Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a373030303a3a2f34362d3436203d3e20323636343337.roa
File:                     323830343a333764303a373030303a3a2f34362d3436203d3e20323636343337.roa (raw, json)
Hash identifier:          N9ygyY3lWYLZBNYGuDx8tlFWj6Jx0FqbKhFmWzpoor4=
Subject key identifier:   84:E1:4E:EF:68:AD:FD:0A:01:F0:47:06:CC:55:2F:63:25:A4:2F:2D
Certificate issuer:       /CN=1CB2152A8F44BC0B30650B200D8A3BA673D374FD
Certificate serial:       37B2056066E4D157E6372280A5AFFF09B1953101
Authority key identifier: 1C:B2:15:2A:8F:44:BC:0B:30:65:0B:20:0D:8A:3B:A6:73:D3:74:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a373030303a3a2f34362d3436203d3e20323636343337.roa
Signing time:             Thu 06 Mar 2025 17:28:16 +0000
ROA not before:           Thu 06 Mar 2025 17:23:16 +0000
ROA not after:            Thu 05 Mar 2026 17:28:16 +0000
asID:                     266437
IP address blocks:        2804:37d0:7000::/46 maxlen: 46

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.crl
                          rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 16:42:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:b2:05:60:66:e4:d1:57:e6:37:22:80:a5:af:ff:09:b1:95:31:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CB2152A8F44BC0B30650B200D8A3BA673D374FD
        Validity
            Not Before: Mar  6 17:23:16 2025 GMT
            Not After : Mar  5 17:28:16 2026 GMT
        Subject: CN=84E14EEF68ADFD0A01F04706CC552F6325A42F2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:08:d3:35:57:fc:9e:e8:e3:77:15:8d:12:1b:
                    9d:3e:fd:ff:af:97:0c:8c:70:69:71:c6:0e:3b:7d:
                    f6:a8:ad:1a:25:cc:88:c7:76:b9:6e:54:55:a2:c2:
                    dd:a7:b1:a6:ed:44:77:e8:77:52:55:2d:19:00:0c:
                    49:ab:86:74:f1:0f:0e:db:f2:58:a6:e8:80:d4:de:
                    fa:22:98:16:2d:16:09:12:7e:81:55:0a:1d:43:ce:
                    3a:d6:06:65:fe:a3:5c:bd:a1:ac:c6:36:b7:47:62:
                    cd:d2:87:f7:37:4f:13:78:6e:fd:74:6b:26:4d:d0:
                    95:ab:c4:1f:e5:7a:fa:03:28:e5:24:9a:8b:ac:43:
                    24:2b:23:95:b1:74:97:37:84:3d:63:7d:7c:f2:86:
                    fb:74:7a:4a:2c:29:a1:63:9a:7b:a4:2a:72:53:52:
                    74:ea:c1:02:1f:e2:12:a5:c9:f3:88:9f:9c:38:12:
                    3f:1f:f6:c7:68:07:06:a6:88:9c:7a:57:be:ca:12:
                    73:2b:13:d2:9e:24:13:7f:e3:71:24:a5:1c:0d:08:
                    64:66:f3:d2:59:6d:73:d6:4f:83:d6:93:91:09:42:
                    f9:12:48:e4:65:4e:3b:03:36:a5:a9:08:16:7c:96:
                    87:b4:53:e5:66:23:6d:82:e6:92:6b:a1:79:04:00:
                    4e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E1:4E:EF:68:AD:FD:0A:01:F0:47:06:CC:55:2F:63:25:A4:2F:2D
            X509v3 Authority Key Identifier:
                keyid:1C:B2:15:2A:8F:44:BC:0B:30:65:0B:20:0D:8A:3B:A6:73:D3:74:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a373030303a3a2f34362d3436203d3e20323636343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37d0:7000::/46

