Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/323830343a356162343a3a2f34312d3431203d3e20323638373930.roa
File:                     323830343a356162343a3a2f34312d3431203d3e20323638373930.roa (raw, json)
Hash identifier:          Dse+8PzS/XZ6YHlcYRWEoklhrYGuJNRycWnQusm0/84=
Subject key identifier:   CA:01:0C:A9:83:E6:97:EE:46:29:44:1B:62:ED:DB:28:81:DA:F0:7E
Certificate issuer:       /CN=D2B4C91EBE07D707EE775A157AA582BF4B533C62
Certificate serial:       65DB9FE4C3A96EBD8AC76701BDD3425D1B490172
Authority key identifier: D2:B4:C9:1E:BE:07:D7:07:EE:77:5A:15:7A:A5:82:BF:4B:53:3C:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/323830343a356162343a3a2f34312d3431203d3e20323638373930.roa
Signing time:             Tue 15 Apr 2025 22:37:57 +0000
ROA not before:           Tue 15 Apr 2025 22:32:57 +0000
ROA not after:            Tue 14 Apr 2026 22:37:57 +0000
asID:                     268790
IP address blocks:        2804:5ab4::/41 maxlen: 41

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.crl
                          rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 14:52:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:db:9f:e4:c3:a9:6e:bd:8a:c7:67:01:bd:d3:42:5d:1b:49:01:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2B4C91EBE07D707EE775A157AA582BF4B533C62
        Validity
            Not Before: Apr 15 22:32:57 2025 GMT
            Not After : Apr 14 22:37:57 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c6:7a:b4:5e:30:d5:1e:ff:0b:29:0a:9a:a2:
                    54:3c:f4:e3:ca:8e:fa:42:e3:ae:d9:1a:49:fd:45:
                    1c:5c:ea:c8:04:a8:a9:b1:b2:5d:16:0f:30:12:21:
                    ea:2c:d0:25:f9:1e:96:c6:20:bf:b6:fe:50:09:f8:
                    ac:07:ea:2b:48:8f:d5:7c:84:3e:f8:3b:9f:35:0a:
                    b2:0d:c3:ec:3d:81:69:6d:11:1d:42:e6:64:7c:fa:
                    fa:ac:b6:c9:3c:68:09:10:dd:a8:a2:b5:c5:f8:23:
                    80:68:45:ff:9a:4e:aa:77:a1:f6:d4:ac:65:6e:fa:
                    37:f9:9c:7f:56:e7:48:2a:9e:29:04:ea:2a:58:1f:
                    af:14:00:60:ae:f1:5c:6a:0c:04:fe:4f:9b:f0:fc:
                    4d:47:d0:73:ad:b4:00:73:6a:bb:07:2b:f1:2d:a0:
                    92:c1:01:20:79:23:30:d6:9c:59:f6:4a:3e:5a:4e:
                    ef:46:e3:7d:6f:d0:9a:5a:14:77:07:aa:9f:c5:0c:
                    b1:ef:70:c1:ef:fa:8c:01:d0:ca:fb:ea:f5:02:dd:
                    64:35:41:1b:b6:17:21:3a:7e:8b:a2:e3:8b:bc:ca:
                    b9:fc:17:cd:bd:ea:7e:4f:08:5f:48:8b:50:83:e7:
                    86:06:0c:3e:a2:f0:a6:cc:80:21:4c:8a:0e:9c:d1:
                    bc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:01:0C:A9:83:E6:97:EE:46:29:44:1B:62:ED:DB:28:81:DA:F0:7E
            X509v3 Authority Key Identifier:
                keyid:D2:B4:C9:1E:BE:07:D7:07:EE:77:5A:15:7A:A5:82:BF:4B:53:3C:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/323830343a356162343a3a2f34312d3431203d3e20323638373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ab4::/41

    Signature Algorithm: sha256WithRSAEncryption
         1e:ae:66:cf:ce:eb:89:02:32:24:77:5b:d9:73:4a:6e:3e:b7:
         66:2a:29:87:48:a4:da:dc:c4:58:0a:2b:6b:ac:ed:b5:9c:20:
         6b:21:68:7a:59:04:d9:82:78:fd:64:35:2f:19:a4:89:f6:57:
         32:8f:20:79:69:ee:85:62:5a:7a:70:c4:cf:56:43:52:b5:00:
         a1:16:dc:8e:da:fb:7c:c3:7c:f1:98:e5:9a:20:50:2d:01:90:
         f6:f3:b0:99:bb:59:3b:9e:94:b5:61:1b:14:d7:70:85:d7:a5:
         e4:35:b0:61:76:ca:1c:59:c3:23:0b:80:c5:f0:bb:ce:cc:77:
         98:2e:6a:84:09:1a:ed:61:63:dd:b5:66:26:48:f3:2f:02:66:
         6e:21:64:93:a5:b9:d3:41:c6:71:69:44:93:d3:29:cb:8d:a8:
         1f:69:9c:f7:f0:f9:d6:ac:07:d9:21:4e:ee:d5:83:c4:93:3b:
         08:28:ef:3c:9d:36:d7:9c:2b:34:89:a8:ab:5c:9d:5f:19:e4:
         5b:a2:29:c7:a3:f7:4d:db:98:3c:01:4e:91:43:7e:12:2e:d6:
         9a:92:9e:ea:17:06:01:a9:f0:a6:38:20:03:3d:7e:ab:1c:c4:
         7c:7d:fb:fc:f2:09:57:14:ad:53:ff:1a:4e:e4:b2:20:07:35:
         00:1f:c0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:18:10 2025 by rpki-client on console.sobornost.net