Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4b2BBLf9txfe1dhbUABYpWe5rPbkUMBFHQSrcwC59zgY/0/323830343a353037303a3a2f33322d313238203d3e20323638333839.roa
File:                     323830343a353037303a3a2f33322d313238203d3e20323638333839.roa (raw, json)
Hash identifier:          LfW6JWJJPl/XLhhEy9aui4PBt8sj/xpxVQgEKAIyipM=
Subject key identifier:   D3:56:34:10:72:1A:30:6D:2F:99:56:F8:E1:11:9A:3C:97:7E:6B:44
Certificate issuer:       /CN=D0EDE113278521075ABA0BA000B92CE448CC6CD4
Certificate serial:       4BFED528CE4510359E99EC7EC663DCC2F6DFB934
Authority key identifier: D0:ED:E1:13:27:85:21:07:5A:BA:0B:A0:00:B9:2C:E4:48:CC:6C:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0EDE113278521075ABA0BA000B92CE448CC6CD4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4b2BBLf9txfe1dhbUABYpWe5rPbkUMBFHQSrcwC59zgY/0/323830343a353037303a3a2f33322d313238203d3e20323638333839.roa
Signing time:             Wed 12 Mar 2025 15:50:07 +0000
ROA not before:           Wed 12 Mar 2025 15:45:07 +0000
ROA not after:            Wed 11 Mar 2026 15:50:07 +0000
asID:                     268389
IP address blocks:        2804:5070::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4b2BBLf9txfe1dhbUABYpWe5rPbkUMBFHQSrcwC59zgY/0/D0EDE113278521075ABA0BA000B92CE448CC6CD4.crl
                          rsync://rpki-repo.registro.br/repo/4b2BBLf9txfe1dhbUABYpWe5rPbkUMBFHQSrcwC59zgY/0/D0EDE113278521075ABA0BA000B92CE448CC6CD4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0EDE113278521075ABA0BA000B92CE448CC6CD4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 19:13:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:fe:d5:28:ce:45:10:35:9e:99:ec:7e:c6:63:dc:c2:f6:df:b9:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0EDE113278521075ABA0BA000B92CE448CC6CD4
        Validity
            Not Before: Mar 12 15:45:07 2025 GMT
            Not After : Mar 11 15:50:07 2026 GMT
        Subject: CN=D3563410721A306D2F9956F8E1119A3C977E6B44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1e:96:ee:c8:92:ca:b2:ce:47:a7:63:14:90:
                    f2:ce:9a:50:a8:02:53:78:3a:7c:7c:d3:1e:b1:d4:
                    13:91:51:0a:9d:49:56:b8:ab:8b:71:bf:4a:5b:18:
                    d1:b7:ac:f4:b8:7b:c2:f9:3d:f4:3b:14:f7:70:2a:
                    3b:c2:53:d2:fb:a2:71:b8:31:e3:6a:23:ae:8d:f8:
                    bd:45:8f:67:08:f2:2f:b5:46:81:97:c3:5e:d7:f7:
                    59:e9:58:77:73:c1:79:79:bc:76:ed:b9:f3:dc:99:
                    0c:0f:66:63:b0:e6:76:02:04:d5:56:92:e4:74:89:
                    a8:76:fb:0c:f1:66:96:3d:fb:d0:4b:8e:d9:90:83:
                    50:40:10:ed:e1:cf:bc:f0:bd:d5:6f:d0:bf:2e:af:
                    32:42:87:ef:d0:05:e3:90:d8:0a:28:5a:a2:c4:e3:
                    aa:26:77:88:a9:bd:ed:f2:04:7f:62:bf:0f:31:f8:
                    66:9f:c6:26:96:3f:ae:2c:15:68:4b:ca:49:e9:aa:
                    41:0c:9f:30:9a:cd:cf:55:21:04:60:1f:6a:89:33:
                    21:4e:99:a4:31:5d:c8:f2:d0:51:c6:34:df:7b:d2:
                    6f:43:eb:b5:73:ea:ff:c8:17:ac:20:b9:d2:b9:bd:
                    f5:80:23:51:8c:b9:ee:26:1d:53:b2:e1:b1:ad:44:
                    1a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:56:34:10:72:1A:30:6D:2F:99:56:F8:E1:11:9A:3C:97:7E:6B:44
            X509v3 Authority Key Identifier:
