Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/323830343a346464343a3a2f33322d3438203d3e20323638323232.roa
File:                     323830343a346464343a3a2f33322d3438203d3e20323638323232.roa (raw, json)
Hash identifier:          fv6ZnXxZ45ntnnbYQPrDO2OsehPsbW9FdZy/XuAwgL0=
Subject key identifier:   69:B8:3F:6B:6E:A5:9F:90:2D:EF:4C:C2:AB:2D:54:BF:8D:9B:7F:2D
Certificate issuer:       /CN=DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570
Certificate serial:       59BF87A1EADEC69439D9C9634605A2CE1A56CF08
Authority key identifier: DD:A1:EC:4A:0E:48:B5:C0:9F:B7:46:32:7F:05:F5:1E:B5:F8:E5:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/323830343a346464343a3a2f33322d3438203d3e20323638323232.roa
Signing time:             Tue 22 Apr 2025 12:16:23 +0000
ROA not before:           Tue 22 Apr 2025 12:11:23 +0000
ROA not after:            Tue 21 Apr 2026 12:16:23 +0000
asID:                     268222
IP address blocks:        2804:4dd4::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.crl
                          rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:bf:87:a1:ea:de:c6:94:39:d9:c9:63:46:05:a2:ce:1a:56:cf:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570
        Validity
            Not Before: Apr 22 12:11:23 2025 GMT
            Not After : Apr 21 12:16:23 2026 GMT
        Subject: CN=69B83F6B6EA59F902DEF4CC2AB2D54BF8D9B7F2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:33:68:61:da:48:ad:ca:a6:30:44:ab:fa:c4:
                    73:e3:7f:f8:aa:0d:15:53:21:12:d5:07:49:ab:31:
                    ba:80:9c:4c:59:60:13:53:0b:46:b5:05:18:43:d8:
                    5c:0e:f7:ab:93:1b:ec:3c:26:73:7e:b9:67:b0:c3:
                    f9:33:f1:d4:df:6d:70:85:98:2a:64:68:b0:40:18:
                    40:67:5e:62:d0:6d:d6:7b:93:e4:74:0e:49:70:0a:
                    70:32:68:5f:9e:0c:02:b3:54:bf:3f:fc:c0:f2:ed:
                    81:29:36:32:26:80:34:58:56:ca:e7:76:70:68:a9:
                    b8:b8:41:ef:89:09:de:37:0e:a1:61:df:c1:b7:13:
                    d9:3e:be:d8:5b:3a:3f:9b:52:d9:8b:b9:1a:82:ea:
                    20:fb:70:00:e8:35:ff:8d:bc:f2:61:ae:77:0d:98:
                    e8:0b:6d:a1:27:7d:55:38:b9:32:e3:4a:7e:c1:79:
                    db:cd:6e:bd:2a:73:37:d1:4c:27:77:f7:ba:78:3b:
                    dd:7b:47:15:b4:8a:51:7e:6e:d1:28:48:8f:33:92:
                    e7:2b:04:0a:56:d1:f7:d4:4e:83:18:c8:61:44:7d:
                    70:3f:bb:dc:f4:6e:a4:e0:bf:8f:df:92:a2:3c:b2:
                    30:08:6e:5c:af:c6:24:5b:38:70:0e:78:4e:9d:2e:
                    e7:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:B8:3F:6B:6E:A5:9F:90:2D:EF:4C:C2:AB:2D:54:BF:8D:9B:7F:2D
            X509v3 Authority Key Identifier:
                keyid:DD:A1:EC:4A:0E:48:B5:C0:9F:B7:46:32:7F:05:F5:1E:B5:F8:E5:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/323830343a346464343a3a2f33322d3438203d3e20323638323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4dd4::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:4f:e3:0e:61:b1:c3:3a:1c:d0:e5:56:35:cc:8d:c7:0c:59:
         32:24:2e:e8:a2:33:4c:5e:a5:1a:55:ab:37:1f:39:6e:11:e4:
         6c:c4:9f:90:8c:fc:db:96:e1:b2:5e:61:bc:81:39:86:1c:42:
         cb:ba:f2:79:c3:5c:8f:f2:66:cb:e4:60:a1:30:8a:c8:3d:0c:
         09:91:4d:6a:53:26:80:88:c7:9c:4a:8d:4b:af:a3:45:b0:b1:
         5c:2d:c0:c2:25:ea:32:20:43:f1:a4:20:27:d9:d9:3a:5e:2a:
         1a:10:c3:98:b1:dc:f3:37:aa:52:2b:02:57:ab:56:6a:8e:9f:
         dd:7f:0a:2c:ba:13:71:d9:cb:b8:91:fd:34:6c:76:87:fe:22:
         70:b8:17:a7:6b:3f:57:e4:3e:62:92:60:28:68:0e:1a:b9:99:
         c4:68:ec:c2:5c:e5:9b:b8:96:a4:f6:76:e0:2e:23:25:81:ed:
         ad:a0:37:3f:81:e5:7e:c4:25:ef:d5:b1:24:cb:d3:34:b9:94:
         85:d8:d2:a8:ad:50:27:c7:79:33:8a:e9:ae:49:e5:67:f6:5e:
         d6:70:63:5d:77:e2:2c:1f:60:a3:89:81:b3:bd:96:15:c8:12:
         e9:ea:c7:5d:40:91:a5:2d:b6:06:57:ea:83:77:39:30:78:c3:
         b6:2e:3e:21
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUWb+HoerexpQ52cljRgWizhpWzwgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRERBMUVDNEEwRTQ4QjVDMDlGQjc0NjMyN0YwNUY1MUVC
NUY4RTU3MDAeFw0yNTA0MjIxMjExMjNaFw0yNjA0MjExMjE2MjNaMDMxMTAvBgNV
BAMTKDY5QjgzRjZCNkVBNTlGOTAyREVGNENDMkFCMkQ1NEJGOEQ5QjdGMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2M2hh2kityqYwRKv6xHPjf/iq
DRVTIRLVB0mrMbqAnExZYBNTC0a1BRhD2FwO96uTG+w8JnN+uWeww/kz8dTfbXCF
mCpkaLBAGEBnXmLQbdZ7k+R0DklwCnAyaF+eDAKzVL8//MDy7YEpNjImgDRYVsrn
dnBoqbi4Qe+JCd43DqFh38G3E9k+vthbOj+bUtmLuRqC6iD7cADoNf+NvPJhrncN
mOgLbaEnfVU4uTLjSn7BedvNbr0qczfRTCd397p4O917RxW0ilF+btEoSI8zkucr
BApW0ffUToMYyGFEfXA/u9z0bqTgv4/fkqI8sjAIblyvxiRbOHAOeE6dLue3AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUabg/a26ln5At70zCqy1Uv42bfy0wHwYDVR0j
BBgwFoAU3aHsSg5ItcCft0YyfwX1HrX45XAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3hFekhobkFaZWFkelI4a1lmVnNHbVZadGZYS1ZwR1FSZE5ZZFQ3WERq
UksvMC9EREExRUM0QTBFNDhCNUMwOUZCNzQ2MzI3RjA1RjUxRUI1RjhFNTcwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0REQTFFQzRBMEU0OEI1QzA5
RkI3NDYzMjdGMDVGNTFFQjVGOEU1NzAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzN4RXpIaG5BWmVhZHpSOGtZZlZzR21WWnRmWEtWcEdRUmROWWRUN1hEalJLLzAv
MzIzODMwMzQzYTM0NjQ2NDM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM4
MzIzMjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARN1DANBgkqhkiG9w0BAQsFAAOCAQEAbE/jDmGx
wzoc0OVWNcyNxwxZMiQu6KIzTF6lGlWrNx85bhHkbMSfkIz825bhsl5hvIE5hhxC
y7ryecNcj/Jmy+RgoTCKyD0MCZFNalMmgIjHnEqNS6+jRbCxXC3AwiXqMiBD8aQg
J9nZOl4qGhDDmLHc8zeqUisCV6tWao6f3X8KLLoTcdnLuJH9NGx2h/4icLgXp2s/
V+Q+YpJgKGgOGrmZxGjswlzlm7iWpPZ24C4jJYHtraA3P4HlfsQl79WxJMvTNLmU
hdjSqK1QJ8d5M4rprknlZ/Ze1nBjXXfiLB9go4mBs72WFcgS6erHXUCRpS22Blfq
g3c5MHjDti4+IQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:01 2025 by rpki-client on console.sobornost.net