Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/323830343a353130303a333030303a3a2f34302d3430203d3e20323638343234.roa
File:                     323830343a353130303a333030303a3a2f34302d3430203d3e20323638343234.roa (raw, json)
Hash identifier:          csKxTAKkO6v4RZtlc7LaAZsO5dGze8hhw7R79s5y/aA=
Subject key identifier:   04:EF:26:20:53:74:25:E2:1E:CF:3E:80:20:20:F8:98:D0:63:B9:18
Certificate issuer:       /CN=9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71
Certificate serial:       56B6C6B35E73E723B223AC1EA90F58B5458AAD0B
Authority key identifier: 93:92:D1:DC:A3:77:01:F3:AC:DB:A5:DA:E6:B4:4D:12:5C:28:AE:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/323830343a353130303a333030303a3a2f34302d3430203d3e20323638343234.roa
Signing time:             Thu 06 Mar 2025 01:41:50 +0000
ROA not before:           Thu 06 Mar 2025 01:36:50 +0000
ROA not after:            Thu 05 Mar 2026 01:41:50 +0000
asID:                     268424
IP address blocks:        2804:5100:3000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.crl
                          rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 16:10:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:b6:c6:b3:5e:73:e7:23:b2:23:ac:1e:a9:0f:58:b5:45:8a:ad:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71
        Validity
            Not Before: Mar  6 01:36:50 2025 GMT
            Not After : Mar  5 01:41:50 2026 GMT
        Subject: CN=04EF2620537425E21ECF3E802020F898D063B918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f5:07:bd:38:b7:30:c5:31:2a:71:92:ae:d5:
                    96:77:f0:94:6b:1a:89:b5:ce:9f:48:fa:b7:b1:22:
                    69:e6:b1:fd:ff:07:7a:fd:35:bc:65:95:2b:ed:ba:
                    7b:62:8b:14:c3:1c:dd:c7:f6:32:99:d4:3d:77:cb:
                    59:2e:5a:ff:d6:98:bf:72:11:ea:b1:18:d7:97:d6:
                    35:bd:2f:07:a9:9e:81:fc:8b:6e:05:c0:14:6f:bb:
                    c8:a5:e0:ab:e0:e7:e9:37:48:7d:49:55:e7:22:c8:
                    7b:10:4e:d4:ed:3a:81:54:26:5b:b8:9d:1e:1f:b7:
                    27:28:3f:61:04:f7:d2:79:dc:49:41:c9:79:1d:d9:
                    2f:c6:4c:b6:fe:e4:05:fa:d6:75:a9:d4:26:36:dd:
                    66:c2:ca:36:2c:7b:a7:f9:bd:92:b7:05:31:69:51:
                    65:ff:1d:b0:7d:c2:10:da:68:da:1e:61:22:c3:10:
                    8f:38:5a:20:4c:30:c8:5c:f1:bb:89:ec:10:4c:2b:
                    8d:6c:56:2d:d6:cb:18:64:62:d3:77:6f:a2:8c:e6:
                    cd:ec:cd:a4:58:a3:e3:08:8e:75:64:ef:99:13:fa:
                    b5:8d:41:e8:c2:c6:65:b1:96:d9:7a:18:15:d1:2b:
                    7b:ff:9b:34:96:85:c5:e9:d4:45:42:97:dd:fc:6d:
                    90:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:EF:26:20:53:74:25:E2:1E:CF:3E:80:20:20:F8:98:D0:63:B9:18
            X509v3 Authority Key Identifier:
                keyid:93:92:D1:DC:A3:77:01:F3:AC:DB:A5:DA:E6:B4:4D:12:5C:28:AE:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/323830343a353130303a333030303a3a2f34302d3430203d3e20323638343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5100:3000::/40

