Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dr2vmBPgYhDBPqTQbFzN62RaNj6v5seuqK3joHccD9HR/0/323830343a343265383a3a2f33342d3334203d3e20323637353336.roa
File:                     323830343a343265383a3a2f33342d3334203d3e20323637353336.roa (raw, json)
Hash identifier:          7J5L4vrIT1ocbX18Vc2IwckH7/IKkSe4rMnXKvZ/GIQ=
Subject key identifier:   40:2B:C3:FC:74:05:4C:B9:32:F2:67:C9:02:65:AC:3A:47:D8:A5:D1
Certificate issuer:       /CN=E4C2265BC19F39AD669B55EF340A57B2767CB29A
Certificate serial:       10B3B9C08D6854F772E862D730479700C5460B0E
Authority key identifier: E4:C2:26:5B:C1:9F:39:AD:66:9B:55:EF:34:0A:57:B2:76:7C:B2:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C2265BC19F39AD669B55EF340A57B2767CB29A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dr2vmBPgYhDBPqTQbFzN62RaNj6v5seuqK3joHccD9HR/0/323830343a343265383a3a2f33342d3334203d3e20323637353336.roa
Signing time:             Mon 07 Apr 2025 16:21:48 +0000
ROA not before:           Mon 07 Apr 2025 16:16:48 +0000
ROA not after:            Mon 06 Apr 2026 16:21:48 +0000
asID:                     267536
IP address blocks:        2804:42e8::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dr2vmBPgYhDBPqTQbFzN62RaNj6v5seuqK3joHccD9HR/0/E4C2265BC19F39AD669B55EF340A57B2767CB29A.crl
                          rsync://rpki-repo.registro.br/repo/Dr2vmBPgYhDBPqTQbFzN62RaNj6v5seuqK3joHccD9HR/0/E4C2265BC19F39AD669B55EF340A57B2767CB29A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C2265BC19F39AD669B55EF340A57B2767CB29A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 17:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:b3:b9:c0:8d:68:54:f7:72:e8:62:d7:30:47:97:00:c5:46:0b:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4C2265BC19F39AD669B55EF340A57B2767CB29A
        Validity
            Not Before: Apr  7 16:16:48 2025 GMT
            Not After : Apr  6 16:21:48 2026 GMT
        Subject: CN=402BC3FC74054CB932F267C90265AC3A47D8A5D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:09:90:92:fc:ee:76:29:6e:05:c5:82:f3:c7:
                    9a:e2:51:33:74:8b:ae:19:7f:cb:88:c4:0e:85:9f:
                    a6:dc:7a:2e:30:22:1b:c3:c2:33:04:ae:b3:a8:47:
                    ed:80:a3:00:24:23:7f:74:f2:51:ed:bc:47:8d:c8:
                    b6:66:21:6e:24:9d:76:f8:de:6f:31:83:13:df:d4:
                    b7:51:83:1d:84:8d:01:78:02:b3:7d:62:e3:69:2d:
                    86:40:30:29:03:18:e9:11:e0:b5:d5:ef:87:94:fc:
                    37:92:b6:4e:1b:7d:6a:4e:9b:7f:ba:6a:4c:0c:0a:
                    f4:ae:1c:40:72:97:5f:67:3f:f2:8b:66:8f:12:1a:
                    b1:14:c8:7d:00:ad:3e:90:9a:ea:5d:5e:bd:3c:ce:
                    20:a0:6b:c7:19:d8:ed:57:76:37:b2:56:8e:65:7e:
                    a2:96:89:9f:34:82:92:f7:37:08:15:96:3d:f5:68:
                    69:c2:19:0e:e5:6e:43:a8:1a:73:9b:7c:1f:b2:34:
                    30:30:1f:c8:30:55:b6:3c:82:32:13:3e:8b:8e:e7:
                    75:15:d4:ad:c4:bd:b7:10:31:51:8c:34:2c:00:4b:
                    ab:85:3a:4c:05:02:32:a9:e3:39:f2:a3:3e:8c:9d:
                    e2:5d:4c:81:3d:ef:79:6f:a1:4b:81:30:fb:5f:84:
                    7c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:2B:C3:FC:74:05:4C:B9:32:F2:67:C9:02:65:AC:3A:47:D8:A5:D1
            X509v3 Authority Key Identifier:
                keyid:E4:C2:26:5B:C1:9F:39:AD:66:9B:55:EF:34:0A:57:B2:76:7C:B2:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dr2vmBPgYhDBPqTQbFzN62RaNj6v5seuqK3joHccD9HR/0/E4C2265BC19F39AD669B55EF340A57B2767CB29A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C2265BC19F39AD669B55EF340A57B2767CB29A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dr2vmBPgYhDBPqTQbFzN62RaNj6v5seuqK3joHccD9HR/0/323830343a343265383a3a2f33342d3334203d3e20323637353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:42e8::/34

    Signature Algorithm: sha256WithRSAEncryption
         79:d8:49:b5:00:13:86:e3:7f:8c:58:e2:2d:dd:54:57:5e:0c:
         e2:73:09:9e:01:6e:be:33:19:ff:2e:cf:7c:ef:1c:4f:ed:18:
         9a:95:5b:80:1b:8c:fa:05:11:a2:68:0f:e5:36:60:48:04:0e:
         9d:41:6a:d5:ef:d7:24:fe:7f:d7:43:84:53:8d:e7:45:4f:36:
         90:d0:73:0d:0c:96:16:1d:6b:7a:1b:fe:c9:97:b3:7b:38:36:
         07:cc:ab:9c:dd:9e:44:a3:94:c8:da:0c:7b:af:7e:f6:a7:93:
         b6:18:ee:88:e8:4d:94:ba:71:d5:29:6b:ac:32:e6:29:05:b6:
         48:74:ba:f1:02:71:82:ce:9a:cb:f7:31:e4:b4:b8:5b:66:70:
         f7:b4:e4:0b:ed:31:31:b8:85:65:14:ea:fb:f7:0e:b9:64:f4:
         88:87:36:29:5d:e4:aa:83:ac:48:f2:07:20:26:f8:e0:c2:3a:
         0e:cb:c3:94:5c:17:9c:4e:0e:0e:9e:2c:a0:60:3e:d5:86:e2:
         d4:f9:f9:65:38:55:8d:50:04:94:95:59:35:d7:6c:0b:83:7c:
         fd:fa:7e:57:d8:d0:3e:89:b6:57:6b:b7:93:a1:17:2f:2e:55:
         fa:5b:b5:84:0f:99:1c:66:53:6a:28:f4:81:1e:88:51:e8:48:
         6b:42:31:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:25 2025 by rpki-client on console.sobornost.net