Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dr2vmBPgYhDBPqTQbFzN62RaNj6v5seuqK3joHccD9HR/0/3230312e3138322e3137302e302f32332d3233203d3e20323637353336.roa
File:                     3230312e3138322e3137302e302f32332d3233203d3e20323637353336.roa (raw, json)
Hash identifier:          3eIelAx8iJg+CRDw4EofHMtx5tytnyiu3fImccMW2eA=
Subject key identifier:   D9:7E:B7:B5:1F:6E:22:D4:7F:14:A5:6C:AD:5E:B7:2D:A9:0E:89:97
Certificate issuer:       /CN=E4C2265BC19F39AD669B55EF340A57B2767CB29A
Certificate serial:       5FA4291BBDE72F4C932CA5E84827A52891E64C47
Authority key identifier: E4:C2:26:5B:C1:9F:39:AD:66:9B:55:EF:34:0A:57:B2:76:7C:B2:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C2265BC19F39AD669B55EF340A57B2767CB29A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dr2vmBPgYhDBPqTQbFzN62RaNj6v5seuqK3joHccD9HR/0/3230312e3138322e3137302e302f32332d3233203d3e20323637353336.roa
Signing time:             Mon 07 Apr 2025 16:21:49 +0000
ROA not before:           Mon 07 Apr 2025 16:16:49 +0000
ROA not after:            Mon 06 Apr 2026 16:21:49 +0000
asID:                     267536
IP address blocks:        201.182.170.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dr2vmBPgYhDBPqTQbFzN62RaNj6v5seuqK3joHccD9HR/0/E4C2265BC19F39AD669B55EF340A57B2767CB29A.crl
                          rsync://rpki-repo.registro.br/repo/Dr2vmBPgYhDBPqTQbFzN62RaNj6v5seuqK3joHccD9HR/0/E4C2265BC19F39AD669B55EF340A57B2767CB29A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C2265BC19F39AD669B55EF340A57B2767CB29A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 21:26:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:a4:29:1b:bd:e7:2f:4c:93:2c:a5:e8:48:27:a5:28:91:e6:4c:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4C2265BC19F39AD669B55EF340A57B2767CB29A
        Validity
            Not Before: Apr  7 16:16:49 2025 GMT
            Not After : Apr  6 16:21:49 2026 GMT
        Subject: CN=D97EB7B51F6E22D47F14A56CAD5EB72DA90E8997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f7:fd:96:29:55:92:cf:4a:9d:9a:74:94:9c:
                    3b:07:24:b8:bd:72:85:8c:87:44:fd:7d:f8:a5:21:
                    33:e8:57:0f:47:2b:eb:27:72:7d:bf:4a:ae:28:6e:
                    40:57:77:2a:9c:06:a0:1d:eb:32:1a:d5:f2:d8:31:
                    e8:35:d6:d4:af:81:a3:4f:12:e8:38:76:f2:0e:1e:
                    bc:ee:a5:42:6a:d0:af:a8:0e:f4:11:5a:ca:cb:dd:
                    60:49:06:06:d5:ce:12:90:40:7b:84:c2:dd:1f:18:
                    ba:fd:bb:4c:99:38:68:fb:82:3c:5c:5b:80:5d:1a:
                    aa:ba:25:d7:9a:12:df:fb:8a:b2:4d:57:61:1f:a0:
                    6d:44:56:d9:67:17:19:a9:3b:0d:5a:b2:12:be:80:
                    59:2c:86:a1:6a:ec:21:b6:77:a0:43:5c:c6:43:49:
                    4d:6a:aa:0b:a9:f1:65:9d:80:d6:b4:f8:a0:a0:7b:
                    69:28:01:7e:52:6e:43:24:66:0e:d4:76:f8:9e:48:
                    97:fa:5e:7b:a5:d0:24:7c:b9:05:7e:67:36:32:99:
                    65:d7:4b:d0:69:3e:06:b9:df:4c:61:73:3c:65:c5:
                    df:e0:95:57:be:c5:b0:1d:7d:0e:37:51:b9:41:ea:
                    ce:ad:18:72:c7:2d:57:00:c4:06:ae:56:6d:80:49:
                    bf:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:7E:B7:B5:1F:6E:22:D4:7F:14:A5:6C:AD:5E:B7:2D:A9:0E:89:97
            X509v3 Authority Key Identifier:
                keyid:E4:C2:26:5B:C1:9F:39:AD:66:9B:55:EF:34:0A:57:B2:76:7C:B2:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dr2vmBPgYhDBPqTQbFzN62RaNj6v5seuqK3joHccD9HR/0/E4C2265BC19F39AD669B55EF340A57B2767CB29A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C2265BC19F39AD669B55EF340A57B2767CB29A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dr2vmBPgYhDBPqTQbFzN62RaNj6v5seuqK3joHccD9HR/0/3230312e3138322e3137302e302f32332d3233203d3e20323637353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:ce:e1:f1:8e:ff:a1:5f:18:58:59:2f:47:0d:cc:ac:e9:26:
         2f:8b:65:eb:98:1c:cd:63:81:09:b2:d1:2b:b9:84:3b:ed:a4:
         ab:10:19:8a:e3:89:77:b0:9e:7f:96:40:23:da:52:34:1d:62:
         1f:22:18:2e:98:5f:6a:8d:97:a7:3d:55:71:cc:f7:13:c8:5b:
         05:7a:ad:8c:c7:09:59:3d:e6:43:9d:0b:0e:3a:de:91:5a:a2:
         4f:42:46:cd:24:52:ca:71:ce:5b:05:11:5d:61:01:35:e2:c6:
         c2:ff:6a:2a:ed:91:c0:6f:5f:94:35:46:93:a9:b4:7c:3d:cf:
         5a:de:20:a4:4c:45:ea:02:32:50:f6:08:7d:ca:83:26:30:4d:
         69:97:33:ec:42:9f:26:36:69:b4:41:9f:12:59:59:98:54:2c:
         91:d8:17:95:bb:fe:b0:84:b7:4b:e5:1f:f9:87:33:b5:82:b4:
         b9:97:da:8c:11:3e:29:e3:a9:b7:ca:52:6c:a3:b3:6c:01:6c:
         f8:74:8c:16:9f:9c:b0:44:ba:a0:d9:aa:e1:bc:54:73:fe:53:
         95:f5:a3:f4:9d:8e:10:f8:17:8c:e3:92:e3:b0:2c:d1:eb:b8:
         95:97:35:f6:57:71:a8:7a:d0:ed:f3:46:ea:ff:09:aa:0a:c6:
         19:38:b7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:55 2025 by rpki-client on console.sobornost.net