Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HabmY9bBBucx4XSrvZMKMH3Z1iWNWoquqibYBbnqamM6/1/323830343a6136343a3a2f33322d3334203d3e203532383933.roa
File:                     323830343a6136343a3a2f33322d3334203d3e203532383933.roa (raw, json)
Hash identifier:          X1LFdPVRZie/EBpbK5+nzbdn7YqwW5F9po6YIRYc8lk=
Subject key identifier:   90:35:97:E0:72:F0:D2:07:60:2F:7C:2C:9B:9F:DA:55:9B:01:C1:D9
Certificate issuer:       /CN=EB8194E305061AD55048DBA774FC26D3BF2E65E3
Certificate serial:       6210BE472F4D87309C1E0D24013C8E327A00B42C
Authority key identifier: EB:81:94:E3:05:06:1A:D5:50:48:DB:A7:74:FC:26:D3:BF:2E:65:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB8194E305061AD55048DBA774FC26D3BF2E65E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HabmY9bBBucx4XSrvZMKMH3Z1iWNWoquqibYBbnqamM6/1/323830343a6136343a3a2f33322d3334203d3e203532383933.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     52893
IP address blocks:        2804:a64::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HabmY9bBBucx4XSrvZMKMH3Z1iWNWoquqibYBbnqamM6/1/EB8194E305061AD55048DBA774FC26D3BF2E65E3.crl
                          rsync://rpki-repo.registro.br/repo/HabmY9bBBucx4XSrvZMKMH3Z1iWNWoquqibYBbnqamM6/1/EB8194E305061AD55048DBA774FC26D3BF2E65E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB8194E305061AD55048DBA774FC26D3BF2E65E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:10:be:47:2f:4d:87:30:9c:1e:0d:24:01:3c:8e:32:7a:00:b4:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB8194E305061AD55048DBA774FC26D3BF2E65E3
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:46:8b:88:4b:b6:d7:f7:6f:64:2a:eb:76:ad:
                    9a:ae:a3:fb:fa:e4:a3:db:e3:79:56:6b:c8:4e:73:
                    56:a4:c1:47:d1:3a:de:0d:c5:73:10:22:fa:75:d6:
                    48:29:71:77:a9:30:48:e0:32:f4:b8:e4:e1:be:1f:
                    04:34:64:fa:25:3b:8f:15:d9:08:cb:19:1b:5e:ab:
                    0b:1f:3e:18:38:1d:ff:f5:4d:f3:9d:d1:08:cc:50:
                    77:94:e9:a2:40:5c:f7:49:4a:11:3f:59:5a:0f:51:
                    90:3a:4d:5c:26:f9:c2:b7:f6:78:f0:a8:89:f3:eb:
                    13:60:bd:ac:d9:bd:41:e6:d8:66:ff:c4:c1:ef:38:
                    f8:5f:da:a5:6d:1a:ea:ba:e6:b5:11:45:8e:36:a8:
                    71:37:37:14:22:35:5f:9a:fe:61:d1:0b:a6:b6:d0:
                    8e:91:b0:36:05:e5:3c:d6:b5:46:96:9a:80:7f:4e:
                    e2:e1:17:d1:aa:2d:5e:be:b9:10:c2:7f:e0:8c:09:
                    51:b5:e2:f5:a2:16:2a:85:df:63:69:f4:04:e1:02:
                    dd:f3:e3:9e:c5:83:7a:f3:73:a9:67:26:ae:ca:8e:
                    3d:3b:21:bf:4f:2e:1a:f6:28:09:93:9d:93:63:ed:
                    ce:93:b8:d8:fe:bd:d2:0f:30:9e:25:64:c5:b2:de:
                    7f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:35:97:E0:72:F0:D2:07:60:2F:7C:2C:9B:9F:DA:55:9B:01:C1:D9
            X509v3 Authority Key Identifier:
                keyid:EB:81:94:E3:05:06:1A:D5:50:48:DB:A7:74:FC:26:D3:BF:2E:65:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HabmY9bBBucx4XSrvZMKMH3Z1iWNWoquqibYBbnqamM6/1/EB8194E305061AD55048DBA774FC26D3BF2E65E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB8194E305061AD55048DBA774FC26D3BF2E65E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HabmY9bBBucx4XSrvZMKMH3Z1iWNWoquqibYBbnqamM6/1/323830343a6136343a3a2f33322d3334203d3e203532383933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a64::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:52:fe:c7:64:b1:cf:65:d8:f5:0e:12:f5:60:23:db:b4:e7:
         9e:3a:72:4c:5f:7e:d1:30:f2:29:11:4e:29:c9:63:02:5e:3e:
         7f:2f:c7:97:56:30:3a:98:2e:d4:bf:f4:d1:17:44:99:aa:53:
         ae:80:3f:f5:6f:a3:eb:39:09:89:d9:e0:db:eb:a4:7f:02:66:
         42:3e:e2:40:ff:00:81:f8:bc:12:c9:0f:f5:14:b6:a7:9c:49:
         01:f3:67:dd:40:49:40:fb:f1:ab:6f:87:20:85:57:67:dd:da:
         23:1c:87:8d:08:87:7b:42:9b:8a:7e:1f:1e:ff:1c:0f:fa:a2:
         9c:e8:02:ce:5a:52:ac:d1:bf:a9:5c:ae:36:53:d2:69:08:d9:
         bd:62:7f:e0:ad:96:6a:1d:8b:53:26:7e:1a:22:2c:65:46:92:
         9e:e5:ac:76:4f:a7:6c:b1:45:ae:f9:a5:d0:e6:df:af:d1:1f:
         ae:a5:b0:89:0e:a7:a1:96:7e:0d:97:a3:ec:c6:ea:69:ae:eb:
         f2:3d:91:0d:b6:c4:63:99:44:91:f3:f5:13:3d:d6:6d:bf:04:
         68:25:a2:36:17:ef:36:ba:b7:53:3d:d5:cf:d8:3f:3f:c2:93:
         d0:2c:83:99:73:d7:ea:20:ec:ff:f3:a8:8e:3b:96:61:62:46:
         6c:0b:6d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:43 2025 by rpki-client on console.sobornost.net