Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/1/323830343a366163383a3a2f33322d3438203d3e20323730333538.roa
File:                     323830343a366163383a3a2f33322d3438203d3e20323730333538.roa (raw, json)
Hash identifier:          YHhsYHFWyWxyju9E2dctdX+I5Ljam4Z+jjcqr7DqEo8=
Subject key identifier:   8D:E3:67:28:7F:41:3C:51:6B:7F:55:6C:E4:C0:83:77:A1:37:F8:32
Certificate issuer:       /CN=098BEFEB5B1DA45DC7F7619CD01A803EAF391D7E
Certificate serial:       61AD9DC880210E23A6EBA3A18BA82A115E20383D
Authority key identifier: 09:8B:EF:EB:5B:1D:A4:5D:C7:F7:61:9C:D0:1A:80:3E:AF:39:1D:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/098BEFEB5B1DA45DC7F7619CD01A803EAF391D7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/1/323830343a366163383a3a2f33322d3438203d3e20323730333538.roa
Signing time:             Thu 06 Mar 2025 10:43:40 +0000
ROA not before:           Thu 06 Mar 2025 10:38:40 +0000
ROA not after:            Thu 05 Mar 2026 10:43:40 +0000
asID:                     270358
IP address blocks:        2804:6ac8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/1/098BEFEB5B1DA45DC7F7619CD01A803EAF391D7E.crl
                          rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/1/098BEFEB5B1DA45DC7F7619CD01A803EAF391D7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/098BEFEB5B1DA45DC7F7619CD01A803EAF391D7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 09:05:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:ad:9d:c8:80:21:0e:23:a6:eb:a3:a1:8b:a8:2a:11:5e:20:38:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=098BEFEB5B1DA45DC7F7619CD01A803EAF391D7E
        Validity
            Not Before: Mar  6 10:38:40 2025 GMT
            Not After : Mar  5 10:43:40 2026 GMT
        Subject: CN=8DE367287F413C516B7F556CE4C08377A137F832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0c:a4:7f:6d:35:3f:c5:93:42:8e:26:a8:bd:
                    2e:a0:27:59:34:4d:f9:89:5a:59:fb:48:79:91:f3:
                    e1:69:9b:39:00:29:2f:ab:fc:43:16:31:dd:23:8c:
                    97:fa:0d:6d:84:0a:1f:be:ec:83:f5:12:44:0d:c5:
                    6f:85:57:d8:30:10:b1:00:6a:1b:f2:87:e7:65:5d:
                    98:ca:47:3e:ac:8b:4c:42:43:a5:88:d6:54:0e:4d:
                    a5:e0:e7:35:33:b2:79:0e:e6:66:33:68:5d:6c:7c:
                    39:52:b2:54:87:08:23:e9:e5:55:04:f5:99:2a:b9:
                    2f:03:53:67:f1:85:b7:fc:ee:bb:0d:99:53:f6:2d:
                    89:6f:c7:e6:b2:e6:da:34:23:62:e9:9b:47:9c:f4:
                    6c:55:0a:49:17:c7:b3:d2:c9:64:95:06:a2:b5:c1:
                    bb:42:57:10:3e:e2:0c:88:02:85:1a:04:78:54:d0:
                    b2:10:a6:f6:bb:a1:83:2a:85:b5:73:79:e5:db:10:
                    42:f5:60:64:1e:30:3a:68:82:50:62:a1:30:38:8a:
                    d4:01:45:39:82:9d:31:93:43:48:2e:8f:b8:e0:21:
                    b7:4c:ed:0c:16:a5:3c:11:0b:69:87:d4:da:ed:fd:
                    8d:8c:4e:b5:f4:2c:19:fd:f2:60:38:74:a7:7e:60:
                    3d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:E3:67:28:7F:41:3C:51:6B:7F:55:6C:E4:C0:83:77:A1:37:F8:32
            X509v3 Authority Key Identifier:
