Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BYdxeBDCKvqxU5gjqoqXi62on7CK9Ht26qgKKRPrZk8G/0/323830343a323635633a3a2f33322d3438203d3e20323634333239.roa
File:                     323830343a323635633a3a2f33322d3438203d3e20323634333239.roa (raw, json)
Hash identifier:          ltzmW9lfO6gqW9RIespLK4qp8cEtI8VI5lXxvzXyDOU=
Subject key identifier:   FA:5E:C7:00:89:C1:81:DE:A6:89:A3:4B:5E:DD:F8:36:0E:25:9B:43
Certificate issuer:       /CN=2E940954738793728401E2B3BA1BF1AE600FF21A
Certificate serial:       17A919E4AFFB2368C6B8EE37DE497E576EA942B8
Authority key identifier: 2E:94:09:54:73:87:93:72:84:01:E2:B3:BA:1B:F1:AE:60:0F:F2:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E940954738793728401E2B3BA1BF1AE600FF21A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BYdxeBDCKvqxU5gjqoqXi62on7CK9Ht26qgKKRPrZk8G/0/323830343a323635633a3a2f33322d3438203d3e20323634333239.roa
Signing time:             Fri 14 Mar 2025 17:15:26 +0000
ROA not before:           Fri 14 Mar 2025 17:10:26 +0000
ROA not after:            Fri 13 Mar 2026 17:15:26 +0000
asID:                     264329
IP address blocks:        2804:265c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BYdxeBDCKvqxU5gjqoqXi62on7CK9Ht26qgKKRPrZk8G/0/2E940954738793728401E2B3BA1BF1AE600FF21A.crl
                          rsync://rpki-repo.registro.br/repo/BYdxeBDCKvqxU5gjqoqXi62on7CK9Ht26qgKKRPrZk8G/0/2E940954738793728401E2B3BA1BF1AE600FF21A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E940954738793728401E2B3BA1BF1AE600FF21A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 00:47:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:a9:19:e4:af:fb:23:68:c6:b8:ee:37:de:49:7e:57:6e:a9:42:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E940954738793728401E2B3BA1BF1AE600FF21A
        Validity
            Not Before: Mar 14 17:10:26 2025 GMT
            Not After : Mar 13 17:15:26 2026 GMT
        Subject: CN=FA5EC70089C181DEA689A34B5EDDF8360E259B43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4c:15:66:b3:6c:39:85:ab:0b:a1:ab:c5:32:
                    dc:a5:8a:15:93:bc:98:16:fb:79:4a:01:f4:72:48:
                    a9:b1:9a:8f:56:7a:cf:c5:ed:bc:71:33:63:17:80:
                    1b:3c:f0:c7:a6:8d:ef:3f:15:cb:8d:3c:41:60:c0:
                    e5:46:eb:0c:0b:f5:60:c5:4a:e3:4e:b9:02:6a:e8:
                    03:e5:ac:47:d5:3a:91:8d:b0:85:a1:ed:b7:af:3d:
                    14:96:16:69:4e:ae:71:24:b6:17:79:85:03:3d:02:
                    4e:5e:42:2d:74:d9:74:e0:5d:c8:11:b4:a5:17:00:
                    3c:0d:f0:81:b8:c7:48:71:5d:b1:4e:56:eb:7f:16:
                    c5:b7:2e:db:aa:72:08:dc:f6:8a:60:b3:7d:2b:73:
                    a2:4c:94:20:5e:ea:05:aa:ed:dd:6a:43:e2:57:1b:
                    bb:fe:6d:d7:93:b4:89:64:bb:49:f5:c7:8b:20:05:
                    ba:0e:cb:f5:2b:9a:73:12:10:ef:2c:aa:90:3b:2c:
                    80:fb:4b:02:0d:06:4d:40:ef:88:85:db:3f:59:e4:
                    8f:94:98:5b:ce:b2:fa:3c:4e:9a:af:f9:30:15:4f:
                    56:fe:e6:45:2a:18:fe:64:2d:ec:af:fd:23:47:ff:
                    ec:42:93:f4:b3:b2:2d:9b:98:cb:aa:38:0b:6e:5e:
                    d8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:5E:C7:00:89:C1:81:DE:A6:89:A3:4B:5E:DD:F8:36:0E:25:9B:43
            X509v3 Authority Key Identifier:
                keyid:2E:94:09:54:73:87:93:72:84:01:E2:B3:BA:1B:F1:AE:60:0F:F2:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BYdxeBDCKvqxU5gjqoqXi62on7CK9Ht26qgKKRPrZk8G/0/2E940954738793728401E2B3BA1BF1AE600FF21A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E940954738793728401E2B3BA1BF1AE600FF21A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BYdxeBDCKvqxU5gjqoqXi62on7CK9Ht26qgKKRPrZk8G/0/323830343a323635633a3a2f33322d3438203d3e20323634333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:265c::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:db:b2:08:29:ab:e9:e8:9c:b6:f7:3a:57:9a:b3:63:ef:2d:
         1f:b2:6d:dc:45:60:95:9f:02:29:0c:88:c3:94:8c:2c:6f:8a:
         5c:6f:2b:cd:c4:45:43:ed:71:8c:76:c5:c4:be:c4:e0:b2:a8:
         4d:e7:55:68:b7:91:0f:a7:3e:03:fe:63:83:9e:6e:9d:78:15:
         12:33:9e:3c:b6:4c:a4:ec:e4:4d:43:d4:43:e5:01:ff:8c:c6:
         4c:a9:31:59:06:82:ae:17:d9:65:cd:6b:13:e9:6b:ee:a3:1c:
         5b:00:ac:0b:b3:96:69:b2:21:15:07:8c:ec:b8:91:88:27:72:
         2b:0a:63:0e:c6:d7:80:b9:46:ab:2f:0a:61:54:46:f9:6c:38:
         f0:f6:f5:fc:8f:24:99:0a:83:06:07:b7:06:b1:ce:ad:02:64:
         0e:e7:ef:a0:70:8a:a1:e6:f9:e7:3b:bd:4d:bb:c6:42:52:96:
         13:87:81:7e:34:90:66:f9:cb:16:4d:7a:e4:17:2e:b9:72:6b:
         ca:c1:c9:61:54:05:67:2f:c3:9e:7c:23:9b:f4:1e:0f:aa:53:
         25:09:80:02:f1:5f:8b:34:03:23:a1:e4:87:3c:d2:8b:a0:20:
         2e:dd:06:0b:8f:9f:59:83:e0:72:c0:7c:5b:fd:69:b3:7c:ca:
         a3:69:19:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:27 2025 by rpki-client on console.sobornost.net