Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a383730303a3a2f34302d3430203d3e20323733333039.roa
File:                     323830343a386337633a383730303a3a2f34302d3430203d3e20323733333039.roa (raw, json)
Hash identifier:          HvUy1Y20orDEUYw2HZTJpoWdAPz1WuQ/ii/UuqjKN3I=
Subject key identifier:   B3:0F:63:4B:21:E1:EB:11:59:99:69:2D:89:11:B2:D3:8E:5E:2E:C6
Certificate issuer:       /CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
Certificate serial:       28A5783002CC7815A4331A1686E6A7A462DC807A
Authority key identifier: 2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a383730303a3a2f34302d3430203d3e20323733333039.roa
Signing time:             Wed 09 Apr 2025 13:53:39 +0000
ROA not before:           Wed 09 Apr 2025 13:48:39 +0000
ROA not after:            Wed 08 Apr 2026 13:53:39 +0000
asID:                     273309
IP address blocks:        2804:8c7c:8700::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl
                          rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 12:12:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:a5:78:30:02:cc:78:15:a4:33:1a:16:86:e6:a7:a4:62:dc:80:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
        Validity
            Not Before: Apr  9 13:48:39 2025 GMT
            Not After : Apr  8 13:53:39 2026 GMT
        Subject: CN=B30F634B21E1EB115999692D8911B2D38E5E2EC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d6:3a:8a:05:db:10:e4:a0:fd:4a:d8:13:af:
                    43:49:02:a1:92:16:63:77:a8:3b:1f:0b:b6:3b:02:
                    fa:4d:59:20:49:96:e4:f0:69:80:ac:8a:c7:87:86:
                    00:e9:00:b3:9a:c9:0c:b5:4e:94:12:75:af:3e:0c:
                    f0:7c:1c:9d:c2:45:4b:64:35:59:d9:0b:1d:9b:ec:
                    17:1a:0a:45:00:35:87:d2:7e:d1:f2:a5:c9:b2:79:
                    dd:39:d6:ed:ee:d8:45:d3:48:aa:4e:62:ea:f3:a5:
                    23:bc:ff:b6:21:27:2c:04:7d:90:46:ef:1d:ad:6a:
                    40:51:7b:35:34:e6:17:00:8f:d1:3d:53:4d:de:40:
                    6c:ac:8b:16:aa:e8:ee:85:bc:8d:14:32:08:76:b7:
                    1b:b5:59:78:09:4d:42:b2:ef:df:cb:2d:5c:18:75:
                    3b:05:dc:82:85:c6:71:8a:dc:a5:1b:e6:58:13:cc:
                    1d:f2:df:17:0f:71:a2:d5:96:d7:a4:28:c2:99:54:
                    a3:fb:71:18:f0:56:fe:5d:8a:f9:46:55:6f:1d:39:
                    54:2c:3b:2a:9d:ed:b0:06:b4:9e:64:fb:4c:3f:81:
                    28:6a:0c:61:61:d9:de:d6:a7:20:8f:c7:6f:8d:2c:
                    96:94:af:61:cd:b9:1d:9f:42:35:73:d2:bc:39:7d:
                    41:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:0F:63:4B:21:E1:EB:11:59:99:69:2D:89:11:B2:D3:8E:5E:2E:C6
            X509v3 Authority Key Identifier:
                keyid:2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a383730303a3a2f34302d3430203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c7c:8700::/40

