Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/323830343a6630383a3a2f33322d3332203d3e20323633353633.roa
File:                     323830343a6630383a3a2f33322d3332203d3e20323633353633.roa (raw, json)
Hash identifier:          TTDhW0WFEgopi8cE+1QkP7FtA/5Q+2sPzSwiaxeARMI=
Subject key identifier:   38:81:26:84:AC:AB:39:20:7B:49:E4:5A:74:C9:D2:A7:3E:5A:9A:85
Certificate issuer:       /CN=8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7
Certificate serial:       27CF076D8A7252942645EA2F72221E3C40F97AE5
Authority key identifier: 8E:AE:8D:1A:E6:A6:86:9C:FE:54:E3:74:20:1A:54:F2:E0:93:4E:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/323830343a6630383a3a2f33322d3332203d3e20323633353633.roa
Signing time:             Thu 06 Mar 2025 14:54:08 +0000
ROA not before:           Thu 06 Mar 2025 14:49:08 +0000
ROA not after:            Thu 05 Mar 2026 14:54:08 +0000
asID:                     263563
IP address blocks:        2804:f08::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.crl
                          rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:cf:07:6d:8a:72:52:94:26:45:ea:2f:72:22:1e:3c:40:f9:7a:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7
        Validity
            Not Before: Mar  6 14:49:08 2025 GMT
            Not After : Mar  5 14:54:08 2026 GMT
        Subject: CN=38812684ACAB39207B49E45A74C9D2A73E5A9A85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e9:3c:69:d2:1c:09:10:23:b5:b1:37:98:dd:
                    b6:c3:7d:38:25:db:cb:0b:a4:20:e1:d7:72:b7:ff:
                    ea:f8:e5:de:95:1a:9d:5b:2c:db:e2:64:07:05:53:
                    e4:ea:d6:c3:32:cd:ac:79:ae:0f:51:c4:5b:15:58:
                    39:d4:be:02:fc:1a:e6:fd:9e:56:f7:48:84:8c:84:
                    80:d4:ea:d2:fb:a5:4a:43:e9:0a:e4:03:b1:ef:b4:
                    d5:29:e2:b4:4d:d0:2c:16:31:16:ec:f0:74:d0:9f:
                    cd:87:12:cb:4e:3f:89:cd:e5:a3:ef:60:0b:12:0b:
                    a6:5e:f9:75:0e:65:d2:b9:68:0e:fb:e2:a1:2d:95:
                    1f:fa:69:15:80:3a:2e:1f:1f:0d:37:19:9b:c5:79:
                    a7:56:e1:d5:b4:30:c2:18:ed:9b:ed:86:48:fc:e6:
                    bd:0f:1a:cf:1e:b5:ba:ab:6d:36:5d:39:95:0c:af:
                    c0:45:95:f2:76:71:a3:97:f9:16:50:ac:9e:fc:60:
                    32:ae:9d:64:b4:97:e6:e3:c2:f1:b1:da:54:f3:14:
                    6c:7c:75:e1:c0:ab:fd:78:75:b8:5f:6d:e9:b6:d7:
                    1d:c4:0d:6f:78:a8:c4:c9:11:91:db:69:00:5b:29:
                    41:c1:a7:43:f9:06:c5:60:77:94:c5:b2:d3:85:85:
                    b4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:81:26:84:AC:AB:39:20:7B:49:E4:5A:74:C9:D2:A7:3E:5A:9A:85
            X509v3 Authority Key Identifier:
                keyid:8E:AE:8D:1A:E6:A6:86:9C:FE:54:E3:74:20:1A:54:F2:E0:93:4E:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/323830343a6630383a3a2f33322d3332203d3e20323633353633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f08::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:94:b9:12:aa:6d:93:1b:67:13:72:ff:00:28:d0:f4:04:2d:
         b0:65:df:8e:10:be:8e:0c:e5:e8:3b:b1:ed:06:6e:44:88:2f:
         5f:74:e9:d7:2c:e0:c8:16:95:92:32:f8:3f:06:0e:85:b4:6c:
         a9:06:23:41:26:14:81:82:c6:9e:70:2d:37:90:81:53:ae:82:
         e4:b5:4e:3a:76:65:30:c0:32:c2:48:19:81:20:bb:83:7a:94:
         6b:f2:8f:a2:1d:84:b2:ee:b1:3e:18:c5:17:a0:c0:78:0b:af:
         b3:f8:77:1a:28:7f:99:e3:bb:9e:98:ff:ec:0f:7c:45:fe:86:
         36:a1:20:cf:48:b8:1d:f2:e0:fe:bf:f3:a0:0c:b7:d7:cb:ca:
         ff:f2:c3:78:4a:c0:03:52:d6:68:fd:9a:f5:7f:85:a9:b4:7d:
         20:48:7d:83:e2:03:87:e1:5b:a7:82:b9:03:8e:be:5d:56:4b:
         01:20:23:93:e5:fb:19:af:a4:ce:af:70:87:d7:4b:56:57:c1:
         26:3b:02:f6:a9:dd:d5:bf:18:d2:cb:a2:c0:7f:64:0d:b6:39:
         87:67:57:3b:43:27:8b:30:68:58:05:ed:0f:bb:0c:c5:4d:f4:
         ac:d9:85:bd:36:65:b9:e7:e4:93:02:73:b4:cf:2a:b0:ce:47:
         65:7c:4a:fe
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUJ88HbYpyUpQmReovciIePED5euUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEVBRThEMUFFNkE2ODY5Q0ZFNTRFMzc0MjAxQTU0RjJF
MDkzNEVDNzAeFw0yNTAzMDYxNDQ5MDhaFw0yNjAzMDUxNDU0MDhaMDMxMTAvBgNV
BAMTKDM4ODEyNjg0QUNBQjM5MjA3QjQ5RTQ1QTc0QzlEMkE3M0U1QTlBODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY6Txp0hwJECO1sTeY3bbDfTgl
28sLpCDh13K3/+r45d6VGp1bLNviZAcFU+Tq1sMyzax5rg9RxFsVWDnUvgL8Gub9
nlb3SISMhIDU6tL7pUpD6QrkA7HvtNUp4rRN0CwWMRbs8HTQn82HEstOP4nN5aPv
YAsSC6Ze+XUOZdK5aA774qEtlR/6aRWAOi4fHw03GZvFeadW4dW0MMIY7Zvthkj8
5r0PGs8etbqrbTZdOZUMr8BFlfJ2caOX+RZQrJ78YDKunWS0l+bjwvGx2lTzFGx8
deHAq/14dbhfbem21x3EDW94qMTJEZHbaQBbKUHBp0P5BsVgd5TFstOFhbRHAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUOIEmhKyrOSB7SeRadMnSpz5amoUwHwYDVR0j
BBgwFoAUjq6NGuamhpz+VON0IBpU8uCTTscwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFNNdm1zcTFhZXY4QzEzdnJuNWRVMXBMekdwMXdHRkJuemdtTkpqOHNX
NkovMS84RUFFOEQxQUU2QTY4NjlDRkU1NEUzNzQyMDFBNTRGMkUwOTM0RUM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFQUU4RDFBRTZBNjg2OUNG
RTU0RTM3NDIwMUE1NEYyRTA5MzRFQzcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRTTXZtc3ExYWV2OEMxM3ZybjVkVTFwTHpHcDF3R0ZCbnpnbU5KajhzVzZKLzEv
MzIzODMwMzQzYTY2MzAzODNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzMzM1
MzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEDwgwDQYJKoZIhvcNAQELBQADggEBAGGUuRKqbZMb
ZxNy/wAo0PQELbBl344Qvo4M5eg7se0GbkSIL1906dcs4MgWlZIy+D8GDoW0bKkG
I0EmFIGCxp5wLTeQgVOuguS1Tjp2ZTDAMsJIGYEgu4N6lGvyj6IdhLLusT4YxReg
wHgLr7P4dxoof5nju56Y/+wPfEX+hjahIM9IuB3y4P6/86AMt9fLyv/yw3hKwANS
1mj9mvV/ham0fSBIfYPiA4fhW6eCuQOOvl1WSwEgI5Pl+xmvpM6vcIfXS1ZXwSY7
Avap3dW/GNLLosB/ZA22OYdnVztDJ4swaFgF7Q+7DMVN9KzZhb02Zbnn5JMCc7TP
KrDOR2V8Sv4=
-----END CERTIFICATE-----
Generated at Sun Apr 27 10:26:46 2025 by rpki-client on console.sobornost.net