Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/323830343a323939303a383130303a3a2f34302d3430203d3e20323634303232.roa
File:                     323830343a323939303a383130303a3a2f34302d3430203d3e20323634303232.roa (raw, json)
Hash identifier:          VRgGQuZbD4w0+4W7X1kmVLxSJ/NIOXnRMtifz+5g/+E=
Subject key identifier:   86:E1:2A:0F:D4:73:2D:8F:0F:13:79:1D:E0:0D:AE:85:19:AE:5E:76
Certificate issuer:       /CN=F63047CFCA73277026C41BFD930CC304F5F342B7
Certificate serial:       45569035486CA3D45B30F52678212E775C4399C6
Authority key identifier: F6:30:47:CF:CA:73:27:70:26:C4:1B:FD:93:0C:C3:04:F5:F3:42:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F63047CFCA73277026C41BFD930CC304F5F342B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/323830343a323939303a383130303a3a2f34302d3430203d3e20323634303232.roa
Signing time:             Fri 25 Apr 2025 14:05:02 +0000
ROA not before:           Fri 25 Apr 2025 14:00:02 +0000
ROA not after:            Fri 24 Apr 2026 14:05:02 +0000
asID:                     264022
IP address blocks:        2804:2990:8100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/F63047CFCA73277026C41BFD930CC304F5F342B7.crl
                          rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/F63047CFCA73277026C41BFD930CC304F5F342B7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F63047CFCA73277026C41BFD930CC304F5F342B7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 16:45:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:56:90:35:48:6c:a3:d4:5b:30:f5:26:78:21:2e:77:5c:43:99:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F63047CFCA73277026C41BFD930CC304F5F342B7
        Validity
            Not Before: Apr 25 14:00:02 2025 GMT
            Not After : Apr 24 14:05:02 2026 GMT
        Subject: CN=86E12A0FD4732D8F0F13791DE00DAE8519AE5E76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:73:74:61:12:06:11:c3:7d:54:78:ab:83:d2:
                    ee:80:a1:4e:ff:5a:08:04:bc:a3:d9:94:8d:e5:69:
                    ad:21:a4:20:6f:79:3d:50:a9:a6:b7:ac:3f:da:4f:
                    c3:ea:45:ab:e9:3a:b0:78:63:7d:98:93:db:2c:c0:
                    67:d7:04:6c:8a:c4:cc:7c:76:74:fd:35:9d:d7:75:
                    0c:6c:89:0e:c9:b1:01:4e:f4:b1:82:9a:dd:e2:20:
                    24:d9:53:f9:05:c0:8b:f1:a9:45:43:fa:6e:33:ea:
                    75:a0:df:94:8e:db:37:37:ec:d1:be:5f:4d:9c:87:
                    60:fd:e5:31:cc:ea:4e:81:f4:cd:12:a2:29:0e:cd:
                    e1:4d:f4:16:5f:c7:7a:f7:15:55:4a:65:68:07:aa:
                    92:35:e7:8b:73:c7:43:56:47:7c:a7:85:38:26:44:
                    10:12:63:ee:19:09:54:e9:b9:6d:8c:1c:dc:4f:af:
                    c2:be:16:8b:1b:2f:1e:f7:54:c0:48:42:c2:6c:ae:
                    b2:77:f0:dc:21:3b:4c:cd:6e:07:25:00:51:e1:16:
                    94:d8:ba:72:78:b2:5b:9b:09:14:67:eb:28:d9:ba:
                    42:cc:30:99:41:a0:11:4e:40:2e:79:53:9e:63:86:
                    d1:d5:39:3e:89:ac:3f:21:b5:6a:3d:0b:22:a9:59:
                    66:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:E1:2A:0F:D4:73:2D:8F:0F:13:79:1D:E0:0D:AE:85:19:AE:5E:76
            X509v3 Authority Key Identifier:
