Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dr2vmBPgYhDBPqTQbFzN62RaNj6v5seuqK3joHccD9HR/0/323830343a343265383a3a2f33332d3333203d3e20323637353336.roa
File:                     323830343a343265383a3a2f33332d3333203d3e20323637353336.roa (raw, json)
Hash identifier:          +6+2ANVXwwG0XAh1hw7mY7HUNvi1Rll6veBDA8eP90o=
Subject key identifier:   71:25:CB:1C:F6:BD:72:46:ED:EC:94:58:D5:C2:F5:7A:D5:CB:C2:C5
Certificate issuer:       /CN=E4C2265BC19F39AD669B55EF340A57B2767CB29A
Certificate serial:       50BD3D6C85A14289BDFA567285CCCBE00C7A5AE6
Authority key identifier: E4:C2:26:5B:C1:9F:39:AD:66:9B:55:EF:34:0A:57:B2:76:7C:B2:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C2265BC19F39AD669B55EF340A57B2767CB29A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dr2vmBPgYhDBPqTQbFzN62RaNj6v5seuqK3joHccD9HR/0/323830343a343265383a3a2f33332d3333203d3e20323637353336.roa
Signing time:             Mon 07 Apr 2025 16:21:50 +0000
ROA not before:           Mon 07 Apr 2025 16:16:50 +0000
ROA not after:            Mon 06 Apr 2026 16:21:50 +0000
asID:                     267536
IP address blocks:        2804:42e8::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dr2vmBPgYhDBPqTQbFzN62RaNj6v5seuqK3joHccD9HR/0/E4C2265BC19F39AD669B55EF340A57B2767CB29A.crl
                          rsync://rpki-repo.registro.br/repo/Dr2vmBPgYhDBPqTQbFzN62RaNj6v5seuqK3joHccD9HR/0/E4C2265BC19F39AD669B55EF340A57B2767CB29A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C2265BC19F39AD669B55EF340A57B2767CB29A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 21:26:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:bd:3d:6c:85:a1:42:89:bd:fa:56:72:85:cc:cb:e0:0c:7a:5a:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4C2265BC19F39AD669B55EF340A57B2767CB29A
        Validity
            Not Before: Apr  7 16:16:50 2025 GMT
            Not After : Apr  6 16:21:50 2026 GMT
        Subject: CN=7125CB1CF6BD7246EDEC9458D5C2F57AD5CBC2C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2c:b2:94:ce:c9:ef:7d:00:aa:45:d1:0f:1c:
                    3c:ea:f9:8c:25:ee:98:ef:5f:db:91:32:e3:b0:31:
                    e4:89:19:1a:b2:e5:c7:9e:9c:52:11:7d:2b:5f:f1:
                    7f:2a:2f:81:43:e4:28:2c:58:91:41:83:80:82:1e:
                    0b:a2:4c:5a:ba:80:5b:f9:ae:49:48:1a:b1:5b:1f:
                    2a:f9:04:68:72:d9:0a:fd:77:5c:87:10:aa:ad:ff:
                    97:dd:97:9f:49:29:c4:d1:7f:0a:45:76:33:37:65:
                    bb:d4:a8:3d:d5:6e:5b:eb:e7:d1:54:f0:3f:ff:27:
                    db:e6:22:eb:da:ea:d9:20:ff:b3:69:dd:f2:43:a7:
                    9b:d3:91:2c:aa:c5:68:23:3f:ca:47:4f:46:18:db:
                    ff:fd:d2:60:a9:e6:d9:32:05:25:ad:f9:31:1d:0f:
                    a8:e5:ed:a2:30:6b:58:55:b9:19:9a:c9:5d:03:9b:
                    2b:e0:07:b8:84:f5:71:fd:16:f9:64:f6:72:70:de:
                    45:fd:33:33:f9:19:eb:4a:19:9a:f5:17:1c:f8:db:
                    87:3a:27:ff:0f:67:0d:7e:8d:c3:e9:b1:19:9b:9c:
                    b9:e4:99:41:2f:0f:6e:2c:f3:2a:7d:7c:5f:cd:3b:
                    91:3f:4c:01:4e:dd:6d:f3:34:14:dd:6e:dc:39:08:
                    c8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:25:CB:1C:F6:BD:72:46:ED:EC:94:58:D5:C2:F5:7A:D5:CB:C2:C5
            X509v3 Authority Key Identifier:
                keyid:E4:C2:26:5B:C1:9F:39:AD:66:9B:55:EF:34:0A:57:B2:76:7C:B2:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dr2vmBPgYhDBPqTQbFzN62RaNj6v5seuqK3joHccD9HR/0/E4C2265BC19F39AD669B55EF340A57B2767CB29A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C2265BC19F39AD669B55EF340A57B2767CB29A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dr2vmBPgYhDBPqTQbFzN62RaNj6v5seuqK3joHccD9HR/0/323830343a343265383a3a2f33332d3333203d3e20323637353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:42e8::/33

    Signature Algorithm: sha256WithRSAEncryption
         1c:d5:5a:ac:6a:c5:72:82:76:58:0c:0e:d6:b7:d1:bf:62:f7:
         96:33:9b:ce:ca:e6:24:b2:b4:eb:62:83:e5:a0:0f:a5:cc:19:
         8e:37:48:4a:7a:64:fc:68:2c:58:c1:70:3d:03:f6:04:7c:c6:
         75:13:ec:f9:43:dc:3b:ad:40:a8:d5:53:96:4b:48:ae:cd:86:
         70:e8:d8:29:c7:97:6e:fe:25:c9:56:39:3a:ac:9f:53:5c:83:
         21:0e:7f:3d:ae:20:00:87:e3:e5:57:e3:98:7a:72:ce:94:73:
         86:fe:97:8e:01:9d:bf:56:3e:b2:3b:12:16:e1:42:1b:c9:68:
         00:39:70:6f:69:f7:3c:65:38:29:00:1a:1f:a2:dd:0e:0f:45:
         a8:39:fc:6c:cd:a3:31:5a:95:4e:f3:13:f5:c4:1b:7f:c3:d8:
         a3:ce:17:c1:69:a6:93:a7:57:21:9f:bd:29:47:91:55:d5:75:
         da:2c:31:a2:b9:c2:e5:13:f6:b1:63:c2:12:1a:fe:ec:8b:b9:
         40:72:bc:52:75:c6:82:7c:ec:89:28:a5:ee:7c:1b:ac:d6:dd:
         44:fb:ae:f1:b8:0a:11:15:c3:69:58:2e:14:3a:e8:c7:8b:e6:
         cb:89:f0:a6:4b:bd:7b:1b:c8:3c:32:ad:d9:37:4b:65:57:b1:
         71:88:13:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:55 2025 by rpki-client on console.sobornost.net