Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/323830343a343031633a633030303a3a2f33342d3334203d3e20323635393335.roa
File:                     323830343a343031633a633030303a3a2f33342d3334203d3e20323635393335.roa (raw, json)
Hash identifier:          3triGDE1ZxhPAnqJadqRcQb4fDCJ1Pqb6fzxF7HMxXo=
Subject key identifier:   A3:41:A4:E2:1D:AD:94:70:E4:8F:5E:EA:49:DA:69:BD:80:5E:8D:73
Certificate issuer:       /CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3
Certificate serial:       75F937208E595192780CE637D1CB8E67E395EF29
Authority key identifier: 38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/323830343a343031633a633030303a3a2f33342d3334203d3e20323635393335.roa
Signing time:             Thu 06 Mar 2025 07:52:46 +0000
ROA not before:           Thu 06 Mar 2025 07:47:46 +0000
ROA not after:            Thu 05 Mar 2026 07:52:46 +0000
asID:                     265935
IP address blocks:        2804:401c:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl
                          rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:f9:37:20:8e:59:51:92:78:0c:e6:37:d1:cb:8e:67:e3:95:ef:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3
        Validity
            Not Before: Mar  6 07:47:46 2025 GMT
            Not After : Mar  5 07:52:46 2026 GMT
        Subject: CN=A341A4E21DAD9470E48F5EEA49DA69BD805E8D73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:75:a7:a0:dd:30:ea:35:ac:b8:dc:be:72:0c:
                    d0:31:3a:12:be:7c:07:7f:b7:df:20:d0:f6:7e:c3:
                    35:ea:98:d4:de:4f:8c:d9:70:28:48:6b:59:c3:3e:
                    82:67:2c:c3:de:79:ce:b2:26:27:65:99:a7:32:13:
                    32:e5:70:29:51:7f:2f:1f:a3:d6:db:53:40:e3:33:
                    1b:89:92:38:72:82:cd:9f:50:f4:aa:9f:6c:d5:d1:
                    e1:5a:85:f6:0b:c9:88:2a:ac:c4:dc:2b:ec:d0:7f:
                    2f:88:39:93:e8:75:78:c8:94:a4:70:fa:84:35:28:
                    f2:7b:ff:b0:d7:02:2d:d4:2b:ce:a9:b7:c6:72:53:
                    fe:ba:38:23:8e:84:24:b7:d4:e0:bd:90:db:ef:21:
                    c0:66:46:63:24:29:03:4e:6e:4d:07:f7:95:7d:dd:
                    18:84:d3:ad:1c:9b:4f:a3:49:d5:9c:9c:63:ef:79:
                    af:f7:f4:41:80:af:54:d2:7d:28:49:c9:e4:34:d9:
                    dc:39:3c:f9:c5:c4:47:34:15:24:ec:4e:56:59:e5:
                    99:be:d7:53:dd:3e:4e:d8:90:d3:6c:d3:24:e0:25:
                    aa:a0:40:f5:05:ee:78:c5:a1:91:86:f4:eb:91:f6:
                    1c:a1:65:e1:d7:e0:05:77:ef:3e:12:b3:b5:0c:4b:
                    4b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:41:A4:E2:1D:AD:94:70:E4:8F:5E:EA:49:DA:69:BD:80:5E:8D:73
            X509v3 Authority Key Identifier:
                keyid:38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/323830343a343031633a633030303a3a2f33342d3334203d3e20323635393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:401c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         1f:0a:33:5b:99:d3:d0:94:c5:31:c6:3d:90:5e:b1:e2:58:f8:
         c0:9d:cf:cd:a0:45:7d:57:dc:f9:cd:18:ff:94:98:5e:a7:ed:
         7d:50:f7:ad:47:dc:76:b4:d9:cd:2c:17:44:f1:b6:6d:54:b7:
         1b:ec:9c:98:d6:1f:e3:af:46:0a:9e:8d:08:c1:a8:0a:f0:14:
         ed:64:44:9a:4a:c7:49:d2:64:49:12:5f:82:fb:db:66:20:0e:
         86:6f:49:60:f6:49:84:db:66:3d:8c:78:32:7c:46:5d:c5:cf:
         7e:b7:1e:8d:1d:2b:fb:80:0c:6c:57:61:0e:1a:31:54:49:c6:
         b9:03:5b:d6:59:b7:2f:98:67:80:f9:e6:f8:79:90:a5:f4:0f:
         f8:86:3c:21:f5:c5:7d:6d:2f:11:96:b8:7a:91:22:01:46:f3:
         64:1b:7b:51:84:c7:4f:30:02:6d:65:43:85:6a:c5:e2:4e:c5:
         86:09:5d:1a:f9:63:fe:68:5d:5e:48:f0:99:79:6b:73:12:d2:
         26:a9:14:6f:4b:31:45:6d:32:4f:c3:91:5e:1f:e5:f1:cc:85:
         63:be:be:d5:d3:73:6a:d0:2d:8f:a4:a7:4e:33:67:19:55:77:
         ae:30:88:bf:65:8a:81:09:f3:23:87:cb:49:c5:8a:3e:86:e1:
         f1:2a:84:77
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUdfk3II5ZUZJ4DOY30cuOZ+OV7ykwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhGM0JFQUM1NzVENkI2N0JGMkYyODYzMjhDNjgwQzQ0
NjdGNUJEMzAeFw0yNTAzMDYwNzQ3NDZaFw0yNjAzMDUwNzUyNDZaMDMxMTAvBgNV
BAMTKEEzNDFBNEUyMURBRDk0NzBFNDhGNUVFQTQ5REE2OUJEODA1RThENzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpdaeg3TDqNay43L5yDNAxOhK+
fAd/t98g0PZ+wzXqmNTeT4zZcChIa1nDPoJnLMPeec6yJidlmacyEzLlcClRfy8f
o9bbU0DjMxuJkjhygs2fUPSqn2zV0eFahfYLyYgqrMTcK+zQfy+IOZPodXjIlKRw
+oQ1KPJ7/7DXAi3UK86pt8ZyU/66OCOOhCS31OC9kNvvIcBmRmMkKQNObk0H95V9
3RiE060cm0+jSdWcnGPvea/39EGAr1TSfShJyeQ02dw5PPnFxEc0FSTsTlZZ5Zm+
11PdPk7YkNNs0yTgJaqgQPUF7njFoZGG9OuR9hyhZeHX4AV37z4Ss7UMS0unAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUo0Gk4h2tlHDkj17qSdppvYBejXMwHwYDVR0j
BBgwFoAUOPO+rFdda2e/LyhjKMaAxEZ/W9MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2I3YmVad0xiVGpUQjNHUFJ0Qmh6TVJ6V3hFbllNQllHVk1BdHNFendQ
NmovMS8zOEYzQkVBQzU3NUQ2QjY3QkYyRjI4NjMyOEM2ODBDNDQ2N0Y1QkQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM4RjNCRUFDNTc1RDZCNjdC
RjJGMjg2MzI4QzY4MEM0NDY3RjVCRDMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNiN2JlWndMYlRqVEIzR1BSdEJoek1Seld4RW5ZTUJZR1ZNQXRzRXp3UDZqLzEv
MzIzODMwMzQzYTM0MzAzMTYzM2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNTM5MzMzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEQBzAMA0GCSqGSIb3DQEBCwUA
A4IBAQAfCjNbmdPQlMUxxj2QXrHiWPjAnc/NoEV9V9z5zRj/lJhep+19UPetR9x2
tNnNLBdE8bZtVLcb7JyY1h/jr0YKno0IwagK8BTtZESaSsdJ0mRJEl+C+9tmIA6G
b0lg9kmE22Y9jHgyfEZdxc9+tx6NHSv7gAxsV2EOGjFUSca5A1vWWbcvmGeA+eb4
eZCl9A/4hjwh9cV9bS8Rlrh6kSIBRvNkG3tRhMdPMAJtZUOFasXiTsWGCV0a+WP+
aF1eSPCZeWtzEtImqRRvSzFFbTJPw5FeH+XxzIVjvr7V03Nq0C2PpKdOM2cZVXeu
MIi/ZYqBCfMjh8tJxYo+huHxKoR3
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:27 2025 by rpki-client on console.sobornost.net