    Signature Algorithm: sha256WithRSAEncryption
         9c:33:22:16:4b:f5:6d:da:52:90:fc:2d:c8:9d:18:66:a0:38:
         0e:7a:0e:9e:24:7d:bf:bc:90:d8:3d:6c:ae:34:bc:e1:12:0e:
         0c:32:ff:e6:51:cd:ea:ad:9f:23:d7:ff:d3:5f:85:fb:67:54:
         3a:92:30:f3:2b:49:d2:cc:47:84:21:54:b9:11:e2:e7:f2:69:
         5e:9a:65:61:cb:a4:2f:7a:e8:0a:aa:2e:17:94:2e:5b:27:1a:
         4e:cc:5c:1b:d6:8d:d6:c4:2b:22:de:70:25:2f:f4:7a:8d:dc:
         e8:f1:59:ff:62:51:7e:23:a5:0d:0e:80:6c:56:bb:44:7c:36:
         51:93:d1:c0:16:9c:fc:ac:2e:04:46:c3:3a:d0:c6:8b:67:e2:
         14:57:1b:cb:93:2a:58:2f:b7:db:10:31:a4:39:9b:ed:a7:ac:
         c9:39:f2:e1:70:e7:93:7f:d7:dd:3f:68:63:f3:c1:72:91:e2:
         43:a2:0c:39:0a:7e:48:1c:9c:af:b1:a0:88:d6:0b:3b:db:be:
         bb:ae:e1:f8:c6:9d:8d:9a:08:d7:d8:75:75:2e:ff:e5:bc:1b:
         43:35:13:7a:fe:3e:39:a8:13:4f:d5:ef:16:34:51:d1:a6:80:
         d6:80:4e:c0:a0:89:8f:c6:f1:7d:e8:46:81:92:54:a9:0c:e3:
         12:2c:4b:92
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUKKV4MALMeBWkMxoWhuanpGLcgHowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkE0NkI0QUI5RkVCQzczQUZERjEzNTA1QkVDRTE2RDc0
MTc3OUIwMzAeFw0yNTA0MDkxMzQ4MzlaFw0yNjA0MDgxMzUzMzlaMDMxMTAvBgNV
BAMTKEIzMEY2MzRCMjFFMUVCMTE1OTk5NjkyRDg5MTFCMkQzOEU1RTJFQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw1jqKBdsQ5KD9StgTr0NJAqGS
FmN3qDsfC7Y7AvpNWSBJluTwaYCsiseHhgDpALOayQy1TpQSda8+DPB8HJ3CRUtk
NVnZCx2b7BcaCkUANYfSftHypcmyed051u3u2EXTSKpOYurzpSO8/7YhJywEfZBG
7x2takBRezU05hcAj9E9U03eQGysixaq6O6FvI0UMgh2txu1WXgJTUKy79/LLVwY
dTsF3IKFxnGK3KUb5lgTzB3y3xcPcaLVltekKMKZVKP7cRjwVv5divlGVW8dOVQs
Oyqd7bAGtJ5k+0w/gShqDGFh2d7WpyCPx2+NLJaUr2HNuR2fQjVz0rw5fUF9AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUsw9jSyHh6xFZmWktiRGy045eLsYwHwYDVR0j
BBgwFoAUKka0q5/rxzr98TUFvs4W10F3mwMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFNpalBXWUY1dWNBRGg2NWl2TnNZOGV5a2VVWTdQdnQzeEZWYzFkQ0xa
R0MvMC8yQTQ2QjRBQjlGRUJDNzNBRkRGMTM1MDVCRUNFMTZENzQxNzc5QjAzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBNDZCNEFCOUZFQkM3M0FG
REYxMzUwNUJFQ0UxNkQ3NDE3NzlCMDMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RTaWpQV1lGNXVjQURoNjVpdk5zWThleWtlVVk3UHZ0M3hGVmMxZENMWkdDLzAv
MzIzODMwMzQzYTM4NjMzNzYzM2EzODM3MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzczMzMzMzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEjHyHMA0GCSqGSIb3DQEBCwUA
A4IBAQCcMyIWS/Vt2lKQ/C3InRhmoDgOeg6eJH2/vJDYPWyuNLzhEg4MMv/mUc3q
rZ8j1//TX4X7Z1Q6kjDzK0nSzEeEIVS5EeLn8mlemmVhy6QveugKqi4XlC5bJxpO
zFwb1o3WxCsi3nAlL/R6jdzo8Vn/YlF+I6UNDoBsVrtEfDZRk9HAFpz8rC4ERsM6
0MaLZ+IUVxvLkypYL7fbEDGkOZvtp6zJOfLhcOeTf9fdP2hj88FykeJDogw5Cn5I
HJyvsaCI1gs72767ruH4xp2NmgjX2HV1Lv/lvBtDNRN6/j45qBNP1e8WNFHRpoDW
gE7AoImPxvF96EaBklSpDOMSLEuS
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:05:00 2025 by rpki-client on console.sobornost.net