Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/323830343a356162343a3a2f33322d3332203d3e20323638373930.roa
File:                     323830343a356162343a3a2f33322d3332203d3e20323638373930.roa (raw, json)
Hash identifier:          ayL12bHl+PqPAU+uhb+ytIVDw8l23c4xKAUS2QRpmHM=
Subject key identifier:   5C:E4:2F:EC:70:36:14:3E:63:59:F9:0D:5A:CB:61:A0:6F:17:96:7F
Certificate issuer:       /CN=D2B4C91EBE07D707EE775A157AA582BF4B533C62
Certificate serial:       7D52A2B12EAAE151870D0088DC57AC946DA58871
Authority key identifier: D2:B4:C9:1E:BE:07:D7:07:EE:77:5A:15:7A:A5:82:BF:4B:53:3C:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/323830343a356162343a3a2f33322d3332203d3e20323638373930.roa
Signing time:             Tue 15 Apr 2025 22:36:08 +0000
ROA not before:           Tue 15 Apr 2025 22:31:08 +0000
ROA not after:            Tue 14 Apr 2026 22:36:08 +0000
asID:                     268790
IP address blocks:        2804:5ab4::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.crl
                          rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 14:52:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:52:a2:b1:2e:aa:e1:51:87:0d:00:88:dc:57:ac:94:6d:a5:88:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2B4C91EBE07D707EE775A157AA582BF4B533C62
        Validity
            Not Before: Apr 15 22:31:08 2025 GMT
            Not After : Apr 14 22:36:08 2026 GMT
        Subject: CN=3082010A0282010100B527EF513ACB9168CA04846305547F8FF559C5184EE5FD2242B3258C3E46CFEE7049BE411C4894F199F060E0E64761FFEDD388C1AD75AD04EC79E565ECDCC9DE5B270FB88338003E52A89544DD54787539EDC5CDA1F4439FEDD7C51AF844C441AC72F15A70D68B0375FBF9C1D946FC1976F2A09C89D76F006326C8339F883F9EF88585F963EF6BBCA2D4CED827A51728D2D79C75B5B89584C45E39ED550CADBB6903628BFC3D80C9160F1D07D6D4EFF98E0E37758C993695E54024FAD6CD4A2E7A43874A60F2DCCA7D9898C9676FD405208805E81D9DB72228F7F93701C662C70040CE0CFB0CCC9DD9A309ABD16F624EF3403399D52F51D19F381AF8F34FEF4B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:27:ef:51:3a:cb:91:68:ca:04:84:63:05:54:
                    7f:8f:f5:59:c5:18:4e:e5:fd:22:42:b3:25:8c:3e:
                    46:cf:ee:70:49:be:41:1c:48:94:f1:99:f0:60:e0:
                    e6:47:61:ff:ed:d3:88:c1:ad:75:ad:04:ec:79:e5:
                    65:ec:dc:c9:de:5b:27:0f:b8:83:38:00:3e:52:a8:
                    95:44:dd:54:78:75:39:ed:c5:cd:a1:f4:43:9f:ed:
                    d7:c5:1a:f8:44:c4:41:ac:72:f1:5a:70:d6:8b:03:
                    75:fb:f9:c1:d9:46:fc:19:76:f2:a0:9c:89:d7:6f:
                    00:63:26:c8:33:9f:88:3f:9e:f8:85:85:f9:63:ef:
                    6b:bc:a2:d4:ce:d8:27:a5:17:28:d2:d7:9c:75:b5:
                    b8:95:84:c4:5e:39:ed:55:0c:ad:bb:69:03:62:8b:
                    fc:3d:80:c9:16:0f:1d:07:d6:d4:ef:f9:8e:0e:37:
                    75:8c:99:36:95:e5:40:24:fa:d6:cd:4a:2e:7a:43:
                    87:4a:60:f2:dc:ca:7d:98:98:c9:67:6f:d4:05:20:
                    88:05:e8:1d:9d:b7:22:28:f7:f9:37:01:c6:62:c7:
                    00:40:ce:0c:fb:0c:cc:9d:d9:a3:09:ab:d1:6f:62:
                    4e:f3:40:33:99:d5:2f:51:d1:9f:38:1a:f8:f3:4f:
                    ef:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E4:2F:EC:70:36:14:3E:63:59:F9:0D:5A:CB:61:A0:6F:17:96:7F
            X509v3 Authority Key Identifier:
                keyid:D2:B4:C9:1E:BE:07:D7:07:EE:77:5A:15:7A:A5:82:BF:4B:53:3C:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/323830343a356162343a3a2f33322d3332203d3e20323638373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ab4::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:d0:34:b5:64:4d:1a:b7:c1:c3:0b:1c:45:06:aa:f8:01:2a:
         e9:4a:f7:82:66:09:f7:8e:d9:6e:d5:89:b0:dd:ce:6f:f3:e9:
         1d:05:84:41:d3:1f:9f:27:ab:f2:c9:e6:87:8d:26:07:69:6f:
         4d:7a:5e:0e:e8:f6:a4:1f:47:f5:f2:b9:e9:c5:11:f9:a8:1d:
         35:65:0c:f8:cb:12:19:fc:41:8d:71:96:24:ac:72:5d:21:f6:
         28:89:fc:b8:d5:56:93:91:08:b8:49:77:74:bc:5b:58:2a:f0:
         b4:bf:de:b4:81:ce:74:aa:9f:89:a0:f5:80:32:e4:f0:d5:d4:
         38:23:2e:22:7f:ed:5d:ba:91:e9:40:b4:ad:7f:7f:56:be:47:
         b5:b1:80:9a:de:10:ce:7a:c0:f2:48:af:d6:3c:c4:50:cc:f2:
         54:ab:9a:4d:eb:d2:54:f6:c9:b7:a5:a5:d1:fc:35:bb:59:33:
         d6:c8:30:0f:ba:d0:f8:6c:ad:dd:ab:07:a5:e7:9b:8d:e9:08:
         12:c1:d3:17:fb:70:c1:9a:b0:d0:53:26:d9:53:da:5d:c7:6c:
         1d:f3:75:11:1b:1b:5d:5b:a3:6c:e6:a7:e5:32:1a:8b:78:2b:
         b8:d7:12:fc:40:aa:73:66:dc:60:63:15:53:e6:ef:3f:95:9e:
         81:0f:a4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:18:10 2025 by rpki-client on console.sobornost.net