Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/323830343a336638383a3a2f33322d3332203d3e20323635383939.roa
File:                     323830343a336638383a3a2f33322d3332203d3e20323635383939.roa (raw, json)
Hash identifier:          wALcwn6CAFPHGVAFUsfHvSzqkitT9wB3mn5kZtQym3g=
Subject key identifier:   AF:43:7B:F1:9B:A8:F9:95:F4:35:90:E7:AE:1B:5F:4B:43:6C:BE:C4
Certificate issuer:       /CN=5096373658543AD02A3562D6EBE37A8A75AF47A3
Certificate serial:       5FE51FE5073429261A2AD0E9DAB5F1D8F8531426
Authority key identifier: 50:96:37:36:58:54:3A:D0:2A:35:62:D6:EB:E3:7A:8A:75:AF:47:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5096373658543AD02A3562D6EBE37A8A75AF47A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/323830343a336638383a3a2f33322d3332203d3e20323635383939.roa
Signing time:             Tue 31 Dec 2024 18:17:26 +0000
ROA not before:           Tue 31 Dec 2024 18:12:26 +0000
ROA not after:            Tue 30 Dec 2025 18:17:26 +0000
asID:                     265899
IP address blocks:        2804:3f88::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/5096373658543AD02A3562D6EBE37A8A75AF47A3.crl
                          rsync://rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/5096373658543AD02A3562D6EBE37A8A75AF47A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5096373658543AD02A3562D6EBE37A8A75AF47A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:e5:1f:e5:07:34:29:26:1a:2a:d0:e9:da:b5:f1:d8:f8:53:14:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5096373658543AD02A3562D6EBE37A8A75AF47A3
        Validity
            Not Before: Dec 31 18:12:26 2024 GMT
            Not After : Dec 30 18:17:26 2025 GMT
        Subject: CN=AF437BF19BA8F995F43590E7AE1B5F4B436CBEC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:eb:c0:5e:0f:46:6e:2a:91:be:87:d1:f9:d5:
                    3c:8b:20:8a:03:a7:5d:9e:28:e3:18:e4:58:b4:33:
                    b6:58:07:69:9e:b1:bf:1f:2d:b6:2c:05:ac:87:54:
                    b9:66:21:c4:b3:4c:f0:39:73:03:0c:31:8b:3b:de:
                    f7:db:48:d2:a7:f3:8c:33:96:3f:b5:cf:98:e7:99:
                    5f:e8:40:83:1e:b5:e6:78:b3:33:22:a2:2b:1d:9c:
                    1e:9a:d4:47:c9:6e:8a:32:dd:43:df:a8:8f:77:f8:
                    9c:aa:b4:6f:86:5b:c9:31:da:5b:ef:55:74:b3:ae:
                    04:6b:f9:62:1e:08:28:6a:ec:59:0c:21:36:7c:53:
                    6d:84:93:be:20:1a:8f:d7:53:9d:a2:00:a5:8b:d1:
                    d2:73:2a:5a:9a:3e:bf:c5:5a:3e:d9:93:0e:dc:d5:
                    6f:a4:72:94:31:dc:c4:b8:bd:00:98:f8:2d:7b:d5:
                    10:fa:55:11:c5:7c:0a:7a:78:32:5f:e0:85:b0:7c:
                    3e:5f:3f:08:d2:11:9c:f6:c0:71:34:cc:04:91:ef:
                    ef:a9:19:07:2b:1a:fc:fc:ae:3f:5e:83:5b:b8:87:
                    93:76:b8:85:b2:3f:e4:97:4f:cc:82:c4:c8:c0:8a:
                    d8:f6:c2:ba:72:1a:02:1d:c9:4c:b1:de:fe:ee:17:
                    97:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:43:7B:F1:9B:A8:F9:95:F4:35:90:E7:AE:1B:5F:4B:43:6C:BE:C4
            X509v3 Authority Key Identifier:
                keyid:50:96:37:36:58:54:3A:D0:2A:35:62:D6:EB:E3:7A:8A:75:AF:47:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/5096373658543AD02A3562D6EBE37A8A75AF47A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5096373658543AD02A3562D6EBE37A8A75AF47A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/323830343a336638383a3a2f33322d3332203d3e20323635383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f88::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:7a:a9:ee:62:ee:90:24:ec:98:b7:84:ab:7d:7b:80:53:40:
         59:8f:1f:ab:35:85:66:91:40:11:ee:57:d0:dc:e9:fd:9f:6c:
         e0:97:7a:68:a8:e5:b4:1e:12:72:91:55:b1:00:21:89:75:e2:
         7f:99:af:bb:33:03:ba:94:7e:ff:2b:86:fa:49:7d:26:13:d7:
         b9:9f:37:35:fc:d4:3c:1a:3d:29:9a:ab:3c:ab:73:d8:c9:d1:
         88:e5:64:71:81:a4:2a:ab:f3:44:71:91:5f:b4:47:b3:2b:e7:
         68:11:b2:1d:0a:af:4d:2b:d8:30:5f:83:f9:a7:c8:80:5a:37:
         b0:ed:8d:0f:cf:3c:a9:75:e7:45:f3:1a:43:09:3a:8d:ab:26:
         da:4e:c2:22:64:2e:16:2b:8c:c1:60:7a:1d:46:d6:0e:bc:07:
         c2:83:94:69:c7:27:e3:d2:ff:03:c7:69:38:fa:1b:19:a3:fd:
         ed:70:91:37:de:8e:99:66:0d:99:1b:c3:25:14:85:2d:b7:11:
         e9:20:aa:e7:50:74:0a:e6:bb:2a:5c:30:06:ca:7a:3d:63:a1:
         e6:6d:2a:a2:63:22:41:a4:7e:3d:94:fb:47:c5:02:20:77:42:
         57:2b:63:78:43:ba:e5:6f:da:b6:a3:30:d9:88:04:be:33:bc:
         63:96:db:9a
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUX+Uf5Qc0KSYaKtDp2rXx2PhTFCYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTA5NjM3MzY1ODU0M0FEMDJBMzU2MkQ2RUJFMzdBOEE3
NUFGNDdBMzAeFw0yNDEyMzExODEyMjZaFw0yNTEyMzAxODE3MjZaMDMxMTAvBgNV
BAMTKEFGNDM3QkYxOUJBOEY5OTVGNDM1OTBFN0FFMUI1RjRCNDM2Q0JFQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC068BeD0ZuKpG+h9H51TyLIIoD
p12eKOMY5Fi0M7ZYB2mesb8fLbYsBayHVLlmIcSzTPA5cwMMMYs73vfbSNKn84wz
lj+1z5jnmV/oQIMeteZ4szMioisdnB6a1EfJbooy3UPfqI93+JyqtG+GW8kx2lvv
VXSzrgRr+WIeCChq7FkMITZ8U22Ek74gGo/XU52iAKWL0dJzKlqaPr/FWj7Zkw7c
1W+kcpQx3MS4vQCY+C171RD6VRHFfAp6eDJf4IWwfD5fPwjSEZz2wHE0zASR7++p
GQcrGvz8rj9eg1u4h5N2uIWyP+SXT8yCxMjAitj2wrpyGgIdyUyx3v7uF5cjAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUr0N78Zuo+ZX0NZDnrhtfS0NsvsQwHwYDVR0j
BBgwFoAUUJY3NlhUOtAqNWLW6+N6inWvR6MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjVTcmJRZG9VWU5qcWtEb0V0ZmJweTd2OTdGMktabnhUdWhIQXZmM2FK
M3cvMC81MDk2MzczNjU4NTQzQUQwMkEzNTYyRDZFQkUzN0E4QTc1QUY0N0EzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUwOTYzNzM2NTg1NDNBRDAy
QTM1NjJENkVCRTM3QThBNzVBRjQ3QTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzI1U3JiUWRvVVlOanFrRG9FdGZicHk3djk3RjJLWm54VHVoSEF2ZjNhSjN3LzAv
MzIzODMwMzQzYTMzNjYzODM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM1
MzgzOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ/iDANBgkqhkiG9w0BAQsFAAOCAQEAiHqp7mLu
kCTsmLeEq317gFNAWY8fqzWFZpFAEe5X0Nzp/Z9s4Jd6aKjltB4ScpFVsQAhiXXi
f5mvuzMDupR+/yuG+kl9JhPXuZ83NfzUPBo9KZqrPKtz2MnRiOVkcYGkKqvzRHGR
X7RHsyvnaBGyHQqvTSvYMF+D+afIgFo3sO2ND888qXXnRfMaQwk6jasm2k7CImQu
FiuMwWB6HUbWDrwHwoOUaccn49L/A8dpOPobGaP97XCRN96OmWYNmRvDJRSFLbcR
6SCq51B0Cua7KlwwBsp6PWOh5m0qomMiQaR+PZT7R8UCIHdCVytjeEO65W/atqMw
2YgEvjO8Y5bbmg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:46:18 2025 by rpki-client on console.sobornost.net