Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a393230303a3a2f33392d3339203d3e20323733333039.roa
File:                     323830343a386337633a393230303a3a2f33392d3339203d3e20323733333039.roa (raw, json)
Hash identifier:          CWBvmL5b1QhwgFCP37XotZwTQCfOVXKqz88tFyyldWw=
Subject key identifier:   79:9E:B6:09:CB:97:B9:BD:D1:02:48:B0:54:47:51:5A:22:33:A7:15
Certificate issuer:       /CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
Certificate serial:       46B959948B5A5F2DE06513EF31C92C4B68A1EB2F
Authority key identifier: 2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a393230303a3a2f33392d3339203d3e20323733333039.roa
Signing time:             Wed 09 Apr 2025 13:53:39 +0000
ROA not before:           Wed 09 Apr 2025 13:48:39 +0000
ROA not after:            Wed 08 Apr 2026 13:53:39 +0000
asID:                     273309
IP address blocks:        2804:8c7c:9200::/39 maxlen: 39

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl
                          rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 12:12:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:b9:59:94:8b:5a:5f:2d:e0:65:13:ef:31:c9:2c:4b:68:a1:eb:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
        Validity
            Not Before: Apr  9 13:48:39 2025 GMT
            Not After : Apr  8 13:53:39 2026 GMT
        Subject: CN=799EB609CB97B9BDD10248B05447515A2233A715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:fd:91:bd:d9:31:4e:86:97:76:a3:5f:c3:fb:
                    43:19:a1:18:c3:ce:89:af:d1:73:2d:e7:83:2d:9c:
                    95:e1:23:65:e4:dc:4c:a2:8c:d3:92:f9:f4:2f:da:
                    99:a1:64:a5:99:31:2f:57:21:09:3d:2f:03:fb:43:
                    e4:85:c8:f4:33:44:34:83:70:e1:5e:d3:17:03:51:
                    c5:1a:28:b9:57:71:aa:a5:41:99:6d:f7:e1:40:92:
                    36:0c:f6:82:72:ac:53:78:6e:05:e5:c2:cb:3f:9a:
                    e6:e5:f0:64:14:5a:23:2d:f7:5f:ac:6e:2f:c0:2b:
                    66:f1:98:ad:89:d6:5d:b6:11:40:2c:77:a6:73:9b:
                    d9:bd:2f:1d:f2:19:41:f3:ef:65:30:7c:c4:a9:89:
                    e2:ba:40:dd:f8:e4:6e:74:8e:7e:c4:ca:58:c4:d3:
                    03:01:32:c4:c1:2b:47:08:93:c6:ec:2f:75:54:b6:
                    06:c1:6e:d3:4f:21:29:fd:9e:48:0a:c8:1c:8b:85:
                    c5:11:3d:26:68:89:4e:1b:0f:29:a1:5c:9f:4d:1e:
                    f6:75:25:6d:17:ee:61:9b:5c:4c:f0:96:a5:33:3a:
                    05:b2:dc:51:de:35:7e:76:90:61:db:3e:f5:6b:f6:
                    4d:b3:9b:a5:26:da:1a:a6:85:ea:a8:07:51:8b:6d:
                    81:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:9E:B6:09:CB:97:B9:BD:D1:02:48:B0:54:47:51:5A:22:33:A7:15
            X509v3 Authority Key Identifier:
                keyid:2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a393230303a3a2f33392d3339203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c7c:9200::/39

    Signature Algorithm: sha256WithRSAEncryption
         9e:cd:81:29:40:54:2c:d8:44:ab:49:22:24:4d:30:24:c4:c4:
         6b:b1:c3:c7:22:86:fc:13:e0:03:06:c1:20:f4:7d:b4:48:0d:
         27:61:91:0f:7f:5b:b0:6b:06:25:3d:01:0e:eb:d9:dc:fa:1f:
         39:88:d4:56:55:0e:ee:0f:41:1e:d1:51:5d:4d:45:59:3b:0d:
         ed:e1:e6:84:80:f4:41:b2:2c:ea:c0:6b:80:10:da:4e:4c:1c:
         9a:33:70:1a:7b:6f:db:94:bb:cc:bb:42:e6:db:ba:5a:59:31:
         e3:58:1a:87:5b:b1:bd:73:28:d1:c3:00:ff:60:1b:8c:de:22:
         c4:5c:e1:cd:2e:ba:3f:2f:39:9b:85:0f:4f:ec:7c:92:48:06:
         25:65:9f:dd:49:23:64:9c:50:81:66:61:8b:67:65:45:9a:aa:
         65:a7:7d:64:5b:ba:40:0c:72:cc:f1:1b:ec:d6:73:65:a8:39:
         09:ff:86:97:f3:05:d3:99:3c:3d:73:f9:91:11:11:fb:f5:2b:
         41:34:e5:3b:f0:2d:1d:27:24:d6:cf:d8:4a:9c:84:df:29:d0:
         48:d9:45:ee:11:00:21:57:64:18:d9:29:80:f0:1a:e5:87:4c:
         b0:ef:fe:62:55:28:59:60:fb:15:50:90:56:b5:5f:95:ec:43:
         f5:7b:ac:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:05:00 2025 by rpki-client on console.sobornost.net