Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/323830343a356162343a3a2f33342d3334203d3e20323638373930.roa
File:                     323830343a356162343a3a2f33342d3334203d3e20323638373930.roa (raw, json)
Hash identifier:          rfxgvxZsu2vM3CvmIWl1RfxSnE/4/tOK7uCYls5o0P4=
Subject key identifier:   B0:A4:C7:7E:01:8D:BF:67:E1:D2:16:DB:E1:C6:32:3D:8E:46:D2:B6
Certificate issuer:       /CN=D2B4C91EBE07D707EE775A157AA582BF4B533C62
Certificate serial:       4CADC3AE019AFB03CE66C4FFEA944313C08F52D4
Authority key identifier: D2:B4:C9:1E:BE:07:D7:07:EE:77:5A:15:7A:A5:82:BF:4B:53:3C:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/323830343a356162343a3a2f33342d3334203d3e20323638373930.roa
Signing time:             Tue 15 Apr 2025 22:36:08 +0000
ROA not before:           Tue 15 Apr 2025 22:31:08 +0000
ROA not after:            Tue 14 Apr 2026 22:36:08 +0000
asID:                     268790
IP address blocks:        2804:5ab4::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.crl
                          rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:ad:c3:ae:01:9a:fb:03:ce:66:c4:ff:ea:94:43:13:c0:8f:52:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2B4C91EBE07D707EE775A157AA582BF4B533C62
        Validity
            Not Before: Apr 15 22:31:08 2025 GMT
            Not After : Apr 14 22:36:08 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a6:9c:f8:76:6a:f3:9d:73:d5:63:3c:06:ff:
                    4a:d7:21:66:44:83:ee:85:ef:61:9c:6d:94:d2:fa:
                    29:5f:f5:57:ce:73:29:45:6d:d4:51:a0:17:63:0a:
                    04:49:f3:52:09:51:35:b8:5c:73:58:2e:52:f7:2b:
                    66:43:cb:2e:85:a5:f9:cd:c0:73:6c:f6:f6:20:03:
                    a0:63:10:8a:80:d9:87:1c:5f:ab:17:3a:69:c6:86:
                    31:76:b9:86:b2:bc:21:a1:77:65:e5:7e:90:36:82:
                    fb:51:99:fc:ac:4c:a9:f0:73:f1:50:f7:81:dd:d1:
                    97:de:94:2f:52:9e:29:08:0e:67:f1:26:32:88:ba:
                    fc:0d:c5:31:6f:78:f7:2e:6e:f5:71:17:31:a0:19:
                    a2:c9:bc:3c:df:1e:df:6b:fc:d7:27:c7:b8:6b:9a:
                    08:da:5e:bf:e5:ab:4b:4e:41:ca:17:65:35:5f:50:
                    0b:0f:81:a9:76:d3:e8:e7:9f:7a:55:1f:38:02:df:
                    d5:51:e2:2d:9e:2d:3d:37:e6:f9:fe:87:d6:99:dc:
                    a8:c7:e0:25:7d:db:90:47:39:d0:4f:03:05:35:4d:
                    a5:7f:46:f6:62:28:33:ce:62:fd:cf:f0:82:42:41:
                    a5:b8:92:d4:5d:e3:b5:2f:f4:8c:06:0a:b4:eb:65:
                    a7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:A4:C7:7E:01:8D:BF:67:E1:D2:16:DB:E1:C6:32:3D:8E:46:D2:B6
            X509v3 Authority Key Identifier:
                keyid:D2:B4:C9:1E:BE:07:D7:07:EE:77:5A:15:7A:A5:82:BF:4B:53:3C:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/323830343a356162343a3a2f33342d3334203d3e20323638373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ab4::/34

    Signature Algorithm: sha256WithRSAEncryption
         6b:7d:e9:d7:39:04:9a:62:fd:f7:be:bf:87:2e:1a:9f:a2:3c:
         e3:46:f4:14:bc:e5:e0:73:52:93:53:d5:2e:7d:26:35:11:7b:
         d8:28:70:8d:a4:50:66:1f:aa:f1:52:82:df:c2:52:ee:ff:d8:
         ad:2e:f0:2b:6c:1f:84:55:0e:1e:a4:c3:d1:4b:e2:8c:6d:f4:
         63:d3:77:2d:80:db:23:23:72:0a:d6:b9:1b:5f:0b:2d:42:9c:
         46:78:7c:a9:15:f3:25:6a:9a:c1:eb:ea:47:ca:c7:ac:bf:ba:
         43:8e:72:66:70:24:7f:9f:f6:b7:b5:19:f6:a1:54:cc:c7:8e:
         ce:8e:3b:73:de:94:89:d0:d1:56:ba:aa:81:3d:da:73:40:6c:
         89:29:5e:38:11:f8:f0:ac:01:8c:b6:53:76:3f:d8:7c:82:97:
         c4:01:88:3e:e2:7b:d0:30:57:f4:b0:52:0d:66:ab:b0:e4:f7:
         dd:7c:41:a7:41:a3:65:ec:d5:71:c2:66:7b:e2:1e:e1:8e:b7:
         9e:d1:42:e4:75:3f:37:dd:64:5a:40:5c:6f:c2:21:11:dd:f7:
         b9:b7:66:74:ba:cf:48:52:48:f2:43:da:6a:1e:35:8b:89:4f:
         16:14:ee:f5:5d:6b:6e:1c:fb:d2:e5:49:ae:53:70:99:29:4f:
         24:11:e1:4a
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUTK3DrgGa+wPOZsT/6pRDE8CPUtQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDJCNEM5MUVCRTA3RDcwN0VFNzc1QTE1N0FBNTgyQkY0
QjUzM0M2MjAeFw0yNTA0MTUyMjMxMDhaFw0yNjA0MTQyMjM2MDhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkZBNjlDRjg3NjZBRjM5RDcz
RDU2MzNDMDZGRjRBRDcyMTY2NDQ4M0VFODVFRjYxOUM2RDk0RDJGQTI5NUZGNTU3
Q0U3MzI5NDU2REQ0NTFBMDE3NjMwQTA0NDlGMzUyMDk1MTM1Qjg1QzczNTgyRTUy
RjcyQjY2NDNDQjJFODVBNUY5Q0RDMDczNkNGNkY2MjAwM0EwNjMxMDhBODBEOTg3
MUM1RkFCMTczQTY5QzY4NjMxNzZCOTg2QjJCQzIxQTE3NzY1RTU3RTkwMzY4MkZC
NTE5OUZDQUM0Q0E5RjA3M0YxNTBGNzgxREREMTk3REU5NDJGNTI5RTI5MDgwRTY3
RjEyNjMyODhCQUZDMERDNTMxNkY3OEY3MkU2RUY1NzExNzMxQTAxOUEyQzlCQzND
REYxRURGNkJGQ0Q3MjdDN0I4NkI5QTA4REE1RUJGRTVBQjRCNEU0MUNBMTc2NTM1
NUY1MDBCMEY4MUE5NzZEM0U4RTc5RjdBNTUxRjM4MDJERkQ1NTFFMjJEOUUyRDNE
MzdFNkY5RkU4N0Q2OTlEQ0E4QzdFMDI1N0REQjkwNDczOUQwNEYwMzA1MzU0REE1
N0Y0NkY2NjIyODMzQ0U2MkZEQ0ZGMDgyNDI0MUE1Qjg5MkQ0NURFM0I1MkZGNDhD
MDYwQUI0RUI2NUE3QjUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAv6ac+HZq851z1WM8Bv9K1yFmRIPuhe9hnG2U0vopX/VXznMpRW3U
UaAXYwoESfNSCVE1uFxzWC5S9ytmQ8suhaX5zcBzbPb2IAOgYxCKgNmHHF+rFzpp
xoYxdrmGsrwhoXdl5X6QNoL7UZn8rEyp8HPxUPeB3dGX3pQvUp4pCA5n8SYyiLr8
DcUxb3j3Lm71cRcxoBmiybw83x7fa/zXJ8e4a5oI2l6/5atLTkHKF2U1X1ALD4Gp
dtPo5596VR84At/VUeItni09N+b5/ofWmdyox+AlfduQRznQTwMFNU2lf0b2Yigz
zmL9z/CCQkGluJLUXeO1L/SMBgq062WntQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FLCkx34Bjb9n4dIW2+HGMj2ORtK2MB8GA1UdIwQYMBaAFNK0yR6+B9cH7ndaFXql
gr9LUzxiMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRyeW9HU1o0bmNaN01j
OGRoQ1ViczVWaHNBa1RDMm95QzFoNm1OQzhIVlpYLzEvRDJCNEM5MUVCRTA3RDcw
N0VFNzc1QTE1N0FBNTgyQkY0QjUzM0M2Mi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9EMkI0QzkxRUJFMDdENzA3RUU3NzVBMTU3QUE1ODJCRjRCNTMz
QzYyLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80cnlvR1NaNG5jWjdNYzhkaENV
YnM1VmhzQWtUQzJveUMxaDZtTkM4SFZaWC8xLzMyMzgzMDM0M2EzNTYxNjIzNDNh
M2EyZjMzMzQyZDMzMzQyMDNkM2UyMDMyMzYzODM3MzkzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigE
WrQAMA0GCSqGSIb3DQEBCwUAA4IBAQBrfenXOQSaYv33vr+HLhqfojzjRvQUvOXg
c1KTU9UufSY1EXvYKHCNpFBmH6rxUoLfwlLu/9itLvArbB+EVQ4epMPRS+KMbfRj
03ctgNsjI3IK1rkbXwstQpxGeHypFfMlaprB6+pHysesv7pDjnJmcCR/n/a3tRn2
oVTMx47Ojjtz3pSJ0NFWuqqBPdpzQGyJKV44EfjwrAGMtlN2P9h8gpfEAYg+4nvQ
MFf0sFINZquw5PfdfEGnQaNl7NVxwmZ74h7hjree0ULkdT833WRaQFxvwiER3fe5
t2Z0us9IUkjyQ9pqHjWLiU8WFO71XWtuHPvS5UmuU3CZKU8kEeFK
-----END CERTIFICATE-----
Generated at Sun Apr 27 10:26:46 2025 by rpki-client on console.sobornost.net