Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7j43ErLcW2zRqG42zwCfM3fEXVv1dc8boSqcjJm8nsUr/0/323830343a353563383a3a2f33322d3438203d3e20323637393536.roa
File:                     323830343a353563383a3a2f33322d3438203d3e20323637393536.roa (raw, json)
Hash identifier:          GaBzursvjtQPxJOKRTk3AYE18rK4Nnp7g4T4atWUlqQ=
Subject key identifier:   C0:DE:30:9A:EE:6D:74:E2:54:36:6A:FE:44:8D:F4:25:5F:7C:29:B4
Certificate issuer:       /CN=1E4DBF67BA6C544FEB0BF88A714C80A4417D6641
Certificate serial:       704BB4516042920C905AC590C60044B09E4BA961
Authority key identifier: 1E:4D:BF:67:BA:6C:54:4F:EB:0B:F8:8A:71:4C:80:A4:41:7D:66:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E4DBF67BA6C544FEB0BF88A714C80A4417D6641.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7j43ErLcW2zRqG42zwCfM3fEXVv1dc8boSqcjJm8nsUr/0/323830343a353563383a3a2f33322d3438203d3e20323637393536.roa
Signing time:             Wed 23 Apr 2025 12:12:01 +0000
ROA not before:           Wed 23 Apr 2025 12:07:01 +0000
ROA not after:            Wed 22 Apr 2026 12:12:01 +0000
asID:                     267956
IP address blocks:        2804:55c8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7j43ErLcW2zRqG42zwCfM3fEXVv1dc8boSqcjJm8nsUr/0/1E4DBF67BA6C544FEB0BF88A714C80A4417D6641.crl
                          rsync://rpki-repo.registro.br/repo/7j43ErLcW2zRqG42zwCfM3fEXVv1dc8boSqcjJm8nsUr/0/1E4DBF67BA6C544FEB0BF88A714C80A4417D6641.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E4DBF67BA6C544FEB0BF88A714C80A4417D6641.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 16:22:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:4b:b4:51:60:42:92:0c:90:5a:c5:90:c6:00:44:b0:9e:4b:a9:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E4DBF67BA6C544FEB0BF88A714C80A4417D6641
        Validity
            Not Before: Apr 23 12:07:01 2025 GMT
            Not After : Apr 22 12:12:01 2026 GMT
        Subject: CN=C0DE309AEE6D74E254366AFE448DF4255F7C29B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4d:75:28:d1:88:fc:6a:fc:10:42:39:82:e2:
                    9a:b0:66:1e:b8:77:43:fb:67:6e:6c:2e:e3:fc:7a:
                    43:d9:f1:0a:7b:d0:4a:46:88:5b:db:cd:1d:40:b9:
                    c8:6b:d8:84:2a:9d:39:02:ac:dd:da:64:d1:a5:da:
                    5a:0f:6c:f3:e6:23:a9:2f:d3:63:f2:4a:c0:eb:cc:
                    1d:39:2c:fb:9e:1a:d8:6e:b6:bf:62:32:e9:ba:57:
                    7d:4d:29:e0:dc:20:2d:ec:03:c1:63:0c:3d:fe:45:
                    02:03:88:0a:0d:73:18:48:f3:e4:17:35:d7:e3:cd:
                    26:86:11:0d:fe:08:7d:bc:d1:59:55:80:a6:b5:b5:
                    c3:10:46:ee:2c:f9:0c:3e:07:09:29:b4:70:c2:ed:
                    76:d8:43:c5:cb:13:66:f3:5b:74:e8:84:39:5e:8e:
                    57:96:da:fa:af:71:da:c3:23:2f:94:cc:bd:89:cd:
                    47:50:f0:d8:fa:0b:0d:b6:ac:66:03:1b:80:56:b1:
                    be:8d:4f:be:f2:a0:6e:a1:bb:3f:ed:57:34:6a:2c:
                    82:16:c4:30:3b:af:ee:a4:05:aa:af:69:7e:d4:f0:
                    40:ff:00:88:8c:f9:aa:0a:52:a3:81:7a:b2:c9:f1:
                    9d:db:be:d0:5f:ea:af:a8:d4:7f:c2:8a:a6:cf:f9:
                    7f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:DE:30:9A:EE:6D:74:E2:54:36:6A:FE:44:8D:F4:25:5F:7C:29:B4
            X509v3 Authority Key Identifier:
                keyid:1E:4D:BF:67:BA:6C:54:4F:EB:0B:F8:8A:71:4C:80:A4:41:7D:66:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7j43ErLcW2zRqG42zwCfM3fEXVv1dc8boSqcjJm8nsUr/0/1E4DBF67BA6C544FEB0BF88A714C80A4417D6641.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E4DBF67BA6C544FEB0BF88A714C80A4417D6641.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7j43ErLcW2zRqG42zwCfM3fEXVv1dc8boSqcjJm8nsUr/0/323830343a353563383a3a2f33322d3438203d3e20323637393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:55c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:e3:32:7d:28:86:92:d4:b8:bb:5a:87:e1:07:4b:a9:f2:0f:
         7f:03:38:64:7f:a7:20:e6:7c:a9:7c:8e:3c:8b:56:6a:80:f3:
         23:c1:20:80:7b:8c:24:10:fe:a4:02:8f:e9:3a:0f:0e:1e:73:
         a5:f4:c3:22:be:7b:99:56:8e:f7:a6:0a:08:6c:40:6b:b8:32:
         ae:92:d0:6f:5d:2d:8b:7d:a7:9a:06:b5:af:ed:68:06:09:9d:
         18:72:e9:a0:db:a9:08:a4:3e:91:ed:4d:25:09:14:11:b2:97:
         74:21:fd:5c:b4:f2:63:7b:58:79:b3:a2:27:39:f1:c2:ef:91:
         9f:c3:c4:83:08:3a:41:46:8e:5c:c6:6c:1e:bc:ee:8d:2f:20:
         f7:46:a6:c7:0c:d3:03:42:1c:a4:08:67:b0:8d:da:6d:d8:cd:
         19:c2:05:a4:9b:b6:86:c0:5f:25:0c:94:a9:f3:57:a4:11:d2:
         04:17:82:97:e0:36:cb:20:1d:4e:48:25:90:ec:0f:b4:05:48:
         f7:e0:1d:d4:99:d3:34:63:0e:ed:f0:14:c5:f0:c3:cb:ae:85:
         07:78:d3:a5:40:69:08:42:f5:ee:4a:9f:ec:47:15:16:95:be:
         5a:49:d3:2c:f6:2d:d9:5d:03:57:12:74:e1:13:8d:87:a6:46:
         07:05:f8:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:37:56 2025 by rpki-client on console.sobornost.net