Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/WD2UUbTdoXhbUHLkHmN1XJyJPS2QpwsAhD43Hqdy3hK/0/323830313a38303a3239303a3a2f34382d313238203d3e20323632353333.roa
File:                     323830313a38303a3239303a3a2f34382d313238203d3e20323632353333.roa (raw, json)
Hash identifier:          pU4lv0IhZCsCEj9q4G7SntKBWRY7QjvCrK0XuUqjpew=
Subject key identifier:   B2:9A:08:D4:DB:55:B8:56:C2:DD:70:42:02:FD:05:9A:AD:02:02:FE
Certificate issuer:       /CN=475E83C51035E9041EFB6506FC8A7B253E2D6DB9
Certificate serial:       5D7E3947D547EFE964C32FA6A5BEEC7747CE96DC
Authority key identifier: 47:5E:83:C5:10:35:E9:04:1E:FB:65:06:FC:8A:7B:25:3E:2D:6D:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/475E83C51035E9041EFB6506FC8A7B253E2D6DB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/WD2UUbTdoXhbUHLkHmN1XJyJPS2QpwsAhD43Hqdy3hK/0/323830313a38303a3239303a3a2f34382d313238203d3e20323632353333.roa
Signing time:             Tue 22 Apr 2025 20:43:48 +0000
ROA not before:           Tue 22 Apr 2025 20:38:48 +0000
ROA not after:            Tue 21 Apr 2026 20:43:48 +0000
asID:                     262533
IP address blocks:        2801:80:290::/48 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/WD2UUbTdoXhbUHLkHmN1XJyJPS2QpwsAhD43Hqdy3hK/0/475E83C51035E9041EFB6506FC8A7B253E2D6DB9.crl
                          rsync://rpki-repo.registro.br/repo/WD2UUbTdoXhbUHLkHmN1XJyJPS2QpwsAhD43Hqdy3hK/0/475E83C51035E9041EFB6506FC8A7B253E2D6DB9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/475E83C51035E9041EFB6506FC8A7B253E2D6DB9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 20:07:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:7e:39:47:d5:47:ef:e9:64:c3:2f:a6:a5:be:ec:77:47:ce:96:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=475E83C51035E9041EFB6506FC8A7B253E2D6DB9
        Validity
            Not Before: Apr 22 20:38:48 2025 GMT
            Not After : Apr 21 20:43:48 2026 GMT
        Subject: CN=B29A08D4DB55B856C2DD704202FD059AAD0202FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f8:e0:3a:ba:40:24:d0:58:85:19:e2:3c:a1:
                    f6:4f:41:81:75:a6:3e:3a:6d:4d:3b:2e:db:25:0f:
                    d6:24:d1:b3:09:37:9e:55:c4:50:38:c6:61:4e:06:
                    27:c2:c8:b0:d7:b4:2a:86:21:60:37:4e:78:8f:b4:
                    b3:3a:ab:b1:98:40:c3:f7:0c:e4:18:11:92:21:c6:
                    22:eb:e3:ea:46:c6:e2:bc:50:70:ba:cc:9c:33:ef:
                    0a:5e:94:ae:17:db:dc:da:21:7a:13:7b:01:30:5f:
                    7f:dc:fc:2e:d5:c5:02:be:05:4b:96:d6:ff:8c:27:
                    b2:57:52:c9:74:a5:95:0f:de:a0:55:3f:51:d3:19:
                    5e:4b:f3:76:41:79:18:ea:0c:8e:99:d2:0f:4b:ec:
                    01:46:a5:5d:8d:d4:2f:0d:91:e9:e5:8c:67:44:cc:
                    ec:9e:cb:10:c5:92:08:1f:19:40:b5:48:86:19:ef:
                    3b:83:8f:64:11:31:08:c2:f5:fe:ef:4e:b8:68:56:
                    1b:48:22:98:49:7e:08:5d:42:84:e0:bd:39:be:2f:
                    22:79:dc:06:bf:51:c3:bc:55:47:17:f8:7e:83:fd:
                    85:93:bc:64:62:f2:52:8f:2a:51:79:bd:e5:60:7e:
                    f6:4f:c3:a4:f6:af:a2:33:8a:8c:b7:de:11:8c:ab:
                    0b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:9A:08:D4:DB:55:B8:56:C2:DD:70:42:02:FD:05:9A:AD:02:02:FE
            X509v3 Authority Key Identifier:
                keyid:47:5E:83:C5:10:35:E9:04:1E:FB:65:06:FC:8A:7B:25:3E:2D:6D:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/WD2UUbTdoXhbUHLkHmN1XJyJPS2QpwsAhD43Hqdy3hK/0/475E83C51035E9041EFB6506FC8A7B253E2D6DB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/475E83C51035E9041EFB6506FC8A7B253E2D6DB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/WD2UUbTdoXhbUHLkHmN1XJyJPS2QpwsAhD43Hqdy3hK/0/323830313a38303a3239303a3a2f34382d313238203d3e20323632353333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:290::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:67:bc:29:cd:f8:89:69:23:02:f2:6c:31:ff:fa:5b:6c:13:
         c3:dd:39:4f:b7:c2:4e:1b:a0:6e:04:1a:fe:d2:18:9f:90:5c:
         03:f2:12:7a:fe:d0:0b:d2:21:80:02:01:f9:56:ff:62:17:11:
         da:68:39:ed:0a:2b:2a:7a:c1:30:de:ef:01:12:4b:f6:cd:14:
         5e:20:ce:62:e6:61:15:54:22:2f:ab:4e:a1:05:53:1d:4e:1d:
         38:a5:cc:1e:a5:ec:93:4e:86:ae:fb:cc:23:a7:43:bd:c4:7a:
         16:45:c0:44:39:94:33:2a:7a:47:21:3c:39:75:3f:01:a8:f1:
         15:29:ca:e7:fe:7c:fe:c0:b1:9b:67:10:19:a1:0b:fc:bf:66:
         29:95:5b:c4:a9:6c:88:97:1d:af:bd:62:77:08:ba:f7:3d:83:
         a5:1d:a2:e3:bb:46:e8:14:32:ed:4b:df:36:78:ad:9f:b4:c8:
         21:ba:1c:39:7e:26:1b:ec:ae:9a:f4:e2:b1:9c:b1:16:75:7c:
         5d:56:1a:a9:72:7d:af:8d:95:4b:de:ea:11:bf:e3:c6:0a:2f:
         7e:10:90:36:24:cf:69:e1:9e:59:40:d9:b9:cb:d6:94:bb:dc:
         00:c1:d7:58:6b:2b:7c:b8:f6:bb:e7:7b:d6:67:93:a0:95:0e:
         10:a4:67:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:48:16 2025 by rpki-client on console.sobornost.net