Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4qAnaXBwkYxLhuRLQ88sekxjuFH2nwmVwpe3uZdADj1y/1/323830343a336336633a3a2f33322d3335203d3e20323636323130.roa
File:                     323830343a336336633a3a2f33322d3335203d3e20323636323130.roa (raw, json)
Hash identifier:          MKhA785K+tPMCpDaSGmo8V39BgAN1vvjYos2YEcedr8=
Subject key identifier:   DC:69:12:22:4D:9D:44:9F:9E:64:DC:CE:F7:73:AB:27:77:B5:92:74
Certificate issuer:       /CN=4DBCEA414C97E21ED954E22389E65590C555EEBD
Certificate serial:       133E4DB40550274C349FA01C5DA0C9AD9FD67EA6
Authority key identifier: 4D:BC:EA:41:4C:97:E2:1E:D9:54:E2:23:89:E6:55:90:C5:55:EE:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DBCEA414C97E21ED954E22389E65590C555EEBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4qAnaXBwkYxLhuRLQ88sekxjuFH2nwmVwpe3uZdADj1y/1/323830343a336336633a3a2f33322d3335203d3e20323636323130.roa
Signing time:             Wed 05 Mar 2025 19:00:04 +0000
ROA not before:           Wed 05 Mar 2025 18:55:04 +0000
ROA not after:            Wed 04 Mar 2026 19:00:04 +0000
asID:                     266210
IP address blocks:        2804:3c6c::/32 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4qAnaXBwkYxLhuRLQ88sekxjuFH2nwmVwpe3uZdADj1y/1/4DBCEA414C97E21ED954E22389E65590C555EEBD.crl
                          rsync://rpki-repo.registro.br/repo/4qAnaXBwkYxLhuRLQ88sekxjuFH2nwmVwpe3uZdADj1y/1/4DBCEA414C97E21ED954E22389E65590C555EEBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DBCEA414C97E21ED954E22389E65590C555EEBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:3e:4d:b4:05:50:27:4c:34:9f:a0:1c:5d:a0:c9:ad:9f:d6:7e:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DBCEA414C97E21ED954E22389E65590C555EEBD
        Validity
            Not Before: Mar  5 18:55:04 2025 GMT
            Not After : Mar  4 19:00:04 2026 GMT
        Subject: CN=3082010A0282010100DAE6FF9E6D2C65715725C32A79CDB86C2AB3E7BA8CAC056CC146122052284A0EAE167C63BA3C11828A0F45F42B248C36AB237A032FDD02E89123345FDAD2FBB7DE63ED8B0E0B6221767C08D48EA8E5CBBAF505D76E81611FE5B4B6AEC0DBB65C3311570E87951157208A2CEA903F986D1BBEB84657723C2DE7D433139AE3815E625DA6ADADC2427F5B5BE43BB99308FE1E22562BC560E1FFEEDB8D9C322C05F093CC28BDF420E2779D890161B4CB805A98B7F755A8F85A5690F3FC2294240EF4D9FAC3AA5CFCE120B0E59FD60F2F5BF98244593423E71B64FEB75BA09B2378923344B7F07DDCFE838352051016F2DC206FC1857319C7D23B309C94EC228C9D030203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e6:ff:9e:6d:2c:65:71:57:25:c3:2a:79:cd:
                    b8:6c:2a:b3:e7:ba:8c:ac:05:6c:c1:46:12:20:52:
