Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2cPtcDQGWGem1rgyqomM7k1KigumvXPzjf3GqBueYnEE/1/323830343a313962303a3a2f33322d3438203d3e203631383132.roa
File:                     323830343a313962303a3a2f33322d3438203d3e203631383132.roa (raw, json)
Hash identifier:          UpXZvMnfN7ZQ4csvZrx/3+9tud0/4UDi/+GurEGzm2I=
Subject key identifier:   87:1B:66:5D:0C:78:76:FD:7C:21:43:A5:4B:36:C4:15:83:31:8C:D0
Certificate issuer:       /CN=30CB0F58B1D79A759D914AF97BA1287C39FE9DFD
Certificate serial:       7ADDEB7719BA79DF9D0344962F1817DDFD395E55
Authority key identifier: 30:CB:0F:58:B1:D7:9A:75:9D:91:4A:F9:7B:A1:28:7C:39:FE:9D:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2cPtcDQGWGem1rgyqomM7k1KigumvXPzjf3GqBueYnEE/1/323830343a313962303a3a2f33322d3438203d3e203631383132.roa
Signing time:             Thu 06 Mar 2025 12:55:35 +0000
ROA not before:           Thu 06 Mar 2025 12:50:35 +0000
ROA not after:            Thu 05 Mar 2026 12:55:35 +0000
asID:                     61812
IP address blocks:        2804:19b0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2cPtcDQGWGem1rgyqomM7k1KigumvXPzjf3GqBueYnEE/1/30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.crl
                          rsync://rpki-repo.registro.br/repo/2cPtcDQGWGem1rgyqomM7k1KigumvXPzjf3GqBueYnEE/1/30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 10:47:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:dd:eb:77:19:ba:79:df:9d:03:44:96:2f:18:17:dd:fd:39:5e:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30CB0F58B1D79A759D914AF97BA1287C39FE9DFD
        Validity
            Not Before: Mar  6 12:50:35 2025 GMT
            Not After : Mar  5 12:55:35 2026 GMT
        Subject: CN=871B665D0C7876FD7C2143A54B36C41583318CD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:a3:ec:a9:90:b8:23:de:3a:4f:6f:6d:bb:e2:
                    ed:a8:72:ad:e8:8b:4b:56:01:67:8a:15:e3:45:20:
                    88:a0:1b:58:3d:b7:f8:84:7e:d6:fa:17:3b:c4:61:
                    9a:73:47:37:f2:ca:3f:ca:87:9b:b8:b6:e2:70:d1:
                    26:94:f7:7f:ff:14:34:e3:17:88:96:f4:f3:82:a6:
                    b5:75:09:d2:95:c6:81:2c:33:7f:76:30:22:fb:b8:
                    c5:1a:e9:70:01:74:fc:d2:bc:6f:ac:6d:3c:6f:d9:
                    f6:4b:6c:59:fa:58:4a:eb:44:9f:1f:cb:80:1e:73:
                    db:be:53:ce:d9:26:aa:bf:19:d4:3b:bf:fd:02:cf:
                    76:3a:50:3f:4b:da:e2:0f:e9:ef:ec:06:52:ca:33:
                    86:66:94:1e:13:6d:69:f7:f5:b5:10:3b:e8:80:ae:
                    38:9b:bc:e1:c1:49:16:62:7f:59:07:3b:f3:4e:b8:
                    4d:52:78:77:6c:da:b7:dd:c2:52:81:c2:2f:94:85:
                    11:13:0b:6b:3b:3f:54:fc:44:cb:f3:ad:31:43:cc:
                    ab:4d:99:79:b9:55:c5:17:5c:41:57:01:01:6c:f8:
                    4e:e9:7e:0d:ce:83:68:3c:f1:0f:b8:f2:86:96:1d:
                    e0:5a:8c:b5:8a:36:2a:68:d9:43:e4:80:3e:c5:a4:
                    60:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:1B:66:5D:0C:78:76:FD:7C:21:43:A5:4B:36:C4:15:83:31:8C:D0
            X509v3 Authority Key Identifier:
                keyid:30:CB:0F:58:B1:D7:9A:75:9D:91:4A:F9:7B:A1:28:7C:39:FE:9D:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2cPtcDQGWGem1rgyqomM7k1KigumvXPzjf3GqBueYnEE/1/30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cPtcDQGWGem1rgyqomM7k1KigumvXPzjf3GqBueYnEE/1/323830343a313962303a3a2f33322d3438203d3e203631383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:19b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:9e:2d:2c:75:96:79:05:2e:32:24:13:8d:df:36:8c:8d:88:
         84:b1:88:42:06:b7:d4:b2:e3:f0:96:28:da:3e:e0:c9:12:0e:
         be:c9:07:56:f9:a7:58:da:a2:99:9e:3e:5a:b6:ff:cf:ca:3e:
         dc:79:75:09:0b:b6:69:e0:03:3a:c9:27:5a:35:7f:da:2e:09:
         b5:64:e1:a2:29:41:de:eb:bd:85:59:6e:6d:32:fc:31:4a:c1:
         47:5c:fd:e6:32:cc:42:26:12:2c:35:d2:17:6d:78:26:34:82:
         6f:08:ba:e4:5e:d1:72:e5:fa:99:ea:7c:54:36:9e:8b:61:72:
         c5:ab:1d:ea:ca:5b:cd:6b:e0:0b:2d:0c:37:2b:59:dc:74:9b:
         d2:d1:aa:e6:45:0c:45:b9:3a:fc:c7:4b:5e:6b:4e:f1:58:3b:
         71:ba:f5:63:7f:a5:ab:5e:ef:28:ff:c8:60:34:62:24:6b:1a:
         9a:49:0b:e8:96:54:dc:0c:4d:fc:85:be:eb:25:a5:62:56:91:
         f6:ad:94:0f:cd:e1:e3:2a:c1:a4:5b:79:4e:2c:be:61:6d:4e:
         fb:3f:09:98:3b:11:5e:40:b6:5a:95:a4:21:58:bc:89:50:06:
         f9:53:e7:14:83:eb:2b:4d:5f:53:72:d7:62:2e:6a:c6:d6:88:
         9c:98:0d:48
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUet3rdxm6ed+dA0SWLxgX3f05XlUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzBDQjBGNThCMUQ3OUE3NTlEOTE0QUY5N0JBMTI4N0Mz
OUZFOURGRDAeFw0yNTAzMDYxMjUwMzVaFw0yNjAzMDUxMjU1MzVaMDMxMTAvBgNV
BAMTKDg3MUI2NjVEMEM3ODc2RkQ3QzIxNDNBNTRCMzZDNDE1ODMzMThDRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwo+ypkLgj3jpPb2274u2ocq3o
i0tWAWeKFeNFIIigG1g9t/iEftb6FzvEYZpzRzfyyj/Kh5u4tuJw0SaU93//FDTj
F4iW9POCprV1CdKVxoEsM392MCL7uMUa6XABdPzSvG+sbTxv2fZLbFn6WErrRJ8f
y4Aec9u+U87ZJqq/GdQ7v/0Cz3Y6UD9L2uIP6e/sBlLKM4ZmlB4TbWn39bUQO+iA
rjibvOHBSRZif1kHO/NOuE1SeHds2rfdwlKBwi+UhRETC2s7P1T8RMvzrTFDzKtN
mXm5VcUXXEFXAQFs+E7pfg3Og2g88Q+48oaWHeBajLWKNipo2UPkgD7FpGBZAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUhxtmXQx4dv18IUOlSzbEFYMxjNAwHwYDVR0j
BBgwFoAUMMsPWLHXmnWdkUr5e6EofDn+nf0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmNQdGNEUUdXR2VtMXJneXFvbU03azFLaWd1bXZYUHpqZjNHcUJ1ZVlu
RUUvMS8zMENCMEY1OEIxRDc5QTc1OUQ5MTRBRjk3QkExMjg3QzM5RkU5REZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMwQ0IwRjU4QjFENzlBNzU5
RDkxNEFGOTdCQTEyODdDMzlGRTlERkQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJjUHRjRFFHV0dlbTFyZ3lxb21NN2sxS2lndW12WFB6amYzR3FCdWVZbkVFLzEv
MzIzODMwMzQzYTMxMzk2MjMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzYzMTM4
MzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEGbAwDQYJKoZIhvcNAQELBQADggEBAByeLSx1lnkF
LjIkE43fNoyNiISxiEIGt9Sy4/CWKNo+4MkSDr7JB1b5p1jaopmePlq2/8/KPtx5
dQkLtmngAzrJJ1o1f9ouCbVk4aIpQd7rvYVZbm0y/DFKwUdc/eYyzEImEiw10hdt
eCY0gm8IuuRe0XLl+pnqfFQ2nothcsWrHerKW81r4AstDDcrWdx0m9LRquZFDEW5
OvzHS15rTvFYO3G69WN/pate7yj/yGA0YiRrGppJC+iWVNwMTfyFvuslpWJWkfat
lA/N4eMqwaRbeU4svmFtTvs/CZg7EV5AtlqVpCFYvIlQBvlT5xSD6ytNX1Ny12Iu
asbWiJyYDUg=
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:37:10 2025 by rpki-client on console.sobornost.net