Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/1/323830343a6634343a3a2f33322d3438203d3e20323633353734.roa
File:                     323830343a6634343a3a2f33322d3438203d3e20323633353734.roa (raw, json)
Hash identifier:          1HqQwaTkfcsTaeXe/pg18yBvDwTSP9/g//CTKLs3v8I=
Subject key identifier:   F6:66:44:98:9E:3E:F4:4B:5F:DF:39:57:00:5C:C3:FD:26:8C:4B:75
Certificate issuer:       /CN=8D0F799DDE369B44B3A0931DBECC6483E27050C6
Certificate serial:       375C3D63BEE5B785976615287A1C15C2DB0B4277
Authority key identifier: 8D:0F:79:9D:DE:36:9B:44:B3:A0:93:1D:BE:CC:64:83:E2:70:50:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D0F799DDE369B44B3A0931DBECC6483E27050C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/1/323830343a6634343a3a2f33322d3438203d3e20323633353734.roa
Signing time:             Thu 06 Mar 2025 03:48:34 +0000
ROA not before:           Thu 06 Mar 2025 03:43:34 +0000
ROA not after:            Thu 05 Mar 2026 03:48:34 +0000
asID:                     263574
IP address blocks:        2804:f44::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/1/8D0F799DDE369B44B3A0931DBECC6483E27050C6.crl
                          rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/1/8D0F799DDE369B44B3A0931DBECC6483E27050C6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D0F799DDE369B44B3A0931DBECC6483E27050C6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:5c:3d:63:be:e5:b7:85:97:66:15:28:7a:1c:15:c2:db:0b:42:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D0F799DDE369B44B3A0931DBECC6483E27050C6
        Validity
            Not Before: Mar  6 03:43:34 2025 GMT
            Not After : Mar  5 03:48:34 2026 GMT
        Subject: CN=F66644989E3EF44B5FDF3957005CC3FD268C4B75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f4:73:c6:f8:55:51:1e:18:4a:a2:7d:25:d3:
                    0c:66:40:dc:d0:a3:79:3d:ac:c1:9a:d7:d0:9c:cd:
                    38:7d:3c:4a:c8:3e:68:6e:e1:21:6a:52:4a:8b:08:
                    5e:20:a6:37:c6:24:c1:da:ba:02:d7:bd:c5:71:77:
                    87:e1:1b:0d:53:b3:ad:7f:12:9b:83:97:47:66:1f:
                    79:e9:c0:b1:b5:7f:7e:6a:6d:7a:ab:1d:b0:4d:e5:
                    6c:98:2a:2a:d1:37:e3:ac:70:69:1b:57:7b:24:4b:
                    62:a4:ba:63:dd:0e:e0:8e:35:0b:b9:89:94:23:d8:
                    16:94:37:17:84:51:58:70:5a:1a:40:97:ad:3d:1d:
                    d7:02:c3:d2:6c:1b:c1:f0:11:5f:24:ff:ea:ad:3a:
                    6f:d3:56:1a:5e:27:61:60:5e:ee:3d:11:89:52:f6:
                    95:e8:5b:0a:b4:78:c6:b5:32:b4:d1:e6:b0:21:46:
                    45:36:d7:4a:07:29:6c:27:dd:ef:ea:33:fb:27:cc:
                    c7:09:82:a2:f4:df:04:7a:41:84:88:65:4a:6a:04:
                    d4:51:a9:c2:88:bd:30:f8:56:39:39:fe:05:01:36:
                    a4:3f:42:16:60:0c:c9:ca:36:01:e4:9f:23:16:44:
                    32:83:34:c4:79:ab:f6:d7:80:58:fa:45:71:91:e4:
                    17:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:66:44:98:9E:3E:F4:4B:5F:DF:39:57:00:5C:C3:FD:26:8C:4B:75
            X509v3 Authority Key Identifier:
                keyid:8D:0F:79:9D:DE:36:9B:44:B3:A0:93:1D:BE:CC:64:83:E2:70:50:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/1/8D0F799DDE369B44B3A0931DBECC6483E27050C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D0F799DDE369B44B3A0931DBECC6483E27050C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/1/323830343a6634343a3a2f33322d3438203d3e20323633353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f44::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:0f:8e:55:36:e7:3f:09:39:1c:a1:47:ee:90:d1:f1:b6:1e:
         0f:80:8c:03:39:a9:09:35:57:ea:7c:1b:66:ea:21:10:5b:83:
         08:66:88:0d:13:a7:1d:b0:c8:9f:5e:c8:5a:1a:fc:de:d0:85:
         ad:05:c6:ad:ea:ca:a1:db:7c:ad:71:3d:d8:60:ce:d8:70:d4:
         f1:eb:70:3a:c4:2b:1b:f1:6a:06:8a:1d:80:47:fc:dc:db:49:
         2c:c6:74:d5:0d:00:07:19:d2:9f:0f:51:69:07:44:da:f2:c8:
         15:77:47:2d:d8:34:ee:db:a7:36:47:95:82:b4:cd:e6:f8:7a:
         fb:75:ac:af:dc:ac:66:b9:30:91:14:59:27:41:c7:43:a0:a2:
         58:bb:79:d1:08:38:11:d6:f2:8b:bd:e5:37:51:b2:74:e1:1c:
         a1:14:a7:ff:94:79:86:47:fc:5b:a6:1a:ef:39:5c:b0:af:84:
         51:a8:b6:a9:c1:09:d3:9d:cc:0a:fc:65:56:df:b7:cd:dd:a0:
         91:90:d1:fd:c0:5d:3d:5c:46:92:c8:de:21:8e:f9:86:28:49:
         66:d5:95:43:79:a8:91:53:76:c9:89:9e:d3:b4:95:e1:75:2f:
         40:37:92:f8:10:48:69:19:ac:22:4d:1c:a6:28:e2:ee:ea:97:
         fa:19:66:ea
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUN1w9Y77lt4WXZhUoehwVwtsLQncwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEQwRjc5OURERTM2OUI0NEIzQTA5MzFEQkVDQzY0ODNF
MjcwNTBDNjAeFw0yNTAzMDYwMzQzMzRaFw0yNjAzMDUwMzQ4MzRaMDMxMTAvBgNV
BAMTKEY2NjY0NDk4OUUzRUY0NEI1RkRGMzk1NzAwNUNDM0ZEMjY4QzRCNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC99HPG+FVRHhhKon0l0wxmQNzQ
o3k9rMGa19CczTh9PErIPmhu4SFqUkqLCF4gpjfGJMHaugLXvcVxd4fhGw1Ts61/
EpuDl0dmH3npwLG1f35qbXqrHbBN5WyYKirRN+OscGkbV3skS2KkumPdDuCONQu5
iZQj2BaUNxeEUVhwWhpAl609HdcCw9JsG8HwEV8k/+qtOm/TVhpeJ2FgXu49EYlS
9pXoWwq0eMa1MrTR5rAhRkU210oHKWwn3e/qM/snzMcJgqL03wR6QYSIZUpqBNRR
qcKIvTD4Vjk5/gUBNqQ/QhZgDMnKNgHknyMWRDKDNMR5q/bXgFj6RXGR5BeRAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU9mZEmJ4+9Etf3zlXAFzD/SaMS3UwHwYDVR0j
BBgwFoAUjQ95nd42m0SzoJMdvsxkg+JwUMYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMTNyeDJMSlV2QU1XRXRXblBTU3NGeERuY3pwSHJTcWdjeDU3VnVDTHll
YnIvMS84RDBGNzk5RERFMzY5QjQ0QjNBMDkzMURCRUNDNjQ4M0UyNzA1MEM2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhEMEY3OTlEREUzNjlCNDRC
M0EwOTMxREJFQ0M2NDgzRTI3MDUwQzYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzEzcngyTEpVdkFNV0V0V25QU1NzRnhEbmN6cEhyU3FnY3g1N1Z1Q0x5ZWJyLzEv
MzIzODMwMzQzYTY2MzQzNDNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzMzM1
MzczNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgED0QwDQYJKoZIhvcNAQELBQADggEBAHUPjlU25z8J
ORyhR+6Q0fG2Hg+AjAM5qQk1V+p8G2bqIRBbgwhmiA0Tpx2wyJ9eyFoa/N7Qha0F
xq3qyqHbfK1xPdhgzthw1PHrcDrEKxvxagaKHYBH/NzbSSzGdNUNAAcZ0p8PUWkH
RNryyBV3Ry3YNO7bpzZHlYK0zeb4evt1rK/crGa5MJEUWSdBx0Ogoli7edEIOBHW
8ou95TdRsnThHKEUp/+UeYZH/FumGu85XLCvhFGotqnBCdOdzAr8ZVbft83doJGQ
0f3AXT1cRpLI3iGO+YYoSWbVlUN5qJFTdsmJntO0leF1L0A3kvgQSGkZrCJNHKYo
4u7ql/oZZuo=
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:40:33 2025 by rpki-client on console.sobornost.net