Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a313030303a3a2f33362d3336203d3e20323636343337.roa
File:                     323830343a333764303a313030303a3a2f33362d3336203d3e20323636343337.roa (raw, json)
Hash identifier:          FKrzxM9MQbynhkHH505ws4jFYZTfwiWK/USO04Dulec=
Subject key identifier:   2E:C9:A9:22:DE:39:AD:C0:A4:76:22:3F:0B:96:3E:48:97:EF:C0:A4
Certificate issuer:       /CN=1CB2152A8F44BC0B30650B200D8A3BA673D374FD
Certificate serial:       40FDD01B05384AC2D2FBE167AD01AF09C9FF9EAE
Authority key identifier: 1C:B2:15:2A:8F:44:BC:0B:30:65:0B:20:0D:8A:3B:A6:73:D3:74:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a313030303a3a2f33362d3336203d3e20323636343337.roa
Signing time:             Thu 06 Mar 2025 17:28:18 +0000
ROA not before:           Thu 06 Mar 2025 17:23:18 +0000
ROA not after:            Thu 05 Mar 2026 17:28:18 +0000
asID:                     266437
IP address blocks:        2804:37d0:1000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.crl
                          rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 16:42:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:fd:d0:1b:05:38:4a:c2:d2:fb:e1:67:ad:01:af:09:c9:ff:9e:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CB2152A8F44BC0B30650B200D8A3BA673D374FD
        Validity
            Not Before: Mar  6 17:23:18 2025 GMT
            Not After : Mar  5 17:28:18 2026 GMT
        Subject: CN=2EC9A922DE39ADC0A476223F0B963E4897EFC0A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0d:9a:d0:d4:90:3b:0e:d4:88:a0:91:05:97:
                    33:3f:46:9b:50:24:68:d3:3f:72:44:6a:c7:db:66:
                    70:75:44:60:b4:3a:39:9a:46:f1:88:b0:f4:19:a3:
                    82:22:9b:63:14:e4:ad:80:dd:9e:63:20:2d:53:91:
                    22:de:a0:1b:c9:21:77:aa:d6:d4:9d:72:9d:c5:8a:
                    dd:7c:09:80:ca:03:a7:58:4c:8e:e8:4e:c3:f4:e4:
                    06:40:80:14:44:4d:ce:b1:1d:f8:88:7b:f2:cd:0d:
                    4f:a2:72:2b:50:7d:f9:e6:ac:3f:bd:14:b7:0b:09:
                    c5:83:36:25:15:38:2b:77:d6:01:bc:0f:ba:6b:d1:
                    7f:21:42:7c:4a:dd:0d:e9:d7:9a:53:47:9d:b4:60:
                    e9:72:e9:95:ba:88:5e:d2:38:6f:0b:25:b5:0c:1c:
                    f1:f3:d3:49:81:95:a1:78:e8:1a:5b:47:ca:c8:75:
                    34:58:b7:6d:80:73:50:58:06:7a:b5:c6:09:22:b1:
                    43:47:7a:bc:00:18:d7:65:4f:a6:ea:a0:b2:9c:e2:
                    23:c2:44:88:14:22:e4:38:5c:2e:a7:da:01:97:a0:
                    23:f8:c6:7b:ec:da:6f:06:ff:ce:b2:1a:ff:77:a3:
                    40:3c:ed:91:02:00:4a:38:6d:3b:64:ca:ea:f2:92:
                    99:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C9:A9:22:DE:39:AD:C0:A4:76:22:3F:0B:96:3E:48:97:EF:C0:A4
            X509v3 Authority Key Identifier:
                keyid:1C:B2:15:2A:8F:44:BC:0B:30:65:0B:20:0D:8A:3B:A6:73:D3:74:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a313030303a3a2f33362d3336203d3e20323636343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37d0:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         8b:ed:1e:95:d3:68:f9:50:ee:c4:e3:1e:ea:1d:ee:c4:f2:52:
         ab:89:01:85:d6:aa:e7:f6:b1:6a:13:84:7f:59:d0:5d:cc:4a:
         95:a4:d5:cb:fc:9e:23:ad:a7:24:91:a2:b0:52:06:2c:47:48:
         15:18:a9:d6:bd:9e:52:35:0e:8f:2b:1d:3d:e4:22:d7:b8:8d:
         0d:35:42:06:39:13:94:2c:a8:ae:5f:90:2d:72:fe:2e:41:45:
         a7:62:da:c5:f6:05:82:21:d3:8d:aa:19:e1:3c:29:5a:e0:8e:
         1e:29:0c:fe:c6:c8:6f:61:11:b5:50:d0:f0:9c:46:b5:6b:de:
         cd:ae:52:9f:aa:de:50:77:6e:95:f8:9d:66:ce:bb:92:19:da:
         75:a1:53:a0:00:0a:01:86:d6:ba:92:65:32:05:05:8c:97:2a:
         e7:e4:00:c9:68:b6:39:32:31:cc:89:71:2c:d2:51:2e:2d:aa:
         45:d3:30:b1:cb:1b:69:d1:06:51:27:b1:df:0e:f5:8b:2a:dc:
         89:4e:05:7c:bb:df:68:b4:1e:5c:cd:b2:6c:0b:73:2d:b0:ef:
         20:5b:bc:ea:b7:99:5d:44:97:7a:c5:02:b0:bf:51:c6:87:5c:
         74:70:a4:ec:f2:f6:34:68:17:cd:3a:95:47:23:c7:c3:b3:7d:
         c8:92:ec:61
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUQP3QGwU4SsLS++FnrQGvCcn/nq4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUNCMjE1MkE4RjQ0QkMwQjMwNjUwQjIwMEQ4QTNCQTY3
M0QzNzRGRDAeFw0yNTAzMDYxNzIzMThaFw0yNjAzMDUxNzI4MThaMDMxMTAvBgNV
BAMTKDJFQzlBOTIyREUzOUFEQzBBNDc2MjIzRjBCOTYzRTQ4OTdFRkMwQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDODZrQ1JA7DtSIoJEFlzM/RptQ
JGjTP3JEasfbZnB1RGC0OjmaRvGIsPQZo4Iim2MU5K2A3Z5jIC1TkSLeoBvJIXeq
1tSdcp3Fit18CYDKA6dYTI7oTsP05AZAgBRETc6xHfiIe/LNDU+icitQffnmrD+9
FLcLCcWDNiUVOCt31gG8D7pr0X8hQnxK3Q3p15pTR520YOly6ZW6iF7SOG8LJbUM
HPHz00mBlaF46BpbR8rIdTRYt22Ac1BYBnq1xgkisUNHerwAGNdlT6bqoLKc4iPC
RIgUIuQ4XC6n2gGXoCP4xnvs2m8G/86yGv93o0A87ZECAEo4bTtkyurykpkVAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQULsmpIt45rcCkdiI/C5Y+SJfvwKQwHwYDVR0j
BBgwFoAUHLIVKo9EvAswZQsgDYo7pnPTdP0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM01QcFZvS3FGTVNTMmU0WXVwc3QyN0RXMTgyQ3ZwckM0a2p3U3NaVThB
YVgvMS8xQ0IyMTUyQThGNDRCQzBCMzA2NTBCMjAwRDhBM0JBNjczRDM3NEZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFDQjIxNTJBOEY0NEJDMEIz
MDY1MEIyMDBEOEEzQkE2NzNEMzc0RkQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNNUHBWb0txRk1TUzJlNFl1cHN0MjdEVzE4MkN2cHJDNGtqd1NzWlU4QWFYLzEv
MzIzODMwMzQzYTMzMzc2NDMwM2EzMTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNjM0MzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEN9AQMA0GCSqGSIb3DQEBCwUA
A4IBAQCL7R6V02j5UO7E4x7qHe7E8lKriQGF1qrn9rFqE4R/WdBdzEqVpNXL/J4j
rackkaKwUgYsR0gVGKnWvZ5SNQ6PKx095CLXuI0NNUIGOROULKiuX5Atcv4uQUWn
YtrF9gWCIdONqhnhPCla4I4eKQz+xshvYRG1UNDwnEa1a97NrlKfqt5Qd26V+J1m
zruSGdp1oVOgAAoBhta6kmUyBQWMlyrn5ADJaLY5MjHMiXEs0lEuLapF0zCxyxtp
0QZRJ7HfDvWLKtyJTgV8u99otB5czbJsC3MtsO8gW7zqt5ldRJd6xQKwv1HGh1x0
cKTs8vY0aBfNOpVHI8fDs33Ikuxh
-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:06 2025 by rpki-client on console.sobornost.net