Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a353030303a3a2f34362d3436203d3e20323636343337.roa
File:                     323830343a333764303a353030303a3a2f34362d3436203d3e20323636343337.roa (raw, json)
Hash identifier:          GKSMDzUY9JSYUtTrCJKTyAKk9wYQoTsjU7pLBc5eFHU=
Subject key identifier:   A6:6C:49:9E:86:C0:A0:F2:CD:6E:8F:1B:8A:70:0F:C3:08:EB:E9:F7
Certificate issuer:       /CN=1CB2152A8F44BC0B30650B200D8A3BA673D374FD
Certificate serial:       137557329399D4765E1D7443E21D6EF66AD82A2E
Authority key identifier: 1C:B2:15:2A:8F:44:BC:0B:30:65:0B:20:0D:8A:3B:A6:73:D3:74:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a353030303a3a2f34362d3436203d3e20323636343337.roa
Signing time:             Thu 06 Mar 2025 17:28:16 +0000
ROA not before:           Thu 06 Mar 2025 17:23:16 +0000
ROA not after:            Thu 05 Mar 2026 17:28:16 +0000
asID:                     266437
IP address blocks:        2804:37d0:5000::/46 maxlen: 46

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.crl
                          rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 16:42:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:75:57:32:93:99:d4:76:5e:1d:74:43:e2:1d:6e:f6:6a:d8:2a:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CB2152A8F44BC0B30650B200D8A3BA673D374FD
        Validity
            Not Before: Mar  6 17:23:16 2025 GMT
            Not After : Mar  5 17:28:16 2026 GMT
        Subject: CN=A66C499E86C0A0F2CD6E8F1B8A700FC308EBE9F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2d:58:c8:88:d7:75:44:79:95:b7:93:f9:d8:
                    25:7b:31:6d:62:33:7b:21:75:e3:5c:5c:20:bd:a3:
                    45:9a:5e:0e:62:16:b7:fe:b3:85:d4:39:94:f0:4d:
                    6b:67:1f:5e:a3:c9:e8:01:66:b2:c8:a7:c5:c6:aa:
                    1c:af:88:73:a3:6f:41:52:89:48:be:66:9d:a3:80:
                    c8:c8:a9:06:8b:f9:a5:90:eb:f1:71:c2:32:88:5f:
                    a0:7a:92:87:a8:48:78:7f:c9:dc:95:92:35:dc:37:
                    97:03:cf:78:11:7f:11:b1:c0:b1:45:12:37:4c:b6:
                    c5:b3:dc:09:0d:74:fc:b3:89:7c:d0:0c:d5:95:d5:
                    6b:ff:6d:5e:f3:b1:51:89:3d:df:7f:c5:6d:20:a4:
                    db:03:d8:88:22:aa:88:5e:df:5a:0a:50:2a:23:ce:
                    7f:8b:b9:23:70:d5:05:70:28:06:9a:11:3c:04:10:
                    f9:46:83:df:a3:53:95:af:14:6c:6d:fa:88:df:aa:
                    4d:32:be:c6:3c:73:e8:f2:54:03:c9:ac:55:71:8d:
                    5e:ff:74:b3:96:b4:b9:91:41:e5:8f:9b:4f:af:82:
                    54:b5:fc:04:6a:92:5e:96:36:70:d9:d5:66:cc:7f:
                    2d:68:7c:1c:74:5a:68:1d:00:ee:94:f3:fa:82:7b:
                    df:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:6C:49:9E:86:C0:A0:F2:CD:6E:8F:1B:8A:70:0F:C3:08:EB:E9:F7
            X509v3 Authority Key Identifier:
                keyid:1C:B2:15:2A:8F:44:BC:0B:30:65:0B:20:0D:8A:3B:A6:73:D3:74:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a353030303a3a2f34362d3436203d3e20323636343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37d0:5000::/46

