Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/323830343a356162343a383030303a3a2f34302d3430203d3e20323638373930.roa
File:                     323830343a356162343a383030303a3a2f34302d3430203d3e20323638373930.roa (raw, json)
Hash identifier:          MAAIgKFqCiLxEV9DViaLdng0HUgAZULm0ng7tDbPoA4=
Subject key identifier:   70:AD:CC:0B:FC:86:FA:8D:DE:90:63:86:05:2B:53:79:6E:8B:AD:5F
Certificate issuer:       /CN=D2B4C91EBE07D707EE775A157AA582BF4B533C62
Certificate serial:       2E9927105D2618433D6510237749BE765B371201
Authority key identifier: D2:B4:C9:1E:BE:07:D7:07:EE:77:5A:15:7A:A5:82:BF:4B:53:3C:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/323830343a356162343a383030303a3a2f34302d3430203d3e20323638373930.roa
Signing time:             Tue 15 Apr 2025 22:36:54 +0000
ROA not before:           Tue 15 Apr 2025 22:31:54 +0000
ROA not after:            Tue 14 Apr 2026 22:36:54 +0000
asID:                     268790
IP address blocks:        2804:5ab4:8000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.crl
                          rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 14:52:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:99:27:10:5d:26:18:43:3d:65:10:23:77:49:be:76:5b:37:12:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2B4C91EBE07D707EE775A157AA582BF4B533C62
        Validity
            Not Before: Apr 15 22:31:54 2025 GMT
            Not After : Apr 14 22:36:54 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:15:08:9c:aa:e1:a3:86:68:01:ef:37:95:bb:
                    82:44:4e:e4:fe:5b:29:81:82:6d:0a:cf:6b:95:0f:
                    0b:5f:49:5a:cb:5f:c7:db:17:0f:11:26:c0:79:98:
                    77:6d:3e:9e:9e:10:91:5b:fc:07:e5:75:e2:bd:96:
                    f6:5f:20:7d:5c:f1:e6:71:35:cc:34:28:a2:94:db:
                    12:88:5e:d7:b3:83:6e:02:8e:7b:41:48:6f:db:4f:
                    da:31:de:f8:0a:40:e7:53:22:05:e0:fd:11:d0:25:
                    44:65:da:18:b8:66:e8:a4:f0:8b:0c:55:85:2d:60:
                    b7:38:c6:d0:af:da:14:3f:99:68:74:a9:0a:ec:54:
                    d3:db:37:c7:38:d1:a1:f8:6c:0b:17:dc:19:3e:3b:
                    42:bd:69:68:dd:a7:31:87:7b:b2:79:fb:49:d7:e2:
                    f7:42:47:35:93:22:e7:9a:e8:2f:45:f7:3f:7e:28:
                    47:2e:59:b7:b2:8f:a1:c9:83:f7:c8:68:b6:e6:21:
                    18:f9:22:aa:05:0b:96:ad:60:9e:8f:6e:d3:96:42:
                    e0:f0:04:f7:c8:0f:c5:5b:87:9f:e6:6e:5d:26:f1:
                    c5:27:86:dd:a0:f7:56:cd:e1:28:b0:80:20:f2:90:
                    89:ef:1c:86:ef:55:f8:95:02:24:2e:9e:b2:63:59:
                    cd:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:AD:CC:0B:FC:86:FA:8D:DE:90:63:86:05:2B:53:79:6E:8B:AD:5F
            X509v3 Authority Key Identifier:
                keyid:D2:B4:C9:1E:BE:07:D7:07:EE:77:5A:15:7A:A5:82:BF:4B:53:3C:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/323830343a356162343a383030303a3a2f34302d3430203d3e20323638373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ab4:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         64:22:59:c9:2b:68:ac:39:4b:7f:33:31:f6:0c:61:b3:64:59:
         c8:94:69:c3:8a:9a:79:37:57:6b:cd:f4:e5:2d:6f:fa:7a:b3:
         13:bc:6b:12:78:16:d6:4b:40:77:32:ee:ac:90:1f:b7:39:e6:
         b8:18:37:a4:e7:3c:03:af:86:3f:9f:22:82:a7:bf:87:79:33:
         30:9d:da:f5:0e:eb:dc:b9:9d:96:0a:4a:fd:d6:28:85:7f:fa:
         47:84:0b:23:3d:3f:85:34:11:5e:a8:b9:3f:26:ee:50:4b:60:
         14:a8:3e:83:d8:26:f8:80:87:fa:e6:5d:12:dc:bc:f6:97:f4:
         3e:f7:f8:1f:f8:27:dc:4b:46:e2:b8:26:5a:31:cc:18:68:bd:
         38:4a:e3:0c:86:fe:4e:58:10:5c:d0:9b:79:0b:30:41:04:bb:
         8f:99:d8:ad:b7:1e:3f:70:09:3c:e6:10:d9:ef:e3:34:71:0d:
         1f:54:53:1e:82:82:73:39:0c:35:56:3c:1f:05:76:23:1d:3c:
         cd:45:2d:8f:78:d4:b0:1e:d6:0f:d8:1d:60:10:68:a0:f1:ae:
         5c:30:b6:5c:1e:c9:05:75:bf:f2:3e:6e:03:f7:3d:bf:64:8e:
         aa:96:67:bd:13:bb:5b:30:2e:4a:00:ef:61:48:9d:94:96:d4:
         8c:81:59:79
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIULpknEF0mGEM9ZRAjd0m+dls3EgEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDJCNEM5MUVCRTA3RDcwN0VFNzc1QTE1N0FBNTgyQkY0
QjUzM0M2MjAeFw0yNTA0MTUyMjMxNTRaFw0yNjA0MTQyMjM2NTRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkYxNTA4OUNBQUUxQTM4NjY4
MDFFRjM3OTVCQjgyNDQ0RUU0RkU1QjI5ODE4MjZEMEFDRjZCOTUwRjBCNUY0OTVB
Q0I1RkM3REIxNzBGMTEyNkMwNzk5ODc3NkQzRTlFOUUxMDkxNUJGQzA3RTU3NUUy
QkQ5NkY2NUYyMDdENUNGMUU2NzEzNUNDMzQyOEEyOTREQjEyODg1RUQ3QjM4MzZF
MDI4RTdCNDE0ODZGREI0RkRBMzFERUY4MEE0MEU3NTMyMjA1RTBGRDExRDAyNTQ0
NjVEQTE4Qjg2NkU4QTRGMDhCMEM1NTg1MkQ2MEI3MzhDNkQwQUZEQTE0M0Y5OTY4
NzRBOTBBRUM1NEQzREIzN0M3MzhEMUExRjg2QzBCMTdEQzE5M0UzQjQyQkQ2OTY4
RERBNzMxODc3QkIyNzlGQjQ5RDdFMkY3NDI0NzM1OTMyMkU3OUFFODJGNDVGNzNG
N0UyODQ3MkU1OUI3QjI4RkExQzk4M0Y3Qzg2OEI2RTYyMTE4RjkyMkFBMDUwQjk2
QUQ2MDlFOEY2RUQzOTY0MkUwRjAwNEY3QzgwRkM1NUI4NzlGRTY2RTVEMjZGMUM1
Mjc4NkREQTBGNzU2Q0RFMTI4QjA4MDIwRjI5MDg5RUYxQzg2RUY1NUY4OTUwMjI0
MkU5RUIyNjM1OUNENTMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvxUInKrho4ZoAe83lbuCRE7k/lspgYJtCs9rlQ8LX0lay1/H2xcP
ESbAeZh3bT6enhCRW/wH5XXivZb2XyB9XPHmcTXMNCiilNsSiF7Xs4NuAo57QUhv
20/aMd74CkDnUyIF4P0R0CVEZdoYuGbopPCLDFWFLWC3OMbQr9oUP5lodKkK7FTT
2zfHONGh+GwLF9wZPjtCvWlo3acxh3uyeftJ1+L3Qkc1kyLnmugvRfc/fihHLlm3
so+hyYP3yGi25iEY+SKqBQuWrWCej27TlkLg8AT3yA/FW4ef5m5dJvHFJ4bdoPdW
zeEosIAg8pCJ7xyG71X4lQIkLp6yY1nNUwIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FHCtzAv8hvqN3pBjhgUrU3lui61fMB8GA1UdIwQYMBaAFNK0yR6+B9cH7ndaFXql
gr9LUzxiMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRyeW9HU1o0bmNaN01j
OGRoQ1ViczVWaHNBa1RDMm95QzFoNm1OQzhIVlpYLzEvRDJCNEM5MUVCRTA3RDcw
N0VFNzc1QTE1N0FBNTgyQkY0QjUzM0M2Mi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9EMkI0QzkxRUJFMDdENzA3RUU3NzVBMTU3QUE1ODJCRjRCNTMz
QzYyLmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80cnlvR1NaNG5jWjdNYzhkaENV
YnM1VmhzQWtUQzJveUMxaDZtTkM4SFZaWC8xLzMyMzgzMDM0M2EzNTYxNjIzNDNh
MzgzMDMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzMjM2MzgzNzM5MzAucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgAoBFq0gDANBgkqhkiG9w0BAQsFAAOCAQEAZCJZyStorDlLfzMx9gxh
s2RZyJRpw4qaeTdXa8305S1v+nqzE7xrEngW1ktAdzLurJAftznmuBg3pOc8A6+G
P58igqe/h3kzMJ3a9Q7r3LmdlgpK/dYohX/6R4QLIz0/hTQRXqi5PybuUEtgFKg+
g9gm+ICH+uZdEty89pf0Pvf4H/gn3EtG4rgmWjHMGGi9OErjDIb+TlgQXNCbeQsw
QQS7j5nYrbceP3AJPOYQ2e/jNHENH1RTHoKCczkMNVY8HwV2Ix08zUUtj3jUsB7W
D9gdYBBooPGuXDC2XB7JBXW/8j5uA/c9v2SOqpZnvRO7WzAuSgDvYUidlJbUjIFZ
eQ==
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:18:10 2025 by rpki-client on console.sobornost.net