Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/323830343a356162343a383030303a3a2f33332d3333203d3e20323638373930.roa
File:                     323830343a356162343a383030303a3a2f33332d3333203d3e20323638373930.roa (raw, json)
Hash identifier:          CvTX0WBgtDeo/ResaHOMpDUaItBeSiECQiPY+nDGb9w=
Subject key identifier:   A4:CD:F2:B0:6E:48:44:7A:B2:FB:BA:F3:0C:58:BD:EC:97:D4:B1:F6
Certificate issuer:       /CN=D2B4C91EBE07D707EE775A157AA582BF4B533C62
Certificate serial:       1AA6FC38A4F18700A451384D91F38A139EDB6557
Authority key identifier: D2:B4:C9:1E:BE:07:D7:07:EE:77:5A:15:7A:A5:82:BF:4B:53:3C:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/323830343a356162343a383030303a3a2f33332d3333203d3e20323638373930.roa
Signing time:             Tue 15 Apr 2025 22:36:08 +0000
ROA not before:           Tue 15 Apr 2025 22:31:08 +0000
ROA not after:            Tue 14 Apr 2026 22:36:08 +0000
asID:                     268790
IP address blocks:        2804:5ab4:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.crl
                          rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 14:52:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:a6:fc:38:a4:f1:87:00:a4:51:38:4d:91:f3:8a:13:9e:db:65:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2B4C91EBE07D707EE775A157AA582BF4B533C62
        Validity
            Not Before: Apr 15 22:31:08 2025 GMT
            Not After : Apr 14 22:36:08 2026 GMT
        Subject: CN=3082010A0282010100AEE7B822E3F913ED6C36021B9C704164FC511B3688504E6B456E7EB5A699054BB4DAE0F1A1F360675667747E96584E3C9E3347CEB1D2C923D29B7714179B5881F280DBE463797EE14DE39AA8C2AD26FCADD3491BB281E579438C82C89E6DA5A40A07FBD739AD9ED7F83E1B23B9BDF6B3CD45399E718A43C62CA2EE04EF79E01E6A0C5A73B7C048D226310CC537C6C560D128D0519D3079C14A98D921B364C4FB7489DB0E6D79A8709F224F9886B70F5EE16F0C15AF95D208EF774DCD597948A9D4D17342EAF6AE72708D31907FD27E436639A41C9533D04AA82C37C3F380BC7B00A6749D75DE32C38941CAD3CB23E5CE582CFE686C879CC28975D75966845CBB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e7:b8:22:e3:f9:13:ed:6c:36:02:1b:9c:70:
                    41:64:fc:51:1b:36:88:50:4e:6b:45:6e:7e:b5:a6:
                    99:05:4b:b4:da:e0:f1:a1:f3:60:67:56:67:74:7e:
                    96:58:4e:3c:9e:33:47:ce:b1:d2:c9:23:d2:9b:77:
                    14:17:9b:58:81:f2:80:db:e4:63:79:7e:e1:4d:e3:
                    9a:a8:c2:ad:26:fc:ad:d3:49:1b:b2:81:e5:79:43:
                    8c:82:c8:9e:6d:a5:a4:0a:07:fb:d7:39:ad:9e:d7:
                    f8:3e:1b:23:b9:bd:f6:b3:cd:45:39:9e:71:8a:43:
                    c6:2c:a2:ee:04:ef:79:e0:1e:6a:0c:5a:73:b7:c0:
                    48:d2:26:31:0c:c5:37:c6:c5:60:d1:28:d0:51:9d:
                    30:79:c1:4a:98:d9:21:b3:64:c4:fb:74:89:db:0e:
                    6d:79:a8:70:9f:22:4f:98:86:b7:0f:5e:e1:6f:0c:
                    15:af:95:d2:08:ef:77:4d:cd:59:79:48:a9:d4:d1:
                    73:42:ea:f6:ae:72:70:8d:31:90:7f:d2:7e:43:66:
                    39:a4:1c:95:33:d0:4a:a8:2c:37:c3:f3:80:bc:7b:
                    00:a6:74:9d:75:de:32:c3:89:41:ca:d3:cb:23:e5:
                    ce:58:2c:fe:68:6c:87:9c:c2:89:75:d7:59:66:84:
                    5c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:CD:F2:B0:6E:48:44:7A:B2:FB:BA:F3:0C:58:BD:EC:97:D4:B1:F6
            X509v3 Authority Key Identifier:
                keyid:D2:B4:C9:1E:BE:07:D7:07:EE:77:5A:15:7A:A5:82:BF:4B:53:3C:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/323830343a356162343a383030303a3a2f33332d3333203d3e20323638373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ab4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         0d:f2:44:ee:2d:90:81:7e:23:fc:c6:8f:09:ad:f5:d9:a3:a7:
         42:3b:6f:38:7f:b4:6a:e0:8b:bf:06:d6:a6:6d:b0:e9:db:a8:
         6e:b0:b3:ac:b5:3d:b8:77:aa:70:10:9c:64:2b:0e:75:9c:97:
         58:9c:79:b4:17:08:05:f3:26:bb:eb:1e:98:d0:c8:16:2e:e6:
         1d:59:22:2f:c6:c1:dc:dc:2c:c9:3e:19:1d:dd:78:b9:3c:cb:
         7a:80:f8:1a:f8:ae:be:45:ce:77:4e:41:53:b8:e8:81:39:86:
         59:8f:46:42:87:7b:15:fc:ba:dc:02:a8:28:81:4e:ad:fd:42:
         70:00:84:9d:7a:42:e2:ea:32:1d:76:1e:9f:96:f3:22:9e:13:
         92:a9:e7:80:7d:5b:c6:0a:69:ef:22:3a:36:f3:0b:20:70:56:
         33:19:15:7f:2a:cd:1a:78:73:17:d4:bf:91:7c:22:ad:68:88:
         d1:da:69:bb:de:7b:5a:78:4a:30:7a:0b:10:15:6b:10:01:ce:
         e4:7a:6f:42:32:9e:ec:18:80:ff:77:85:13:2c:87:6d:63:5f:
         9e:95:8f:0e:a6:32:20:8d:d7:9b:77:c5:64:33:fe:7b:92:a0:
         b4:fb:d3:c7:ad:8d:4a:2e:f9:ef:d9:bc:c6:6f:8e:4b:cd:3a:
         03:c0:a3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:18:10 2025 by rpki-client on console.sobornost.net