Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a383630303a3a2f33392d3339203d3e20323733333039.roa
File:                     323830343a386337633a383630303a3a2f33392d3339203d3e20323733333039.roa (raw, json)
Hash identifier:          OUbHa/FuuL9YOgIZwdXf9UOuoLHsMhiJinEpTSOtEh0=
Subject key identifier:   2B:1F:02:22:FB:E8:71:B0:DD:3D:3D:07:33:AE:B9:B0:E9:8D:E8:43
Certificate issuer:       /CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
Certificate serial:       3874CB6B0C5FC878FE2B0456749B125E86DCB2AB
Authority key identifier: 2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a383630303a3a2f33392d3339203d3e20323733333039.roa
Signing time:             Wed 09 Apr 2025 13:53:39 +0000
ROA not before:           Wed 09 Apr 2025 13:48:39 +0000
ROA not after:            Wed 08 Apr 2026 13:53:39 +0000
asID:                     273309
IP address blocks:        2804:8c7c:8600::/39 maxlen: 39

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl
                          rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 12:12:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:74:cb:6b:0c:5f:c8:78:fe:2b:04:56:74:9b:12:5e:86:dc:b2:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
        Validity
            Not Before: Apr  9 13:48:39 2025 GMT
            Not After : Apr  8 13:53:39 2026 GMT
        Subject: CN=2B1F0222FBE871B0DD3D3D0733AEB9B0E98DE843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:56:30:20:7b:35:1a:13:da:88:27:a2:a0:dd:
                    47:99:9e:be:63:6f:38:dc:73:a2:3b:f4:c2:6b:c4:
                    8e:eb:bc:a5:4b:94:ea:18:31:af:c5:98:49:fc:56:
                    aa:bd:97:2b:f5:c4:86:2d:3f:2f:0a:9d:d7:af:51:
                    dc:2c:d1:4e:83:95:ed:ba:88:ca:a3:56:57:36:e7:
                    67:28:88:27:19:fd:45:82:17:2a:51:30:17:5a:31:
                    dd:00:3e:72:d9:50:3c:29:06:ae:e3:8d:39:7d:38:
                    6d:6d:21:e8:ea:4b:a2:a8:12:f9:53:26:f1:c8:2f:
                    45:af:86:58:bf:e2:7c:bb:31:35:0d:44:b6:3a:5a:
                    c2:03:64:e3:c6:d7:f0:98:df:ab:c1:ef:42:03:5d:
                    f2:45:fa:cf:8f:0c:b9:b2:82:08:7a:5b:9b:aa:a5:
                    42:f2:ef:80:ab:35:02:fd:4c:19:4c:08:be:b2:4b:
                    ad:13:3d:ae:f3:54:64:ad:bb:b7:10:de:3b:e3:ee:
                    6f:59:3a:e6:40:62:b7:0b:de:8f:d7:8d:3a:e5:8f:
                    74:ad:47:81:ed:6a:e2:11:88:f4:97:69:3b:29:0c:
                    bc:1a:0b:9d:8d:62:ef:18:08:d7:bb:41:ac:10:e5:
                    4b:61:0d:f2:f5:f3:00:00:32:f8:a8:88:9d:60:76:
                    e6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:1F:02:22:FB:E8:71:B0:DD:3D:3D:07:33:AE:B9:B0:E9:8D:E8:43
            X509v3 Authority Key Identifier:
                keyid:2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a383630303a3a2f33392d3339203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c7c:8600::/39

    Signature Algorithm: sha256WithRSAEncryption
         ce:4c:88:d5:89:5f:16:56:e0:94:cf:a8:12:3f:95:26:ac:38:
         a0:c7:7d:b3:72:cd:17:25:b7:d2:90:4e:0f:3d:ea:52:d1:22:
         06:9e:72:34:60:88:0f:1f:d6:ff:36:5a:a7:9b:80:7b:22:bc:
         da:b5:49:1d:ef:79:43:18:68:7c:14:fe:57:b0:8a:8e:92:62:
         fb:3f:5d:dc:b1:13:ec:01:92:98:74:eb:f3:da:7a:a1:ec:f3:
         64:d8:95:8b:9d:83:9e:ad:fd:dc:86:4f:59:dc:d3:c0:b7:a2:
         b8:8a:7c:b3:83:a2:49:d0:fe:ab:7e:7d:9b:73:b0:93:19:24:
         d9:68:9e:e3:7e:21:46:6e:6d:db:54:9a:32:6c:1d:26:54:77:
         4c:5c:5a:b0:ad:48:94:f0:d3:26:eb:00:cd:06:82:8e:fb:50:
         73:d0:fd:21:0e:f9:be:a7:8e:0d:24:f3:e9:51:a9:6e:82:9d:
         66:29:74:c4:53:71:50:ed:1f:94:d7:8d:d6:72:0d:46:8d:ec:
         c4:e9:b3:b6:58:97:72:a8:96:51:38:0e:f4:12:65:07:93:b3:
         92:86:56:d0:d1:3e:0f:3d:8e:90:e7:e2:7f:5c:89:3b:ee:e5:
         2e:db:f5:e9:99:4d:16:73:4f:ae:61:3c:d9:de:34:ec:3c:71:
         d6:32:f8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:05:00 2025 by rpki-client on console.sobornost.net