    Signature Algorithm: sha256WithRSAEncryption
         71:d2:d5:d5:2a:8c:24:5c:fc:3e:c5:ad:d3:58:ff:9c:c8:97:
         a9:32:9b:78:1b:fb:55:e8:54:b7:25:3d:7b:ea:9c:eb:57:cb:
         b0:b4:83:53:68:91:3d:98:82:c7:a4:f3:3e:7a:2d:e9:e8:21:
         25:9f:9a:33:8c:a0:08:27:57:93:c4:aa:44:ea:f9:24:fb:43:
         a5:64:80:a6:d8:9e:e1:28:c1:20:ac:5c:5f:4b:4c:2c:bf:5d:
         5f:96:1c:14:86:05:1a:48:e1:d8:34:45:03:3d:4c:28:88:c2:
         14:66:7b:f5:02:b7:8f:a8:2a:ac:da:65:42:20:e5:a9:b1:6b:
         b5:d9:a9:38:6b:64:91:bf:e2:53:50:54:57:6f:e4:39:b9:81:
         06:8b:1f:02:b0:6f:66:79:83:71:8c:0b:14:72:2f:f1:ff:8a:
         fd:39:46:ab:de:09:b6:89:75:d2:aa:17:12:db:42:74:ab:ca:
         7a:a4:68:93:bf:41:13:10:8f:81:8b:64:e9:9e:a2:56:2e:60:
         b1:e8:47:e8:ef:fe:05:21:af:2a:5f:c9:93:27:fc:4d:a3:45:
         4d:9b:61:2f:a1:a0:89:f1:0c:31:55:11:64:31:fc:56:8c:91:
         f6:aa:13:d4:6f:7d:2f:7e:9e:24:2d:de:ec:17:3c:23:04:78:
         59:d7:f8:22
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUN7IFYGbk0VfmNyKApa//CbGVMQEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUNCMjE1MkE4RjQ0QkMwQjMwNjUwQjIwMEQ4QTNCQTY3
M0QzNzRGRDAeFw0yNTAzMDYxNzIzMTZaFw0yNjAzMDUxNzI4MTZaMDMxMTAvBgNV
BAMTKDg0RTE0RUVGNjhBREZEMEEwMUYwNDcwNkNDNTUyRjYzMjVBNDJGMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQCNM1V/ye6ON3FY0SG50+/f+v
lwyMcGlxxg47ffaorRolzIjHdrluVFWiwt2nsabtRHfod1JVLRkADEmrhnTxDw7b
8lim6IDU3voimBYtFgkSfoFVCh1DzjrWBmX+o1y9oazGNrdHYs3Sh/c3TxN4bv10
ayZN0JWrxB/levoDKOUkmousQyQrI5WxdJc3hD1jfXzyhvt0ekosKaFjmnukKnJT
UnTqwQIf4hKlyfOIn5w4Ej8f9sdoBwamiJx6V77KEnMrE9KeJBN/43EkpRwNCGRm
89JZbXPWT4PWk5EJQvkSSORlTjsDNqWpCBZ8loe0U+VmI22C5pJroXkEAE5XAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUhOFO72it/QoB8EcGzFUvYyWkLy0wHwYDVR0j
BBgwFoAUHLIVKo9EvAswZQsgDYo7pnPTdP0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM01QcFZvS3FGTVNTMmU0WXVwc3QyN0RXMTgyQ3ZwckM0a2p3U3NaVThB
YVgvMS8xQ0IyMTUyQThGNDRCQzBCMzA2NTBCMjAwRDhBM0JBNjczRDM3NEZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFDQjIxNTJBOEY0NEJDMEIz
MDY1MEIyMDBEOEEzQkE2NzNEMzc0RkQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNNUHBWb0txRk1TUzJlNFl1cHN0MjdEVzE4MkN2cHJDNGtqd1NzWlU4QWFYLzEv
MzIzODMwMzQzYTMzMzc2NDMwM2EzNzMwMzAzMDNhM2EyZjM0MzYyZDM0MzYyMDNk
M2UyMDMyMzYzNjM0MzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAigEN9BwADANBgkqhkiG9w0BAQsF
AAOCAQEAcdLV1SqMJFz8PsWt01j/nMiXqTKbeBv7VehUtyU9e+qc61fLsLSDU2iR
PZiCx6TzPnot6eghJZ+aM4ygCCdXk8SqROr5JPtDpWSAptie4SjBIKxcX0tMLL9d
X5YcFIYFGkjh2DRFAz1MKIjCFGZ79QK3j6gqrNplQiDlqbFrtdmpOGtkkb/iU1BU
V2/kObmBBosfArBvZnmDcYwLFHIv8f+K/TlGq94Jtol10qoXEttCdKvKeqRok79B
ExCPgYtk6Z6iVi5gsehH6O/+BSGvKl/Jkyf8TaNFTZthL6GgifEMMVURZDH8VoyR
9qoT1G99L36eJC3e7Bc8IwR4Wdf4Ig==
-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:06 2025 by rpki-client on console.sobornost.net