Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/323830343a356162343a343030303a3a2f33342d3334203d3e20323638373930.roa
File:                     323830343a356162343a343030303a3a2f33342d3334203d3e20323638373930.roa (raw, json)
Hash identifier:          2Ue9ymERLfoMrRlWVD/QMnthUf0iep8NFqQmVcnHXYw=
Subject key identifier:   A2:60:EA:F5:4A:C0:BC:DF:5A:90:CF:4F:C0:DA:40:BF:68:F3:B2:46
Certificate issuer:       /CN=D2B4C91EBE07D707EE775A157AA582BF4B533C62
Certificate serial:       3E540C0F265EB2C7E9B08883666DBC4E7C967524
Authority key identifier: D2:B4:C9:1E:BE:07:D7:07:EE:77:5A:15:7A:A5:82:BF:4B:53:3C:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/323830343a356162343a343030303a3a2f33342d3334203d3e20323638373930.roa
Signing time:             Tue 15 Apr 2025 22:36:08 +0000
ROA not before:           Tue 15 Apr 2025 22:31:08 +0000
ROA not after:            Tue 14 Apr 2026 22:36:08 +0000
asID:                     268790
IP address blocks:        2804:5ab4:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.crl
                          rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 14:52:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:54:0c:0f:26:5e:b2:c7:e9:b0:88:83:66:6d:bc:4e:7c:96:75:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2B4C91EBE07D707EE775A157AA582BF4B533C62
        Validity
            Not Before: Apr 15 22:31:08 2025 GMT
            Not After : Apr 14 22:36:08 2026 GMT
        Subject: CN=3082010A0282010100DE79B97AB0BD944829DA215B2F3EF0FF252CF51587D7E6F25B042919605FABBB255C17B0CB3742C45355693369D049A95547950AF6809BF2F97CA4511209EC883DDF98D5E4778A92DF7D204210C8F266BBEE04F111537022640043FA548A9866563439CBE4D4ABB4A86F0290EEB25D0C729611304EBCE472B75A5F5C70C05FFABAC693918211484B962C3B897D3C66366CDCE598EACBEEA8F09DF29CB9C6FB9E573185E7DA29ADE3A89E47AA5417E3E76FD2D922AD171D2214E3CCA7677F05D74E714372DBD081CC9353D1CAA34FE2DF38D793A6C4E8660208D6C2B9D71FD0DCB70C5D72197170A51DF9A8AC1474BE1F910D925A41A674E3200EC5A316CFA5C90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:79:b9:7a:b0:bd:94:48:29:da:21:5b:2f:3e:
                    f0:ff:25:2c:f5:15:87:d7:e6:f2:5b:04:29:19:60:
                    5f:ab:bb:25:5c:17:b0:cb:37:42:c4:53:55:69:33:
                    69:d0:49:a9:55:47:95:0a:f6:80:9b:f2:f9:7c:a4:
                    51:12:09:ec:88:3d:df:98:d5:e4:77:8a:92:df:7d:
                    20:42:10:c8:f2:66:bb:ee:04:f1:11:53:70:22:64:
                    00:43:fa:54:8a:98:66:56:34:39:cb:e4:d4:ab:b4:
                    a8:6f:02:90:ee:b2:5d:0c:72:96:11:30:4e:bc:e4:
                    72:b7:5a:5f:5c:70:c0:5f:fa:ba:c6:93:91:82:11:
                    48:4b:96:2c:3b:89:7d:3c:66:36:6c:dc:e5:98:ea:
                    cb:ee:a8:f0:9d:f2:9c:b9:c6:fb:9e:57:31:85:e7:
                    da:29:ad:e3:a8:9e:47:aa:54:17:e3:e7:6f:d2:d9:
                    22:ad:17:1d:22:14:e3:cc:a7:67:7f:05:d7:4e:71:
                    43:72:db:d0:81:cc:93:53:d1:ca:a3:4f:e2:df:38:
                    d7:93:a6:c4:e8:66:02:08:d6:c2:b9:d7:1f:d0:dc:
                    b7:0c:5d:72:19:71:70:a5:1d:f9:a8:ac:14:74:be:
                    1f:91:0d:92:5a:41:a6:74:e3:20:0e:c5:a3:16:cf:
                    a5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:60:EA:F5:4A:C0:BC:DF:5A:90:CF:4F:C0:DA:40:BF:68:F3:B2:46
            X509v3 Authority Key Identifier:
                keyid:D2:B4:C9:1E:BE:07:D7:07:EE:77:5A:15:7A:A5:82:BF:4B:53:3C:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/323830343a356162343a343030303a3a2f33342d3334203d3e20323638373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ab4:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         38:90:14:2c:85:3a:a5:09:04:03:ef:3e:f5:f2:22:71:91:ec:
         a8:ed:db:3c:44:b0:35:dd:df:f1:e0:be:f1:a7:e5:9d:50:e3:
         04:b8:28:5b:37:8d:88:c9:dd:7f:d3:9b:8b:6b:59:f6:bb:8b:
         b5:6f:4b:fa:9b:8e:09:e4:73:cc:75:f1:c5:ae:40:57:c5:82:
         87:91:76:13:21:fa:c3:14:4c:04:bd:12:0d:b4:56:b3:db:4e:
         5b:2e:48:a2:35:b9:e6:1c:39:9e:e6:5d:a1:f9:b7:ba:7e:01:
         46:39:d0:84:11:11:fa:d2:c6:d3:e3:f0:0f:ec:1f:15:bb:b7:
         1e:01:ec:97:ba:2d:81:e5:6e:53:c0:a6:ea:39:be:0a:8e:39:
         3f:5d:8a:0e:a7:07:0b:9c:e8:0a:88:40:8c:4b:da:98:12:ed:
         b0:08:67:ea:2a:e4:c3:b1:85:7f:48:cf:2d:5e:fc:fd:a5:ee:
         3b:e1:88:fe:fe:09:fd:5e:44:5c:f3:94:c3:ed:5c:d5:1b:95:
         ad:94:09:6c:e2:de:ec:9a:d3:61:1b:6d:0e:da:5b:80:d6:85:
         13:a5:4c:f5:05:77:0a:3f:f1:ff:e9:68:bd:cd:44:c8:09:2f:
         ab:1e:a2:f0:88:13:9f:e7:15:b3:87:86:f2:38:af:7f:12:f0:
         33:ae:cd:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:18:10 2025 by rpki-client on console.sobornost.net