Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a393630303a3a2f34302d3430203d3e20323733333039.roa
File:                     323830343a386337633a393630303a3a2f34302d3430203d3e20323733333039.roa (raw, json)
Hash identifier:          wUBTeRs7I9ORoUsmrkwTG075/B8To3xQ9Sn7V4ugsXo=
Subject key identifier:   5D:70:41:31:46:B4:A9:F3:B2:C6:2B:E9:41:73:84:22:BB:D0:63:AF
Certificate issuer:       /CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
Certificate serial:       55486A7481220C14195D02EAA68702527BA77741
Authority key identifier: 2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a393630303a3a2f34302d3430203d3e20323733333039.roa
Signing time:             Wed 09 Apr 2025 13:53:39 +0000
ROA not before:           Wed 09 Apr 2025 13:48:39 +0000
ROA not after:            Wed 08 Apr 2026 13:53:39 +0000
asID:                     273309
IP address blocks:        2804:8c7c:9600::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl
                          rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 12:12:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:48:6a:74:81:22:0c:14:19:5d:02:ea:a6:87:02:52:7b:a7:77:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
        Validity
            Not Before: Apr  9 13:48:39 2025 GMT
            Not After : Apr  8 13:53:39 2026 GMT
        Subject: CN=5D70413146B4A9F3B2C62BE941738422BBD063AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e4:dd:6c:a4:aa:9e:f9:79:61:f9:69:d9:02:
                    b9:ef:da:02:fd:ac:27:f5:da:7a:6d:33:5e:8b:a0:
                    25:71:47:d6:4e:fe:c6:55:04:52:90:4f:03:f6:da:
                    1b:d3:23:a6:03:06:21:a6:35:fe:33:34:39:8b:43:
                    74:65:e5:7b:21:7d:9e:04:c2:ed:8b:d7:60:8c:14:
                    d3:66:3e:00:5c:0a:a3:68:1d:76:d3:44:0f:21:1e:
                    9d:03:88:0b:81:ad:68:30:61:65:2b:c6:d5:92:c5:
                    fd:f4:09:53:6e:13:72:b8:60:e5:11:97:4a:ba:c5:
                    89:08:48:97:2c:86:12:bd:00:86:fc:e3:e3:8b:d6:
                    a1:f8:f0:f3:3f:9b:25:ce:a2:71:72:2d:7a:6e:d7:
                    15:cd:8a:07:75:53:bd:e4:63:cf:e1:c6:b3:46:6a:
                    0a:de:dd:87:82:f4:a5:ed:f3:47:78:11:d4:56:12:
                    9e:d4:ec:72:74:e1:cf:93:99:ee:3a:8f:7e:8e:ff:
                    84:31:82:e4:c5:58:aa:4b:77:25:e3:d7:51:18:6f:
                    8f:25:f0:7e:73:b8:12:ad:09:fa:59:a8:6c:e1:38:
                    23:f6:ff:b0:28:76:83:59:b1:8b:2d:39:08:30:a8:
                    5e:f5:c2:6b:d2:a1:e9:6d:55:a2:d2:63:d3:0c:2b:
                    bb:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:70:41:31:46:B4:A9:F3:B2:C6:2B:E9:41:73:84:22:BB:D0:63:AF
            X509v3 Authority Key Identifier:
                keyid:2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a393630303a3a2f34302d3430203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c7c:9600::/40

    Signature Algorithm: sha256WithRSAEncryption
         78:4b:b0:07:0c:74:73:5c:76:73:b3:1e:eb:1e:16:1c:fe:cd:
         86:29:de:07:0b:6f:6f:01:1f:fd:37:3a:41:d1:bd:bd:0b:ab:
         4b:81:0e:a7:b0:59:b9:b6:39:cb:58:8b:99:2e:08:fd:25:a2:
         88:12:ab:44:32:50:cd:19:0e:be:b5:17:d8:8a:c9:bb:78:3e:
         ea:38:f7:0f:8e:a8:6c:d7:e9:26:1a:7c:b5:5b:7e:5b:eb:1c:
         06:3d:3b:5d:a1:62:a3:55:45:e2:ad:f4:a1:04:5c:6e:e1:de:
         dc:72:11:39:b3:74:7d:ca:07:03:b7:fc:1e:b3:67:fd:2b:ce:
         68:af:14:f1:23:fe:2c:ab:f1:ec:94:cb:92:fd:ef:7b:42:e9:
         4b:f9:5b:f4:3a:b3:b0:6d:cb:26:19:b5:93:fe:46:5b:8b:b7:
         01:95:37:3d:1c:e7:2d:e0:16:19:9d:93:a2:50:24:d2:1a:0c:
         cd:a7:e2:e7:35:5c:da:86:4a:88:ec:b6:63:af:cb:a6:7d:0e:
         e4:3e:88:0f:d0:55:28:aa:c5:bc:54:b6:aa:b5:cb:95:ff:51:
         34:97:a1:92:56:f1:a8:2e:47:37:f4:7e:15:b2:fb:81:78:10:
         ce:5f:86:88:df:e2:64:c3:44:e4:14:32:fd:c6:a1:b4:59:2a:
         d2:95:4c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:05:00 2025 by rpki-client on console.sobornost.net