Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a373030303a3a2f33362d3336203d3e20323636343337.roa
File:                     323830343a333764303a373030303a3a2f33362d3336203d3e20323636343337.roa (raw, json)
Hash identifier:          5lh+ODr4Jqvj3RKGMxe8RfiZyPIgkMHG2xUWGmjNNYU=
Subject key identifier:   67:1A:2F:87:4F:EA:29:94:BF:16:B6:3F:5A:AB:CB:F3:EE:EA:94:59
Certificate issuer:       /CN=1CB2152A8F44BC0B30650B200D8A3BA673D374FD
Certificate serial:       4F863AC70EB75C10C28C8269A2DC2515662551AA
Authority key identifier: 1C:B2:15:2A:8F:44:BC:0B:30:65:0B:20:0D:8A:3B:A6:73:D3:74:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a373030303a3a2f33362d3336203d3e20323636343337.roa
Signing time:             Thu 06 Mar 2025 17:28:16 +0000
ROA not before:           Thu 06 Mar 2025 17:23:16 +0000
ROA not after:            Thu 05 Mar 2026 17:28:16 +0000
asID:                     266437
IP address blocks:        2804:37d0:7000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.crl
                          rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 16:42:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:86:3a:c7:0e:b7:5c:10:c2:8c:82:69:a2:dc:25:15:66:25:51:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CB2152A8F44BC0B30650B200D8A3BA673D374FD
        Validity
            Not Before: Mar  6 17:23:16 2025 GMT
            Not After : Mar  5 17:28:16 2026 GMT
        Subject: CN=671A2F874FEA2994BF16B63F5AABCBF3EEEA9459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:04:87:26:40:2d:ad:50:95:65:f4:a8:df:5b:
                    c8:9c:d1:87:91:ae:9a:3d:07:d7:32:4d:06:cc:ba:
                    2c:14:d8:9b:1f:ad:21:8c:35:97:b3:d0:f6:00:89:
                    52:66:d6:4c:e5:5f:fa:4d:94:1a:e9:0b:d9:29:03:
                    4d:18:43:dc:58:d8:a9:8e:d4:40:f8:c1:cb:b4:ed:
                    f1:e2:bc:7b:3e:d6:e8:71:4a:bf:21:ca:3c:68:1c:
                    ff:a2:96:c2:2b:5c:af:2d:c1:5b:8f:18:84:41:9d:
                    41:77:90:20:7f:35:28:b2:d8:2d:1e:f3:44:bb:a0:
                    3c:14:53:b1:91:d3:fd:e0:86:af:ea:50:8c:c1:37:
                    e4:31:7c:c8:25:d8:68:d2:43:6d:f3:4d:27:88:f9:
                    83:e6:92:37:09:cd:92:06:12:5f:2f:ac:48:19:1e:
                    85:c1:76:04:1e:e9:ec:51:a7:77:50:ec:fe:51:d4:
                    34:3d:87:a6:a8:29:5d:41:8a:26:1b:c3:33:c9:29:
                    72:11:c3:f7:d6:bf:e4:60:04:65:1e:64:7e:4a:01:
                    c3:63:81:88:f4:8c:23:90:33:7c:21:9d:5a:06:d8:
                    96:66:f5:20:76:52:6f:e6:34:65:cc:e5:c7:8c:38:
                    e6:ea:c8:f0:1b:8e:e7:e6:15:38:8f:df:d5:31:11:
                    e8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:1A:2F:87:4F:EA:29:94:BF:16:B6:3F:5A:AB:CB:F3:EE:EA:94:59
            X509v3 Authority Key Identifier:
                keyid:1C:B2:15:2A:8F:44:BC:0B:30:65:0B:20:0D:8A:3B:A6:73:D3:74:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a373030303a3a2f33362d3336203d3e20323636343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37d0:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         36:fd:0e:81:ae:c9:bc:c4:6c:cc:2c:bf:d4:97:cb:7d:a6:41:
         52:38:e2:e7:bb:84:2f:27:08:d2:a2:11:5d:8f:b1:b8:23:68:
         3f:3c:11:20:d5:d8:3b:11:a2:cc:4c:b0:31:4e:e4:e6:13:46:
         cb:ea:9a:4e:80:9a:75:eb:54:21:f1:e4:05:99:f0:80:52:ef:
         93:46:32:f4:da:56:e5:aa:71:5c:fa:21:da:66:89:12:93:ef:
         3f:c5:16:16:50:5e:ee:32:99:a8:fa:5d:95:a3:20:28:c1:09:
         81:20:ac:69:eb:30:d7:a3:4a:91:31:6a:de:ce:5c:2f:39:fb:
         46:6c:b9:10:f8:10:8d:b9:3b:fe:31:03:80:99:bf:89:6d:69:
         65:c2:37:c9:53:0c:07:2b:b4:7c:fb:a5:d8:90:3c:a4:ff:64:
         c4:b1:51:bc:1d:89:3c:04:99:ea:2d:96:9b:9c:ec:b7:5d:55:
         40:2f:b2:53:81:22:25:f5:5a:a6:59:8e:f6:8b:3b:0c:b1:dd:
         f6:1c:4f:10:97:1d:0a:de:3f:77:9a:90:8b:52:97:e9:60:87:
         af:be:d0:16:04:bc:d4:29:93:96:77:81:e1:14:92:e7:73:d3:
         04:f3:25:b2:f4:4e:f0:b3:89:44:fd:44:db:a8:d0:ae:da:3e:
         62:04:c1:fa
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUT4Y6xw63XBDCjIJpotwlFWYlUaowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUNCMjE1MkE4RjQ0QkMwQjMwNjUwQjIwMEQ4QTNCQTY3
M0QzNzRGRDAeFw0yNTAzMDYxNzIzMTZaFw0yNjAzMDUxNzI4MTZaMDMxMTAvBgNV
BAMTKDY3MUEyRjg3NEZFQTI5OTRCRjE2QjYzRjVBQUJDQkYzRUVFQTk0NTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBBIcmQC2tUJVl9KjfW8ic0YeR
rpo9B9cyTQbMuiwU2JsfrSGMNZez0PYAiVJm1kzlX/pNlBrpC9kpA00YQ9xY2KmO
1ED4wcu07fHivHs+1uhxSr8hyjxoHP+ilsIrXK8twVuPGIRBnUF3kCB/NSiy2C0e
80S7oDwUU7GR0/3ghq/qUIzBN+QxfMgl2GjSQ23zTSeI+YPmkjcJzZIGEl8vrEgZ
HoXBdgQe6exRp3dQ7P5R1DQ9h6aoKV1BiiYbwzPJKXIRw/fWv+RgBGUeZH5KAcNj
gYj0jCOQM3whnVoG2JZm9SB2Um/mNGXM5ceMOObqyPAbjufmFTiP39UxEeixAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUZxovh0/qKZS/FrY/WqvL8+7qlFkwHwYDVR0j
BBgwFoAUHLIVKo9EvAswZQsgDYo7pnPTdP0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM01QcFZvS3FGTVNTMmU0WXVwc3QyN0RXMTgyQ3ZwckM0a2p3U3NaVThB
YVgvMS8xQ0IyMTUyQThGNDRCQzBCMzA2NTBCMjAwRDhBM0JBNjczRDM3NEZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFDQjIxNTJBOEY0NEJDMEIz
MDY1MEIyMDBEOEEzQkE2NzNEMzc0RkQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNNUHBWb0txRk1TUzJlNFl1cHN0MjdEVzE4MkN2cHJDNGtqd1NzWlU4QWFYLzEv
MzIzODMwMzQzYTMzMzc2NDMwM2EzNzMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNjM0MzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEN9BwMA0GCSqGSIb3DQEBCwUA
A4IBAQA2/Q6Brsm8xGzMLL/Ul8t9pkFSOOLnu4QvJwjSohFdj7G4I2g/PBEg1dg7
EaLMTLAxTuTmE0bL6ppOgJp161Qh8eQFmfCAUu+TRjL02lblqnFc+iHaZokSk+8/
xRYWUF7uMpmo+l2VoyAowQmBIKxp6zDXo0qRMWrezlwvOftGbLkQ+BCNuTv+MQOA
mb+JbWllwjfJUwwHK7R8+6XYkDyk/2TEsVG8HYk8BJnqLZabnOy3XVVAL7JTgSIl
9VqmWY72izsMsd32HE8Qlx0K3j93mpCLUpfpYIevvtAWBLzUKZOWd4HhFJLnc9ME
8yWy9E7ws4lE/UTbqNCu2j5iBMH6
-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:06 2025 by rpki-client on console.sobornost.net