Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/1/323830343a343361303a3a2f33322d3335203d3e20323637353830.roa
File:                     323830343a343361303a3a2f33322d3335203d3e20323637353830.roa (raw, json)
Hash identifier:          gsXArwOGkvYhOyUx/ywx8l9rXDAc5XWBoDpKMTIsOag=
Subject key identifier:   3D:FA:38:64:20:F2:88:F2:6B:A0:B6:89:42:96:79:33:EA:B3:95:82
Certificate issuer:       /CN=233201DBED32F6A687426F3C6DE66D3690C5A5CA
Certificate serial:       0ED3EA96D9AEBDC0821ED48A04853A0F2CEC39F0
Authority key identifier: 23:32:01:DB:ED:32:F6:A6:87:42:6F:3C:6D:E6:6D:36:90:C5:A5:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/233201DBED32F6A687426F3C6DE66D3690C5A5CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/1/323830343a343361303a3a2f33322d3335203d3e20323637353830.roa
Signing time:             Thu 06 Mar 2025 14:13:50 +0000
ROA not before:           Thu 06 Mar 2025 14:08:50 +0000
ROA not after:            Thu 05 Mar 2026 14:13:50 +0000
asID:                     267580
IP address blocks:        2804:43a0::/32 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/1/233201DBED32F6A687426F3C6DE66D3690C5A5CA.crl
                          rsync://rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/1/233201DBED32F6A687426F3C6DE66D3690C5A5CA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/233201DBED32F6A687426F3C6DE66D3690C5A5CA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 13:53:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:d3:ea:96:d9:ae:bd:c0:82:1e:d4:8a:04:85:3a:0f:2c:ec:39:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=233201DBED32F6A687426F3C6DE66D3690C5A5CA
        Validity
            Not Before: Mar  6 14:08:50 2025 GMT
            Not After : Mar  5 14:13:50 2026 GMT
        Subject: CN=3DFA386420F288F26BA0B68942967933EAB39582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:17:13:e6:28:cc:25:e5:ec:0b:4c:b1:a9:86:
                    e2:4a:f0:63:21:12:42:8e:55:19:b2:86:ae:1f:f9:
                    ed:a0:6d:74:71:96:f6:bf:92:62:e5:e2:c2:b1:30:
                    e2:4f:ce:3c:e3:71:1d:01:eb:37:b8:a7:50:b2:5a:
                    18:7a:e4:4b:98:1f:a4:2a:f6:4a:22:e1:3b:9e:e6:
                    ca:0d:5e:b4:95:01:91:e8:90:d3:a6:4d:ab:2f:aa:
                    0a:a4:e3:57:a0:0a:6d:7b:4a:0f:6c:d1:27:26:c2:
                    de:3b:37:bc:55:37:87:2f:92:ba:db:5e:c2:c2:fe:
                    d1:f7:26:f8:3c:af:c5:f2:4a:2c:5d:e4:8a:b5:06:
                    39:9a:8f:4f:3a:d7:3e:e5:8b:44:0c:86:9a:a4:3d:
                    a0:44:22:15:75:21:3a:c9:11:3f:25:40:4c:24:11:
                    06:2d:ad:0e:3e:4d:ae:0f:9c:7c:b3:1f:8f:25:f1:
                    49:66:5a:e7:a3:4f:e1:5d:22:a0:e7:51:6f:86:db:
                    0c:6a:fb:8a:54:15:7e:71:d4:e8:af:c3:2d:52:cf:
                    8d:1b:13:ec:62:ed:c7:5e:1d:0a:c1:89:6c:05:3f:
                    1d:b9:3e:cd:1f:1e:ed:d6:b0:7d:a3:be:89:ee:69:
                    54:ad:31:72:22:b9:70:48:ec:83:91:79:06:d6:8f:
                    9f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:FA:38:64:20:F2:88:F2:6B:A0:B6:89:42:96:79:33:EA:B3:95:82
            X509v3 Authority Key Identifier:
                keyid:23:32:01:DB:ED:32:F6:A6:87:42:6F:3C:6D:E6:6D:36:90:C5:A5:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/1/233201DBED32F6A687426F3C6DE66D3690C5A5CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/233201DBED32F6A687426F3C6DE66D3690C5A5CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/1/323830343a343361303a3a2f33322d3335203d3e20323637353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:43a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:97:9c:3e:d8:e8:e7:a0:28:3a:0d:ef:a6:25:fa:08:8e:d0:
         8c:ef:91:34:ba:b8:aa:a1:d6:50:03:ba:dd:df:6c:48:9d:09:
         d5:00:78:65:b2:40:94:54:a4:96:d9:29:77:b9:a3:8e:b9:5f:
         1d:60:70:eb:47:ef:b4:d1:df:0c:33:b3:1a:d5:53:86:27:80:
         e1:82:f4:b3:a4:c3:1b:1d:63:aa:0c:5b:9b:0c:b1:c3:30:77:
         c0:51:7f:ca:86:b1:c1:a1:89:c0:08:8b:0c:95:bb:75:88:93:
         3b:5c:f9:11:b2:4b:bf:a6:26:31:8f:74:0a:b0:b5:d2:42:a7:
         c1:43:74:14:30:81:1d:60:96:a3:59:1a:dd:3c:56:4f:0e:a1:
         82:d7:e9:8c:bd:0f:22:05:1b:89:63:21:4a:24:e1:b1:51:77:
         97:43:df:5b:7c:6c:0a:d0:fb:46:66:fa:7a:f3:ca:a4:27:ff:
         0b:88:bf:0c:6a:32:a4:27:fd:3d:74:63:7b:c9:a8:1f:57:b6:
         88:8a:7a:c4:ec:5e:9e:66:18:5e:5c:51:3a:4e:fa:8c:e1:17:
         c9:cf:23:56:91:47:ca:ba:70:d5:b0:69:57:ea:7f:06:3c:6b:
         b4:36:ab:cc:1e:72:24:71:2d:4b:d2:bd:82:67:64:ec:c4:8c:
         a9:67:55:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:04:09 2025 by rpki-client on console.sobornost.net