Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/323830343a356162343a383230303a3a2f34302d3430203d3e20323638373930.roa
File:                     323830343a356162343a383230303a3a2f34302d3430203d3e20323638373930.roa (raw, json)
Hash identifier:          UgAHVQs18miLcY+BXZCLfEZ8oMjHdl+SD+JgC7Hp3Ls=
Subject key identifier:   56:79:D4:4C:EA:E4:6D:23:E5:03:16:BB:F3:76:49:85:8A:25:F2:7B
Certificate issuer:       /CN=D2B4C91EBE07D707EE775A157AA582BF4B533C62
Certificate serial:       486D9252A260F91C9781381CEDADC53E99DD8E36
Authority key identifier: D2:B4:C9:1E:BE:07:D7:07:EE:77:5A:15:7A:A5:82:BF:4B:53:3C:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/323830343a356162343a383230303a3a2f34302d3430203d3e20323638373930.roa
Signing time:             Tue 15 Apr 2025 22:37:37 +0000
ROA not before:           Tue 15 Apr 2025 22:32:37 +0000
ROA not after:            Tue 14 Apr 2026 22:37:37 +0000
asID:                     268790
IP address blocks:        2804:5ab4:8200::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.crl
                          rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 14:52:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:6d:92:52:a2:60:f9:1c:97:81:38:1c:ed:ad:c5:3e:99:dd:8e:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2B4C91EBE07D707EE775A157AA582BF4B533C62
        Validity
            Not Before: Apr 15 22:32:37 2025 GMT
            Not After : Apr 14 22:37:37 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1c:e0:78:81:05:f4:f5:54:e2:21:b8:13:28:
                    c6:01:b4:ab:a4:83:c5:63:42:2d:21:ac:e0:de:63:
                    a8:56:e0:26:43:86:a4:cc:f9:a8:ca:d1:5f:05:1c:
                    40:d5:d0:29:94:16:62:2c:37:64:2f:df:95:42:5e:
                    a1:4f:61:c5:3b:a6:01:2c:db:b6:65:ab:44:3d:09:
                    d4:43:98:e1:66:67:74:00:56:a6:52:bc:54:05:9b:
                    e1:22:25:06:3b:73:aa:d3:be:9f:6e:c8:a6:e6:bc:
                    6a:1d:32:d7:37:87:7d:12:31:35:4d:b1:f0:95:75:
                    75:f1:b8:66:23:f1:f5:39:ae:82:2b:5e:1a:2b:7c:
                    39:e6:31:c3:37:be:e6:6e:37:4c:60:14:3c:04:40:
                    0b:95:47:37:b9:68:73:b7:f6:b1:b5:14:74:2b:3d:
                    ba:d6:67:ca:4d:b4:bf:24:28:b3:ab:8d:23:ed:1a:
                    a2:fd:14:24:5a:75:92:0c:af:40:ea:e5:73:d6:a9:
                    33:a7:8f:93:f5:53:e1:20:6f:18:6f:a0:f3:c7:ad:
                    ee:85:ce:8a:6c:89:ba:38:87:60:c6:af:bb:ab:1f:
                    d4:57:7c:6f:ea:0a:ac:2c:83:fe:89:4a:0b:14:3e:
                    74:c3:10:e4:65:e5:21:f1:0c:72:64:26:29:97:7d:
                    46:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:79:D4:4C:EA:E4:6D:23:E5:03:16:BB:F3:76:49:85:8A:25:F2:7B
            X509v3 Authority Key Identifier:
                keyid:D2:B4:C9:1E:BE:07:D7:07:EE:77:5A:15:7A:A5:82:BF:4B:53:3C:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/323830343a356162343a383230303a3a2f34302d3430203d3e20323638373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ab4:8200::/40

    Signature Algorithm: sha256WithRSAEncryption
         2e:f7:e2:f5:3e:09:40:26:db:d4:e1:f7:02:8e:84:20:16:0d:
         1b:fb:f2:e8:61:84:6a:2f:ff:43:9e:29:3d:b9:02:f2:9d:d0:
         c3:32:f1:7b:a0:02:6e:c1:44:02:ef:f9:23:dd:6d:f7:35:82:
