Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/323830343a313131633a3a2f33322d313238203d3e203532383138.roa
File:                     323830343a313131633a3a2f33322d313238203d3e203532383138.roa (raw, json)
Hash identifier:          osh+3g38l3+Ahx/94DawphTjtSlIV4GG15x79A8UtaQ=
Subject key identifier:   AA:45:85:B6:6C:57:8C:62:FA:AA:14:C4:E4:3D:06:6C:C0:B7:4A:36
Certificate issuer:       /CN=5634BCD8031BCA068F888911F3AFF0838C89576F
Certificate serial:       34B1F0C184A7B32A0F6C32BFC6ED48E6610FDABA
Authority key identifier: 56:34:BC:D8:03:1B:CA:06:8F:88:89:11:F3:AF:F0:83:8C:89:57:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5634BCD8031BCA068F888911F3AFF0838C89576F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/323830343a313131633a3a2f33322d313238203d3e203532383138.roa
Signing time:             Fri 04 Apr 2025 14:02:22 +0000
ROA not before:           Fri 04 Apr 2025 13:57:22 +0000
ROA not after:            Fri 03 Apr 2026 14:02:22 +0000
asID:                     52818
IP address blocks:        2804:111c::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/5634BCD8031BCA068F888911F3AFF0838C89576F.crl
                          rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/5634BCD8031BCA068F888911F3AFF0838C89576F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5634BCD8031BCA068F888911F3AFF0838C89576F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 13:45:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:b1:f0:c1:84:a7:b3:2a:0f:6c:32:bf:c6:ed:48:e6:61:0f:da:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5634BCD8031BCA068F888911F3AFF0838C89576F
        Validity
            Not Before: Apr  4 13:57:22 2025 GMT
            Not After : Apr  3 14:02:22 2026 GMT
        Subject: CN=AA4585B66C578C62FAAA14C4E43D066CC0B74A36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:88:02:44:94:c7:21:45:4a:23:c8:1d:98:31:
                    1a:33:34:ac:b3:39:03:df:1e:12:72:33:ff:02:e2:
                    c1:97:b2:79:e1:3d:60:3d:ae:05:d6:5e:40:de:e9:
                    20:71:5b:76:79:3e:84:97:99:aa:8c:93:f7:c8:5c:
                    4c:e7:b6:60:b3:03:96:f7:42:ba:eb:6c:a4:97:92:
                    18:4a:62:b9:04:34:a3:5a:89:ae:ed:ad:3f:fb:95:
                    46:a2:89:05:55:83:cc:6c:3b:bf:25:1a:d8:ff:59:
                    a4:d6:e5:0c:1d:7c:cb:f9:ef:d1:3b:c1:39:2f:f1:
                    06:ba:fd:e4:79:c5:85:a8:1b:cd:5f:d9:77:b0:c3:
                    cb:02:c8:22:4e:0c:a8:ef:5e:8b:31:0a:26:46:8f:
                    a3:96:99:26:b2:02:2d:9a:cd:a5:30:03:f3:ba:0c:
                    63:c9:a5:33:e7:1e:04:b9:3c:09:a7:d6:ec:3f:b9:
                    77:5c:c6:91:3c:f1:7b:ad:39:18:62:62:e6:a1:43:
                    44:c1:35:18:ac:f1:eb:62:a5:8b:34:2e:4d:e6:66:
                    0c:2d:aa:da:cd:a8:af:c6:3f:32:b7:c0:78:cd:b1:
                    f3:28:a4:d8:a8:f9:f0:9d:f2:36:9d:cb:0e:f1:51:
                    fb:2b:59:6c:6a:15:65:a0:3a:7a:61:83:e9:c3:99:
                    3a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:45:85:B6:6C:57:8C:62:FA:AA:14:C4:E4:3D:06:6C:C0:B7:4A:36
            X509v3 Authority Key Identifier:
                keyid:56:34:BC:D8:03:1B:CA:06:8F:88:89:11:F3:AF:F0:83:8C:89:57:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/5634BCD8031BCA068F888911F3AFF0838C89576F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5634BCD8031BCA068F888911F3AFF0838C89576F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/323830343a313131633a3a2f33322d313238203d3e203532383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:111c::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:4d:f8:65:ae:c6:8d:29:15:e0:e9:1a:34:e8:3c:e8:ed:1a:
         68:93:fc:31:50:c0:40:2d:e5:93:41:b4:17:72:2b:e2:9e:4b:
         ee:da:d1:80:47:4f:eb:d5:28:b8:a9:e1:8d:64:07:22:1e:5e:
         2e:6a:a1:45:95:6f:80:b1:ad:07:37:bf:76:56:43:ba:38:92:
         5d:07:e0:be:73:4b:f1:8c:f3:ef:54:d2:9e:e6:81:2c:33:8a:
         b2:1e:49:6a:6c:b0:9b:9c:f7:56:f2:a5:ee:be:81:66:e3:ce:
         8d:88:0c:f9:ec:a7:10:89:ea:fd:5d:81:4c:5f:55:17:c5:95:
         14:5b:3b:ce:1b:82:70:19:13:cc:a2:53:2b:b7:ea:7b:bc:99:
         8c:0e:3c:00:9c:5c:0d:e1:95:eb:a7:a4:59:29:ec:65:d3:80:
         45:ec:d7:2f:8f:51:e6:97:67:44:84:52:76:ca:08:72:c1:fa:
         da:a7:49:04:46:41:00:f6:69:4f:98:df:59:e9:75:48:cd:13:
         74:f0:d4:a4:fe:ca:d6:26:77:e0:4d:19:f4:ec:0f:c3:82:a0:
         12:41:e1:e3:7d:89:06:34:f3:6d:f1:5e:ee:b0:42:d1:63:a1:
         e8:a8:45:fb:87:0e:84:d4:bd:a7:99:0b:3f:0e:e1:99:d8:d3:
         d4:00:bc:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:17 2025 by rpki-client on console.sobornost.net