Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/1/323030313a313238303a323030303a3a2f33362d3438203d3e203136363835.roa
File:                     323030313a313238303a323030303a3a2f33362d3438203d3e203136363835.roa (raw, json)
Hash identifier:          ghIwMIGtcnGKX2vCTcIAKBD/IZ7AEOm7sad7u8upJeA=
Subject key identifier:   1E:70:30:EF:61:64:85:AF:1C:B1:1C:EB:76:B9:68:3C:44:FA:39:C7
Certificate issuer:       /CN=6EE5DC8E816AC86198A0379BE60A62BE9F390792
Certificate serial:       1AFA7FB1B62AD92E782509198ABB84D41739D208
Authority key identifier: 6E:E5:DC:8E:81:6A:C8:61:98:A0:37:9B:E6:0A:62:BE:9F:39:07:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EE5DC8E816AC86198A0379BE60A62BE9F390792.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/1/323030313a313238303a323030303a3a2f33362d3438203d3e203136363835.roa
Signing time:             Wed 05 Mar 2025 23:18:47 +0000
ROA not before:           Wed 05 Mar 2025 23:13:47 +0000
ROA not after:            Wed 04 Mar 2026 23:18:47 +0000
asID:                     16685
IP address blocks:        2001:1280:2000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/1/6EE5DC8E816AC86198A0379BE60A62BE9F390792.crl
                          rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/1/6EE5DC8E816AC86198A0379BE60A62BE9F390792.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EE5DC8E816AC86198A0379BE60A62BE9F390792.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 19:42:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:fa:7f:b1:b6:2a:d9:2e:78:25:09:19:8a:bb:84:d4:17:39:d2:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5DC8E816AC86198A0379BE60A62BE9F390792
        Validity
            Not Before: Mar  5 23:13:47 2025 GMT
            Not After : Mar  4 23:18:47 2026 GMT
        Subject: CN=1E7030EF616485AF1CB11CEB76B9683C44FA39C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a6:dd:d3:59:8b:c1:09:28:cd:89:61:ad:d5:
                    dd:a7:55:79:81:38:3d:ff:fd:b8:77:9d:da:ca:46:
                    26:4c:14:e5:c9:56:4b:5d:e7:dc:85:e6:57:91:2f:
                    b4:6b:89:ad:3e:dc:eb:aa:0b:76:88:9d:77:ae:ca:
                    fa:e4:2d:7b:62:19:88:b2:52:7c:b6:24:9f:30:bf:
                    ca:0a:9c:07:52:a9:c9:89:a6:3c:1c:80:d5:5e:e2:
                    d4:15:95:73:f1:86:63:72:6c:0e:6f:62:cf:7d:a6:
                    50:bf:21:1e:ed:4a:92:d9:a9:9f:62:14:b1:4f:b1:
                    e2:99:09:c0:30:f8:6c:c1:4b:09:d6:ec:3e:4e:26:
                    4d:1f:1c:82:e5:67:15:a6:e3:df:17:a9:2d:8e:48:
                    d8:e2:28:c8:71:7a:d4:ed:f5:14:ac:9c:e4:b6:0b:
                    cb:88:d9:5e:7e:9a:5c:1c:36:3c:bb:69:65:7a:1e:
                    75:90:cb:b1:dd:08:b9:2a:70:85:3b:62:bd:66:36:
                    17:cb:2b:00:6f:2a:f9:df:41:7c:c2:ec:3c:c1:89:
                    4f:dc:0c:e9:37:9b:43:92:e0:d0:70:9f:65:64:98:
                    3b:08:6a:fd:14:78:fe:ff:04:4c:73:d4:37:1d:33:
                    0d:f6:2a:dd:88:3a:a9:4a:08:19:66:0e:49:1d:3e:
                    c1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:70:30:EF:61:64:85:AF:1C:B1:1C:EB:76:B9:68:3C:44:FA:39:C7
            X509v3 Authority Key Identifier:
                keyid:6E:E5:DC:8E:81:6A:C8:61:98:A0:37:9B:E6:0A:62:BE:9F:39:07:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/1/6EE5DC8E816AC86198A0379BE60A62BE9F390792.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EE5DC8E816AC86198A0379BE60A62BE9F390792.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/1/323030313a313238303a323030303a3a2f33362d3438203d3e203136363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1280:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         53:69:9d:42:b7:b2:89:a2:cc:25:b2:e9:8c:34:21:05:f9:a3:
         5d:82:dd:4a:ff:c1:19:6c:2c:7d:85:19:ee:9d:f9:f4:4f:8f:
         4a:33:de:7f:3d:73:35:fb:76:f7:7b:cb:bd:cb:16:15:c5:62:
         50:aa:d4:c4:6a:d1:c4:11:e9:af:e8:fa:7d:ba:06:00:0e:d9:
         0e:49:4f:f9:98:47:4e:a2:ae:d4:46:2e:a5:df:c3:ec:0f:9a:
         6f:a3:c7:ff:21:1e:76:fc:b5:dc:c4:33:92:86:0f:48:22:a5:
         52:b1:f5:48:ac:ab:3e:15:08:86:72:5f:9c:d4:15:d3:7d:b8:
         fa:8c:03:f2:da:62:39:fa:a0:dd:88:90:2d:a0:03:cf:d9:04:
         51:63:5c:85:f8:0e:55:59:92:c5:9c:22:f4:d1:bc:c5:3e:05:
         e8:fe:ec:23:c9:53:ef:27:61:a7:ea:4f:27:0d:ce:03:98:46:
         82:fd:eb:60:f1:8f:f8:b1:9d:0e:72:1e:7c:c9:2c:31:55:c1:
         cc:30:a8:24:be:0b:c2:71:91:3f:ee:aa:de:6e:30:5f:e1:29:
         12:b6:51:cf:35:8c:95:7d:90:b5:52:da:ea:cc:59:ee:c1:48:
         0a:a1:48:9f:59:ab:c2:08:fb:8a:ac:be:e9:1a:74:d3:f1:f2:
         1f:ad:5c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:50 2025 by rpki-client on console.sobornost.net