    Signature Algorithm: sha256WithRSAEncryption
         3c:0f:95:07:e7:87:1e:b5:c8:86:09:fc:0d:1d:ae:7d:e2:a4:
         5f:31:ed:b6:fd:d6:e2:8a:89:d5:5a:31:7b:c5:19:63:5d:91:
         54:df:dd:e6:7c:eb:12:f1:7a:13:35:a2:15:68:1d:5a:32:03:
         c5:0b:c4:ce:9f:b6:1b:0e:9d:cc:56:1c:a6:64:4f:40:69:71:
         22:ed:68:40:bd:cb:cb:61:a7:05:50:ff:ef:8e:2c:2d:0e:68:
         27:ec:79:e4:31:1a:ed:e2:d2:d2:b8:12:32:38:b5:aa:a2:a8:
         bc:3a:39:72:7f:c0:f2:cb:a2:33:c7:a2:6b:7b:f7:49:c7:e4:
         db:55:94:44:cc:56:46:22:2d:d4:0d:9a:59:0d:1b:57:33:62:
         29:5e:78:4d:a1:4f:80:62:0e:cf:06:38:25:b5:60:39:09:65:
         bc:fb:ef:38:7f:23:84:10:48:4e:45:15:ba:f5:b5:aa:d7:38:
         89:35:53:68:68:6c:9e:c1:d4:e8:37:a8:af:5e:c1:4e:65:a9:
         21:98:47:8a:ee:18:e8:9d:87:f9:aa:42:0c:1b:78:59:6f:2c:
         25:38:ec:08:8d:88:dc:5f:95:51:3f:43:18:6c:2d:12:b1:4d:
         26:b1:21:ea:92:fb:94:aa:b0:45:f5:9e:f3:37:f5:f1:de:ef:
         93:4d:58:10
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUE3VXMpOZ1HZeHXRD4h1u9mrYKi4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUNCMjE1MkE4RjQ0QkMwQjMwNjUwQjIwMEQ4QTNCQTY3
M0QzNzRGRDAeFw0yNTAzMDYxNzIzMTZaFw0yNjAzMDUxNzI4MTZaMDMxMTAvBgNV
BAMTKEE2NkM0OTlFODZDMEEwRjJDRDZFOEYxQjhBNzAwRkMzMDhFQkU5RjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBLVjIiNd1RHmVt5P52CV7MW1i
M3shdeNcXCC9o0WaXg5iFrf+s4XUOZTwTWtnH16jyegBZrLIp8XGqhyviHOjb0FS
iUi+Zp2jgMjIqQaL+aWQ6/FxwjKIX6B6koeoSHh/ydyVkjXcN5cDz3gRfxGxwLFF
EjdMtsWz3AkNdPyziXzQDNWV1Wv/bV7zsVGJPd9/xW0gpNsD2Igiqohe31oKUCoj
zn+LuSNw1QVwKAaaETwEEPlGg9+jU5WvFGxt+ojfqk0yvsY8c+jyVAPJrFVxjV7/
dLOWtLmRQeWPm0+vglS1/ARqkl6WNnDZ1WbMfy1ofBx0WmgdAO6U8/qCe9+jAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUpmxJnobAoPLNbo8binAPwwjr6fcwHwYDVR0j
BBgwFoAUHLIVKo9EvAswZQsgDYo7pnPTdP0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM01QcFZvS3FGTVNTMmU0WXVwc3QyN0RXMTgyQ3ZwckM0a2p3U3NaVThB
YVgvMS8xQ0IyMTUyQThGNDRCQzBCMzA2NTBCMjAwRDhBM0JBNjczRDM3NEZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFDQjIxNTJBOEY0NEJDMEIz
MDY1MEIyMDBEOEEzQkE2NzNEMzc0RkQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNNUHBWb0txRk1TUzJlNFl1cHN0MjdEVzE4MkN2cHJDNGtqd1NzWlU4QWFYLzEv
MzIzODMwMzQzYTMzMzc2NDMwM2EzNTMwMzAzMDNhM2EyZjM0MzYyZDM0MzYyMDNk
M2UyMDMyMzYzNjM0MzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAigEN9BQADANBgkqhkiG9w0BAQsF
AAOCAQEAPA+VB+eHHrXIhgn8DR2ufeKkXzHttv3W4oqJ1Voxe8UZY12RVN/d5nzr
EvF6EzWiFWgdWjIDxQvEzp+2Gw6dzFYcpmRPQGlxIu1oQL3Ly2GnBVD/744sLQ5o
J+x55DEa7eLS0rgSMji1qqKovDo5cn/A8suiM8eia3v3Scfk21WURMxWRiIt1A2a
WQ0bVzNiKV54TaFPgGIOzwY4JbVgOQllvPvvOH8jhBBITkUVuvW1qtc4iTVTaGhs
nsHU6Deor17BTmWpIZhHiu4Y6J2H+apCDBt4WW8sJTjsCI2I3F+VUT9DGGwtErFN
JrEh6pL7lKqwRfWe8zf18d7vk01YEA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:06 2025 by rpki-client on console.sobornost.net