Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a393430303a3a2f33382d3338203d3e20323733333039.roa
File:                     323830343a386337633a393430303a3a2f33382d3338203d3e20323733333039.roa (raw, json)
Hash identifier:          /JiCwVWLpowQUPXUt6FmFclKTI85iC6/JIjEUTqdIJk=
Subject key identifier:   26:C0:25:D7:8D:CF:BE:4A:78:AC:C5:D0:4A:4D:46:E0:1E:19:E2:DF
Certificate issuer:       /CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
Certificate serial:       7C0D570EDE8A79EB5B4BA9F1897AFF48C14869F5
Authority key identifier: 2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a393430303a3a2f33382d3338203d3e20323733333039.roa
Signing time:             Wed 09 Apr 2025 13:53:38 +0000
ROA not before:           Wed 09 Apr 2025 13:48:38 +0000
ROA not after:            Wed 08 Apr 2026 13:53:38 +0000
asID:                     273309
IP address blocks:        2804:8c7c:9400::/38 maxlen: 38

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl
                          rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 12:12:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:0d:57:0e:de:8a:79:eb:5b:4b:a9:f1:89:7a:ff:48:c1:48:69:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
        Validity
            Not Before: Apr  9 13:48:38 2025 GMT
            Not After : Apr  8 13:53:38 2026 GMT
        Subject: CN=26C025D78DCFBE4A78ACC5D04A4D46E01E19E2DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c7:8e:c8:88:ca:b8:ee:8f:73:7d:11:e0:bc:
                    b9:e2:03:0d:13:87:f4:33:12:04:05:2f:90:e2:ee:
                    26:a4:cc:de:85:2b:2a:85:c6:4c:9e:2d:b3:7d:8d:
                    3c:80:4e:6a:f1:39:fa:5f:a2:3b:c1:7c:31:aa:0a:
                    00:92:e6:70:df:05:92:4b:99:ff:e2:31:f7:d2:2b:
                    06:57:99:02:33:17:2f:c5:bf:81:22:1a:0f:25:24:
                    1b:d0:56:f5:5a:0e:97:3f:e4:64:36:43:42:0d:05:
                    f0:4a:27:0b:5b:0a:57:89:f9:46:da:88:d3:f0:2c:
                    16:a7:7c:33:1e:4d:d8:11:36:60:8d:82:c2:bb:29:
                    a4:e5:10:ac:0f:f4:39:18:a6:6a:19:83:06:fc:d7:
                    ee:9e:23:26:4b:86:cc:a0:50:00:a9:fa:f2:28:9f:
                    3f:23:2b:db:35:cb:32:56:fb:24:41:e1:08:53:54:
                    37:cb:d1:e3:d4:4d:69:43:2c:12:62:c5:07:d1:9f:
                    9a:e5:07:d7:12:43:71:31:bc:9e:c7:3c:3a:6a:76:
                    64:e8:3e:3b:75:44:f7:16:0e:12:97:0a:30:b1:5e:
                    e0:e3:e7:ba:2d:54:49:a1:af:c1:80:de:bc:b3:bb:
                    45:3b:a2:29:49:f2:81:a9:1b:db:c0:22:64:6d:1c:
                    1d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C0:25:D7:8D:CF:BE:4A:78:AC:C5:D0:4A:4D:46:E0:1E:19:E2:DF
            X509v3 Authority Key Identifier:
                keyid:2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a393430303a3a2f33382d3338203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c7c:9400::/38

    Signature Algorithm: sha256WithRSAEncryption
         5f:fa:83:80:0d:c2:f5:e9:60:ff:d5:d6:25:b7:1c:c0:6e:69:
         8d:69:68:58:d9:36:8b:d6:dd:7a:b8:c1:77:d8:cb:c6:dc:da:
         60:df:57:fc:4a:6d:f7:69:e9:3b:19:58:f2:00:6c:52:3e:c5:
         32:d1:13:42:62:43:76:54:be:2e:d8:35:18:36:88:5e:44:34:
         fa:c3:ce:01:6b:d1:09:6c:f6:9e:fd:45:83:ba:20:95:71:2a:
         36:dd:99:a8:32:c2:b9:a8:ae:eb:d0:b2:00:af:78:66:5a:ce:
         10:77:a0:da:9d:be:fb:dd:25:46:55:42:df:09:10:90:0e:1b:
         dd:90:51:6c:93:e7:77:5b:2d:a2:08:a6:31:1c:15:10:29:17:
         78:a7:9a:ed:a0:0e:3a:09:ba:1d:02:40:14:cd:15:37:75:78:
         62:a2:e7:55:e4:e6:9b:92:ed:ba:fb:f8:9b:93:fe:c8:26:71:
         81:b5:45:94:04:c8:20:e9:38:fc:da:0e:a8:c7:8f:67:74:99:
         eb:5f:bc:83:8a:5d:18:4e:43:a4:54:a4:2f:35:3f:b0:c0:66:
         89:dc:50:41:dd:73:ab:4a:cc:1b:0c:1e:20:bf:46:fd:89:13:
         1a:a3:0f:a7:72:2c:87:66:ab:de:95:de:58:dd:05:0c:26:1c:
         4c:f9:fb:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:05:00 2025 by rpki-client on console.sobornost.net