    Signature Algorithm: sha256WithRSAEncryption
         d7:5a:0c:b0:81:dd:b4:c0:6d:aa:87:23:dd:fc:98:b3:8d:dd:
         e4:8b:07:48:98:35:ce:52:4b:90:ec:6d:ee:2a:b1:6d:2c:76:
         77:b2:5b:12:ac:86:fd:c5:4c:c9:c5:8f:2c:70:2a:c0:1f:2e:
         bb:4c:76:50:b6:9d:96:e7:dc:ff:59:ec:db:85:c7:68:a4:ac:
         36:96:2f:3b:c2:8d:89:65:5c:34:0d:a8:4f:55:60:cf:32:c8:
         98:66:57:77:68:12:6e:0e:37:08:4e:51:dc:ae:ce:95:3c:47:
         b9:29:ae:a5:ab:17:fc:1c:12:da:04:b3:99:fb:3f:59:d0:9e:
         67:1f:d6:a6:6a:cf:0d:87:8c:e3:9b:11:ce:75:43:6b:0e:01:
         6e:78:26:5a:22:ad:c5:b3:37:d2:9f:31:ba:4d:70:bd:42:53:
         fc:9a:a0:69:cd:79:82:33:9b:c1:40:19:cc:ac:f4:cd:7c:75:
         94:bd:b1:37:5e:40:20:7b:7b:03:17:53:4e:49:05:15:33:f7:
         91:51:01:c3:c4:d8:77:56:06:82:6f:f5:aa:0a:c2:8f:ae:51:
         88:f8:1c:ee:8c:e0:6e:41:20:87:89:be:cb:92:d9:c3:9b:01:
         67:48:40:e6:58:89:3b:c9:46:7b:bc:9c:06:92:5c:32:91:c8:
         76:49:00:3f
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUVrbGs15z5yOyI6weqQ9YtUWKrQswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTM5MkQxRENBMzc3MDFGM0FDREJBNURBRTZCNDREMTI1
QzI4QUU3MTAeFw0yNTAzMDYwMTM2NTBaFw0yNjAzMDUwMTQxNTBaMDMxMTAvBgNV
BAMTKDA0RUYyNjIwNTM3NDI1RTIxRUNGM0U4MDIwMjBGODk4RDA2M0I5MTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw9Qe9OLcwxTEqcZKu1ZZ38JRr
Gom1zp9I+rexImnmsf3/B3r9NbxllSvtuntiixTDHN3H9jKZ1D13y1kuWv/WmL9y
EeqxGNeX1jW9LwepnoH8i24FwBRvu8il4Kvg5+k3SH1JVeciyHsQTtTtOoFUJlu4
nR4ftycoP2EE99J53ElByXkd2S/GTLb+5AX61nWp1CY23WbCyjYse6f5vZK3BTFp
UWX/HbB9whDaaNoeYSLDEI84WiBMMMhc8buJ7BBMK41sVi3WyxhkYtN3b6KM5s3s
zaRYo+MIjnVk75kT+rWNQejCxmWxltl6GBXRK3v/mzSWhcXp1EVCl938bZDrAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUBO8mIFN0JeIezz6AICD4mNBjuRgwHwYDVR0j
BBgwFoAUk5LR3KN3AfOs26Xa5rRNElwornEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNE1ybUVtUlI2YXg0aldUaThrOHA4M0xjbjZTVVdBakpHRE1WOVJoSmhU
ZTUvMS85MzkyRDFEQ0EzNzcwMUYzQUNEQkE1REFFNkI0NEQxMjVDMjhBRTcxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkzOTJEMURDQTM3NzAxRjNB
Q0RCQTVEQUU2QjQ0RDEyNUMyOEFFNzEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRNcm1FbVJSNmF4NGpXVGk4azhwODNMY242U1VXQWpKR0RNVjlSaEpoVGU1LzEv
MzIzODMwMzQzYTM1MzEzMDMwM2EzMzMwMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzODM0MzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEUQAwMA0GCSqGSIb3DQEBCwUA
A4IBAQDXWgywgd20wG2qhyPd/Jizjd3kiwdImDXOUkuQ7G3uKrFtLHZ3slsSrIb9
xUzJxY8scCrAHy67THZQtp2W59z/WezbhcdopKw2li87wo2JZVw0DahPVWDPMsiY
Zld3aBJuDjcITlHcrs6VPEe5Ka6lqxf8HBLaBLOZ+z9Z0J5nH9amas8Nh4zjmxHO
dUNrDgFueCZaIq3FszfSnzG6TXC9QlP8mqBpzXmCM5vBQBnMrPTNfHWUvbE3XkAg
e3sDF1NOSQUVM/eRUQHDxNh3VgaCb/WqCsKPrlGI+BzujOBuQSCHib7LktnDmwFn
SEDmWIk7yUZ7vJwGklwykch2SQA/
-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:07 2025 by rpki-client on console.sobornost.net