Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/2/323830343a333832383a383030303a3a2f33332d3333203d3e20323636343630.roa
File:                     323830343a333832383a383030303a3a2f33332d3333203d3e20323636343630.roa (raw, json)
Hash identifier:          OIUSBYHdiGmNllSLyRqx+FW1NvxEJD1NtYfqUAbduu8=
Subject key identifier:   75:42:D8:C8:FC:6B:EC:5B:61:7E:EB:2C:51:F7:29:87:F5:94:07:3F
Certificate issuer:       /CN=E7964E5BF1FF4D49D0A36FCF2B318EB7A64A26A3
Certificate serial:       15FB8F8DD299827567C84994F2F871BF45F13196
Authority key identifier: E7:96:4E:5B:F1:FF:4D:49:D0:A3:6F:CF:2B:31:8E:B7:A6:4A:26:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7964E5BF1FF4D49D0A36FCF2B318EB7A64A26A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/2/323830343a333832383a383030303a3a2f33332d3333203d3e20323636343630.roa
Signing time:             Tue 22 Apr 2025 17:52:53 +0000
ROA not before:           Tue 22 Apr 2025 17:47:53 +0000
ROA not after:            Tue 21 Apr 2026 17:52:53 +0000
asID:                     266460
IP address blocks:        2804:3828:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/2/E7964E5BF1FF4D49D0A36FCF2B318EB7A64A26A3.crl
                          rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/2/E7964E5BF1FF4D49D0A36FCF2B318EB7A64A26A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7964E5BF1FF4D49D0A36FCF2B318EB7A64A26A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 20:55:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:fb:8f:8d:d2:99:82:75:67:c8:49:94:f2:f8:71:bf:45:f1:31:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7964E5BF1FF4D49D0A36FCF2B318EB7A64A26A3
        Validity
            Not Before: Apr 22 17:47:53 2025 GMT
            Not After : Apr 21 17:52:53 2026 GMT
        Subject: CN=7542D8C8FC6BEC5B617EEB2C51F72987F594073F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:aa:97:8f:95:bf:a8:bd:c5:c5:61:aa:8c:f8:
                    bc:25:7f:bd:40:13:68:7b:70:8d:d9:38:1f:85:74:
                    e7:2a:33:07:3f:c8:d7:cc:5e:dd:2a:ff:43:a3:7c:
                    ab:f4:47:7e:13:53:be:2b:53:d4:19:43:3f:7d:23:
                    8b:93:9b:eb:0e:b9:f4:f7:f9:4a:7f:f7:47:4e:85:
                    ee:e5:c9:a0:08:b5:e3:02:37:a3:14:e7:41:6b:62:
                    dc:d5:cf:ec:88:a1:8d:b4:69:6a:8a:b4:43:a8:93:
                    02:ce:ba:2b:e9:5c:77:2b:2b:23:1f:26:76:be:45:
                    4d:cf:7f:66:4c:71:a8:64:73:f3:ca:2a:0e:85:62:
                    fe:d1:9a:a4:47:cd:b0:ab:06:2e:80:7f:72:61:87:
                    bd:17:5e:eb:33:ef:a2:87:81:9f:05:5a:23:d0:4f:
                    1b:3b:47:6e:99:b9:b1:07:45:b4:78:01:c0:95:89:
                    18:63:9f:23:ab:1c:e8:aa:da:8d:62:51:11:cd:8b:
                    ef:9b:ff:2f:b4:e4:cb:11:06:9d:e1:06:82:48:64:
                    8a:a4:10:20:0f:66:36:9f:ed:67:45:45:64:3d:f1:
                    d2:67:8f:07:4a:77:14:ac:96:7a:01:5b:c0:87:1f:
                    f8:cd:88:cc:ce:d3:a9:d3:82:09:38:c3:69:eb:6b:
                    d9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:42:D8:C8:FC:6B:EC:5B:61:7E:EB:2C:51:F7:29:87:F5:94:07:3F
            X509v3 Authority Key Identifier:
                keyid:E7:96:4E:5B:F1:FF:4D:49:D0:A3:6F:CF:2B:31:8E:B7:A6:4A:26:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/2/E7964E5BF1FF4D49D0A36FCF2B318EB7A64A26A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7964E5BF1FF4D49D0A36FCF2B318EB7A64A26A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/2/323830343a333832383a383030303a3a2f33332d3333203d3e20323636343630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3828:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         81:f8:bb:3a:21:15:b2:45:da:80:9c:a5:c8:bd:80:f3:7b:75:
         1c:a1:41:5f:74:d4:d2:fe:27:bc:48:21:b5:fe:ef:62:0c:2d:
         5c:03:6b:c2:c1:15:55:ba:3a:d8:f3:4d:63:97:44:02:7f:98:
         b7:d3:b4:e6:dd:ec:e3:a1:80:26:c6:2b:69:89:fc:d1:07:d3:
         48:09:ef:f8:82:7d:9f:3b:f1:aa:18:b9:84:54:f0:02:e3:c3:
         98:08:35:9c:c7:a0:0f:0d:51:e9:6d:f9:db:ba:e5:bc:a2:fe:
         55:40:63:5c:fc:35:8a:a9:37:37:8c:54:83:16:0e:ca:3d:f9:
         93:7e:24:94:4e:79:f2:37:d6:a1:67:93:77:81:9c:c9:9b:db:
         b4:7f:a5:81:4c:95:e4:05:f9:a9:34:23:0a:88:c8:a9:1d:6b:
         66:a6:e1:fe:ff:99:6f:33:0c:6d:0e:4d:0a:a6:9b:5b:8a:ad:
         cb:06:ed:54:16:07:8b:6f:8a:4a:8e:4f:eb:0a:0a:4a:20:c7:
         fc:17:8f:3d:ee:d2:3a:a7:6e:f6:9f:d3:40:4a:29:7c:86:8f:
         b5:eb:12:fe:c9:44:07:11:b1:c0:f0:b4:27:9f:3a:38:fe:c8:
         b5:03:8a:ae:cd:38:26:74:3c:78:12:14:98:46:78:8e:61:f6:
         63:29:e3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:34 2025 by rpki-client on console.sobornost.net