         7d:5c:af:30:f4:72:89:cb:01:a8:92:1c:a4:47:12:60:8f:d4:
         03:62:86:f7:23:6c:95:08:cd:58:fb:12:b1:f8:fa:df:e6:e4:
         dd:f0:16:be:7c:fb:75:b6:fd:95:04:3f:ff:ee:9c:02:36:22:
         99:82:7d:c6:70:74:34:e3:14:f2:7f:c0:f9:aa:6f:a1:b3:a0:
         70:f6:2c:2a:ed:82:2e:cc:28:0e:54:74:aa:d4:1c:e2:4d:3f:
         8f:b2:2a:00:1d:9f:2a:06:95:06:60:27:26:d6:de:02:9c:74:
         d6:30:fe:bb:e0:b0:71:7c:90:9c:4e:41:7a:91:07:8b:72:97:
         0b:36:be:85:f8:ea:c7:45:1a:e0:e8:6d:7e:e3:61:03:2f:92:
         15:3e:22:4b:53:ec:60:bd:69:34:43:84:b8:e2:81:2b:e8:6d:
         11:f4:c0:7f:4b:8a:8c:e2:2e:92:b9:ee:c5:d4:f5:b5:7e:92:
         75:bb:35:56:5d:24:a4:09:83:b4:cc:29:55:76:0a:2e:28:8d:
         03:9d:5b:60
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUSG2SUqJg+RyXgTgc7a3FPpndjjYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDJCNEM5MUVCRTA3RDcwN0VFNzc1QTE1N0FBNTgyQkY0
QjUzM0M2MjAeFw0yNTA0MTUyMjMyMzdaFw0yNjA0MTQyMjM3MzdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTUxQ0UwNzg4MTA1RjRGNTU0
RTIyMUI4MTMyOEM2MDFCNEFCQTQ4M0M1NjM0MjJEMjFBQ0UwREU2M0E4NTZFMDI2
NDM4NkE0Q0NGOUE4Q0FEMTVGMDUxQzQwRDVEMDI5OTQxNjYyMkMzNzY0MkZERjk1
NDI1RUExNEY2MUM1M0JBNjAxMkNEQkI2NjVBQjQ0M0QwOUQ0NDM5OEUxNjY2Nzc0
MDA1NkE2NTJCQzU0MDU5QkUxMjIyNTA2M0I3M0FBRDNCRTlGNkVDOEE2RTZCQzZB
MUQzMkQ3Mzc4NzdEMTIzMTM1NERCMUYwOTU3NTc1RjFCODY2MjNGMUY1MzlBRTgy
MkI1RTFBMkI3QzM5RTYzMUMzMzdCRUU2NkUzNzRDNjAxNDNDMDQ0MDBCOTU0NzM3
Qjk2ODczQjdGNkIxQjUxNDc0MkIzREJBRDY2N0NBNERCNEJGMjQyOEIzQUI4RDIz
RUQxQUEyRkQxNDI0NUE3NTkyMENBRjQwRUFFNTczRDZBOTMzQTc4RjkzRjU1M0Ux
MjA2RjE4NkZBMEYzQzdBREVFODVDRThBNkM4OUJBMzg4NzYwQzZBRkJCQUIxRkQ0
NTc3QzZGRUEwQUFDMkM4M0ZFODk0QTBCMTQzRTc0QzMxMEU0NjVFNTIxRjEwQzcy
NjQyNjI5OTc3RDQ2RDEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEApRzgeIEF9PVU4iG4EyjGAbSrpIPFY0ItIazg3mOoVuAmQ4akzPmo
ytFfBRxA1dAplBZiLDdkL9+VQl6hT2HFO6YBLNu2ZatEPQnUQ5jhZmd0AFamUrxU
BZvhIiUGO3Oq076fbsim5rxqHTLXN4d9EjE1TbHwlXV18bhmI/H1Oa6CK14aK3w5
5jHDN77mbjdMYBQ8BEALlUc3uWhzt/axtRR0Kz261mfKTbS/JCizq40j7Rqi/RQk
WnWSDK9A6uVz1qkzp4+T9VPhIG8Yb6Dzx63uhc6KbIm6OIdgxq+7qx/UV3xv6gqs
LIP+iUoLFD50wxDkZeUh8QxyZCYpl31G0QIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FFZ51Ezq5G0j5QMWu/N2SYWKJfJ7MB8GA1UdIwQYMBaAFNK0yR6+B9cH7ndaFXql
gr9LUzxiMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRyeW9HU1o0bmNaN01j
OGRoQ1ViczVWaHNBa1RDMm95QzFoNm1OQzhIVlpYLzEvRDJCNEM5MUVCRTA3RDcw
N0VFNzc1QTE1N0FBNTgyQkY0QjUzM0M2Mi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9EMkI0QzkxRUJFMDdENzA3RUU3NzVBMTU3QUE1ODJCRjRCNTMz
QzYyLmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80cnlvR1NaNG5jWjdNYzhkaENV
YnM1VmhzQWtUQzJveUMxaDZtTkM4SFZaWC8xLzMyMzgzMDM0M2EzNTYxNjIzNDNh
MzgzMjMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzMjM2MzgzNzM5MzAucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgAoBFq0gjANBgkqhkiG9w0BAQsFAAOCAQEALvfi9T4JQCbb1OH3Ao6E
IBYNG/vy6GGEai//Q54pPbkC8p3QwzLxe6ACbsFEAu/5I91t9zWCfVyvMPRyicsB
qJIcpEcSYI/UA2KG9yNslQjNWPsSsfj63+bk3fAWvnz7dbb9lQQ//+6cAjYimYJ9
xnB0NOMU8n/A+apvobOgcPYsKu2CLswoDlR0qtQc4k0/j7IqAB2fKgaVBmAnJtbe
Apx01jD+u+CwcXyQnE5BepEHi3KXCza+hfjqx0Ua4OhtfuNhAy+SFT4iS1PsYL1p
NEOEuOKBK+htEfTAf0uKjOIukrnuxdT1tX6Sdbs1Vl0kpAmDtMwpVXYKLiiNA51b
YA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:18:10 2025 by rpki-client on console.sobornost.net