Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2cjVmpjDJStVtzYBqnUS2R5QNAGUAsKFEYgFy6Mvan8x/0/323830343a383133303a3a2f33322d3332203d3e20323732343338.roa
File:                     323830343a383133303a3a2f33322d3332203d3e20323732343338.roa (raw, json)
Hash identifier:          hqP9F0AlTlDTum7f/N7bi5mVBm7oH/AZevLDVLt12rw=
Subject key identifier:   29:DD:AB:58:56:D3:83:C9:50:F0:42:90:52:8D:C0:FD:1D:98:32:1E
Certificate issuer:       /CN=5445B268F95C5A86AE66A9F2C23E2E41A58C3D78
Certificate serial:       0CDC2BC34F1DD42511B6686E65083AEE512E299E
Authority key identifier: 54:45:B2:68:F9:5C:5A:86:AE:66:A9:F2:C2:3E:2E:41:A5:8C:3D:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5445B268F95C5A86AE66A9F2C23E2E41A58C3D78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2cjVmpjDJStVtzYBqnUS2R5QNAGUAsKFEYgFy6Mvan8x/0/323830343a383133303a3a2f33322d3332203d3e20323732343338.roa
Signing time:             Sat 26 Apr 2025 14:59:45 +0000
ROA not before:           Sat 26 Apr 2025 14:54:45 +0000
ROA not after:            Sat 25 Apr 2026 14:59:45 +0000
asID:                     272438
IP address blocks:        2804:8130::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2cjVmpjDJStVtzYBqnUS2R5QNAGUAsKFEYgFy6Mvan8x/0/5445B268F95C5A86AE66A9F2C23E2E41A58C3D78.crl
                          rsync://rpki-repo.registro.br/repo/2cjVmpjDJStVtzYBqnUS2R5QNAGUAsKFEYgFy6Mvan8x/0/5445B268F95C5A86AE66A9F2C23E2E41A58C3D78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5445B268F95C5A86AE66A9F2C23E2E41A58C3D78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 17:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:dc:2b:c3:4f:1d:d4:25:11:b6:68:6e:65:08:3a:ee:51:2e:29:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5445B268F95C5A86AE66A9F2C23E2E41A58C3D78
        Validity
            Not Before: Apr 26 14:54:45 2025 GMT
            Not After : Apr 25 14:59:45 2026 GMT
        Subject: CN=29DDAB5856D383C950F04290528DC0FD1D98321E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a0:d4:8c:d6:1b:bd:76:d5:12:0e:ce:5f:42:
                    80:7e:a4:a8:02:54:be:fa:e5:ea:85:c7:17:39:73:
                    9e:14:66:c4:1f:b9:0b:79:32:9c:86:49:81:76:ac:
                    a2:aa:1c:15:2c:f7:cf:81:2d:0f:38:8b:1e:f0:a6:
                    19:77:c6:bd:c8:30:e7:b9:78:1a:b4:ab:2a:60:9f:
                    56:ae:dc:59:b3:cb:5e:79:5f:f0:2f:2e:24:cb:82:
                    de:1b:7e:24:6d:91:d3:f7:db:f8:16:f3:a7:2e:eb:
                    bb:28:d0:03:95:8d:bd:1f:5b:77:2d:df:ec:92:28:
                    84:e6:d5:d6:98:c9:6a:a3:3f:80:28:35:45:95:e2:
                    2c:14:7d:af:33:34:20:86:34:72:08:55:08:55:fe:
                    36:03:87:f1:bd:98:99:7b:50:f3:f9:73:85:4b:98:
                    93:29:2b:ec:dc:76:eb:97:8a:dd:d0:ca:8b:43:79:
                    ca:a5:a5:b1:c5:99:9e:ca:ca:fb:aa:34:47:e7:c7:
                    75:70:3b:ca:1e:c1:50:05:b5:a5:79:cb:5c:63:bd:
                    e3:d4:4d:82:e9:e0:92:0c:4a:cc:d3:fc:e8:ae:d7:
                    d0:f5:72:eb:77:49:b1:d5:08:c6:0f:8b:1e:48:c0:
                    3f:a4:ac:59:30:9b:61:f3:ab:cc:ad:29:d1:25:80:
                    3d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:DD:AB:58:56:D3:83:C9:50:F0:42:90:52:8D:C0:FD:1D:98:32:1E
            X509v3 Authority Key Identifier:
                keyid:54:45:B2:68:F9:5C:5A:86:AE:66:A9:F2:C2:3E:2E:41:A5:8C:3D:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2cjVmpjDJStVtzYBqnUS2R5QNAGUAsKFEYgFy6Mvan8x/0/5445B268F95C5A86AE66A9F2C23E2E41A58C3D78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5445B268F95C5A86AE66A9F2C23E2E41A58C3D78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cjVmpjDJStVtzYBqnUS2R5QNAGUAsKFEYgFy6Mvan8x/0/323830343a383133303a3a2f33322d3332203d3e20323732343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8130::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:0e:01:fa:c6:20:74:b8:dd:0c:36:e7:5c:fe:32:4f:e2:97:
         e9:fd:9e:ab:2c:f7:da:96:49:2c:c3:03:09:bd:78:ed:f7:13:
         e3:5b:20:9d:e1:f1:17:a8:39:a5:83:bb:c3:6e:da:2d:ec:47:
         fd:46:80:30:42:5f:de:0f:38:56:5c:1a:ca:c8:35:ae:fa:9e:
         12:8f:97:bb:96:f6:3d:55:07:48:ae:e6:a9:a6:b7:c5:c1:b4:
         cc:50:c6:b1:60:86:d9:14:74:dc:a6:57:16:cf:19:12:5e:67:
         75:7c:2f:34:c8:a0:cb:39:5f:5b:24:03:1f:53:bb:10:67:dd:
         54:af:f1:03:a9:ec:b4:88:c4:01:e1:f6:32:1e:cb:f9:1d:de:
         0d:0d:c8:83:12:29:ab:72:dd:da:10:32:0a:5a:80:78:9e:de:
         f6:7d:7a:d0:51:7e:38:7b:ca:50:a1:8e:04:cc:d8:d0:0a:e8:
         ca:f9:dd:af:58:3f:78:a4:98:4e:fa:4a:7f:46:41:42:f1:0e:
         57:f8:0e:87:74:02:2f:b7:01:8c:5a:f4:f1:03:08:5e:73:ca:
         4e:83:44:97:d2:0c:bc:d0:7a:33:33:19:74:c1:ae:3a:51:65:
         dc:84:35:38:eb:5a:fa:a6:29:0b:51:38:73:bd:3d:aa:fb:60:
         20:fc:19:79
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUDNwrw08d1CURtmhuZQg67lEuKZ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTQ0NUIyNjhGOTVDNUE4NkFFNjZBOUYyQzIzRTJFNDFB
NThDM0Q3ODAeFw0yNTA0MjYxNDU0NDVaFw0yNjA0MjUxNDU5NDVaMDMxMTAvBgNV
BAMTKDI5RERBQjU4NTZEMzgzQzk1MEYwNDI5MDUyOERDMEZEMUQ5ODMyMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSoNSM1hu9dtUSDs5fQoB+pKgC
VL765eqFxxc5c54UZsQfuQt5MpyGSYF2rKKqHBUs98+BLQ84ix7wphl3xr3IMOe5
eBq0qypgn1au3Fmzy155X/AvLiTLgt4bfiRtkdP32/gW86cu67so0AOVjb0fW3ct
3+ySKITm1daYyWqjP4AoNUWV4iwUfa8zNCCGNHIIVQhV/jYDh/G9mJl7UPP5c4VL
mJMpK+zcduuXit3QyotDecqlpbHFmZ7KyvuqNEfnx3VwO8oewVAFtaV5y1xjvePU
TYLp4JIMSszT/Oiu19D1cut3SbHVCMYPix5IwD+krFkwm2Hzq8ytKdElgD39AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUKd2rWFbTg8lQ8EKQUo3A/R2YMh4wHwYDVR0j
BBgwFoAUVEWyaPlcWoauZqnywj4uQaWMPXgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmNqVm1wakRKU3RWdHpZQnFuVVMyUjVRTkFHVUFzS0ZFWWdGeTZNdmFu
OHgvMC81NDQ1QjI2OEY5NUM1QTg2QUU2NkE5RjJDMjNFMkU0MUE1OEMzRDc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU0NDVCMjY4Rjk1QzVBODZB
RTY2QTlGMkMyM0UyRTQxQTU4QzNENzguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJjalZtcGpESlN0VnR6WUJxblVTMlI1UU5BR1VBc0tGRVlnRnk2TXZhbjh4LzAv
MzIzODMwMzQzYTM4MzEzMzMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMy
MzQzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASBMDANBgkqhkiG9w0BAQsFAAOCAQEALg4B+sYg
dLjdDDbnXP4yT+KX6f2eqyz32pZJLMMDCb147fcT41sgneHxF6g5pYO7w27aLexH
/UaAMEJf3g84Vlwaysg1rvqeEo+Xu5b2PVUHSK7mqaa3xcG0zFDGsWCG2RR03KZX
Fs8ZEl5ndXwvNMigyzlfWyQDH1O7EGfdVK/xA6nstIjEAeH2Mh7L+R3eDQ3IgxIp
q3Ld2hAyClqAeJ7e9n160FF+OHvKUKGOBMzY0Aroyvndr1g/eKSYTvpKf0ZBQvEO
V/gOh3QCL7cBjFr08QMIXnPKToNEl9IMvNB6MzMZdMGuOlFl3IQ1OOta+qYpC1E4
c709qvtgIPwZeQ==
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:18:08 2025 by rpki-client on console.sobornost.net