Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dr2vmBPgYhDBPqTQbFzN62RaNj6v5seuqK3joHccD9HR/0/3230312e3138322e3136382e302f32322d3232203d3e20323637353336.roa
File:                     3230312e3138322e3136382e302f32322d3232203d3e20323637353336.roa (raw, json)
Hash identifier:          WKr1zMzNIdIkGvY5REIFwZWrdXzN1aO/EJnAg0IEwlk=
Subject key identifier:   C1:0E:C0:D3:29:29:88:9B:2A:37:4B:5F:CC:ED:D8:94:D4:40:34:CB
Certificate issuer:       /CN=E4C2265BC19F39AD669B55EF340A57B2767CB29A
Certificate serial:       2435E1D8C488884053AED9EECFA6F85027068822
Authority key identifier: E4:C2:26:5B:C1:9F:39:AD:66:9B:55:EF:34:0A:57:B2:76:7C:B2:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C2265BC19F39AD669B55EF340A57B2767CB29A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dr2vmBPgYhDBPqTQbFzN62RaNj6v5seuqK3joHccD9HR/0/3230312e3138322e3136382e302f32322d3232203d3e20323637353336.roa
Signing time:             Mon 07 Apr 2025 16:21:49 +0000
ROA not before:           Mon 07 Apr 2025 16:16:49 +0000
ROA not after:            Mon 06 Apr 2026 16:21:49 +0000
asID:                     267536
IP address blocks:        201.182.168.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dr2vmBPgYhDBPqTQbFzN62RaNj6v5seuqK3joHccD9HR/0/E4C2265BC19F39AD669B55EF340A57B2767CB29A.crl
                          rsync://rpki-repo.registro.br/repo/Dr2vmBPgYhDBPqTQbFzN62RaNj6v5seuqK3joHccD9HR/0/E4C2265BC19F39AD669B55EF340A57B2767CB29A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C2265BC19F39AD669B55EF340A57B2767CB29A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 17:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:35:e1:d8:c4:88:88:40:53:ae:d9:ee:cf:a6:f8:50:27:06:88:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4C2265BC19F39AD669B55EF340A57B2767CB29A
        Validity
            Not Before: Apr  7 16:16:49 2025 GMT
            Not After : Apr  6 16:21:49 2026 GMT
        Subject: CN=C10EC0D32929889B2A374B5FCCEDD894D44034CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:94:10:1e:4e:28:25:4b:cd:2c:a7:bc:a0:08:
                    a1:bd:a1:be:24:8d:6e:ad:1f:d2:d7:52:11:87:ac:
                    0d:5b:37:88:14:ad:ec:4e:a0:cd:ac:b7:8a:78:59:
                    ae:89:61:be:e1:4f:a2:58:32:ff:ce:46:71:00:58:
                    15:74:e3:3d:15:93:22:a3:ac:01:73:cd:f0:7d:c3:
                    42:15:e2:7e:34:ee:6d:4a:45:58:82:0e:2f:be:8b:
                    bd:a9:18:67:ee:a9:bd:70:88:64:14:a9:ab:1d:de:
                    94:63:d0:67:bc:f2:e4:79:af:b8:3f:15:fb:82:b0:
                    bb:5f:4e:1d:62:12:d3:b6:3f:8d:a5:f4:7a:2f:44:
                    b3:ac:e5:72:47:bc:f4:2d:fe:71:39:b9:dc:6a:40:
                    2b:2f:33:6c:47:52:ba:33:aa:28:c5:a8:74:89:1e:
                    c2:57:12:80:6b:96:99:1f:ce:17:9d:3f:0f:36:45:
                    68:f5:87:b6:ab:e3:21:a6:30:13:04:fb:ab:0c:e2:
                    17:03:b2:57:67:ff:73:e9:35:be:c9:d7:6a:6e:2f:
                    9b:83:99:76:5e:30:5d:ff:19:af:a1:5f:ea:cd:e6:
                    0e:73:0f:03:28:ad:39:42:45:84:ad:cf:e5:bb:47:
                    48:57:01:91:d2:a6:53:21:8e:f1:6c:6d:27:75:36:
                    76:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:0E:C0:D3:29:29:88:9B:2A:37:4B:5F:CC:ED:D8:94:D4:40:34:CB
            X509v3 Authority Key Identifier:
                keyid:E4:C2:26:5B:C1:9F:39:AD:66:9B:55:EF:34:0A:57:B2:76:7C:B2:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dr2vmBPgYhDBPqTQbFzN62RaNj6v5seuqK3joHccD9HR/0/E4C2265BC19F39AD669B55EF340A57B2767CB29A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C2265BC19F39AD669B55EF340A57B2767CB29A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dr2vmBPgYhDBPqTQbFzN62RaNj6v5seuqK3joHccD9HR/0/3230312e3138322e3136382e302f32322d3232203d3e20323637353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:7e:33:82:17:a5:70:c1:e9:ab:f6:31:26:a9:42:30:99:b5:
         ea:8f:8f:ae:da:24:d0:34:cd:5e:9c:1a:fd:af:ae:4a:19:93:
         12:7c:2b:7a:8c:08:f9:ce:c3:51:a8:16:59:5c:5c:7f:f8:dd:
         64:ab:ec:43:b7:36:46:c2:56:0e:f5:1e:b0:0e:0b:fd:22:96:
         5d:84:57:6b:a7:a9:85:b9:e2:9b:f4:d3:73:cd:64:9e:36:02:
         a7:de:ba:cf:6c:9d:19:d4:7e:d1:37:6e:a3:c4:3e:40:30:33:
         e2:c0:4b:f2:a9:9e:db:ba:da:bb:d8:cd:b9:40:2c:f7:ab:1d:
         9b:ad:5b:38:fb:e3:bf:85:60:6f:77:1c:53:d8:b4:be:18:6e:
         c1:0b:95:b4:a1:b4:77:46:9b:b8:cf:3f:ee:eb:0d:2f:e6:7a:
         a6:18:1a:9c:ad:8f:1b:c2:3c:30:ae:b9:fb:62:5c:d6:04:17:
         13:2b:32:c3:a8:61:b0:a8:3a:44:0d:d4:68:b6:43:a1:73:0f:
         6a:6e:ee:ed:05:26:78:c3:a4:4b:bd:10:76:a3:13:78:d6:ac:
         c1:2b:76:19:d5:c6:ac:fa:d3:b9:8c:66:94:0a:66:8e:26:c5:
         1a:7d:76:61:3e:3d:7c:8a:43:21:ce:55:f1:b9:93:dd:09:1e:
         28:34:3d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:25 2025 by rpki-client on console.sobornost.net