Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a393330303a3a2f34302d3430203d3e20323733333039.roa
File:                     323830343a386337633a393330303a3a2f34302d3430203d3e20323733333039.roa (raw, json)
Hash identifier:          ASZppAjVT5DAAp9idG+Hn/80xNyqS0n9J2VWINirhNU=
Subject key identifier:   EF:9C:DA:1B:F4:42:21:D6:3E:71:70:49:8D:1B:32:FD:A7:B8:CC:B6
Certificate issuer:       /CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
Certificate serial:       0A056A8AC87A4D32B9263B20944B9333A5730F57
Authority key identifier: 2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a393330303a3a2f34302d3430203d3e20323733333039.roa
Signing time:             Wed 09 Apr 2025 13:53:36 +0000
ROA not before:           Wed 09 Apr 2025 13:48:36 +0000
ROA not after:            Wed 08 Apr 2026 13:53:36 +0000
asID:                     273309
IP address blocks:        2804:8c7c:9300::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl
                          rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 12:12:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:05:6a:8a:c8:7a:4d:32:b9:26:3b:20:94:4b:93:33:a5:73:0f:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
        Validity
            Not Before: Apr  9 13:48:36 2025 GMT
            Not After : Apr  8 13:53:36 2026 GMT
        Subject: CN=EF9CDA1BF44221D63E7170498D1B32FDA7B8CCB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fd:96:0d:0f:da:a5:32:46:36:49:63:9c:69:
                    b8:52:c9:50:b8:ec:48:d1:1d:13:e1:7f:7b:b2:8f:
                    f5:29:4e:8a:84:89:ff:97:a0:58:7d:2a:4b:0f:0a:
                    e4:6e:02:92:14:a1:59:83:e6:8c:52:37:b4:fd:63:
                    6d:99:83:af:77:1a:3c:fa:56:05:5e:1f:9a:78:5b:
                    8c:e3:cf:bc:65:c7:63:51:0e:73:ff:21:8e:2c:05:
                    fb:2c:c5:37:ee:6d:5c:08:58:c2:5f:a6:26:ed:e0:
                    d8:f4:13:f5:cf:b7:1d:5d:46:24:b8:45:e1:52:a7:
                    7b:06:53:cd:07:37:05:b6:36:35:36:15:8e:6c:62:
                    df:5d:84:2e:eb:a5:e9:6b:6c:df:fc:0c:07:21:8e:
                    d1:04:e6:ad:2d:d4:4c:6a:9e:9d:f4:fc:e4:c9:a8:
                    9c:ba:ed:53:8c:6d:e7:d1:ca:22:db:8f:24:3b:dd:
                    a2:2f:c4:53:ea:61:12:84:fc:fc:01:52:3b:3a:1f:
                    62:9e:0c:b5:ad:bb:e6:67:55:26:e3:74:cb:00:31:
                    a2:bf:30:e2:bd:05:a9:bb:71:b4:fc:6e:e4:28:19:
                    e9:3a:37:20:39:b9:f5:4b:fa:d4:0f:5a:ac:da:25:
                    ec:62:6f:3a:e3:b1:14:ad:93:57:f0:13:31:de:f6:
                    12:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:9C:DA:1B:F4:42:21:D6:3E:71:70:49:8D:1B:32:FD:A7:B8:CC:B6
            X509v3 Authority Key Identifier:
                keyid:2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a393330303a3a2f34302d3430203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c7c:9300::/40

    Signature Algorithm: sha256WithRSAEncryption
         2c:2a:1c:94:54:a8:8d:42:dd:2e:15:9b:65:b1:c3:f8:ce:60:
         d9:69:b3:64:3d:af:f1:3e:e0:dc:52:1e:28:c4:ba:d2:f7:4d:
         c9:b2:61:7d:f5:d3:97:83:10:2b:6c:c8:cd:df:19:73:8b:8d:
         40:b1:c2:0e:48:f9:e0:8c:8f:52:6c:35:a7:ea:ea:c6:6c:d6:
         35:fa:e6:be:36:ba:f5:30:4b:e6:b8:b4:b1:94:df:71:28:6b:
         c6:a5:e2:08:98:7d:9a:69:ed:b0:0f:8b:9d:1f:e4:6f:dc:f8:
         9f:59:4a:5e:60:82:6b:f5:1e:dd:ea:cc:c3:2f:ec:8e:25:da:
         a6:30:06:af:99:f6:8b:6d:b8:fd:2d:43:0a:79:1e:1e:ea:67:
         e1:2a:92:71:84:70:5d:71:6c:d3:21:7c:36:18:4c:2c:87:e7:
         03:8a:a7:03:94:c5:10:fa:f5:00:6c:43:79:58:b9:9a:88:0f:
         57:db:0f:84:9c:3a:f5:91:32:bb:df:5b:74:65:7c:1f:3f:8a:
         2b:60:3e:0c:29:c7:5b:2e:37:1a:6a:98:73:14:f1:4c:26:94:
         bc:f7:1a:9b:e6:42:8c:6d:7d:31:7f:98:7b:4f:6c:47:a8:c3:
         92:df:54:7f:4e:86:56:3c:6a:0c:8a:ff:c4:dd:97:ac:09:0f:
         7a:f4:64:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:05:00 2025 by rpki-client on console.sobornost.net