Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a3a2f33322d3332203d3e20323733333039.roa
File:                     323830343a386337633a3a2f33322d3332203d3e20323733333039.roa (raw, json)
Hash identifier:          G6QWXjqbXG25dVLwtDWcaPjsdOmMFOfQtNGSpwtRufc=
Subject key identifier:   7F:30:41:9D:24:BD:74:68:E6:53:CA:78:CD:6B:94:15:DB:B4:F7:73
Certificate issuer:       /CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
Certificate serial:       31575D294A897A44AB27C84C1F1358AA359F33B5
Authority key identifier: 2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a3a2f33322d3332203d3e20323733333039.roa
Signing time:             Wed 09 Apr 2025 13:53:37 +0000
ROA not before:           Wed 09 Apr 2025 13:48:37 +0000
ROA not after:            Wed 08 Apr 2026 13:53:37 +0000
asID:                     273309
IP address blocks:        2804:8c7c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl
                          rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 12:12:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:57:5d:29:4a:89:7a:44:ab:27:c8:4c:1f:13:58:aa:35:9f:33:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
        Validity
            Not Before: Apr  9 13:48:37 2025 GMT
            Not After : Apr  8 13:53:37 2026 GMT
        Subject: CN=7F30419D24BD7468E653CA78CD6B9415DBB4F773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e6:d1:6e:d9:6b:ad:36:05:89:d7:f8:17:1f:
                    f6:f8:49:a7:c9:f7:2e:d1:01:40:c0:78:e0:1f:f2:
                    d1:69:45:8e:50:7e:84:aa:29:e2:95:bb:8e:c1:3d:
                    66:49:84:44:c1:b2:82:1a:80:9d:fd:df:94:17:64:
                    e8:66:8e:2d:eb:a5:5f:63:26:60:81:fc:f2:b6:02:
                    88:90:42:e2:5d:c8:3d:a1:54:e6:58:c0:98:b9:3a:
                    6e:b2:fb:74:13:ee:1f:f0:a8:e7:c7:28:3f:a4:32:
                    85:c4:0c:30:7c:de:67:b5:fb:4b:8f:21:81:d6:1b:
                    06:5b:e8:0e:3f:ca:d9:cd:a9:cb:4c:b5:64:a4:f9:
                    c7:cd:ba:b9:57:61:7b:b1:63:2a:ea:7b:8b:7c:b2:
                    c7:82:96:6e:06:77:55:14:fb:9c:42:4e:05:98:e3:
                    89:c8:51:58:f0:87:24:9d:de:ee:90:6e:8f:90:0d:
                    82:ae:22:c8:b6:e7:82:67:e0:2d:74:11:6f:75:47:
                    a5:46:ba:db:63:5e:72:b4:1d:55:17:8d:cb:28:d0:
                    03:64:32:11:a0:98:84:33:b4:0d:b6:76:29:f5:7f:
                    53:d4:4d:6c:51:82:84:a7:9c:7f:aa:90:c5:b0:00:
                    f8:0c:84:d3:82:12:6b:b0:f8:23:2b:1a:cb:6e:b9:
                    bc:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:30:41:9D:24:BD:74:68:E6:53:CA:78:CD:6B:94:15:DB:B4:F7:73
            X509v3 Authority Key Identifier:
                keyid:2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a3a2f33322d3332203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:24:89:f6:f7:80:94:03:ef:96:c1:a3:51:e0:7e:d0:91:d1:
         8d:ae:91:fe:6a:bf:db:e3:8b:f2:26:d4:9d:0c:57:70:5e:cf:
         40:72:49:43:8a:1e:77:b9:95:9f:dd:34:12:06:e0:9e:36:bf:
         08:ca:fd:2a:da:56:ab:92:6c:89:be:3e:fc:7c:0f:f1:a1:27:
         06:41:81:ce:90:62:8b:69:74:9e:db:5e:7b:1b:43:13:b5:19:
         7c:f5:74:2d:bb:97:3e:90:c0:7d:17:fd:ee:ef:69:ef:29:6b:
         66:78:f5:29:80:91:52:94:6a:1e:bf:9c:8b:1b:77:75:15:c7:
         19:bc:04:af:a0:7a:cd:11:81:0b:1b:a8:50:06:7a:53:1c:b9:
         8e:92:79:43:30:a0:d3:e4:19:a4:38:05:33:fa:be:ce:15:1e:
         01:ae:81:e2:f1:8c:8c:9a:0c:b1:2f:b6:f3:5f:e6:2f:cd:0e:
         79:e4:be:d4:6d:6c:3c:95:2e:bb:51:bb:00:ce:72:5f:9e:7b:
         cf:b1:ef:8d:03:06:dc:4f:51:4f:66:09:ee:85:8c:6a:f1:19:
         f6:93:dc:c7:79:7a:12:ad:30:75:83:c9:79:30:12:20:16:49:
         4f:2c:31:f4:29:a3:76:f7:87:5a:99:db:21:37:af:2d:60:1b:
         59:c3:cd:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:05:00 2025 by rpki-client on console.sobornost.net