                    28:4a:0e:ae:16:7c:63:ba:3c:11:82:8a:0f:45:f4:
                    2b:24:8c:36:ab:23:7a:03:2f:dd:02:e8:91:23:34:
                    5f:da:d2:fb:b7:de:63:ed:8b:0e:0b:62:21:76:7c:
                    08:d4:8e:a8:e5:cb:ba:f5:05:d7:6e:81:61:1f:e5:
                    b4:b6:ae:c0:db:b6:5c:33:11:57:0e:87:95:11:57:
                    20:8a:2c:ea:90:3f:98:6d:1b:be:b8:46:57:72:3c:
                    2d:e7:d4:33:13:9a:e3:81:5e:62:5d:a6:ad:ad:c2:
                    42:7f:5b:5b:e4:3b:b9:93:08:fe:1e:22:56:2b:c5:
                    60:e1:ff:ee:db:8d:9c:32:2c:05:f0:93:cc:28:bd:
                    f4:20:e2:77:9d:89:01:61:b4:cb:80:5a:98:b7:f7:
                    55:a8:f8:5a:56:90:f3:fc:22:94:24:0e:f4:d9:fa:
                    c3:aa:5c:fc:e1:20:b0:e5:9f:d6:0f:2f:5b:f9:82:
                    44:59:34:23:e7:1b:64:fe:b7:5b:a0:9b:23:78:92:
                    33:44:b7:f0:7d:dc:fe:83:83:52:05:10:16:f2:dc:
                    20:6f:c1:85:73:19:c7:d2:3b:30:9c:94:ec:22:8c:
                    9d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:69:12:22:4D:9D:44:9F:9E:64:DC:CE:F7:73:AB:27:77:B5:92:74
            X509v3 Authority Key Identifier:
                keyid:4D:BC:EA:41:4C:97:E2:1E:D9:54:E2:23:89:E6:55:90:C5:55:EE:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4qAnaXBwkYxLhuRLQ88sekxjuFH2nwmVwpe3uZdADj1y/1/4DBCEA414C97E21ED954E22389E65590C555EEBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DBCEA414C97E21ED954E22389E65590C555EEBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4qAnaXBwkYxLhuRLQ88sekxjuFH2nwmVwpe3uZdADj1y/1/323830343a336336633a3a2f33322d3335203d3e20323636323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c6c::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:ab:38:65:71:04:e8:ce:44:98:b6:ad:d0:40:5c:db:17:4c:
         c2:80:85:b1:73:d6:57:b1:d2:c6:9d:2b:3a:56:c0:cd:28:3c:
         88:23:5d:0f:6b:5d:59:fa:06:ed:63:5b:bd:d1:22:1a:c3:cb:
         b6:7c:9e:09:fc:14:a8:fd:f4:95:02:0f:66:d8:88:32:d1:02:
         0d:aa:40:08:5f:36:01:bd:77:d2:15:a7:42:04:75:57:bb:e9:
         62:a8:19:08:35:ec:7c:07:df:f1:02:b5:1b:12:6b:bc:f4:b2:
         46:82:4d:7b:09:61:9f:d2:bb:c3:af:1f:7b:90:a7:b5:a9:2e:
         69:f4:99:90:dc:69:63:c1:05:7e:94:a1:07:87:95:b7:e7:30:
         c2:31:4d:cc:1b:aa:c2:36:30:cc:dc:8c:33:4b:3f:61:18:b4:
         f2:65:c2:96:1e:69:49:82:cb:56:09:be:a3:02:0a:0c:6d:0d:
         77:cc:3d:6d:35:67:a7:6f:9a:1b:81:5e:fb:07:88:26:21:db:
         f6:77:06:95:88:96:7e:21:d4:e1:ef:26:5e:6f:9a:8c:d6:80:
         f1:28:6b:43:86:82:16:39:16:cd:c7:e0:74:14:78:cc:9d:cb:
         63:ca:03:af:dd:72:a6:30:c7:29:b1:76:2f:b5:1e:d7:fe:8f:
         5e:cf:b9:d6
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUEz5NtAVQJ0w0n6AcXaDJrZ/WfqYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNERCQ0VBNDE0Qzk3RTIxRUQ5NTRFMjIzODlFNjU1OTBD
NTU1RUVCRDAeFw0yNTAzMDUxODU1MDRaFw0yNjAzMDQxOTAwMDRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREFFNkZGOUU2RDJDNjU3MTU3
MjVDMzJBNzlDREI4NkMyQUIzRTdCQThDQUMwNTZDQzE0NjEyMjA1MjI4NEEwRUFF
MTY3QzYzQkEzQzExODI4QTBGNDVGNDJCMjQ4QzM2QUIyMzdBMDMyRkREMDJFODkx
MjMzNDVGREFEMkZCQjdERTYzRUQ4QjBFMEI2MjIxNzY3QzA4RDQ4RUE4RTVDQkJB
RjUwNUQ3NkU4MTYxMUZFNUI0QjZBRUMwREJCNjVDMzMxMTU3MEU4Nzk1MTE1NzIw
OEEyQ0VBOTAzRjk4NkQxQkJFQjg0NjU3NzIzQzJERTdENDMzMTM5QUUzODE1RTYy
NURBNkFEQURDMjQyN0Y1QjVCRTQzQkI5OTMwOEZFMUUyMjU2MkJDNTYwRTFGRkVF
REI4RDlDMzIyQzA1RjA5M0NDMjhCREY0MjBFMjc3OUQ4OTAxNjFCNENCODA1QTk4
QjdGNzU1QThGODVBNTY5MEYzRkMyMjk0MjQwRUY0RDlGQUMzQUE1Q0ZDRTEyMEIw
RTU5RkQ2MEYyRjVCRjk4MjQ0NTkzNDIzRTcxQjY0RkVCNzVCQTA5QjIzNzg5MjMz
NDRCN0YwN0REQ0ZFODM4MzUyMDUxMDE2RjJEQzIwNkZDMTg1NzMxOUM3RDIzQjMw
OUM5NEVDMjI4QzlEMDMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA2ub/nm0sZXFXJcMqec24bCqz57qMrAVswUYSIFIoSg6uFnxjujwR
gooPRfQrJIw2qyN6Ay/dAuiRIzRf2tL7t95j7YsOC2IhdnwI1I6o5cu69QXXboFh
H+W0tq7A27ZcMxFXDoeVEVcgiizqkD+YbRu+uEZXcjwt59QzE5rjgV5iXaatrcJC
f1tb5Du5kwj+HiJWK8Vg4f/u242cMiwF8JPMKL30IOJ3nYkBYbTLgFqYt/dVqPha
VpDz/CKUJA702frDqlz84SCw5Z/WDy9b+YJEWTQj5xtk/rdboJsjeJIzRLfwfdz+
g4NSBRAW8twgb8GFcxnH0jswnJTsIoydAwIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FNxpEiJNnUSfnmTczvdzqyd3tZJ0MB8GA1UdIwQYMBaAFE286kFMl+Ie2VTiI4nm
VZDFVe69MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRxQW5hWEJ3a1l4TGh1
UkxRODhzZWt4anVGSDJud21Wd3BlM3VaZEFEajF5LzEvNERCQ0VBNDE0Qzk3RTIx
RUQ5NTRFMjIzODlFNjU1OTBDNTU1RUVCRC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS80REJDRUE0MTRDOTdFMjFFRDk1NEUyMjM4OUU2NTU5MEM1NTVF
RUJELmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80cUFuYVhCd2tZeExodVJMUTg4
c2VreGp1RkgybndtVndwZTN1WmRBRGoxeS8xLzMyMzgzMDM0M2EzMzYzMzY2MzNh
M2EyZjMzMzIyZDMzMzUyMDNkM2UyMDMyMzYzNjMyMzEzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
PGwwDQYJKoZIhvcNAQELBQADggEBAEerOGVxBOjORJi2rdBAXNsXTMKAhbFz1lex
0sadKzpWwM0oPIgjXQ9rXVn6Bu1jW73RIhrDy7Z8ngn8FKj99JUCD2bYiDLRAg2q
QAhfNgG9d9IVp0IEdVe76WKoGQg17HwH3/ECtRsSa7z0skaCTXsJYZ/Su8OvH3uQ
p7WpLmn0mZDcaWPBBX6UoQeHlbfnMMIxTcwbqsI2MMzcjDNLP2EYtPJlwpYeaUmC
y1YJvqMCCgxtDXfMPW01Z6dvmhuBXvsHiCYh2/Z3BpWIln4h1OHvJl5vmozWgPEo
a0OGghY5Fs3H4HQUeMydy2PKA6/dcqYwxymxdi+1Htf+j17PudY=
-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:02 2025 by rpki-client on console.sobornost.net