                keyid:09:8B:EF:EB:5B:1D:A4:5D:C7:F7:61:9C:D0:1A:80:3E:AF:39:1D:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/1/098BEFEB5B1DA45DC7F7619CD01A803EAF391D7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/098BEFEB5B1DA45DC7F7619CD01A803EAF391D7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/1/323830343a366163383a3a2f33322d3438203d3e20323730333538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ac8::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:26:c6:cb:2e:c9:35:5e:79:5d:32:97:5b:f4:30:bb:9d:59:
         51:10:aa:5e:3c:e1:d6:98:e1:72:58:45:8c:62:98:f4:d8:cb:
         f7:fe:6c:4e:63:c9:3f:b9:a9:8c:6a:12:6f:0f:11:2b:31:c4:
         31:18:8e:86:ff:c8:8f:d9:9b:f7:ff:65:48:ad:b9:1e:93:80:
         53:dc:65:09:f7:22:a2:6e:62:9a:2e:ca:9f:c1:23:ab:82:14:
         e6:14:fc:73:a9:b9:2f:2e:69:fd:eb:c9:75:0f:96:6d:3b:3f:
         cd:69:ef:78:98:cd:bd:06:bc:14:8b:de:4e:17:44:5b:8e:32:
         ef:e0:53:cc:bb:04:03:54:f4:95:fe:af:6d:01:1c:77:7d:a0:
         70:b1:b3:ff:3b:62:e8:d9:eb:58:07:5e:e1:45:56:7d:8f:d2:
         b0:a8:d1:0f:22:0d:88:a9:5c:66:4c:91:c2:66:15:c5:92:96:
         38:60:b8:cc:0e:a7:b8:c6:e1:ca:4a:9b:01:b6:23:af:17:ed:
         fc:6c:b8:26:a5:83:91:42:6f:56:20:cd:15:49:41:e7:e6:9f:
         83:11:43:45:3e:07:2e:08:05:2b:a3:f8:88:ca:9d:31:4f:4d:
         9a:31:42:4f:ae:47:11:27:fc:9b:22:26:35:44:74:1a:ac:ba:
         02:dd:45:a3
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUYa2dyIAhDiOm66Ohi6gqEV4gOD0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk4QkVGRUI1QjFEQTQ1REM3Rjc2MTlDRDAxQTgwM0VB
RjM5MUQ3RTAeFw0yNTAzMDYxMDM4NDBaFw0yNjAzMDUxMDQzNDBaMDMxMTAvBgNV
BAMTKDhERTM2NzI4N0Y0MTNDNTE2QjdGNTU2Q0U0QzA4Mzc3QTEzN0Y4MzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9DKR/bTU/xZNCjiaovS6gJ1k0
TfmJWln7SHmR8+FpmzkAKS+r/EMWMd0jjJf6DW2ECh++7IP1EkQNxW+FV9gwELEA
ahvyh+dlXZjKRz6si0xCQ6WI1lQOTaXg5zUzsnkO5mYzaF1sfDlSslSHCCPp5VUE
9ZkquS8DU2fxhbf87rsNmVP2LYlvx+ay5to0I2Lpm0ec9GxVCkkXx7PSyWSVBqK1
wbtCVxA+4gyIAoUaBHhU0LIQpva7oYMqhbVzeeXbEEL1YGQeMDpoglBioTA4itQB
RTmCnTGTQ0guj7jgIbdM7QwWpTwRC2mH1Nrt/Y2MTrX0LBn98mA4dKd+YD3TAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUjeNnKH9BPFFrf1Vs5MCDd6E3+DIwHwYDVR0j
BBgwFoAUCYvv61sdpF3H92Gc0BqAPq85HX4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNENjVjhZSkc5NDFhTTZWc1dycFRUVUQxb3dxbUF3aVhDMmZMVzlhYjJn
QUgvMS8wOThCRUZFQjVCMURBNDVEQzdGNzYxOUNEMDFBODAzRUFGMzkxRDdFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA5OEJFRkVCNUIxREE0NURD
N0Y3NjE5Q0QwMUE4MDNFQUYzOTFEN0UuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRDY1Y4WUpHOTQxYU02VnNXcnBUVFVEMW93cW1Bd2lYQzJmTFc5YWIyZ0FILzEv
MzIzODMwMzQzYTM2NjE2MzM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMw
MzMzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARqyDANBgkqhkiG9w0BAQsFAAOCAQEAgSbGyy7J
NV55XTKXW/Qwu51ZURCqXjzh1pjhclhFjGKY9NjL9/5sTmPJP7mpjGoSbw8RKzHE
MRiOhv/Ij9mb9/9lSK25HpOAU9xlCfciom5imi7Kn8Ejq4IU5hT8c6m5Ly5p/evJ
dQ+WbTs/zWnveJjNvQa8FIveThdEW44y7+BTzLsEA1T0lf6vbQEcd32gcLGz/zti
6NnrWAde4UVWfY/SsKjRDyINiKlcZkyRwmYVxZKWOGC4zA6nuMbhykqbAbYjrxft
/Gy4JqWDkUJvViDNFUlB5+afgxFDRT4HLggFK6P4iMqdMU9NmjFCT65HESf8myIm
NUR0Gqy6At1Fow==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:21:56 2025 by rpki-client on console.sobornost.net