Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/323830343a356162343a3a2f33332d3333203d3e20323638373930.roa
File:                     323830343a356162343a3a2f33332d3333203d3e20323638373930.roa (raw, json)
Hash identifier:          lFtj6vPzzJgiBjq01EsR0+if+biGWWuyPuSH/jTiPN8=
Subject key identifier:   F7:E9:83:D0:28:23:35:15:AE:AA:EA:6C:44:E0:02:10:5D:14:C6:3F
Certificate issuer:       /CN=D2B4C91EBE07D707EE775A157AA582BF4B533C62
Certificate serial:       65AFE0FDF5B4FF191CBD907D37854D623CB255EE
Authority key identifier: D2:B4:C9:1E:BE:07:D7:07:EE:77:5A:15:7A:A5:82:BF:4B:53:3C:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/323830343a356162343a3a2f33332d3333203d3e20323638373930.roa
Signing time:             Tue 15 Apr 2025 22:36:08 +0000
ROA not before:           Tue 15 Apr 2025 22:31:08 +0000
ROA not after:            Tue 14 Apr 2026 22:36:08 +0000
asID:                     268790
IP address blocks:        2804:5ab4::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.crl
                          rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 14:52:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:af:e0:fd:f5:b4:ff:19:1c:bd:90:7d:37:85:4d:62:3c:b2:55:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2B4C91EBE07D707EE775A157AA582BF4B533C62
        Validity
            Not Before: Apr 15 22:31:08 2025 GMT
            Not After : Apr 14 22:36:08 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:61:c5:9b:f3:cd:f1:6d:f2:41:90:99:5e:1f:
                    9e:a7:6f:29:9a:ce:b5:3b:6e:b4:dc:8a:2f:80:47:
                    a3:8f:75:66:69:6b:f4:70:45:e9:53:91:bd:a2:c4:
                    5e:ba:f7:88:9b:66:fe:4f:b9:e4:17:6b:02:e0:1e:
                    e2:c7:49:c3:65:8a:8b:05:1e:f9:02:31:c7:a5:5d:
                    de:a0:a5:c6:23:4f:ff:25:80:58:41:45:4f:33:aa:
                    d5:e8:70:b0:c5:a1:90:b0:ed:04:c5:bf:49:4a:05:
                    14:33:a1:5d:bd:94:a9:55:ad:04:60:52:58:e2:e5:
                    4e:2e:69:f8:12:a1:b0:8d:cd:f6:04:75:47:da:fb:
                    f1:26:70:ef:fd:73:0f:77:c5:d3:75:7b:92:9d:32:
                    45:3c:a9:cb:8d:f1:03:73:b1:de:18:eb:22:95:45:
                    d6:6d:82:29:2a:62:d3:10:4a:c2:bd:fe:8c:3f:f5:
                    72:99:a1:44:75:34:1e:84:8e:ca:4c:c9:58:96:bd:
                    e2:bc:47:c2:33:aa:c9:8c:74:f2:39:d1:f0:03:62:
                    00:e1:cf:7b:f0:ec:63:9f:12:fd:cd:c8:6b:0b:0b:
                    80:86:9a:17:cb:07:ee:77:4b:1f:c5:85:28:7b:69:
                    67:6b:61:43:ca:47:63:0f:75:4c:e1:d5:3f:69:35:
                    e3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:E9:83:D0:28:23:35:15:AE:AA:EA:6C:44:E0:02:10:5D:14:C6:3F
            X509v3 Authority Key Identifier:
                keyid:D2:B4:C9:1E:BE:07:D7:07:EE:77:5A:15:7A:A5:82:BF:4B:53:3C:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/323830343a356162343a3a2f33332d3333203d3e20323638373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ab4::/33

    Signature Algorithm: sha256WithRSAEncryption
         73:40:ad:d3:89:da:d3:b2:9f:51:99:78:8a:33:5c:92:2f:c3:
         ea:2f:23:0f:84:0c:fa:57:a1:2b:eb:ee:5d:87:b1:ac:96:10:
         b4:9a:5a:ac:51:7f:48:83:ce:dc:db:08:a5:ba:4f:d9:cd:b5:
         10:74:fc:69:f4:98:f1:5a:3c:76:79:63:00:37:fc:84:9f:6d:
         0e:55:07:06:3b:b4:a6:ef:f9:1f:ea:2d:71:ce:92:10:37:1f:
         93:df:7f:b2:80:75:a0:25:b0:4f:f9:0c:f5:d0:30:fb:0c:ad:
         ca:3e:be:b5:83:1e:e6:a0:a0:6c:af:75:80:a7:be:d0:df:b1:
         05:dd:bd:80:56:95:de:2e:0b:25:ed:2b:ce:5d:81:8b:1a:4f:
         ef:43:30:45:8e:12:5d:f7:e6:0f:78:08:4a:6c:b7:66:cc:75:
         58:2f:f3:a8:58:51:4d:80:e1:5d:d0:c7:5e:88:c9:23:f5:ae:
         29:fd:fd:86:ce:8a:10:3d:61:f1:7d:2a:45:b9:61:24:d9:dc:
         78:8f:82:7b:f6:6b:98:e9:8c:bf:34:23:ef:8a:b2:ee:1b:e9:
         0c:f4:c7:9c:f3:dc:7d:82:51:de:04:c7:a7:84:ae:da:6b:c1:
         7e:87:83:9f:df:2c:77:01:88:e0:75:86:bd:f4:fe:2c:e8:72:
         75:16:05:93
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUZa/g/fW0/xkcvZB9N4VNYjyyVe4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDJCNEM5MUVCRTA3RDcwN0VFNzc1QTE1N0FBNTgyQkY0
QjUzM0M2MjAeFw0yNTA0MTUyMjMxMDhaFw0yNjA0MTQyMjM2MDhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRjU2MUM1OUJGM0NERjE2REYy
NDE5MDk5NUUxRjlFQTc2RjI5OUFDRUI1M0I2RUI0REM4QTJGODA0N0EzOEY3NTY2
Njk2QkY0NzA0NUU5NTM5MUJEQTJDNDVFQkFGNzg4OUI2NkZFNEZCOUU0MTc2QjAy
RTAxRUUyQzc0OUMzNjU4QThCMDUxRUY5MDIzMUM3QTU1RERFQTBBNUM2MjM0RkZG
MjU4MDU4NDE0NTRGMzNBQUQ1RTg3MEIwQzVBMTkwQjBFRDA0QzVCRjQ5NEEwNTE0
MzNBMTVEQkQ5NEE5NTVBRDA0NjA1MjU4RTJFNTRFMkU2OUY4MTJBMUIwOERDREY2
MDQ3NTQ3REFGQkYxMjY3MEVGRkQ3MzBGNzdDNUQzNzU3QjkyOUQzMjQ1M0NBOUNC
OERGMTAzNzNCMURFMThFQjIyOTU0NUQ2NkQ4MjI5MkE2MkQzMTA0QUMyQkRGRThD
M0ZGNTcyOTlBMTQ0NzUzNDFFODQ4RUNBNENDOTU4OTZCREUyQkM0N0MyMzNBQUM5
OEM3NEYyMzlEMUYwMDM2MjAwRTFDRjdCRjBFQzYzOUYxMkZEQ0RDODZCMEIwQjgw
ODY5QTE3Q0IwN0VFNzc0QjFGQzU4NTI4N0I2OTY3NkI2MTQzQ0E0NzYzMEY3NTRD
RTFENTNGNjkzNUUzQzkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA9WHFm/PN8W3yQZCZXh+ep28pms61O2603IovgEejj3VmaWv0cEXp
U5G9osReuveIm2b+T7nkF2sC4B7ix0nDZYqLBR75AjHHpV3eoKXGI0//JYBYQUVP
M6rV6HCwxaGQsO0Exb9JSgUUM6FdvZSpVa0EYFJY4uVOLmn4EqGwjc32BHVH2vvx
JnDv/XMPd8XTdXuSnTJFPKnLjfEDc7HeGOsilUXWbYIpKmLTEErCvf6MP/VymaFE
dTQehI7KTMlYlr3ivEfCM6rJjHTyOdHwA2IA4c978OxjnxL9zchrCwuAhpoXywfu
d0sfxYUoe2lna2FDykdjD3VM4dU/aTXjyQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FPfpg9AoIzUVrqrqbETgAhBdFMY/MB8GA1UdIwQYMBaAFNK0yR6+B9cH7ndaFXql
gr9LUzxiMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRyeW9HU1o0bmNaN01j
OGRoQ1ViczVWaHNBa1RDMm95QzFoNm1OQzhIVlpYLzEvRDJCNEM5MUVCRTA3RDcw
N0VFNzc1QTE1N0FBNTgyQkY0QjUzM0M2Mi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9EMkI0QzkxRUJFMDdENzA3RUU3NzVBMTU3QUE1ODJCRjRCNTMz
QzYyLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80cnlvR1NaNG5jWjdNYzhkaENV
YnM1VmhzQWtUQzJveUMxaDZtTkM4SFZaWC8xLzMyMzgzMDM0M2EzNTYxNjIzNDNh
M2EyZjMzMzMyZDMzMzMyMDNkM2UyMDMyMzYzODM3MzkzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygE
WrQAMA0GCSqGSIb3DQEBCwUAA4IBAQBzQK3TidrTsp9RmXiKM1ySL8PqLyMPhAz6
V6Er6+5dh7GslhC0mlqsUX9Ig87c2wiluk/ZzbUQdPxp9JjxWjx2eWMAN/yEn20O
VQcGO7Sm7/kf6i1xzpIQNx+T33+ygHWgJbBP+Qz10DD7DK3KPr61gx7moKBsr3WA
p77Q37EF3b2AVpXeLgsl7SvOXYGLGk/vQzBFjhJd9+YPeAhKbLdmzHVYL/OoWFFN
gOFd0MdeiMkj9a4p/f2GzooQPWHxfSpFuWEk2dx4j4J79muY6Yy/NCPvirLuG+kM
9Mec89x9glHeBMenhK7aa8F+h4Of3yx3AYjgdYa99P4s6HJ1FgWT
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:18:10 2025 by rpki-client on console.sobornost.net