Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/323830343a326432383a3a2f33322d313238203d3e20323635323634.roa
File:                     323830343a326432383a3a2f33322d313238203d3e20323635323634.roa (raw, json)
Hash identifier:          0xs1tTdh2Qke0fip6d1TEfj28igzF6NdDvyXj3IPtmI=
Subject key identifier:   95:56:D2:6D:3A:54:CD:58:0C:8F:5B:05:0D:BB:54:55:EE:CE:A8:72
Certificate issuer:       /CN=653837D7ECA1FE1145D0CE15E0BF895EE06A27E2
Certificate serial:       44FEC10ECEC162C39E667BAEB9472E09B20C9876
Authority key identifier: 65:38:37:D7:EC:A1:FE:11:45:D0:CE:15:E0:BF:89:5E:E0:6A:27:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/323830343a326432383a3a2f33322d313238203d3e20323635323634.roa
Signing time:             Wed 16 Apr 2025 20:06:20 +0000
ROA not before:           Wed 16 Apr 2025 20:01:20 +0000
ROA not after:            Wed 15 Apr 2026 20:06:20 +0000
asID:                     265264
IP address blocks:        2804:2d28::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl
                          rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:fe:c1:0e:ce:c1:62:c3:9e:66:7b:ae:b9:47:2e:09:b2:0c:98:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=653837D7ECA1FE1145D0CE15E0BF895EE06A27E2
        Validity
            Not Before: Apr 16 20:01:20 2025 GMT
            Not After : Apr 15 20:06:20 2026 GMT
        Subject: CN=9556D26D3A54CD580C8F5B050DBB5455EECEA872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d8:90:51:74:6c:66:d5:2b:fa:78:a0:40:7e:
                    8e:60:ce:0f:93:88:e8:e9:9c:aa:d0:9e:75:24:ce:
                    32:71:4c:3f:b9:4e:8d:a8:2a:c4:15:a9:df:c3:c8:
                    0a:79:47:3f:2e:16:2a:3c:ba:28:ae:86:38:c7:3e:
                    88:61:00:fb:28:76:63:2f:a9:43:35:c0:49:6f:d4:
                    22:71:33:2f:41:64:27:46:dd:01:ff:a2:96:04:97:
                    f8:11:28:d2:64:67:7d:0b:7a:58:8e:0a:01:96:83:
                    34:cb:26:9f:11:a5:18:c1:87:60:c9:07:05:8d:53:
                    bf:52:77:27:9a:6a:84:1a:a9:f8:ed:c4:3a:1d:6c:
                    75:a8:b6:d2:b4:18:3e:02:9a:82:47:d5:0c:98:f5:
                    55:75:d6:59:32:c1:eb:62:d8:37:98:de:0c:a1:57:
                    92:35:2a:f2:85:4a:8f:94:d7:ed:b0:3e:6c:26:17:
                    2d:7c:5d:62:bc:71:29:38:56:c1:b2:b0:8b:cf:48:
                    5a:a4:61:93:a8:ef:eb:6c:e4:f9:a9:7d:ff:9b:ee:
                    7f:20:d6:c5:77:e8:0e:23:64:2a:6f:c4:79:d1:58:
                    98:a4:08:83:cc:ce:dc:fc:17:27:69:b6:3a:e2:1d:
                    01:97:26:73:22:0e:e1:6a:ed:16:37:c6:f0:48:56:
                    87:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:56:D2:6D:3A:54:CD:58:0C:8F:5B:05:0D:BB:54:55:EE:CE:A8:72
            X509v3 Authority Key Identifier:
