Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/323830343a343131343a3a2f33322d3336203d3e20323636303032.roa
File:                     323830343a343131343a3a2f33322d3336203d3e20323636303032.roa (raw, json)
Hash identifier:          10EXclqy4UV0D0uTL2NRj0C2cFIz1Vpl+8D1gbJHM5U=
Subject key identifier:   EA:32:FD:D4:AA:A3:68:24:B4:8F:89:D4:DC:B4:8F:7E:BF:F9:FE:05
Certificate issuer:       /CN=038181E844702D543ABCE8A0DFF3FD2BD2C44DFE
Certificate serial:       4F59AE06627F1D60E41C85F5FDDAAAABBDFDA03E
Authority key identifier: 03:81:81:E8:44:70:2D:54:3A:BC:E8:A0:DF:F3:FD:2B:D2:C4:4D:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/038181E844702D543ABCE8A0DFF3FD2BD2C44DFE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/323830343a343131343a3a2f33322d3336203d3e20323636303032.roa
Signing time:             Tue 22 Apr 2025 13:30:32 +0000
ROA not before:           Tue 22 Apr 2025 13:25:32 +0000
ROA not after:            Tue 21 Apr 2026 13:30:32 +0000
asID:                     266002
IP address blocks:        2804:4114::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/038181E844702D543ABCE8A0DFF3FD2BD2C44DFE.crl
                          rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/038181E844702D543ABCE8A0DFF3FD2BD2C44DFE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/038181E844702D543ABCE8A0DFF3FD2BD2C44DFE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 14:29:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:59:ae:06:62:7f:1d:60:e4:1c:85:f5:fd:da:aa:ab:bd:fd:a0:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=038181E844702D543ABCE8A0DFF3FD2BD2C44DFE
        Validity
            Not Before: Apr 22 13:25:32 2025 GMT
            Not After : Apr 21 13:30:32 2026 GMT
        Subject: CN=EA32FDD4AAA36824B48F89D4DCB48F7EBFF9FE05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d7:f1:0a:5e:23:7c:06:40:08:fa:69:08:63:
                    49:8d:6b:69:cd:ec:af:24:3f:c7:54:08:32:40:06:
                    d6:58:09:2a:67:f7:f9:ca:25:c8:bb:be:cb:97:ff:
                    db:76:f6:b0:56:38:ce:a3:41:5a:3a:6a:88:dc:54:
                    0d:8c:41:c4:e4:1a:d4:75:51:52:25:14:ae:98:67:
                    02:5b:b5:27:3a:72:a7:01:9f:dd:2c:f0:61:75:84:
                    ce:4a:2b:cf:ce:51:36:4c:5c:94:46:c8:2c:a4:0c:
                    27:24:58:dd:01:36:de:16:5a:1b:6d:d1:f8:80:8e:
                    93:40:f7:b5:c0:2f:50:c9:01:61:83:5b:72:13:78:
                    63:2c:e5:1b:6b:59:c4:6d:af:c1:e0:73:a1:94:0e:
                    3b:c0:bf:1b:7d:42:80:c0:f1:cc:4c:96:a3:77:8f:
                    fc:5e:d8:81:66:e0:3b:6e:34:99:d3:98:b2:e8:5c:
                    da:df:62:f1:9a:e2:ca:02:0e:e8:65:be:ef:09:f7:
                    0b:a1:fd:e7:e3:71:77:49:32:ae:d2:fc:f7:94:ed:
                    65:6b:ee:1d:52:a0:ed:82:c8:8e:35:ba:14:10:3b:
                    2d:af:f9:1e:35:5a:6d:cc:58:68:a6:dd:e8:c4:80:
                    aa:79:8c:70:75:a0:c1:d3:5f:58:b9:27:7b:2c:32:
                    c3:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:32:FD:D4:AA:A3:68:24:B4:8F:89:D4:DC:B4:8F:7E:BF:F9:FE:05
            X509v3 Authority Key Identifier:
                keyid:03:81:81:E8:44:70:2D:54:3A:BC:E8:A0:DF:F3:FD:2B:D2:C4:4D:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/038181E844702D543ABCE8A0DFF3FD2BD2C44DFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/038181E844702D543ABCE8A0DFF3FD2BD2C44DFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/323830343a343131343a3a2f33322d3336203d3e20323636303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4114::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:35:cc:15:24:f5:3c:bb:fd:b7:18:03:bc:be:5f:29:e1:69:
         69:01:a1:d7:6f:aa:59:78:7f:3c:a3:e6:23:b3:c8:a1:cb:ac:
         e6:c8:e0:fb:15:db:31:48:2c:8c:05:64:26:9d:03:b6:51:82:
         cc:46:47:5e:7b:55:66:bd:fb:e8:61:d9:6a:56:a1:e3:35:b5:
         8d:45:59:2a:2f:0d:b7:6d:b9:41:88:22:14:a6:b0:4e:84:29:
         4a:7f:d2:be:a0:17:c0:32:20:67:46:fd:1e:76:eb:be:fa:1a:
         41:03:9f:56:c5:91:53:d0:86:95:c1:0d:d1:16:08:87:35:48:
         27:75:df:71:6e:f3:65:ea:0e:5d:68:85:fe:56:41:1f:92:ff:
         5d:69:29:0b:21:c8:dd:a6:0b:71:0b:5d:56:6a:38:78:89:af:
         6b:02:23:cb:38:24:72:f6:b6:df:24:b2:43:f2:5f:df:9e:af:
         47:00:8b:f0:73:83:bd:3f:74:4b:1b:b9:f2:e2:ad:30:25:68:
         e3:0d:ce:e7:05:95:4d:9a:fe:1d:a8:04:e3:10:36:0d:fe:ba:
         1f:61:54:d4:56:c1:be:4a:4d:ae:eb:aa:f6:17:bf:66:39:3c:
         6e:80:20:56:c0:bf:33:35:f8:37:ff:80:32:d2:10:02:8a:fe:
         9f:b6:82:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:26 2025 by rpki-client on console.sobornost.net