Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/323830343a313230303a3a2f33322d313238203d3e20323633343530.roa
File:                     323830343a313230303a3a2f33322d313238203d3e20323633343530.roa (raw, json)
Hash identifier:          xf5V30GrFuexySATg7rUcR1aWqQpdI2Wh0yrR3PUOME=
Subject key identifier:   64:06:F2:20:43:42:57:36:8B:03:77:C6:EF:C9:5E:EB:DC:82:90:D1
Certificate issuer:       /CN=5E82705FF857324984E1087AAFCCE6BD46657C71
Certificate serial:       451614125A2489AC2A95309651C4DD0344922105
Authority key identifier: 5E:82:70:5F:F8:57:32:49:84:E1:08:7A:AF:CC:E6:BD:46:65:7C:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E82705FF857324984E1087AAFCCE6BD46657C71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/323830343a313230303a3a2f33322d313238203d3e20323633343530.roa
Signing time:             Wed 05 Feb 2025 13:10:40 +0000
ROA not before:           Wed 05 Feb 2025 13:05:40 +0000
ROA not after:            Wed 04 Feb 2026 13:10:40 +0000
asID:                     263450
IP address blocks:        2804:1200::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/5E82705FF857324984E1087AAFCCE6BD46657C71.crl
                          rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/5E82705FF857324984E1087AAFCCE6BD46657C71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E82705FF857324984E1087AAFCCE6BD46657C71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:16:14:12:5a:24:89:ac:2a:95:30:96:51:c4:dd:03:44:92:21:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E82705FF857324984E1087AAFCCE6BD46657C71
        Validity
            Not Before: Feb  5 13:05:40 2025 GMT
            Not After : Feb  4 13:10:40 2026 GMT
        Subject: CN=6406F220434257368B0377C6EFC95EEBDC8290D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0d:a6:52:26:7c:27:73:bc:a6:7c:1f:72:70:
                    df:b1:d3:d5:b7:0e:23:4e:83:a3:2c:07:45:e1:ca:
                    8b:3f:4f:3c:91:bd:68:62:e5:6c:24:aa:3e:2d:fc:
                    ce:25:ed:9e:e7:99:b0:4f:55:91:db:a3:16:61:0a:
                    1f:09:eb:5c:58:42:e7:10:ac:08:24:66:81:e7:df:
                    79:18:ca:df:7e:f8:be:ee:0a:e6:69:3d:6f:5e:2b:
                    79:13:27:56:9b:91:7e:73:34:86:bf:f8:b7:fe:4e:
                    df:0b:34:2f:fc:3a:92:4a:69:0a:57:2c:3e:08:5e:
                    75:64:b5:22:6c:b7:60:fd:0b:cd:1b:25:25:91:d1:
                    ea:f4:16:73:ca:9a:c9:46:c0:b2:6b:52:8e:14:cb:
                    8f:a9:58:f1:4d:e0:5a:f3:ce:ac:9c:e3:52:9d:d6:
                    2b:23:4c:9a:55:1b:e0:70:d9:a6:b5:d7:69:87:12:
                    82:28:a8:5e:0f:ab:28:59:c4:3a:4e:da:30:bc:55:
                    54:34:09:ed:1a:67:a9:11:46:46:ee:4c:f5:be:a4:
                    64:bc:18:cf:c0:44:91:ab:f3:65:d0:6e:3c:15:7e:
                    16:2c:d5:75:01:13:d6:55:ae:3e:94:fa:4d:e0:37:
                    a3:32:5d:33:cc:be:d7:4f:2c:8a:d7:6a:0c:d6:fd:
                    d8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:06:F2:20:43:42:57:36:8B:03:77:C6:EF:C9:5E:EB:DC:82:90:D1
            X509v3 Authority Key Identifier:
                keyid:5E:82:70:5F:F8:57:32:49:84:E1:08:7A:AF:CC:E6:BD:46:65:7C:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/5E82705FF857324984E1087AAFCCE6BD46657C71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E82705FF857324984E1087AAFCCE6BD46657C71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/323830343a313230303a3a2f33322d313238203d3e20323633343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1200::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:6e:bc:dd:e8:98:93:29:b2:5a:2d:42:b3:e1:a3:1b:e6:6f:
         0a:5e:ae:2f:85:41:8b:28:0e:ae:22:c0:a2:b8:87:1e:c4:83:
         fc:15:a4:d2:6b:4b:dd:5b:48:d6:eb:87:94:e7:ee:c5:30:90:
         5a:13:6b:51:1c:35:2a:9e:1f:fe:35:13:39:5b:44:3f:55:23:
         76:40:08:c3:bf:24:54:75:6c:f9:ab:42:42:f1:56:5c:a3:b7:
         ba:81:99:e1:bc:3f:e7:66:3b:fd:42:e4:a7:96:f2:82:a3:de:
         e5:54:2d:5e:14:32:b0:e6:c2:53:af:0f:a7:13:3a:64:55:fa:
         9b:f2:2c:37:63:a4:8e:36:a4:9d:13:fd:88:02:24:83:ca:b8:
         b1:cd:f7:78:5b:52:29:e5:02:aa:f6:97:3f:f8:fc:37:56:38:
         de:34:a0:d4:bb:2c:9f:f4:08:26:20:b8:0f:0d:73:fb:1c:6b:
         5c:60:d0:2e:33:06:51:9b:2f:18:83:27:29:8c:aa:5a:3f:9d:
         40:89:b0:6f:45:c9:e2:ed:45:99:07:c0:7b:60:32:d1:e4:9a:
         84:71:0e:ec:bc:95:d8:71:1e:5a:97:af:fa:4a:ca:60:1e:fd:
         85:3c:36:33:68:fd:e5:7f:96:89:d1:d6:cd:7d:c5:58:e1:7a:
         15:b5:60:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:26:57 2025 by rpki-client on console.sobornost.net