Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/323830343a343330343a3a2f33322d3332203d3e20323637353433.roa
File:                     323830343a343330343a3a2f33322d3332203d3e20323637353433.roa (raw, json)
Hash identifier:          7mTGxBcJmB0cXKah+UHKsduoO+SpzBlH0SwtKtwt3pY=
Subject key identifier:   32:77:24:13:42:33:0C:1F:D5:43:42:1A:EF:1B:AE:D6:B6:29:B3:3C
Certificate issuer:       /CN=33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B
Certificate serial:       222DF7F190B23EC25589B408597DCCF24280F106
Authority key identifier: 33:EA:A1:AC:A3:A6:97:8A:EC:2D:2D:F4:D2:9E:B4:B3:59:B3:F6:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/323830343a343330343a3a2f33322d3332203d3e20323637353433.roa
Signing time:             Thu 06 Mar 2025 04:46:46 +0000
ROA not before:           Thu 06 Mar 2025 04:41:46 +0000
ROA not after:            Thu 05 Mar 2026 04:46:46 +0000
asID:                     267543
IP address blocks:        2804:4304::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.crl
                          rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 03:21:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:2d:f7:f1:90:b2:3e:c2:55:89:b4:08:59:7d:cc:f2:42:80:f1:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B
        Validity
            Not Before: Mar  6 04:41:46 2025 GMT
            Not After : Mar  5 04:46:46 2026 GMT
        Subject: CN=3277241342330C1FD543421AEF1BAED6B629B33C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6b:1c:6a:03:ff:9d:56:47:6b:05:3b:b3:aa:
                    a0:38:17:71:d0:a8:f9:c5:80:32:4e:77:30:90:c1:
                    6b:4e:1e:3f:ce:57:61:d9:63:b8:24:24:4c:39:82:
                    04:93:e8:b0:04:9d:95:72:ee:9c:b7:45:a5:d0:7c:
                    5a:00:4d:4a:bf:5b:4e:bf:03:26:fd:4b:6e:6d:47:
                    fe:88:7c:25:a0:ed:64:61:f2:cf:cb:b3:01:06:c3:
                    27:ec:fd:04:c8:97:19:57:9a:9e:ed:4d:87:48:83:
                    8d:2f:1c:ab:51:2c:b0:66:08:d3:04:af:4f:46:da:
                    56:10:27:44:23:68:22:d4:47:ba:bf:0a:4a:b3:da:
                    89:31:36:39:6d:8d:13:fe:eb:a4:4b:07:df:91:14:
                    21:be:6e:d3:46:6a:15:e7:99:e4:cb:4c:bb:44:52:
                    d2:a4:31:89:48:56:11:05:63:76:89:bb:61:64:a1:
                    34:91:2a:27:c6:dd:46:47:fd:35:df:6a:10:27:72:
                    b0:e3:2c:5c:68:da:f6:c0:20:72:8d:90:c0:be:b8:
                    e9:b7:12:7c:74:26:c9:a2:80:d2:4b:43:12:57:b1:
                    14:40:95:c9:67:e9:b1:ac:72:71:29:f6:88:ac:59:
                    66:6d:68:23:57:b5:dc:12:c8:d9:80:0c:17:87:7c:
                    0f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:77:24:13:42:33:0C:1F:D5:43:42:1A:EF:1B:AE:D6:B6:29:B3:3C
            X509v3 Authority Key Identifier:
                keyid:33:EA:A1:AC:A3:A6:97:8A:EC:2D:2D:F4:D2:9E:B4:B3:59:B3:F6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/323830343a343330343a3a2f33322d3332203d3e20323637353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4304::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:e9:1a:3a:02:1b:af:82:51:72:72:6f:13:ad:fb:78:e9:1e:
         79:06:3a:7d:5a:4d:ef:35:6a:f0:18:79:de:1a:02:e6:78:08:
         90:14:f2:78:6c:0f:3b:f0:f2:48:f1:76:48:c4:20:3f:6e:fa:
         c7:8e:fe:c1:b0:35:1f:45:05:69:55:46:0e:f6:8d:d7:9d:4d:
         73:17:2a:71:d8:b5:95:97:7c:c1:ea:c5:3d:66:e0:3d:cc:4c:
         d5:0d:8e:b5:07:eb:7f:94:ff:2b:cc:4a:67:a7:52:5a:46:70:
         05:07:fa:01:68:37:9e:b5:c8:70:b8:c0:05:2e:b7:55:45:20:
         57:b5:37:1e:f8:76:8b:a0:02:69:72:59:7d:ea:96:7a:7f:e3:
         f8:6c:49:c7:62:50:32:38:cc:fd:70:58:90:6c:12:4b:2a:4c:
         ea:fb:d1:70:89:92:3d:48:6d:f8:77:95:ec:30:b1:70:08:1f:
         c8:2e:c6:2d:ae:16:45:ea:87:fd:72:5d:b4:32:81:99:a0:6d:
         e9:e3:ba:46:80:fc:47:ce:4d:bc:f8:fc:27:d9:90:57:fb:2e:
         37:5a:fc:c8:c1:f3:60:8d:0e:93:93:84:eb:9e:38:2e:cb:8e:
         a7:32:94:af:d9:69:79:e5:fb:77:d8:2c:2a:cb:80:dd:67:a7:
         cb:64:26:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:07 2025 by rpki-client on console.sobornost.net