                keyid:D0:ED:E1:13:27:85:21:07:5A:BA:0B:A0:00:B9:2C:E4:48:CC:6C:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4b2BBLf9txfe1dhbUABYpWe5rPbkUMBFHQSrcwC59zgY/0/D0EDE113278521075ABA0BA000B92CE448CC6CD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0EDE113278521075ABA0BA000B92CE448CC6CD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4b2BBLf9txfe1dhbUABYpWe5rPbkUMBFHQSrcwC59zgY/0/323830343a353037303a3a2f33322d313238203d3e20323638333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5070::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:fc:90:18:08:04:2a:fd:bd:b2:00:3e:0e:18:47:9c:b2:4b:
         e3:48:de:ad:67:80:b5:fc:ab:83:61:56:e8:67:c0:cf:a3:03:
         eb:6c:52:7f:22:68:35:57:45:89:54:bf:16:d8:bf:39:3d:78:
         f8:ca:95:86:00:d0:c8:19:5f:05:f6:54:1e:35:70:33:65:f7:
         0a:28:da:44:d6:59:32:81:9c:8e:bb:75:ff:10:4a:7d:c8:13:
         57:38:53:07:54:e1:c8:68:3e:a8:0b:42:25:f4:97:d9:c4:cc:
         bb:1a:4d:eb:1c:e4:38:02:df:7a:71:db:40:55:a8:60:0f:35:
         14:6c:5c:74:43:74:fe:70:2a:86:de:c0:91:ff:b7:53:22:0a:
         f4:f1:15:dc:04:78:ff:7b:77:53:32:cc:63:91:f4:eb:7f:52:
         39:0b:a2:b4:9b:fc:c0:3a:99:e4:c3:46:d5:68:23:67:7a:34:
         e3:9b:36:96:5d:4c:7f:f3:20:f6:dc:a1:1a:ba:38:2e:d7:7c:
         08:da:32:7c:ce:4a:b8:c8:87:d4:92:08:96:76:c5:a6:58:96:
         1c:b1:8d:2f:52:3d:00:5b:b1:81:1f:34:21:45:d2:0f:c4:6f:
         b5:4c:07:b4:41:ff:12:65:2c:4d:04:20:61:5b:ae:e6:df:13:
         76:49:0a:5c
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUS/7VKM5FEDWemex+xmPcwvbfuTQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDBFREUxMTMyNzg1MjEwNzVBQkEwQkEwMDBCOTJDRTQ0
OENDNkNENDAeFw0yNTAzMTIxNTQ1MDdaFw0yNjAzMTExNTUwMDdaMDMxMTAvBgNV
BAMTKEQzNTYzNDEwNzIxQTMwNkQyRjk5NTZGOEUxMTE5QTNDOTc3RTZCNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPHpbuyJLKss5Hp2MUkPLOmlCo
AlN4Onx80x6x1BORUQqdSVa4q4txv0pbGNG3rPS4e8L5PfQ7FPdwKjvCU9L7onG4
MeNqI66N+L1Fj2cI8i+1RoGXw17X91npWHdzwXl5vHbtufPcmQwPZmOw5nYCBNVW
kuR0iah2+wzxZpY9+9BLjtmQg1BAEO3hz7zwvdVv0L8urzJCh+/QBeOQ2AooWqLE
46omd4ipve3yBH9ivw8x+GafxiaWP64sFWhLyknpqkEMnzCazc9VIQRgH2qJMyFO
maQxXcjy0FHGNN970m9D67Vz6v/IF6wgudK5vfWAI1GMue4mHVOy4bGtRBqDAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU01Y0EHIaMG0vmVb44RGaPJd+a0QwHwYDVR0j
BBgwFoAU0O3hEyeFIQdaugugALks5EjMbNQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGIyQkJMZjl0eGZlMWRoYlVBQllwV2U1clBia1VNQkZIUVNyY3dDNTl6
Z1kvMC9EMEVERTExMzI3ODUyMTA3NUFCQTBCQTAwMEI5MkNFNDQ4Q0M2Q0Q0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwRURFMTEzMjc4NTIxMDc1
QUJBMEJBMDAwQjkyQ0U0NDhDQzZDRDQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRiMkJCTGY5dHhmZTFkaGJVQUJZcFdlNXJQYmtVTUJGSFFTcmN3QzU5emdZLzAv
MzIzODMwMzQzYTM1MzAzNzMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzgzMzM4Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBFBwMA0GCSqGSIb3DQEBCwUAA4IBAQCf/JAY
CAQq/b2yAD4OGEecskvjSN6tZ4C1/KuDYVboZ8DPowPrbFJ/Img1V0WJVL8W2L85
PXj4ypWGANDIGV8F9lQeNXAzZfcKKNpE1lkygZyOu3X/EEp9yBNXOFMHVOHIaD6o
C0Il9JfZxMy7Gk3rHOQ4At96cdtAVahgDzUUbFx0Q3T+cCqG3sCR/7dTIgr08RXc
BHj/e3dTMsxjkfTrf1I5C6K0m/zAOpnkw0bVaCNnejTjmzaWXUx/8yD23KEaujgu
13wI2jJ8zkq4yIfUkgiWdsWmWJYcsY0vUj0AW7GBHzQhRdIPxG+1TAe0Qf8SZSxN
BCBhW67m3xN2SQpc
-----END CERTIFICATE-----
Generated at Sun Apr 27 19:12:07 2025 by rpki-client on console.sobornost.net