FC26D3BF2E65E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HabmY9bBBucx4XSrvZMKMH3Z1iWNWoquqibYBbnqamM6/1/323830343a6136343a383030303a3a2f34302d3430203d3e203532383933.roa
Signing time:             Fri 21 Mar 2025 05:00:00 +0000
ROA not before:           Fri 21 Mar 2025 04:55:00 +0000
ROA not after:            Fri 20 Mar 2026 05:00:00 +0000
asID:                     52893
IP address blocks:        2804:a64:8000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HabmY9bBBucx4XSrvZMKMH3Z1iWNWoquqibYBbnqamM6/1/EB8194E305061AD55048DBA774FC26D3BF2E65E3.crl
                          rsync://rpki-repo.registro.br/repo/HabmY9bBBucx4XSrvZMKMH3Z1iWNWoquqibYBbnqamM6/1/EB8194E305061AD55048DBA774FC26D3BF2E65E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB8194E305061AD55048DBA774FC26D3BF2E65E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:e1:21:6d:07:3e:0a:19:a6:f5:ea:e8:db:8b:d2:30:52:2c:fb:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB8194E305061AD55048DBA774FC26D3BF2E65E3
        Validity
            Not Before: Mar 21 04:55:00 2025 GMT
            Not After : Mar 20 05:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:82:0e:32:f3:74:3d:48:e4:90:2b:96:aa:7f:
                    0c:de:58:81:ee:83:29:02:53:66:9f:09:b0:c3:ee:
                    2d:e7:6d:8e:0e:8e:b1:55:35:65:25:cd:73:d7:23:
                    0b:76:b1:05:a3:fc:e8:63:c3:9d:df:6d:d5:95:f8:
                    7b:0d:df:a0:53:80:93:23:37:87:03:8f:20:13:88:
                    d6:f0:b3:1a:ca:6a:63:36:b7:95:95:1f:da:1d:0d:
                    4d:44:44:ab:1c:73:e6:80:8c:60:4c:d0:fe:87:57:
                    36:f1:34:bb:05:d9:e6:c5:9d:4b:e5:31:13:d9:2a:
                    4a:28:fc:12:d4:dc:a4:86:a9:6a:e6:be:00:5a:d6:
                    d9:05:24:52:3b:6f:8e:de:80:89:f1:7d:8d:e9:32:
                    14:24:8a:21:0f:ef:86:16:a0:81:2c:28:71:b9:60:
                    0a:15:71:bf:b4:38:2c:ef:09:b9:3b:e0:a0:46:de:
                    a5:d3:66:5b:d6:80:23:77:c2:1e:83:5f:eb:80:04:
                    68:90:5c:9f:dd:54:60:71:e0:04:e1:12:35:e6:5f:
                    f0:07:4e:64:04:cd:52:d3:fe:94:6a:97:3d:bf:b9:
                    84:ce:cb:7b:14:58:41:25:e1:60:e7:7d:e6:11:f5:
                    e5:c4:7e:89:e9:52:83:8b:3c:dc:6e:28:46:79:ef:
                    f0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:61:E1:45:A5:29:51:74:33:B8:FB:39:67:43:8C:47:E8:70:0C:79
            X509v3 Authority Key Identifier:
                keyid:EB:81:94:E3:05:06:1A:D5:50:48:DB:A7:74:FC:26:D3:BF:2E:65:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HabmY9bBBucx4XSrvZMKMH3Z1iWNWoquqibYBbnqamM6/1/EB8194E305061AD55048DBA774FC26D3BF2E65E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB8194E305061AD55048DBA774FC26D3BF2E65E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HabmY9bBBucx4XSrvZMKMH3Z1iWNWoquqibYBbnqamM6/1/323830343a6136343a383030303a3a2f34302d3430203d3e203532383933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a64:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         3e:ae:e7:96:03:b6:5a:6d:69:1c:74:3d:f4:8d:03:3c:70:61:
         66:61:a5:fb:cf:56:c1:a8:4d:e0:65:4d:9d:b8:44:8d:7b:75:
         23:6e:02:fd:ac:47:66:a8:4b:6d:2f:fb:3d:e6:05:17:e9:d4:
         c3:d7:52:0e:b6:34:78:21:f5:45:82:08:03:ad:02:9b:e3:b3:
         b8:46:e8:82:de:f3:ff:fd:1d:ff:70:1d:3c:01:dc:0a:94:86:
         fd:3e:53:f5:26:c7:f7:cf:df:de:f7:a9:43:6a:d8:3e:5d:54:
         83:81:33:97:54:4e:d7:2d:dd:ac:fc:54:dc:c6:25:50:0e:78:
         e6:37:35:e5:97:53:fe:8f:d9:00:e9:87:ea:c6:69:4e:59:82:
         0b:74:52:21:69:45:8a:bc:1f:36:9c:60:c4:6e:09:46:e4:c4:
         bd:e9:9d:30:75:c3:dc:2e:32:95:6d:4d:db:d4:ad:68:67:e7:
         0a:de:83:b8:df:ea:45:61:73:5a:82:87:ef:94:ce:f1:1a:8b:
         61:74:46:ef:97:77:61:5b:b3:cb:5a:b8:46:76:25:2c:d6:78:
         ee:c9:c0:9a:fa:2c:0d:68:32:4f:52:4c:28:05:20:9d:80:9e:
         f8:b3:6a:58:9d:a6:6c:a0:fd:d1:0d:70:ba:a1:de:ba:e2:93:
         73:22:e7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:43 2025 by rpki-client on console.sobornost.net