Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/323830343a343333383a3a2f33332d3333203d3e20323637353536.roa
File:                     323830343a343333383a3a2f33332d3333203d3e20323637353536.roa (raw, json)
Hash identifier:          D+K5XtCzINnM4uBUabsDK+lLS+CXUoUrMsOgo1Yd6dk=
Subject key identifier:   BB:00:74:06:B0:98:52:12:A0:EB:1E:E0:1D:C9:F6:E0:49:E7:71:BB
Certificate issuer:       /CN=2383B3AFA35ADB2A3638A9F2AE0D9C27AFB5C50E
Certificate serial:       4BECD11730673CB5C4EBEC55449E99C1E616C332
Authority key identifier: 23:83:B3:AF:A3:5A:DB:2A:36:38:A9:F2:AE:0D:9C:27:AF:B5:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2383B3AFA35ADB2A3638A9F2AE0D9C27AFB5C50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/323830343a343333383a3a2f33332d3333203d3e20323637353536.roa
Signing time:             Tue 01 Apr 2025 12:49:57 +0000
ROA not before:           Tue 01 Apr 2025 12:44:57 +0000
ROA not after:            Tue 31 Mar 2026 12:49:57 +0000
asID:                     267556
IP address blocks:        2804:4338::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/2383B3AFA35ADB2A3638A9F2AE0D9C27AFB5C50E.crl
                          rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/2383B3AFA35ADB2A3638A9F2AE0D9C27AFB5C50E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2383B3AFA35ADB2A3638A9F2AE0D9C27AFB5C50E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 21:24:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ec:d1:17:30:67:3c:b5:c4:eb:ec:55:44:9e:99:c1:e6:16:c3:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2383B3AFA35ADB2A3638A9F2AE0D9C27AFB5C50E
        Validity
            Not Before: Apr  1 12:44:57 2025 GMT
            Not After : Mar 31 12:49:57 2026 GMT
        Subject: CN=BB007406B0985212A0EB1EE01DC9F6E049E771BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f5:bd:56:a4:2c:a0:53:0b:5c:97:e2:b7:65:
                    96:54:a7:88:6a:cc:92:3b:3d:e6:5f:8f:b6:5e:8b:
                    76:3e:46:0d:30:65:51:43:68:0c:7b:0e:03:a1:dd:
                    21:f3:a8:b1:1a:d6:31:8e:de:47:c8:20:2a:eb:b0:
                    54:6d:80:a4:88:27:dd:ff:31:49:fe:4b:3a:e6:32:
                    5f:a5:d7:72:03:a3:0d:30:b9:aa:09:a9:75:9f:61:
                    83:e6:37:80:1c:1a:fb:9f:e7:d8:9c:b2:1f:b3:43:
                    98:04:a8:7a:6e:80:25:fb:7d:54:b8:a1:65:b2:e7:
                    3e:d2:c8:1d:5f:73:8d:f9:28:7a:0e:11:d9:36:13:
                    42:bb:c5:89:d5:d8:a8:bc:b0:82:11:bb:59:dc:72:
                    fb:2d:4f:5c:9e:ac:44:ca:f5:3d:43:80:45:86:53:
                    f3:d1:4b:d2:94:cc:17:e2:87:33:f9:a9:2e:3e:6f:
                    6b:03:95:92:c4:d4:25:4a:4c:23:7c:ae:7f:21:10:
                    9c:95:c6:df:f2:ad:3a:39:13:55:18:02:fd:9a:d0:
                    c3:b9:cc:5d:ee:aa:dc:c3:df:83:94:ee:7a:04:cc:
                    b1:ab:4f:eb:9f:e1:b0:86:6c:cc:f8:1b:d1:ae:92:
                    9e:4b:5f:36:80:72:bf:dd:5e:8b:c4:37:4e:2c:a4:
                    d8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:00:74:06:B0:98:52:12:A0:EB:1E:E0:1D:C9:F6:E0:49:E7:71:BB
            X509v3 Authority Key Identifier:
                keyid:23:83:B3:AF:A3:5A:DB:2A:36:38:A9:F2:AE:0D:9C:27:AF:B5:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/2383B3AFA35ADB2A3638A9F2AE0D9C27AFB5C50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2383B3AFA35ADB2A3638A9F2AE0D9C27AFB5C50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/323830343a343333383a3a2f33332d3333203d3e20323637353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4338::/33

    Signature Algorithm: sha256WithRSAEncryption
         0a:2a:a0:fe:fd:d5:d5:74:85:00:96:83:05:42:d4:52:56:d8:
         fb:6a:d8:4e:1d:80:8b:82:42:5b:90:d5:41:7e:21:46:d5:ae:
         56:72:3d:ec:aa:8f:6f:45:30:78:30:9f:0e:92:cc:e3:22:76:
         0e:d8:4e:0e:ee:0f:36:19:16:6e:96:fe:4e:3c:e3:a8:8c:07:
         7e:cf:08:f6:57:72:ec:73:68:93:80:40:ed:8d:b2:5a:80:38:
         95:c9:82:62:71:7f:e2:01:74:95:04:ae:93:4f:dc:13:29:88:
         a3:43:a8:36:78:4f:15:c3:69:23:46:c8:e9:80:74:22:2a:b6:
         bc:f8:d4:41:c5:0f:0c:ca:74:0f:81:5e:f0:16:14:ba:ba:50:
         72:5a:27:8a:31:14:82:b8:c1:38:db:8e:7e:89:1e:93:1b:1e:
         cd:cc:ec:22:69:b2:c8:57:59:3f:4f:46:fe:7b:22:c6:d9:2f:
         9e:ef:00:bc:b9:fd:33:b4:d6:27:e1:88:df:fc:12:12:46:15:
         1a:fd:40:e7:e0:e7:d3:9a:63:fd:5b:b5:f7:8e:07:69:f1:41:
         2a:06:d7:1b:62:fb:7b:20:69:56:b6:7a:58:ba:8d:f9:8f:bf:
         14:17:14:4d:98:02:fe:0a:ba:3e:bf:4a:63:40:08:e0:38:aa:
         3f:fc:4e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:45 2025 by rpki-client on console.sobornost.net