Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/323830343a376566343a383030303a3a2f33332d3333203d3e20323731363537.roa
File:                     323830343a376566343a383030303a3a2f33332d3333203d3e20323731363537.roa (raw, json)
Hash identifier:          q1S2ykZO+DLBq9BpmaiHto7G6DLecprh2FdgxsuvaaE=
Subject key identifier:   30:6E:80:52:FA:5A:06:10:AB:15:08:7E:23:BF:1B:5C:EF:B7:80:90
Certificate issuer:       /CN=2114B3B965382FA7393E772A6837B5B8D7173834
Certificate serial:       118D0421D0282470A6E1264D263B7247A97D67EF
Authority key identifier: 21:14:B3:B9:65:38:2F:A7:39:3E:77:2A:68:37:B5:B8:D7:17:38:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2114B3B965382FA7393E772A6837B5B8D7173834.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/323830343a376566343a383030303a3a2f33332d3333203d3e20323731363537.roa
Signing time:             Tue 22 Apr 2025 14:38:51 +0000
ROA not before:           Tue 22 Apr 2025 14:33:51 +0000
ROA not after:            Tue 21 Apr 2026 14:38:51 +0000
asID:                     271657
IP address blocks:        2804:7ef4:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/2114B3B965382FA7393E772A6837B5B8D7173834.crl
                          rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/2114B3B965382FA7393E772A6837B5B8D7173834.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2114B3B965382FA7393E772A6837B5B8D7173834.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 04:47:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:8d:04:21:d0:28:24:70:a6:e1:26:4d:26:3b:72:47:a9:7d:67:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2114B3B965382FA7393E772A6837B5B8D7173834
        Validity
            Not Before: Apr 22 14:33:51 2025 GMT
            Not After : Apr 21 14:38:51 2026 GMT
        Subject: CN=306E8052FA5A0610AB15087E23BF1B5CEFB78090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:63:ee:ab:3e:1e:d6:96:01:9a:c7:9a:14:0f:
                    be:0d:a2:39:13:1f:ff:cc:1f:d7:57:38:be:7c:9a:
                    ed:0c:3d:df:7e:06:95:e4:37:1d:93:e4:c7:2d:da:
                    59:84:50:f9:fc:1a:a5:67:02:8e:25:03:0c:69:f9:
                    26:51:c1:9c:32:e5:9f:9c:ea:f6:88:e1:21:07:d1:
                    89:69:60:af:cc:7f:f6:45:fd:c1:2d:21:2b:f3:28:
                    8b:49:36:ae:93:d2:90:32:6f:85:55:54:d0:7a:96:
                    fb:1c:ae:a5:e5:bc:45:6f:65:16:5e:b2:32:48:fb:
                    71:34:b0:9d:0b:13:e2:54:5e:f5:13:3b:c8:d9:7e:
                    dd:4b:8b:e8:30:81:2a:83:14:ef:ad:d0:c1:ec:95:
                    8f:2a:de:27:40:36:f2:a0:1e:ba:14:96:b0:95:c1:
                    ed:7a:93:31:91:6f:f5:3a:56:06:0e:0f:0c:4a:e8:
                    cc:d6:97:d0:96:80:cf:44:38:9f:27:5f:c3:72:c9:
                    ee:da:3f:5a:1f:53:f3:c0:fa:4e:ec:97:d2:63:21:
                    e1:33:fa:82:1f:30:f5:2d:04:6d:62:09:40:7b:c8:
                    65:a1:da:6b:ba:d1:69:57:d3:3c:1f:2c:9a:31:c9:
                    9d:af:1f:99:b3:04:99:f3:da:4f:6b:5a:16:09:c5:
                    9c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:6E:80:52:FA:5A:06:10:AB:15:08:7E:23:BF:1B:5C:EF:B7:80:90
            X509v3 Authority Key Identifier:
                keyid:21:14:B3:B9:65:38:2F:A7:39:3E:77:2A:68:37:B5:B8:D7:17:38:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/2114B3B965382FA7393E772A6837B5B8D7173834.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2114B3B965382FA7393E772A6837B5B8D7173834.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/323830343a376566343a383030303a3a2f33332d3333203d3e20323731363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ef4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         41:14:9d:f0:90:9b:89:d4:e6:77:61:2f:86:a1:cc:11:7d:c7:
         e1:fb:43:ab:22:1a:21:1c:f3:cb:cd:8c:b0:fc:31:21:da:46:
         2a:70:93:44:f2:eb:2b:dd:8d:7d:5b:29:d6:88:43:d5:a9:68:
         d7:20:28:af:cb:fd:48:d5:3b:a8:50:d4:ee:f5:14:16:93:26:
         3d:19:4a:ca:75:a0:b8:ef:45:c1:aa:61:f8:ca:54:67:51:29:
         92:ec:0c:24:9b:07:99:d0:f0:0f:62:fd:cf:74:81:2c:23:51:
         63:78:62:52:33:87:91:5a:d4:83:65:f7:c2:a6:af:d6:a9:7a:
         de:d8:d0:53:d8:b9:ee:59:21:79:78:4f:b7:ee:d8:0a:b2:3a:
         4c:2e:4a:dd:56:f8:ae:f0:81:8a:38:b0:02:fd:87:10:15:e6:
         f7:e8:aa:77:0e:e9:1d:1a:93:91:59:db:2a:37:71:62:16:f4:
         8b:d4:cb:76:1c:23:c3:0d:16:87:4f:66:8c:30:a6:63:7f:8f:
         22:eb:cf:d9:38:82:82:05:dd:96:cc:ce:e4:a0:f2:c5:8f:bf:
         1a:d7:39:51:a9:92:c5:f5:41:1c:51:79:df:ba:44:14:4f:db:
         dd:a8:0c:46:3a:87:b7:58:3f:92:52:81:10:e4:75:5e:ea:d2:
         be:65:66:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:15:08 2025 by rpki-client on console.sobornost.net