                keyid:F6:30:47:CF:CA:73:27:70:26:C4:1B:FD:93:0C:C3:04:F5:F3:42:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/F63047CFCA73277026C41BFD930CC304F5F342B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F63047CFCA73277026C41BFD930CC304F5F342B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/323830343a323939303a383130303a3a2f34302d3430203d3e20323634303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2990:8100::/40

    Signature Algorithm: sha256WithRSAEncryption
         a8:3b:74:3b:42:f2:ef:fa:a7:49:40:b6:9b:d7:61:64:f6:bd:
         af:8a:d2:4c:81:e2:f2:94:79:31:e0:24:03:34:d0:1c:20:a5:
         5b:8c:15:f2:e5:e8:e3:08:3c:92:f4:89:ed:4e:81:5e:50:8d:
         f0:03:9c:ce:47:63:f2:63:91:8f:ff:35:a7:47:88:79:ff:ce:
         b8:d6:83:68:4c:7b:7f:67:63:ba:d1:73:ac:6a:1e:ee:60:63:
         83:d6:73:25:68:5b:a1:85:f3:b5:d6:86:5b:24:b3:89:e7:d2:
         e3:67:0c:42:cc:14:67:47:1b:86:84:62:6d:fc:20:fc:90:30:
         25:81:88:58:54:ae:f7:e9:9f:01:a3:e0:7d:76:5f:1d:00:dc:
         1e:95:7c:f5:92:85:92:14:c1:0f:03:7b:8b:5c:cc:77:ad:d2:
         95:59:c8:1c:16:8d:a7:a8:80:9b:95:23:83:be:b2:2a:7c:eb:
         13:71:b3:64:36:32:6e:51:35:0b:0e:b9:c3:ea:f1:34:8d:d9:
         c2:3e:7a:8f:33:34:42:2f:f1:0c:d7:f9:9e:f0:0b:51:f1:ad:
         45:5f:67:7d:dc:53:ff:a9:29:4b:e9:a7:1d:1a:40:a4:59:e0:
         fd:7b:fe:9c:b9:94:a3:26:33:43:0a:93:6c:e3:79:ad:dd:b4:
         b3:a2:80:57
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIURVaQNUhso9RbMPUmeCEud1xDmcYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYzMDQ3Q0ZDQTczMjc3MDI2QzQxQkZEOTMwQ0MzMDRG
NUYzNDJCNzAeFw0yNTA0MjUxNDAwMDJaFw0yNjA0MjQxNDA1MDJaMDMxMTAvBgNV
BAMTKDg2RTEyQTBGRDQ3MzJEOEYwRjEzNzkxREUwMERBRTg1MTlBRTVFNzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbc3RhEgYRw31UeKuD0u6AoU7/
WggEvKPZlI3laa0hpCBveT1Qqaa3rD/aT8PqRavpOrB4Y32Yk9sswGfXBGyKxMx8
dnT9NZ3XdQxsiQ7JsQFO9LGCmt3iICTZU/kFwIvxqUVD+m4z6nWg35SO2zc37NG+
X02ch2D95THM6k6B9M0SoikOzeFN9BZfx3r3FVVKZWgHqpI154tzx0NWR3ynhTgm
RBASY+4ZCVTpuW2MHNxPr8K+FosbLx73VMBIQsJsrrJ38NwhO0zNbgclAFHhFpTY
unJ4slubCRRn6yjZukLMMJlBoBFOQC55U55jhtHVOT6JrD8htWo9CyKpWWZbAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUhuEqD9RzLY8PE3kd4A2uhRmuXnYwHwYDVR0j
BBgwFoAU9jBHz8pzJ3AmxBv9kwzDBPXzQrcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTJXTHVYd2N3N0N5Yzh2WGh2YXllM0RHNHJhZkxjZ0xQOVFkQ2UzWXFN
ZHEvMC9GNjMwNDdDRkNBNzMyNzcwMjZDNDFCRkQ5MzBDQzMwNEY1RjM0MkI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y2MzA0N0NGQ0E3MzI3NzAy
NkM0MUJGRDkzMENDMzA0RjVGMzQyQjcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzUyV0x1WHdjdzdDeWM4dlhodmF5ZTNERzRyYWZMY2dMUDlRZENlM1lxTWRxLzAv
MzIzODMwMzQzYTMyMzkzOTMwM2EzODMxMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzNDMwMzIzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEKZCBMA0GCSqGSIb3DQEBCwUA
A4IBAQCoO3Q7QvLv+qdJQLab12Fk9r2vitJMgeLylHkx4CQDNNAcIKVbjBXy5ejj
CDyS9IntToFeUI3wA5zOR2PyY5GP/zWnR4h5/8641oNoTHt/Z2O60XOsah7uYGOD
1nMlaFuhhfO11oZbJLOJ59LjZwxCzBRnRxuGhGJt/CD8kDAlgYhYVK736Z8Bo+B9
dl8dANwelXz1koWSFMEPA3uLXMx3rdKVWcgcFo2nqICblSODvrIqfOsTcbNkNjJu
UTULDrnD6vE0jdnCPnqPMzRCL/EM1/me8AtR8a1FX2d93FP/qSlL6acdGkCkWeD9
e/6cuZSjJjNDCpNs43mt3bSzooBX
-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:08 2025 by rpki-client on console.sobornost.net