Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E5G2vdVWrMr8Yrystkwpw1asCcLFT4UmtJjvR8qd1F2Y/0/323830343a3431633a3a2f33322d313238203d3e20323632343136.roa
File:                     323830343a3431633a3a2f33322d313238203d3e20323632343136.roa (raw, json)
Hash identifier:          exL5Z1I72hjF9eaaLs9iydgXBYMdvBWMaQnUPB4fuM4=
Subject key identifier:   96:D6:DF:5C:6E:D6:EC:65:30:25:56:25:DE:9F:F5:1C:20:13:EE:38
Certificate issuer:       /CN=56E5656D40ED3F974D3DE1BCCAF72E86A16DB487
Certificate serial:       36849516D9F2B499765781553FC9413E093B2395
Authority key identifier: 56:E5:65:6D:40:ED:3F:97:4D:3D:E1:BC:CA:F7:2E:86:A1:6D:B4:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56E5656D40ED3F974D3DE1BCCAF72E86A16DB487.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E5G2vdVWrMr8Yrystkwpw1asCcLFT4UmtJjvR8qd1F2Y/0/323830343a3431633a3a2f33322d313238203d3e20323632343136.roa
Signing time:             Wed 23 Apr 2025 14:32:44 +0000
ROA not before:           Wed 23 Apr 2025 14:27:44 +0000
ROA not after:            Wed 22 Apr 2026 14:32:44 +0000
asID:                     262416
IP address blocks:        2804:41c::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E5G2vdVWrMr8Yrystkwpw1asCcLFT4UmtJjvR8qd1F2Y/0/56E5656D40ED3F974D3DE1BCCAF72E86A16DB487.crl
                          rsync://rpki-repo.registro.br/repo/E5G2vdVWrMr8Yrystkwpw1asCcLFT4UmtJjvR8qd1F2Y/0/56E5656D40ED3F974D3DE1BCCAF72E86A16DB487.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56E5656D40ED3F974D3DE1BCCAF72E86A16DB487.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:84:95:16:d9:f2:b4:99:76:57:81:55:3f:c9:41:3e:09:3b:23:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56E5656D40ED3F974D3DE1BCCAF72E86A16DB487
        Validity
            Not Before: Apr 23 14:27:44 2025 GMT
            Not After : Apr 22 14:32:44 2026 GMT
        Subject: CN=96D6DF5C6ED6EC6530255625DE9FF51C2013EE38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:61:e7:af:ed:3d:ff:06:ec:74:ae:a9:1b:29:
                    a9:eb:a6:d0:1f:0f:55:bc:9f:ba:c5:4d:62:09:35:
                    26:f4:95:7e:29:a8:d6:44:af:a8:d3:0e:23:df:ba:
                    82:b2:59:f0:b7:f8:0f:a8:22:c3:57:c7:31:38:79:
                    33:66:e8:ed:91:05:be:98:a7:9d:40:80:1d:cb:9c:
                    66:8c:8c:3e:da:e2:59:57:c6:fe:f7:88:0d:b4:d4:
                    c4:8a:50:b5:81:e3:65:f4:02:b2:c8:a2:e1:fc:3c:
                    9a:c1:79:b7:b6:70:71:62:47:77:65:3c:30:12:ca:
                    65:16:19:00:4d:6a:ec:15:a5:a2:c9:ca:5e:eb:8e:
                    6a:67:2c:99:8c:55:0c:25:52:99:bb:d2:ea:a7:f2:
                    f8:a6:0a:ec:17:3d:f8:25:f9:cf:85:38:59:7e:1b:
                    a6:88:ae:df:49:70:19:11:ff:80:f6:fd:5a:53:61:
                    65:53:22:ab:68:c4:5a:cc:b3:c4:f7:f0:46:8f:a1:
                    9e:db:92:a7:f2:70:e4:d7:80:8d:b3:02:2c:79:bb:
                    28:cd:cb:1f:3d:92:cb:e0:18:ec:09:54:13:fb:5b:
                    2d:50:f0:4a:86:61:56:8a:5f:d4:72:93:29:f4:40:
                    b6:72:0a:ae:02:82:b3:f3:12:00:45:db:17:61:77:
                    a3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D6:DF:5C:6E:D6:EC:65:30:25:56:25:DE:9F:F5:1C:20:13:EE:38
            X509v3 Authority Key Identifier:
                keyid:56:E5:65:6D:40:ED:3F:97:4D:3D:E1:BC:CA:F7:2E:86:A1:6D:B4:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E5G2vdVWrMr8Yrystkwpw1asCcLFT4UmtJjvR8qd1F2Y/0/56E5656D40ED3F974D3DE1BCCAF72E86A16DB487.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56E5656D40ED3F974D3DE1BCCAF72E86A16DB487.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E5G2vdVWrMr8Yrystkwpw1asCcLFT4UmtJjvR8qd1F2Y/0/323830343a3431633a3a2f33322d313238203d3e20323632343136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41c::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:44:43:87:2c:a0:b6:b6:9e:fd:7b:da:23:73:aa:ce:46:d5:
         4f:75:b7:7c:82:c4:d1:cd:74:b5:1d:7d:c1:bf:ce:95:43:dd:
         a2:51:71:78:41:8f:ad:01:97:58:0f:48:57:38:5a:88:0d:83:
         79:35:84:59:94:9c:a3:be:68:33:dc:ba:e2:39:04:fe:3d:1b:
         8a:da:4a:52:d3:d6:79:ed:e2:b4:5b:36:e3:72:67:74:03:41:
         af:5a:9d:05:e0:7e:f9:e7:4e:3e:92:43:3b:bb:0c:81:81:e6:
         a8:09:29:d4:ed:84:32:fd:45:4e:97:74:74:b7:02:dd:4b:47:
         76:b9:69:79:2a:2b:a2:dd:94:95:bd:10:b0:91:8b:0d:b7:ff:
         e6:02:4e:cf:a5:95:6c:bd:95:0f:a1:99:65:3b:14:17:53:66:
         9a:6a:22:21:b9:44:e7:27:3c:63:b6:d2:8d:7c:7b:f3:80:ed:
         49:5e:0b:cb:5b:63:a1:ee:81:85:ba:4c:28:de:b9:ed:1e:9f:
         af:5b:f5:d3:81:09:18:aa:9b:75:fa:cf:60:f4:8b:7b:ac:09:
         ab:79:d9:ff:b2:99:bd:e3:af:4e:6f:6e:6f:3d:4d:79:51:22:
         e8:5b:37:02:6b:21:5d:aa:93:3f:b5:98:06:a3:89:30:bb:e4:
         58:ed:16:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:34 2025 by rpki-client on console.sobornost.net