Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/1/323830343a343931343a3a2f33322d3438203d3e20323637313633.roa
File:                     323830343a343931343a3a2f33322d3438203d3e20323637313633.roa (raw, json)
Hash identifier:          eq0PcSeiO5odYM2D6uiUlk4JYMLbb/z82YD2kS4iIxk=
Subject key identifier:   B2:6F:08:67:2B:6B:FC:6C:A2:86:32:F0:E7:25:9D:B6:43:35:DA:61
Certificate issuer:       /CN=2ED5E473D72A6D301514B818C3D2A94A5E387474
Certificate serial:       5E2A60FA458B059045917DD740091D381BE59E4B
Authority key identifier: 2E:D5:E4:73:D7:2A:6D:30:15:14:B8:18:C3:D2:A9:4A:5E:38:74:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED5E473D72A6D301514B818C3D2A94A5E387474.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/1/323830343a343931343a3a2f33322d3438203d3e20323637313633.roa
Signing time:             Thu 06 Mar 2025 19:52:28 +0000
ROA not before:           Thu 06 Mar 2025 19:47:28 +0000
ROA not after:            Thu 05 Mar 2026 19:52:28 +0000
asID:                     267163
IP address blocks:        2804:4914::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/1/2ED5E473D72A6D301514B818C3D2A94A5E387474.crl
                          rsync://rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/1/2ED5E473D72A6D301514B818C3D2A94A5E387474.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED5E473D72A6D301514B818C3D2A94A5E387474.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 20:41:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:2a:60:fa:45:8b:05:90:45:91:7d:d7:40:09:1d:38:1b:e5:9e:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ED5E473D72A6D301514B818C3D2A94A5E387474
        Validity
            Not Before: Mar  6 19:47:28 2025 GMT
            Not After : Mar  5 19:52:28 2026 GMT
        Subject: CN=B26F08672B6BFC6CA28632F0E7259DB64335DA61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:2a:1d:68:09:b6:14:d4:d1:37:d8:a0:f1:10:
                    51:2a:53:63:de:d4:97:8f:93:e8:96:db:ce:b5:16:
                    a7:db:cd:2c:8b:56:bb:8c:f8:98:20:c2:01:72:99:
                    e4:8d:9c:3a:31:39:6f:b6:e7:82:59:c4:27:e8:68:
                    fe:cf:d3:0f:02:50:b4:ea:3f:e4:42:7f:60:cf:88:
                    cb:d4:dc:dc:1e:ca:3f:81:20:75:73:b3:cd:b5:bd:
                    2a:9a:79:2d:ed:05:05:96:d5:75:73:5c:a7:28:69:
                    6e:0b:eb:1e:38:47:14:79:45:e2:88:ae:0d:13:9b:
                    5c:e7:9b:36:28:02:19:61:bc:3f:6e:3a:5c:ab:c0:
                    37:43:fe:7b:76:cc:bf:b1:4f:54:75:e3:6c:dd:04:
                    16:e6:65:b2:50:83:84:d0:d4:d4:fd:9e:b9:f0:35:
                    d8:6d:33:19:1a:49:a7:6b:93:a7:16:6d:d7:d5:c9:
                    ce:f5:7c:7e:5d:4e:f8:0e:29:e0:df:fa:2b:c8:a0:
                    ad:7d:55:3e:1a:e9:30:a7:62:55:45:36:79:c6:56:
                    8c:07:bb:cc:04:3e:6c:8a:5b:82:32:af:eb:8a:05:
                    54:5a:4c:3a:26:8c:10:d9:cd:aa:9f:8a:9e:2f:a7:
                    0c:02:90:59:cb:ce:07:aa:d7:25:f2:76:9a:80:ac:
                    d2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:6F:08:67:2B:6B:FC:6C:A2:86:32:F0:E7:25:9D:B6:43:35:DA:61
            X509v3 Authority Key Identifier:
                keyid:2E:D5:E4:73:D7:2A:6D:30:15:14:B8:18:C3:D2:A9:4A:5E:38:74:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/1/2ED5E473D72A6D301514B818C3D2A94A5E387474.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED5E473D72A6D301514B818C3D2A94A5E387474.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/1/323830343a343931343a3a2f33322d3438203d3e20323637313633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4914::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:d5:a7:63:ec:d5:23:89:54:6e:fc:f0:6a:65:02:e7:3c:87:
         f1:8b:15:5a:67:7f:9a:9d:f4:5d:b0:77:0c:8b:86:70:81:d8:
         57:4c:02:24:02:af:2d:dd:6a:6f:fc:f6:87:12:10:ae:86:ba:
         2d:c1:60:cd:53:3b:e0:6d:eb:49:3f:69:5c:e2:94:fd:a9:58:
         0c:f2:8e:7e:8c:d4:43:94:92:92:ab:28:31:d6:02:4e:1c:42:
         32:26:75:6e:5c:70:1e:af:89:b8:8f:8e:92:71:71:ec:f0:1e:
         e3:73:c1:d6:ee:df:8f:36:d4:68:44:a6:04:ec:cc:09:c7:4d:
         47:6d:f4:7a:73:4d:c8:f6:24:af:22:ad:5e:5d:2b:7d:47:e8:
         15:d5:cb:e3:38:a2:27:8f:01:8d:55:a7:31:ae:55:da:85:3b:
         a8:3d:66:6e:e8:ad:29:23:7b:44:ac:19:2b:be:78:9a:a4:a8:
         bc:47:85:cc:e2:ef:67:b5:63:2b:fd:f8:40:5e:09:1d:b9:2b:
         a1:9b:04:ea:c8:6f:1b:48:54:b6:9b:68:f1:d5:ab:89:b9:2a:
         74:54:83:05:61:23:ae:24:91:02:72:91:99:d9:90:d2:c4:13:
         0c:6c:16:7d:39:26:6d:b6:dc:52:24:07:b5:a7:95:46:01:22:
         a4:77:2f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:39 2025 by rpki-client on console.sobornost.net