                keyid:65:38:37:D7:EC:A1:FE:11:45:D0:CE:15:E0:BF:89:5E:E0:6A:27:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/323830343a326432383a3a2f33322d313238203d3e20323635323634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d28::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:77:c6:1f:55:96:49:98:d6:c7:76:60:ce:4a:83:e5:fa:e6:
         16:b8:66:a8:6c:b1:57:7a:47:fb:df:9d:5c:f8:92:71:9b:29:
         82:36:50:74:4e:53:48:e5:6b:61:ce:9e:a6:c5:02:5c:97:4e:
         87:65:26:35:28:d0:25:a2:fe:48:b3:63:99:56:56:33:88:1b:
         8b:2c:91:fa:f7:5e:2d:38:61:e7:c9:2c:25:f4:64:3c:c8:69:
         9e:fd:f3:76:7a:45:d8:18:39:4d:11:a2:05:fb:90:17:9c:04:
         22:af:b4:e9:f5:d4:94:f7:9e:91:2d:06:ca:ad:d1:41:6d:2b:
         8e:59:4f:14:4d:4e:d3:59:31:a2:06:c3:3c:96:b4:d7:39:8b:
         32:71:2c:bc:45:87:31:12:49:38:fd:f5:62:4c:b6:c1:f9:dc:
         4a:3a:30:bb:7a:e4:8f:52:01:3d:23:dc:24:b3:3a:b0:0f:2c:
         cc:7d:04:bd:a0:77:bf:19:e0:fb:0d:81:aa:fd:1b:eb:bb:c5:
         42:72:38:88:00:5f:f7:2c:79:2c:d7:69:71:4f:60:cf:63:0e:
         cf:66:f3:70:96:bc:3b:26:3e:b5:72:cd:5c:65:c8:ab:bc:81:
         83:a0:ea:ba:eb:43:74:66:d5:62:75:67:b4:da:e8:76:4d:ca:
         c8:59:a6:c1
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIURP7BDs7BYsOeZnuuuUcuCbIMmHYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjUzODM3RDdFQ0ExRkUxMTQ1RDBDRTE1RTBCRjg5NUVF
MDZBMjdFMjAeFw0yNTA0MTYyMDAxMjBaFw0yNjA0MTUyMDA2MjBaMDMxMTAvBgNV
BAMTKDk1NTZEMjZEM0E1NENENTgwQzhGNUIwNTBEQkI1NDU1RUVDRUE4NzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt2JBRdGxm1Sv6eKBAfo5gzg+T
iOjpnKrQnnUkzjJxTD+5To2oKsQVqd/DyAp5Rz8uFio8uiiuhjjHPohhAPsodmMv
qUM1wElv1CJxMy9BZCdG3QH/opYEl/gRKNJkZ30LeliOCgGWgzTLJp8RpRjBh2DJ
BwWNU79SdyeaaoQaqfjtxDodbHWottK0GD4CmoJH1QyY9VV11lkyweti2DeY3gyh
V5I1KvKFSo+U1+2wPmwmFy18XWK8cSk4VsGysIvPSFqkYZOo7+ts5Pmpff+b7n8g
1sV36A4jZCpvxHnRWJikCIPMztz8FydptjriHQGXJnMiDuFq7RY3xvBIVodRAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUlVbSbTpUzVgMj1sFDbtUVe7OqHIwHwYDVR0j
BBgwFoAUZTg31+yh/hFF0M4V4L+JXuBqJ+IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUxwZUpHOWZmVDVDbmhEYmhuN0FkdXl1TGJFQTlBaFdXNXdpUG9IYUZl
UFMvMC82NTM4MzdEN0VDQTFGRTExNDVEMENFMTVFMEJGODk1RUUwNkEyN0UyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1MzgzN0Q3RUNBMUZFMTE0
NUQwQ0UxNUUwQkY4OTVFRTA2QTI3RTIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVMcGVKRzlmZlQ1Q25oRGJobjdBZHV5dUxiRUE5QWhXVzV3aVBvSGFGZVBTLzAv
MzIzODMwMzQzYTMyNjQzMjM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzUzMjM2MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBC0oMA0GCSqGSIb3DQEBCwUAA4IBAQAdd8Yf
VZZJmNbHdmDOSoPl+uYWuGaobLFXekf7351c+JJxmymCNlB0TlNI5Wthzp6mxQJc
l06HZSY1KNAlov5Is2OZVlYziBuLLJH6914tOGHnySwl9GQ8yGme/fN2ekXYGDlN
EaIF+5AXnAQir7Tp9dSU956RLQbKrdFBbSuOWU8UTU7TWTGiBsM8lrTXOYsycSy8
RYcxEkk4/fViTLbB+dxKOjC7euSPUgE9I9wkszqwDyzMfQS9oHe/GeD7DYGq/Rvr
u8VCcjiIAF/3LHks12lxT2DPYw7PZvNwlrw7Jj61cs1cZcirvIGDoOq660N0ZtVi
dWe02uh2TcrIWabB
-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:02 2025 by rpki-client on console.sobornost.net